apple
Report a problem

Apple releases Mac OS X Security update and Java updates

Chaks   on 13 February 2009 - 04:28 · 6 comments & 3449 views

Advertisement (Why?)
Apple has released the Security Update 2009-001 for Mac OS X today which improves the security of Mac OS X and recommended for all users.

The security update fixes the following:
  • Safari RSS vulnerability
  • Denial of service vulnerability in AFP server
  • A flaw in CoreText
  • A security flaw in Folder Manager that allows other local users access to a user's Downloads folder and other vulnerabilities.

The security update is available for Leopard, Leopard Server, Tiger for Intel Macs, Tiger for PowerPC-based Macs, Tiger Server for PowerPC-based Macs and Server Universal.

Two Java updates are also available which addresses security and compatibility issues and are compatible with both Intel and PowerPC-based Macs & applies to Mac OS X 10.5.6 or later versions.

The update can be downloaded and installed via Software Update or from Apple Downloads.

More information about the update can be obtained here

Post a comment · Send to friend Comments · There are 6 additional comments
#1 Juski814 on 13 Feb 2009 - 10:07
Thanks, glad to know.
(3 replies) #2 +Mephistopheles on 13 Feb 2009 - 10:39
Apple gave credit where credit was due in the release notes:
Multiple input validation issues exist in Safari's handling of feed: URLs. The issues allow execution of arbitrary JavaScript in the local security zone. This update addresses the issues through improved handling of embedded JavaScript within feed: URLs. Credit to Clint Ruoho of Laconic Security, Billy Rios of Microsoft, and Brian Mastenbrook for reporting these issues.

(Emphasis mine.)

Good to see the two companies working together on security issues.
#2.1 simon360 on 13 Feb 2009 - 12:40
And good to see Apple giving more details in their updates :p
#2.2 joelm91 on 13 Feb 2009 - 13:48
yup since the never give good details of the updates they offer like before it would just say Security Update and Java Update bugs were fixed lol
#2.3 giga on 13 Feb 2009 - 13:51
joelm91 said,
yup since the never give good details of the updates they offer like before it would just say Security Update and Java Update bugs were fixed lol

Security Updates have always been very detailed: http://support.apple.com/kb/HT1222?viewlocale=en_US
#3 Thirtythree on 13 Feb 2009 - 20:56
Security update? I thought that Macs were secure? /sarcasm

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)