8 Replies Latest reply: Jan 13, 2013 6:59 AM by WZZZ
foresight2020 Level 1 (0 points)

Recent java threat(1/11), affects OSX 10.5.8?


iMac, Mac OS X (10.5.8)
  • mende1 Level 10 (92,231 points)

    Welcome to the Apple Support Communities

     

    It affects to all computers with Java installed. You must disable Java until Oracle releases an update so, if you are using Safari, open Safari menu > Preferences > Security, and untick "Enable Java"

  • WZZZ Level 6 (12,875 points)

    I believe that's not correct. AFAIK, only affects the latest Java 7, which wouldn't be available for 10.5 and not even 10.6. However, Java anywhere is unsafe and especially unsafe in 10.5, since that's such an outdated version.

     

    But if you think I'm wrong, maybe you want to point me to a link that shows the latest Java vulnerability affects 10.5.

  • mende1 Level 10 (92,231 points)

    The information is confusing, but it looks like affects to all Java versions. As XProtect is only available for Mac OS X Snow Leopard, Lion and Mountain Lion, Apple hasn't blocked Java on Leopard, so you have to do it manually.

     

    On that XProtect file, Apple has blocked all Java versions and it only allows you to use a Java version that it hasn't been released yet, so you have to wait until Oracle fixes the bug

  • foresight2020 Level 1 (0 points)

    Thank you for your expertise!! foresight2020

  • foresight2020 Level 1 (0 points)

    Thank you for your expertise!!   foresight2020

  • WZZZ Level 6 (12,875 points)

    mende1 wrote:

     

    The information is confusing, but it looks like affects to all Java versions. As XProtect is only available for Mac OS X Snow Leopard, Lion and Mountain Lion, Apple hasn't blocked Java on Leopard, so you have to do it manually.

     

    On that XProtect file, Apple has blocked all Java versions and it only allows you to use a Java version that it hasn't been released yet, so you have to wait until Oracle fixes the bug

    Will have to look further into this.

  • MadMacs0 Level 5 (4,722 points)

    WZZZ wrote:

     

    But if you think I'm wrong, maybe you want to point me to a link that shows the latest Java vulnerability affects 10.5.

    Apparently not settled yet, according to Brian Krebs http://krebsonsecurity.com/2013/01/what-you-need-to-know-about-the-java-exploit/.

  • WZZZ Level 6 (12,875 points)

    @mende1 I'm now seeing Java is being blocked by XProtect in Snow Leopard. When I said that I didn't think so, I had looked at my XProtect and not seen anything more recent than 12/23, or something like that. But it's been updated and is now showing  that anything earlier than 1.7.10.19 is blacklisted.

     

    @MadMacs Thanks for the link to the Krebs.