Apple patches keep coming: Mac OS, Safari beta fixed
21234
Apple kept its rush of year-end security patches coming Monday, issuing a flurry of fixes for its Mac OS X operating system and the test version of its Safari browser.Monday&#39;s patches included a whopping 31 updates for the Apple operating system. The Mac OS X patches fix components ranging from the Address Book and iChat software to under-the-covers operating system components such as ColorSync, the IO Storage Family, and the Perl, Python and Ruby programming languages.Most of these flaws theoretically could be exploited by attackers to run unauthorized software on the Mac, although some of them had other security implications, such as allowing an attacker to gain access to sensitive information or download files to the computer without authorization.These updates are for the Mac OS X 10.4 and 10.5 operating systems, known as Tiger and Leopard, respectively.Apple also released a minor update to its Safari 3 beta code, which runs on Windows as well as Mac OS X, fixing a cross-site scripting security problem that affects Windows users.The patches come just days after&#160;Apple released a major update to its QuickTime media player and a Java security fix for the Mac OS X 10.4 operating system, code-named Tiger. The QuickTime flaw was particularly serious, as&#160;it had been exploited by online criminals since early December.With hackers and security researchers now paying more attention to Apple&#39;s products, the company&#39;s security team has been working overtime on bug fixes this year. Monday&#39;s patches were Apple&#39;s 35th and 36th security updates this year. In 2006, the company released just 22 sets of patches for its products.
582193
TechWeb - Apple Computer Inc. has released a patch for 15 Mac OS X flaws, many of them originating from the operating system's open-source components.
210358
A patch program fixing more than 20 flaws in OS X has been released by Apple.
12549
Apple on Friday pushed what is likely the second-to-last update to Mac OS X 10.4. The update includes several fixes to printing, Finder and Apple applications and networking, as well as several third-party fixes among other patches.
212741
Blog: Apple has issued a patch for the most recent update to Mac OS X 10.4.10, which apparently caused audio problems on some Intel-based Macs.
563842
Just days after its beta release of Safari 3 for Windows became a zero-day nightmare with a number of exploitable vulnerabilities, Apple has rushed out version 3.01 to fix three security flaws. The problems only affect Windows, not the Mac OS X release.
673126
Apple released its fifth security update of 2007 on Friday, correcting 13 bugs in both client and server versions of its Mac OS X operating system. The most serious security hole could lead to arbitrary code execution or a denial of service attack, although most require local access to the Mac.
334250
Apple has posted yet another beta of its Safari Web browser for Mac OS X and Windows.
713098
The bug fixes kept coming Monday, as Apple shipped critical security updates for its Mac OS X operating system.The latest security updates fix 11&#160;bugs in the Mac operating system, including eight bugs in the recently released Mac OS X 10.5, known as &quot;Leopard.&quot; Apple released the security fixes in conjunction with an 10.5.2 update to Leopard, which includes dozens of other updates.Some of the security flaws are extremely serious, and could be exploited by hackers to run unauthorized software on a victim&#39;s computer, although Apple did not report any incidents of this occurring.The patches include fixes for Safari, Mail, Launch Services, the Mac OS Directory Services, Open Directory and Parental Controls. There are also patches for several Unix components that ship with Apple&#39;s software, including a recently patched flaw in the Samba file-and-print software.&quot;The Samba bug was expected, since all the open-source distributions released fixes a while ago,&quot; said Andrew Storms, nCircle&#39;s director of security operations, via instant message.It&#39;s been a busy time for software developers working on some widely used software products.Apple&#39;s patches come a day before&#160;Microsoft is set to issue a massive set of updates&#160;itself. Last week, the software vendor said it expected to release 12 security updates for a variety of products including critical updates for Windows, Internet Explorer and Office.Last week other&#160;critical patches were also released for Adobe Reader&#160;and Apple&#39;s QuickTime media player.&#160;
406616
Insecurity through obscurity Apple has released updates for two widely distributed products that harbored a raft of security vulnerabilities, some of which were actively being exploited by miscreants. Unbelievably, the company isn't presenting either as a security fix to mainstream users despite the risk the bugs pose for its millions of users.â¦
417891
Apple Computer (Nasdaq: AAPL) has issued a new security patch to mend seven vulnerabilities in its Mac OS X operating system.
32013
Apple gave Apple Developer Connection members a mostly complete version of their latest OS last Friday. Are they getting close to unchaining Mac OS X 10.5 Leopard?
193189
Update for Mac OS X includes a number of fixes for zero-day vulnerabilities released as part of two high-profile bug-hunting campaigns.
757260
(InfoWorld) - Apple on Thursday unveiled the year's fifth major security update for Mac OS X to patch 17 vulnerabilities, but fewer than one-third of them could lead to hackers injecting their own code into a compromised system. Thursday's release also marked the first time this year that an operating system security update from Apple did not patch a vulnerability disclosed by the January Month of Apple Bugs project. If Apple sorted bugs by a ranking system -- as do other vendors, including Microsoft Corp. -- most of the bugs fixed by Security Update 2007-005 would be rated less than critical. In eight out of the 17, for example, exploits could do no more damage than to generate a denial of service of, or crash, the affected component. Microsoft typically pegs such vulnerabilities as "important" rather than "critical." Only five of the patched vulnerabilities could result in an attacker executing his own code. Among the serious bugs is one in how Mac OS X 10.4, known as Tiger, handles PDF files. "By enticing a user to open a maliciously crafted PDF file, an attacker could trigger the overflow, which may lead to an unexpected application termination or arbitrary code execution," Apple's advisory said. Attacks sporting this strategy, although rare on Macs, are common threats faced by Windows users, who have had to learn -- sometimes unsuccessfully -- to be wary of unexpected file attachments. Another dangerous flaw fixed Thursday exists in the code that maps ports on home networks in iChat, Apple's instant messaging service and software. An attacker need only send a malformed packet to trigger a buffer overflow, which could then be used to add malicious code to the Mac. The hacker, however, must have access to the local network to exploit the bug. Other parts of Mac OS X that were patched Thursday include BIND (Berkeley Internet Name Domain), the de facto standard Domain Name System server software, which was patched against four vulnerabilities; the Ruby CGI library (two vulnerabilities); and Fetchmail (one vulnerability). Although Thursday's update pushed Apple's year-to-date patch total to over 100, there was a bright side: It included fixes for fewer flaws thanÂ last monthÂ (25) and the month before (45). The security update can be downloaded from theÂ Apple siteÂ or using Mac OS X's built-in update service.
241113
TechWeb - Apple updates Mac OS X 10.4 to patch 15 vulnerabilities in the operating system and bundled software that can let attackers run malicious code.
284739
Apple yesterday released a 12.7MB security update that consists of several revised components including Apache, AppKit, HIToolbox, Kerberos, Postfix, PSNormalizer, Safari and Terminal.
327110
Tuesday, in the computing community, is now known as patch Tuesday. That&#39;s because Microsoft has taken to releasing operating system and browser fixes on Tuesdays.