This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies.  > Find out more here

 

All the latest UK technology news, reviews and analysis

US CERT urges firms to deploy Apple Java, Google Chrome and FireFox security patches

by Alastair Stevenson

22 Feb 2013

View Comments

  • Tweet this
A hacker committing cyber crime on a laptop

The US Computer Emergency Response Team (CERT) has issued a statement urging businesses to install security fixes from Apple, Google and Mozilla.

The three updates refer to various security holes in Apple, Mozilla and Google's services.

The Apple update is the latest designed to fix the slew of Java-based vulnerabilities afflicting Mac OS X customers.

The update aims to secure Java on OS X Lion v10.7 or later, OS X Lion Server v10.7 or later, OS X Mountain Lion 10.8 or later, Mac OS X v10.6.8, and Mac OS X Server v10.6.8.

"These vulnerabilities may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review Apple Support Article HT5666 and follow best-practice security policies to determine which updates should be applied," CERT advised users.

The Google Chrome update was designed to fix multiple vulnerabilities, some of which could allow a hacker to bypass the service's in-built security features and mount a denial-of-service attack.

"US CERT encourages users and administrators to review the Google Chrome Release blog entry and update to Chrome 25.0.1364.87," wrote the US CERT.

The Mozilla releases refer to multiple of the company's products including its popular FireFox web browser.

Other products include Firefox ESR 17.0.3Thunderbird 17.0.3, Thunderbird ESR 17.0.3 and SeaMonkey 2.16.

The US CERT warned that if left unpatched businesses would vulnerable to a variety of attacks.

"These vulnerabilities could allow an attacker to execute arbitrary code, bypass security features, or cause a denial-of-service condition," CERT warned.

"US-CERT encourages users and administrators to review the Mozilla Foundation Advisory and apply any necessary updates to help mitigate the risk."

The news will welcomed by all three companies as in the past the US CERT has been less positive about security patches.

Earlier in the year the US CERT issued a statement criticising Oracle, claiming a patch it released to secure Java had not worked.

Do you agree

blog comments powered by Disqus

Poll

Business security poll

How concerned are you by the rising tide of cyber threats?

16%

56%

10%

9%

9%

Popular Threads

Powered by Disqus
Sony Xperia Z vs Apple iPhone 5

Sony Xperia Z vs Apple iPhone 5 head to head video review

V3 pits Sony's rugged flagship against Apple's premier handset

Updating your subscription status Loading

Connect with V3.co.uk

Sign up to our daily or weekly newsletters

newsletter sign-up button

mcafee

7 requirements for hybrid web delivery

It's no longer one or other with web security; you can now have a virtualisation and SaaS hybrid model

navisite

BYOD: the implications for the IT team

BYOD is important for employee satisfaction, but poses challenges in terms of security, productivity loss and costs

Senior Analyst - Capital Forecasting -Retail Banking

A Global leading financial service organisation is currently...

Risk Forecasting Analyst - SAS/SQL/Matlab/R/SPSS/Excel

The role is for a Forecasting Modelling Analyst who is...

SAS -Senior Credit Risk Strategy Analyst - FS

An Assistant Credit Risk Manager has become available...

VP - Credit Risk Portfolio Management - Retail Banking

An experienced Credit Risk Strategy Manager is required...

Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.

To send to more than one email address, simply separate each address with a comma.