Does the appearance of the Flashback.K trojan, which can install itself driveby fashion bypassing the need for an admin password, have you concerned? Apple has finally stepped up with updated Java for both OS X Lion and Snow Leopard to address the vulnerability.
Yesterday, Fairer Platform brought you news of the Flashback.K trojan and how to protect yourself.
Although not installing or turning off Java are still the surest things vis-a-vis protecting against Flashback.K, you can now have your Java cake and eat it, too — Apple has shipped updates for OS X Lion and Snow Leopard that patch the vulnerability:
Java for Mac OS X 10.6 Update 7, download
— Java for Mac OS X 10.6 Update 7 delivers improved reliability, security, and compatibility for Java SE 6. Java for Mac OS X 10.6 Update 7 supersedes all previous versions of Java for Mac OS X v10.6.
Java for OS X Lion 2012-001, download
— Java for OS X Lion 2012-001 delivers improved reliability, security, and compatibility for Java SE 6. Java for OS X Lion 2012-001 supersedes all previous versions of Java for OS X.
And, what about the warning pop up (image above) spawned by the Java for OS X Lion 2012-001 on my 2007 iMac running Lion? I took the warning to heart and scanned the .dmg with ClamXav (free) and it dutifully reported that no infection was found.
Though still wary, I nevertheless installed Java for OS X Lion 2012-001 and all seems well…
Things working out for you?
Leave a Reply