Apple Black Tuesday - SANS Internet Storm Center

SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Apple Black Tuesday
Joel pointed out that Apple had joined the black Tuesday update frenzy this month with an update for Java: Snow Leopard gets Java for Mac OS X 10.6 Update 6, while Lion gets Java for Mac OS X 10.7 Update 1. Both essentially update to Java SE 6 to 1.6.0_29. The CVE names that are fixed are: CVE-2011-3389 CVE-2011-3521 CVE-2011-3544 CVE-2011-3545 CVE-2011-3546 CVE-2011-3547 CVE-2011-3548 CVE-2011-3549 CVE-2011-3551 CVE-2011-3552 CVE-2011-3553 CVE-2011-3554 CVE-2011-3556 CVE-2011-3557 CVE-2011-3558 CVE-2011-3560 CVE-2011-3561 More on the Apple security updates: http://support.apple.com/kb/HT1222 -- Swa Frantzen -- Section 66	Swa 760 Posts Nov 8th 2011
Thread locked Subscribe	Nov 8th 2011 1 decade ago
Anyone know whether Apple's fix for CVE-2011-3389 is strictly Java related?	Anonymous
Quote	Nov 9th 2011 1 decade ago