====================================================================

                             CERT-Renater

                  Note d'Information No. 2012/VULN343
____________________________________________________________________

DATE                : 06/09/2012

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S) : Mac OS X version 10.6.8, 10.7, 10.8
                       Mac OS X Server version 10.6.8, 10.7
                         running Java for OS X.

======================================================================
http://lists.apple.com/archives/security-announce/2012/Sep/msg00000.html
______________________________________________________________________

APPLE-SA-2012-09-05-1 Java for OS X 2012-005 and
Java for Mac OS X 10.6 Update 10

Java for OS X 2012-005 and Java for Mac OS X 10.6 Update 10 are now
available and address the following:

Java
Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8,
OS X Lion v10.7 or later, OS X Lion Server v10.7 or later,
OS X Mountain Lion 10.8 or later
Description:  An opportunity for security-in-depth hardening is
addressed by updating to Java version 1.6.0_35. Further information
is available via the Java website at
http://www.oracle.com/technetwork/topics/security/alert-
cve-2012-4681-1835715.html
CVE-ID
CVE-2012-0547

Java for OS X 2012-005 and Java for Mac OS X 10.6 Update 10
may be obtained from the Software Update pane in System Preferences,
or Apple's Software Downloads web site:
http://www.apple.com/support/downloads/

For Mac OS X v10.6 systems
The download file is named: JavaForMacOSX10.6.dmg
Its SHA-1 digest is: 6218979ae4eaef5ea7849cb4455e2c6f8bf362d2

For OS X Lion and Mountain Lion systems
The download file is named: JavaForOSX.dmg
Its SHA-1 digest is: e0750c72972b8a2ccbcb3144bb31d74419276387

Information will also be posted to the Apple Security Updates
web site: http://support.apple.com/kb/HT1222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/


======================================================================

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
=========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44          +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41          +
+ 75013 Paris           | email: certsvp@renater.fr     +
=========================================================