9 Month Old Critical Java Vuln. Still Not Patched in Mac OS X
Linked by Thom Holwerda on Tue 19th May 2009 22:20 UTC
Mac OS X Six months ago, a certain security flaw in Java was fixed by Sun. This flaw was present in OpenJDK, GIJ, icedtea and Sun's JRE, but it got fixed in those. There's one important shipping Java implementation that still has not been fixed to remove this security flaw: Apple's Java.
E-mail Print r 5   · Read More · 34 Comment(s) http://osne.ws/glu
Thread beginning with comment 364564
To view parent comment, click here.
To read all comments associated with this story, please click here.
jabbotts
Member since:
2007-09-06

I'm sure they'll fix it after the first Apple machine falls in next year's Pwn2Own. ;)

Seriously though, they probably stuffed the patches in with the next OS release as they've done with proper sandboxing around safari and those other niceties that make breaking osX easy.

(It's a bit of irony to learn that Windows actually has better security mechanisms in place than osX. The security researcher's disagree with the marketing.)

Reply Parent Score: 2

bousozoku Member since:
2006-01-23

I'm sure they'll fix it after the first Apple machine falls in next year's Pwn2Own. ;)

Seriously though, they probably stuffed the patches in with the next OS release as they've done with proper sandboxing around safari and those other niceties that make breaking osX easy.

(It's a bit of irony to learn that Windows actually has better security mechanisms in place than osX. The security researcher's disagree with the marketing.)


I don't like to wait for them. Since Avie Tevanian left the company, they've become far too reckless in their software, as if they're doing it purposely to sell new hardware.

All the security bits in Windows would mean something if Microsoft removed ActiveX, but it's still a security leak by design and no matter how many UAC dialogues appear, you can't change people. You can lead a horse to water, but you can't make him think, as I say.

Reply Parent Score: 2

Lennie Member since:
2007-09-22

What is bad, is Apple base their software partly on Open Source and when Open Source project X fixes something, Apple doesn't ship the fixes to the users.

Reply Parent Score: 1

macUser Member since:
2006-12-15

What is bad, is Apple base their software partly on Open Source and when Open Source project X fixes something, Apple doesn't ship the fixes to the users.


It would be nice if Apple rolled open source patches into their OS updates at a greater clip and I wonder sometimes how many resources they pour into this.

I think there are signs of the company quietly getting more serious about it's security issues. For instance, they just hired Ivan Krstic who was the director security architecture for OLPC. I guess that one just slipped by...

Reply Parent Score: 1