Apple, Oracle Ship Java Security Updates
Summary: Apple and Oracle released Java security updates on the same day, with Oracle's Java 6 Update 33 and Java 7 Update 5 fixing at least 14 flaws in software installed on more than three billion devices. Apple's update brought Java on the Mac to 1.6.0_33 and patched 11 of those 14 vulnerabilities, after Apple had previously lagged months behind Oracle and the Flashback malware infected more than 650,000 Mac systems using a flaw Oracle had patched roughly two months earlier.
Key Takeaway: Apple's version still left three of the 14 flaws unaddressed, and the Flashback incident showed what a two-month patch gap costs: more than 650,000 infected Macs from a single vulnerability Oracle had already fixed.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026