>> UPDATES <<

[DavidR]

@ oldman
The article and the quoted section by Frank and yourself indicates JRE 6 update 5 is one of the vulnerable/affected versions so I would say they have it right.

I read the article Frank linked to and checked out the Sun site but could I find this patch they are supposed to have released, no. They must have it tucked away out of sight somewhere, unless by patch they would be talking about the release of another update (yet another 15+MB download, spit).

[oldman]

You'd think they would pull update 5 if they know of the problems. Unless the version offered has been patched and they chose to keep the #.

Unless I made a typo when I updated my canned instructions, I see one difference in the file name.

from the caanned "jre-6u5-windows-i586-p.exe"

download filename "jre-6u5-windows-i586-p-s.exe"

[Go Pack Go]

Is this the same issue? --> http://forums.spybot.info/showpost.php?p=170728&postcount=2

In the post it says the issue is resolved in Update 5.

[DavidR]

It would be nice if there was some easy way to confirm what is in the latest version as the release notes are pathetic, there isn't even a date.

http://java.sun.com/javase/6/webnotes/ReleaseNotes.html#160_05

[rdmaloyjr]

There's quite a discussion going on here on the java update.  Shouldn't a new thread be started to discuss it?

[FreewheelinFrank]

Don't panic!

Checking out one of the vulnerabilities mentioned in the ZDNet article, it's clear they've balls-up the info: JRE 6 Update 5 is the fix not the vulnerable version.

Vulnerable software and versions

Configuration 1
−     Sun, JRE, 1.4.2_16, and previous
−     Sun, JRE, 5.0 Update 14, and previous
−     Sun, JRE, 6 Update 4, and previous
−     Sun, JDK, 1.4.2_16, and previous
−     Sun, JDK, 5.0 Update 14, and previous
−     Sun, JDK, 6 Update 4, and previous

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1187

[oldman]

Thanks, FWF.  I know 6-4 wasn't out for that long so it was surprising to see that update 5 was listed in your original post. Thanks again for clearing it up.

[Lisandro]

Malwarebytes' Anti-Malware 1.08 has been released.
For more details, visit: http://fileforum.betanews.com/detail/Malwarebytes_AntiMalware/1186760019/1

[drhayden1]

http://www.mozilla.com/en-US/firefox/all-beta.html
firefox 3 beta 4 is out for all you beta testers...will wait till the final release
Note: The build ID is 2008030714, which means this version was compiled on March 7th. This is not the same version that was posted last week by some download sites, such as BetaNews.
Mozilla hasn’t updated the official Beta site yet, but the necessary files have been added to the FTP.

[DavidR]

Absolutely, I'm in no rush to install ff3 beta 3 and lose any of my extensions. When ff3 is eventually released I think I will still wait a while and let the extension makers catch up.

[drhayden1]

oops....it's beta 4-my mistake-typo error-still will wait
http://cybernetnews.com/2008/03/10/firefox-3-beta-4-is-here/

0059.0000 is now available, new definition file for Ad-Aware 2007.
SE1R227 is now available, new definition file for Ad-Aware SE.
http://www.lavasoft.com/support/securitycenter/blog/

[szc]

Not just v3 beta 4... but Firefox 4 Alpha 1 Pre ( ?!?!???)

http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-mozilla-central/firefox-4.0a1pre.en-US.win32.installer.exe

[drhayden1]

thanks for the info no-name or >

[Lisandro]

Belarc Advisor 7.2.24.1 has been released.
For more details, visit: http://fileforum.betanews.com/detail/Belarc_Advisor/1042897635/1

Vista Codec Package 4.6.0 has been released.
For more details, visit: http://fileforum.betanews.com/detail/Vista_Codec_Package/1159994557/1

ProduKey 1.26 has been released.
For more details, visit: http://fileforum.betanews.com/detail/ProduKey/1187016070/1

[micky77]

thanks for the info no-name or >

Theres something fishy about > Earlier he was logged on as ............... 
So whats the crack ? Or is it a secret  Its not like we don't know who you are