Register FAQ / Rules Forum Spy Search Today's Posts Mark Forums Read
Go Back   MacRumors Forums > News and Article Discussion > Mac Blog Discussion

Reply
 
Thread Tools Search this Thread Display Modes
Old Apr 3, 2012, 04:51 PM   #1
MacRumors
macrumors bot
 
Join Date: Apr 2001
Apple Releases Update to Java for OS X to Version 1.6.0_31






Apple has released an update to Java for OS X, updating Java SE 6 to version 1.6.0_31. The update, called Java for OS X Lion 2012-001, "delivers improved reliability, security, and compatibility for Java SE 6".

Apple hasn't updated its security page with details of the fixes in the update, but it may fix the vulnerability detailed across the web in recent days.

Apple released the same update for Snow Leopard, as well. The downloads can be acquired from Apple's support downloads page, or via Software Update.

Article Link: Apple Releases Update to Java for OS X to Version 1.6.0_31
MacRumors is offline   2 Reply With Quote
Old Apr 3, 2012, 04:59 PM   #2
mattkidd
macrumors regular
 
Join Date: Aug 2008
Location: United Kingdom England Northants
Thats good to hear, was a little concerned for a minute
__________________
Ex Apple Store Specialist | Glass Explorer
MacBook Air 2013 - 13" i7/8GB
iPhone 5s Black 32GB
iPad Air 16GB/4G
mattkidd is offline   1 Reply With Quote
Old Apr 3, 2012, 05:10 PM   #3
dempson
macrumors member
 
Join Date: Jun 2007
Location: Wellington, New Zealand
Quote:
Originally Posted by MacRumors View Post
Apple hasn't updated its security page with details of the fixes in the update, but it may fix the vulnerability detailed across the web in recent days.
It does fix this.

The security details have just been released via the apple-security-announce mailing list:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

APPLE-SA-2012-04-03-1 Java for OS X 2012-001 and
Java for Mac OS X 10.6 Update 7

Java for OS X 2012-001 and Java for Mac OS X 10.6 Update 7 is now
available and addresses the following:

Java
Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8,
OS X Lion v10.7.3, OS X Lion Server v10.7.3
Impact: Multiple vulnerabilities in Java 1.6.0_29
Description: Multiple vulnerabilities exist in Java 1.6.0_29, the
most serious of which may allow an untrusted Java applet to execute
arbitrary code outside the Java sandbox. Visiting a web page
containing a maliciously crafted untrusted Java applet may lead to
arbitrary code execution with the privileges of the current user.
These issues are addressed by updating to Java version 1.6.0_31.
Further information is available via the Java website at http://www.o
racle.com/technetwork/java/javase/releasenotes-136954.html
CVE-ID
CVE-2011-3563
CVE-2011-5035
CVE-2012-0497
CVE-2012-0498
CVE-2012-0499
CVE-2012-0500
CVE-2012-0501
CVE-2012-0502
CVE-2012-0503
CVE-2012-0505
CVE-2012-0506
CVE-2012-0507


Java for OS X 2012-001 and Java for Mac OS X 10.6 Update 7
may be obtained from the Software Update pane in System Preferences,
or Apple's Software Downloads web site:
http://www.apple.com/support/downloads/

For Mac OS X v10.6 systems
The download file is named: JavaForMacOSX10.6.dmg
Its SHA-1 digest is: f76807153bc0ca253e4a466a2a8c0abf1e180667

For OS X Lion systems
The download file is named: JavaForOSX.dmg
Its SHA-1 digest is: 176ac1f8e79b4245301e84b616de5105ccd13e16

Information will also be posted to the Apple Security Updates
web site: http://support.apple.com/kb/HT1222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJPezVqAAoJEGnF2JsdZQee7gIIALa7b5hVTKL7kOXF7EYT6wjx
VnAmxoQbjEwpBkdzPzqqhCQ303/iBdLdHr2O/yxdaX0tFuB+5+4iInPU2t6O+PNh
7iJ3rhQszzIj5q/qGDXyzIQEjurNfvrEKAxQ3T7uj1At+n/9YVBaw8p6i+HopbRc
Fo6Jrxy0Qf/MyeGO4lqxht2Aq8omh+pEBNP68EglqrJp/CjZTYGaFAHVGvnm8/gA
wjcpIRQBacXcBCJ3K8pZhuQvXhm+GVLWYgc2KGsZ/l7jbQX5Bi67b7CFf7lBHlyd
V7ss6N/0T/O3nspdhg+jhnvcaia1Ow3GikC/707NNkM8Dm3lm0DFVMBBgpNvPcU=
=Pf96
-----END PGP SIGNATURE-----
dempson is offline   1 Reply With Quote
Old Apr 3, 2012, 05:11 PM   #4
SMOHKK85
macrumors newbie
 
Join Date: Jul 2011
Now I feel A lot safer!!

Good News ! Makes me feel safer on viewing a lot of web pages!
SMOHKK85 is offline   -2 Reply With Quote
Old Apr 3, 2012, 05:20 PM   #5
Stella
macrumors 603
 
Stella's Avatar
 
Join Date: Apr 2003
Location: Canada
Quote:
Originally Posted by SMOHKK85 View Post
Good News ! Makes me feel safer on viewing a lot of web pages!
Are you getting confused with Javascript?

Java ( applets) isn't used frequently on websites these days.
__________________
Hardware / Software: The right tools for the job - be it Apple or otherwise.
Stella is offline   7 Reply With Quote
Old Apr 3, 2012, 05:21 PM   #6
iDuel
macrumors 6502a
 
iDuel's Avatar
 
Join Date: Jul 2011
Just downloaded and installed the update without issue. I wish Apple was a bit more proactive with the security patches, as it seems that Mac users are left vulnerable longer than our Windows brethren.
__________________
Internet Explorer cannot display this Signature.
iDuel is offline   3 Reply With Quote
Old Apr 3, 2012, 05:46 PM   #7
lupinglade
macrumors regular
 
Join Date: Oct 2010
If you use Xcode and upload apps to the App Store, don't install this Java update yet as it will break uploading to the Mac App Store (possibly iOS also). It breaks both Xcode App Store uploading and Application Loader uploading.
lupinglade is offline   0 Reply With Quote
Old Apr 3, 2012, 05:56 PM   #8
Michaelgtrusa
macrumors 601
 
Michaelgtrusa's Avatar
 
Join Date: Oct 2008
Location: Everywhere And Nowhere
Not in su for me.
__________________
iMACAll life is an experiment. The more experiments you make the better.
TWITTER TUMBLR
Michaelgtrusa is online now   0 Reply With Quote
Old Apr 3, 2012, 05:58 PM   #9
Anonymous Freak
macrumors 68040
 
Anonymous Freak's Avatar
 
Join Date: Dec 2002
Location: Cascadia
I like that it fixes CVE-2012-0507, which neither MITRE nor NVD list yet... (Yes, I know how CVEs work, it's just funny seeing one patched before it's even public!)
__________________

20" Aluminum iMac 7,1 (mid-2007, Santa Rosa,) upgraded to 2.6 GHz Penryn, 6 GB RAM, 1 TB HD, 4 TB total external hard drive
Anonymous Freak is offline   1 Reply With Quote
Old Apr 3, 2012, 06:29 PM   #10
alik55
macrumors newbie
 
Join Date: May 2008
Quote:
Originally Posted by lupinglade View Post
If you use Xcode and upload apps to the App Store, don't install this Java update yet as it will break uploading to the Mac App Store (possibly iOS also). It breaks both Xcode App Store uploading and Application Loader uploading.
Care to mention the source for this information?
alik55 is offline   4 Reply With Quote
Old Apr 3, 2012, 06:37 PM   #11
fruitycups
macrumors 6502
 
Join Date: Jun 2011
Wirelessly posted

What is java used for
fruitycups is offline   -5 Reply With Quote
Old Apr 3, 2012, 06:44 PM   #12
nsshah85
macrumors newbie
 
Join Date: Aug 2010
Confused about Java

I don't see this in my software update. Is it that I don't have Java installed? Is is something you need to install, and doesn't come standard with Lion?

When going to Utilities, I do see "Java Preferences," but when I click it, it says I need Java runtime, and asks me to install. I have been able to go to websites without any problems, so is this something that I need to install?

Thanks for all the help
nsshah85 is offline   0 Reply With Quote
Old Apr 3, 2012, 06:56 PM   #13
Dainin
macrumors regular
 
Join Date: Sep 2009
Quote:
Originally Posted by nsshah85 View Post
I don't see this in my software update. Is it that I don't have Java installed? Is is something you need to install, and doesn't come standard with Lion?

When going to Utilities, I do see "Java Preferences," but when I click it, it says I need Java runtime, and asks me to install. I have been able to go to websites without any problems, so is this something that I need to install?

Thanks for all the help
You don't need it.
Dainin is offline   1 Reply With Quote
Old Apr 3, 2012, 07:17 PM   #14
Dragado
Banned
 
Join Date: Mar 2012
Quote:
Originally Posted by nsshah85 View Post
I don't see this in my software update. Is it that I don't have Java installed? Is is something you need to install, and doesn't come standard with Lion?

When going to Utilities, I do see "Java Preferences," but when I click it, it says I need Java runtime, and asks me to install. I have been able to go to websites without any problems, so is this something that I need to install?

Thanks for all the help
Java is installed on demand these days. If you run an app that needs Java, Mac OS will let you know, otherwise, don't worry about it.
Dragado is offline   1 Reply With Quote
Old Apr 3, 2012, 07:28 PM   #15
HiRez
macrumors 601
 
HiRez's Avatar
 
Join Date: Jan 2004
Location: Western US
What is this "Java" thing?
__________________
Go outside, the graphics are amazing!
HiRez is offline   -5 Reply With Quote
Old Apr 3, 2012, 07:32 PM   #16
derbothaus
macrumors 601
 
derbothaus's Avatar
 
Join Date: Jul 2010
Finally. RE6 gave me no end of grief.
__________________
Mac Pro W3680, GTX 680, 12GB DDR3, SSD; MBP, 2.6GHz Core i7, 16GB DDR3, SSD; Eizo fs2333
derbothaus is offline   0 Reply With Quote
Old Apr 3, 2012, 07:33 PM   #17
TsMkLg068426
macrumors 6502a
 
Join Date: Mar 2009
Not sure I am understanding this Java update but when I look in my Safari plug in it still says 1.6.0_29 but when I go to Java app on Lion after updating the Java it says 1.6.0_31 Java update broken?
__________________
21.5" iMac, 2.7GHz, Intel Core i5, 4GB Memory, 1 TB HD, Mac OS X Lion 10.7.2; 32 GB iPod Touch iOS 5.0.1
TsMkLg068426 is offline   0 Reply With Quote
Old Apr 3, 2012, 07:50 PM   #18
nsshah85
macrumors newbie
 
Join Date: Aug 2010
Thanks

Quote:
Originally Posted by Dainin View Post
You don't need it.
Quote:
Originally Posted by Dragado View Post
Java is installed on demand these days. If you run an app that needs Java, Mac OS will let you know, otherwise, don't worry about it.
Thanks for the input. Definitely cleared it up for me. Appreciate it
nsshah85 is offline   0 Reply With Quote
Old Apr 3, 2012, 09:03 PM   #19
Graig
macrumors regular
 
Join Date: Aug 2009
Location: Vancouver, BC
Quote:
Originally Posted by TsMkLg068426 View Post
Not sure I am understanding this Java update but when I look in my Safari plug in it still says 1.6.0_29 but when I go to Java app on Lion after updating the Java it says 1.6.0_31 Java update broken?
It says 1.6.0.29 on my Safari Plugin too but 1.6.0.31 in the Java Preferences.
Graig is offline   0 Reply With Quote
Old Apr 3, 2012, 09:14 PM   #20
D.T.
macrumors 68030
 
D.T.'s Avatar
 
Join Date: Sep 2011
Location: Vilano Beach, FL
Quote:
Originally Posted by nsshah85 View Post
When going to Utilities, I do see "Java Preferences," but when I click it, it says I need Java runtime, and asks me to install. I have been able to go to websites without any problems, so is this something that I need to install?

Thanks for all the help
Yeah, I believe the UI wrapper for configuring the runtime is always present, but if you don’t have it, you don’t get the install prompt.

...and if you don’t have the JRE installed, you won’t get a system update for Java.


Quote:
Originally Posted by fruitycups View Post
Wirelessly posted

What is java used for

Java is a programming language, it was pretty big at one point, one of the big advantages was that it compiled to an intermediate code that’s interpreted, so it allowed for “write once, run everywhere”, particularly as a client application.

It’s also used in backend services, and in fact, we did quite a bit of Java using J2EE (it’s an enterprise framework that provides DB/messaging/etc.), also did some client apps (wrote a CMS back in the late 90’s, I think it’s still in the Sun or Oracle catalog archives).

It was easy to distribute Java apps through a web interface, so you got centralized app management combined with a rich client environment.

Android apps can also be written in Java which let’s them be run on different CPU architectures and such. Since they’re run through a runtime interpreter (that’s the JRE that’s mentioned in the OSX configuration app, Java Runtime Engine), they’re [generally] not as fast as native code.

There’s still some client apps written in it like VPN/remote access apps, and things like the Oracle DB dev tool. It’s kind of few and far between for client apps, but still in reasonably decent use for the web (any sites you see running *.jsp are Java based backends).

Syntactically C# borrows quite a bit from Java (one reason I went from Java to C#).
D.T. is offline   4 Reply With Quote
Old Apr 3, 2012, 10:14 PM   #21
fruitycups
macrumors 6502
 
Join Date: Jun 2011
Wirelessly posted

Whats java?
fruitycups is offline   -11 Reply With Quote
Old Apr 3, 2012, 11:00 PM   #22
ChrisA
macrumors G4
 
Join Date: Jan 2006
Location: Redondo Beach, California
Quote:
Originally Posted by fruitycups View Post
Wirelessly posted

Whats java?
http://en.wikipedia.org/wiki/Java_(programming_language)
ChrisA is offline   0 Reply With Quote
Old Apr 4, 2012, 01:13 AM   #23
Winni
macrumors 68030
 
Winni's Avatar
 
Join Date: Oct 2008
Location: Germany.
Quote:
Originally Posted by D.T. View Post
Java is a programming language, it was pretty big at one point,
Was? It still --IS-- the most popular programming language on the planet, with Android and the ENTIRE enterprise market as its main strongholds.

Also, it is more than just a programming language or a simple framework. It is a full operating system-independent software platform.

But yes, C# and .NET are nice. And thanks to the people behind Mono, very interoperable with Java.
__________________
Coming soon: http://endnacht.de.
Winni is offline   4 Reply With Quote
Old Apr 4, 2012, 01:52 AM   #24
kockgunner
macrumors 68000
 
kockgunner's Avatar
 
Join Date: Sep 2007
Location: Vancouver, Canada
I'm glad this fix has been released relatively quickly. At this point, I don't care which operating system is more secure. I'm happy with OS X and how it fits into the workflow. The real enemy are those hackers and unscrupulous people trying to steal personal info or whatever they plan to do with their malware.
__________________
2010 15" MBP | iPhone 4 16GB | PB G4 12" 1.33 Ghz, 768MB RAM, replacement 30GB HDD
kockgunner is offline   0 Reply With Quote
Old Apr 4, 2012, 02:10 AM   #25
antonis
macrumors 6502a
 
Join Date: Jun 2011
Wasn't supposed that java would be updated from the manufacturer (aka Oracle) just like in every other OS, for OS X Lion and forth ? Why is Mac version still maintained by apple unlike everyone else ?
antonis is offline   1 Reply With Quote

Reply
MacRumors Forums > News and Article Discussion > Mac Blog Discussion

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Similar Threads
thread Thread Starter Forum Replies Last Post
Apple Releases New Java 6 Updates With Enhanced Security, Uninstalls Apple-Provided Java Applet Plug-in MacRumors Mac Blog Discussion 49 Oct 22, 2013 09:58 AM
Apple Releases Java Update to Fix New Zero-Day Vulnerability MacRumors Mac Blog Discussion 21 Mar 5, 2013 04:36 PM
Installed new version of Java, but it didn`t update Franeo Mac OS X 10.7 Lion 1 Mar 5, 2013 03:49 AM
Oracle Releases Java 7 Update 13 to Address Security Issues, Reenable Web Plug-in on OS X MacRumors MacRumors.com News Discussion 134 Feb 17, 2013 12:40 PM
Oracle releases Java 7 update 6, bringing full OS X support for the first time wrldwzrd89 Apple, Industry and Internet Discussion 1 Aug 14, 2012 05:46 PM

Forum Jump

All times are GMT -5. The time now is 05:32 AM.

Mac Rumors | Mac | iPhone | iPhone Game Reviews | iPhone Apps

Mobile Version | Fixed | Fluid | Fluid HD
Copyright 2002-2013, MacRumors.com, LLC