Apple fails to patch vulnerability after 5 months

[OperaDad]

<p>5 months is a long time not to patch a MAC vulnerability to viruses and other on-line threats:</p>

<p>

May 20, 2009: The Java vulnerability (CVE-2008-5353) was publicly disclosed five months ago by Sun Microsystems and fixed. But Apple, which released Mac OS 10.5.7 with nearly 70 security fixes earlier this month, has not yet dealt with the issue. </p>

<p>“Apple has been aware of this vulnerability for at least five months, since it was made public, but has neglected to issue a security update to protect against this issue,” Mac security company Intego said in a security advisory Wednesday.

</p>

<p><a href=“http://www.informationweek.com/shared/printableArticle.jhtml;jsessionid=HFGFQ5GAU1DNCQSNDLOSKH0CJUNN2JVN?articleID=217600344[/url]”>http://www.informationweek.com/shared/printableArticle.jhtml;jsessionid=HFGFQ5GAU1DNCQSNDLOSKH0CJUNN2JVN?articleID=217600344&lt;/a&gt;&lt;/p&gt;

[noimagination]

<p>What else is new? Apple has never made security patching a priority.</p>

[OperaDad]

<p>Apple finally patches six-month-old Java bugs
Fixes 32 flaws, including one a researcher used to ‘shame’ Apple with public attack code</p>

<p>…</p>

<p>Typically, Apple is slow to patch the problems that Sun fixes. A six-month lag after the time Sun issues updates for Windows and Linux is not unusual.</p>

<p>[Apple</a> finally patches six-month-old Java bugs](<a href=“IT news, careers, business technology, reviews | Computerworld”>IT news, careers, business technology, reviews | Computerworld)</p>