We previously reported on the Find Feature vulnerability of the Treo 650, 680, and 700p and that Palm plannned to patch the security hole.
Well, Palm has now released security updates for the Treo 650, 680 and 700p which will patch that security hole.
To remind you of the problem, here it is in a nutshell from Palm's Support site regarding the Treo 680:
When the Treo 680 smartphone password protection is enabled, the password protection can be partially circumvented by running the Find feature while on the "Make Emergency Call" screen. This would allow a malicious user to view a list of search results from the Treo 680's built-in applications such as Contacts, Calendar, Tasks, Memos and Email. The malicious user cannot access or display anything beyond the search results list. An update is now available to address this.
The update can be downloaded either via Windows/Mac or Over the Air is a 142 KB prc file.
The second bit of news is that Paul Loeffler has posted over at The Official Palm Blog that timing for the 700p maintenance release hasn't changed since Palm last posted to the blog.
"At this time, we expect the software update to be available the week of May 28th. We will post an update if the timing moves."
I'll be uploading the new security patch on my Treo 680 over the weekend. I'm sure that all the Treo 700p owners are glad to hear that the 700p maintenance release is still on schedule.
