Apple releases dozens of Tiger, Leopard security updates
396561
Time to download patches again if you're a Mac OS X user. This time there are 31 security-related fixes for both Mac OS X versions 10.4 and 10.5.
301117
Leopard, the latest update of the Apple Mac operating system OSX, goes on sale worldwide from 1800 BST.
424439
10.3.7 fixes bugs, fills security holes
204878
Apple showed off lots of new features of its upcoming Leopard release of Mac OS X at WWDC on Monday. Here's a look at some of the highlights.
549986
After a âswift and easyâ installation, Mark Kellner (Washington Times) found Mac OS X Leopard âsomething any Mac user will want to have.â âOffering better integration of e-mail with syndicated Internet news updates, a new backup feature likely to decrease the impact of hardware failures, and snazzy display features by the bushel, the $129 Apple Mac OS X Leopard upgrade is more than a reasonable purchase.â
406616
Insecurity through obscurity Apple has released updates for two widely distributed products that harbored a raft of security vulnerabilities, some of which were actively being exploited by miscreants. Unbelievably, the company isn't presenting either as a security fix to mainstream users despite the risk the bugs pose for its millions of users.â¦
478703
Apple today said it has shipped more than 2 million copies of Leopard, the Mac OS X upgrade it released Friday, outpacing the first weekend's sales of Tiger, the previous edition of Mac OS X.
425056
p2pnet.net News:- Apple Computer has issued a patch for 15 Mac OS X security flaws. But, &quot;It ain&#39;t us - it&#39;s them!&quot; - it&#39;s saying of some of the problems, &#39;them&#39; being certain open source components.
33552
com December 16, 2004, 10:27 AM PT. Apple Computer on Wednesday released a minor update to its Mac OS X 10.3 Panther operating system.
582193
TechWeb - Apple Computer Inc. has released a patch for 15 Mac OS X flaws, many of them originating from the operating system's open-source components.
396361
More details have emerged about Mac OS X 10.5, the next major update to the Mac operating system that Apple has dubbed "Leopard." While Leopard won't be let out of its cage until October, two Steve Jobs keynote addresses and Apple's Leopard web site have given us some idea of how this latest cat will behave.
660602
The security features introduced in Apple&#39;s Leopard operating system need work. That&#39;s according to security experts who have been putting the new version of Mac OS X through its paces since&#160;the upgrade was introduced&#160;last Friday.Leopard introduces a number of important security features to the Mac, but they are often implemented incompletely, leaving users vulnerable to attack, said Thomas Ptacek, a researcher at Matasano Security, who Monday wrote a detailed assessment of Leopard&#39;s security.&quot;They&#39;ve done a really good job of robbing Microsoft advocates of their talking points,&quot; he said. But, &quot;I don&#39;t see anything that they&#39;ve done out of the box, where it&#39;s really any more resistant to attack than Tiger was,&quot; he added, referring to the previous update to Apple&#39;s operating system.According to Ptacek, two of Apple&#39;s key security enhancements -- Sandboxing and Library Randomization -- are great ideas that are imperfectly applied within Leopard.Take Library Randomization. It&#39;s a new feature that&#39;s supposed to make it hard for some of the most commonly used computer attacks like buffer overflows, where the attacker takes advantage of a software bug to place code somewhere in the computer&#39;s memory where he knows it will be run. Microsoft developed a similar technology for Vista, called Address Space Load Randomization. Library Randomization makes it much harder, if not impossible, for the attacker to know where to place this code, reducing the risk of attack.The problem is that Apple did not randomize all of the parts of the operating system that it should have, according to Ptacek. In particular, Apple&#39;s Dynamic Link Library has not been randomized.Security researcher Dino Dai Zovi said he&#39;s used this library in several of the Mac exploits he&#39;s written over the past few years. He has taken advantage of the fact that this library is not randomized, he agreed with Ptacek&#39;s assessment that this feature, as it&#39;s implemented in Leopard, would simply make things a little more difficult for attackers.Sandboxing is another feature that could ultimately make Mac OS X more secure. Sandboxing restricts software running on Mac OS so that even if it&#39;s hacked, it can&#39;t do things that it shouldn&#39;t, such as add new software to the computer. The problem is that Apple hasn&#39;t sandboxed many of the most commonly attacked applications such as the browser, mail client, or instant messaging software, Ptacek said.And the programs that have been sandboxed have not been walled off as thoroughly as they should be, he added.For example, the Quick Look file viewer has been sandboxed, but only to restrict network access. The software can still be misused to write malicious files where they will be automatically launched, Dai Zovi said. &quot;Most of the things that were sandboxed were network services,&quot; he said. &quot;Increasingly these days IM, e-mail and Web surfing are where most of the attacks are coming from, not directly on your network.&quot;Independent consultant Rich Mogull said that his biggest problem was with the Leopard firewall, which he said suffered from a confusing interface that made it very difficult to control access to individual services on the Mac. &quot;It was very complicated and very hard to get the right settings,&quot; he said.Worse, when he installed Leopard, he found himself suddenly without a firewall. &quot;It turned off my firewall when I upgraded, despite that being a default setting.&quot; he said.Like Ptacek and Dai Zovi, Mogull said he had been expecting more from Apple with the Leopard release, but he agreed that the new security features were a step in the right direction. &quot;I think that Apple has started down the right path but they are not as far as they communicated that they would be,&quot; he said. &quot;The firewall is the big negative; they really messed that up.&quot;Apple declined to comment in detail on its new security features. Company spokesman Anuj Nayar said via e-mail that &quot;Apple takes security very seriously and has a great track record of addressing potential vulnerabilities before they can affect users.&quot;Ptacek said that it is great that Apple has begun adding these security features even when the Mac has not been the target of a widespread worm or virus outbreak. &quot;I&#39;m impressed that when they didn&#39;t have to do it, they went after low-level features that no one will understand,&quot; he said. &quot;I like the direction they&#39;re headed. I&#39;m just saying that they&#39;ve got a long way to go to catch up with Microsoft.&quot;&#160;
498349
Apple issued a flurry of fixes for its Mac OS X operating system and the test version of its Safari browser.
489727
Apple touts eleven specific features it says will make Leopard secure.
716387
Apple has released an update to its Leopard operating system, fixing several minor annoyances. Users complaining about the new Mac desktop, flaky AirPort connections, camera support and software stability problems can download Mac OS X 10.5.2 starting Tuesday to help soothe their nerves.
571293
Companies hustling Leopard compatibility updates out the door include Chronos, CS Odessa, Bitcartel Software and DssW.
445115
Company updates Mac OS X Security Update it released early last week.