Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Apple Releases Second Update to Java in Two Days
- Thread starter MacRumors
- Start date
- Sort by reaction score
The second update is for Lion. I run SL 10.6.8 and I didn't get the second update, either.
Since I found I was infected with this yesterday and removed it, I was told to download the "Little Snitch" app, which I googled and installed the 3 hour demo of. I thought my system was clean of this trojan, as I followed the F-Secure removal instructions, but it appears this trojan installs other stuff once it gets in (via the Java exploit).
Little Snitch informed me that a file named .rserv (~/.rserv) in my Users directory on my Mac was trying to connect to cuojshtbohtnet.com or .net and several other strange sounding web sites. I denied them doing so and Googled .rserv and another program on my Mac that was doing similar attempts.
Also watch out for a file named: com.adobe.reader.plist in user launch agents directory. It was attempting to contact these same strange websites as .rserv was. I Googled these names and found in the last few days many other Mac users are seeing this same behavior when catching these "buggers" via the "Little Snitch" app.
Again, even though my system showed clean via the F-Secure instructions after I removed the infected files they mention, I believe I still had 2 other infected program files (same file date of March 29th also) related to this trojan that went undetected, and were only found by running this "Little Snitch" app which monitors programs trying to use your outgoing Internet connection.
Little Snitch informed me that a file named .rserv (~/.rserv) in my Users directory on my Mac was trying to connect to cuojshtbohtnet.com or .net and several other strange sounding web sites. I denied them doing so and Googled .rserv and another program on my Mac that was doing similar attempts.
Also watch out for a file named: com.adobe.reader.plist in user launch agents directory. It was attempting to contact these same strange websites as .rserv was. I Googled these names and found in the last few days many other Mac users are seeing this same behavior when catching these "buggers" via the "Little Snitch" app.
Again, even though my system showed clean via the F-Secure instructions after I removed the infected files they mention, I believe I still had 2 other infected program files (same file date of March 29th also) related to this trojan that went undetected, and were only found by running this "Little Snitch" app which monitors programs trying to use your outgoing Internet connection.
when you say that you should see those responses, does that mean you should see them if you are infected, or that's what you should see if every thing's 'normal' and you're not?
no worries, soon there will be 10.8 released - Id not worry about waiting until that.
All updated in the meantime
Good to see that Apple got a quick fix out for this.
I was getting an error message in MATLAB as well. It is now gone after this update.
Who cares...
----------
I'm an educated person, and I'll turn gatekeeper ON.
I would say that gatekeeper ON is a wise choice for M O S T folks, and most folks who own apple gear are highly educated.
Absolutely wrong.
By default, digitally unsigned apps will not work, but in system pref's there's a toggle that lets you switch. Essentially that toggle lets power users run unsigned apps.
Signed apps will be available from the mac app store AS WELL AS from external downloads.
----------
Holy God....
In the thread about the initial Java update, there was a reply that it broke uploading to the Mac App Store. I wonder if this patch is to fix that issue?
I think that file is safe, I deleted it about a week ago when cleaning up My Mac so I can not open it anymore to see what's inside, I did before and it seemed fine with Me but still deleted it.
I don't have .rserv and I checked My whole disk with clamX a few weeks ago, nothing showed up, also checked for the Java exploit and also nothing there.
So, that file seems fine, but delete it if you are not sure.
That fixed it.
Details on second update
The first update installed
The first update installed
Java(TM) SE Runtime Environment (build 1.6.0_31-b04-413-11M3623)
Java(TM) SE Runtime Environment (build 1.6.0_31-b04-414-11M3626)
Application uploader and second Java update
IMHO, this second update has nothing to do with Flashback trojan or Java security. It simply fixes this silly bug (see the second answer):
http://stackoverflow.com/questions/5783481/an-error-occurred-uploading-to-the-itunes-store
It seems the Application uploader of Xcode uses Java 1.5, and they forgot about it.
IMHO, this second update has nothing to do with Flashback trojan or Java security. It simply fixes this silly bug (see the second answer):
http://stackoverflow.com/questions/5783481/an-error-occurred-uploading-to-the-itunes-store
It seems the Application uploader of Xcode uses Java 1.5, and they forgot about it.
I haven't gotten either of these updates and I'm running OSX 10.7.3 on my MBP
Should I be worried?
Should I be worried?
No I wouldn't be worried. Java isn't installed on Lion by default but is an optional component. If Java isn't installed on your mac then it is safe and there is no need to update.
For what it's worth, this update isn't just for Lion. I just installed it on my iMac which is running SL.
No, they really aren't. If they were, they would have released these patches weeks ago when oracle released them!
----------
I think they took 6 months to get a java vulnerability patched once...