toggle

AAPL Stock: 102.43 ( + 0.18 )

Printed from http://www.macnn.com

Apple patches 21 security flaws in Mac OS X 10.5.6

updated 02:05 pm EST, Mon December 15, 2008

Mac OS X 10.5.6 security

Fresh after announcing the general changes in Mac OS X 10.5.6, Apple has posted a list of the security updates present in the new code. The company has for instance addressed several possible Trojan attacks, launched through images, PDF documents, CPIO archives, ISO files and web cookies. Similarly, Apple has expanded the list of potentially unsafe file types which will trigger Mac OS' Download Validation feature.

New arbitrary code executions in the Flash plug-in have been blocked, and two kernel issues have been fixed: one in which a local hacker could gain system privileges, and a second in which running executables linking to dynamic libraries would cause a crash. Three API vulnerabilities have meanwhile been fixed in Libsystem, all of which could allow arbitrary code execution or produce crashes.

Apple has lastly addressed a glitch in which managed screensaver settings would not apply; a denial-of-service attack allowed by Internet Sharing; and an access bypass for the administrative controls of Podcast Producer, found in Mac OS X Server.




by MacNN Staff

POST TOOLS:

TAGS :

toggle

Comments

  1. Guest

    Joined: Dec 1969

    +2

    What, no link?

    Here is the link to the security page: http://support.apple.com/kb/HT3338

  1. Mimi-mim

    Joined: Dec 1969

    -4

    Why not put it in 10.5.6?

    I don't understand why Apple releases security patches and OS patches at the same time. Why not just put all of the security fixes in the OS patch? Does Apple separate the two because some people with 10.5.5 might not want to upgrade to 10.5.6, but would want the apply security updates? Seems strange to me, because anyone worried about functionality changes in an OS patch would probably also worry about changes in functionality brought about by a security fix.

    Is that what's going, or does Apple maintain separate security and OS updates for some other reason?

  1. galley

    Joined: Dec 1969

    +2

    Re: Why not put it in

    The security patches described are indeed part of the OS X 10.5.6 update, based upon what I've read. The separate security update provides the same patches for OS X 10.4. Note in the text of this article: "Apple has posted a list of the security updates present in the new code".

  1. Feathers

    Joined: Dec 1969

    +2

    Tiger...Nomadman

    er...10.4.x** is known as Tiger not Leopard!

  1. VinitaBoy

    Joined: Dec 1969

    -2

    Re: Why not put it in . .

    Why not run your butt out to Cupertino, Mimi-mim, and apply for a job at Apple? Seems to me you've got it all figured out (as do most anonymous, uncredentialed, omniscient, mega-intellects on the web), so I'm sure Steve will snatch you up in a heartbeat.

    Hmm. Something in a Brad Paisley/Jason Alexander music video springs to mind here. You not only LOOK better online, Mimi: you're much SMARTER here as well.

Login Here

Not a member of the MacNN forums? Register now for free.

toggle

Network Headlines

toggle

Most Popular

MacNN Sponsor

Recent Reviews

Life n Soul BM211 Bluetooth speaker

Bluetooth speakers aren't only for listening to some music at the park or on a long bus ride, but can also be built with tablets in m ...

Epson PowerLite Home Cinema 2030 projector

With high-definition televisions now the standard, 4K televisions becoming the next big thing, and plasma TVs going the way of the din ...

Life n Soul 8 Driver Bluetooth headphones

When it comes to music on the go, consumers generally have some options to consider when looking for the best experience. While Blueto ...

toggle

Most Commented