This issue was addressed by removing JNLP files from the CoreTypes safe file type list, so the Web Start application will not be run unless the user opens it in the Downloads directory. Impact: Visiting a maliciously crafted website could allow a Java Web Start application to be launched automatically even if the Java plug-in is disabledĭescription: Java Web Start applications would run even if the Java plug-in was disabled. This issue was addressed by updating mod_hfs_apple to forbid access to URIs with ignorable Unicode character sequences.ĬVE-2013-0966 : Clint Ruoho of Laconic SecurityĪvailable for: OS X Lion v10.7 to v10.7.5, OS X Lion Server v10.7 to v10.7.5, OS X Mountain Lion v10.8 to v10.8.2 Impact: An attacker may be able to access directories that are protected with HTTP authentication without knowing the correct credentialsĭescription: A canonicalization issue existed in the handling of URIs with ignorable Unicode character sequences. OS X Mountain Lion v10.8.3 and Security Update 2013-001 is now available and addresses the following:Īvailable for: Mac OS X 10.6.8, Mac OS X Server 10.6.8, OS X Lion v10.7 to v10.7.5, OS X Lion Server v10.7 to v10.7.5, OS X Mountain Lion v10.8 to v10.8.2 To: APPLE-SA-1 OS X Mountain Lion v10.8.3 and Security Update 2013-001ĪPPLE-SA-1 OS X Mountain Lion v10.8.3 and Security Update Just got an e-mail about Apple's updates!

Mac os 10.6.8 facetime