Apple releases Security Update 2005-002
updated 04:40 pm EST, Tue February 22, 2005
Security Update 2005-002
Apple has released via the Software Update utility in Mac OS X. The update delivers a number of security enhancements and is recommended for all Mac OS X users. The update includes the following components: Java Web Start, JavaPluginCocoa.bundle, JavaScriptCore, and Core Java classes. Apple says the update addresses an issue where an untrusted applet could gain elevated privileges and potentially execute arbitrary code: " A vulnerability in the Java Plug-in may allow an untrusted applet to escalate privileges, through JavaScript calling into Java code, including reading and writing files with the privileges of the user running the applet. Releases prior to Java 1.4.2 on Mac OS X are not affected by this vulnerability."










Update to Web Site
02/22, 05:02pm reply
"Apple has not updated its security updates Web site to reflect the 2005-002 release."
Yes, they have...
:-)
TheGuru
Fresh-Faced Recruit
Joined: Sep 2000
Hmmm...
02/22, 10:14pm reply
Now that the news story has been edited, how do I delete my other post???
TheGuru
Fresh-Faced Recruit
Joined: Sep 2000
Re: Hmmm...
02/22, 10:54pm reply
You don't... you get to let everyone know that you jumped the gun. Bites, huh?
Detrius
Professional Poster
Joined: Apr 2001