Apple issues Mac security update
210358
A patch program fixing more than 20 flaws in OS X has been released by Apple.
759470
MacCentral - Apple on Wednesday posted Security Update 2004-10-27. Also available for download through the Software Update system preference pane, the update "delivers a number of security enhancements and is recommended for all Macintosh users," according to Apple. The release includes an updated version of Apple Remote Desktop v1.2.4 running on Mac OS X v10.3.
259181
In early October Apple released a small series of patches for Mac OS X version 10.2 and later. Most of the fixes in this group blocked possible denial-of-service problems that are, to date, theoretical.
716387
Apple has released an update to its Leopard operating system, fixing several minor annoyances. Users complaining about the new Mac desktop, flaky AirPort connections, camera support and software stability problems can download Mac OS X 10.5.2 starting Tuesday to help soothe their nerves.
445115
Company updates Mac OS X Security Update it released early last week.
642987
Apple Inc. has updated iTunes to better run on Windows Vista -- although "a few" problems still remain -- and released a security update for QuickTime.
476280
TechWeb - Unlike Microsoft and other vendors, Apple doesn't rank or rate the vulnerabilities it patches, but about two-thirds of the bugs could result in an attacker hijacking an unpatched Mac.
222834
Apple has stopped offering the latest version of McAfee's anti-virus package to Mac users following reports of widespread problems with the software.
766479
Apple released firmware updates for many of its Mac hardware systems today.
640592
PC Magazine - The update addresses at least nine high-risk vulnerabilities affecting Windows, Mac and Linux machines.
664794
Apple unveiled the year's fifth major security update for Mac OS X to patch 17 vulnerabilities.
81490
Five uber updates in as many months Apple has released an update that patches more than a dozen OS X vulnerabilities, several of which can lead to the remote execution of malicious code.â¦
690423
A new security update is available for Mac OS X users running the program that's part of iLife 08.
353081
Blog: Recently patched browser from Apple springs another leak.
757260
(InfoWorld) - Apple on Thursday unveiled the year's fifth major security update for Mac OS X to patch 17 vulnerabilities, but fewer than one-third of them could lead to hackers injecting their own code into a compromised system. Thursday's release also marked the first time this year that an operating system security update from Apple did not patch a vulnerability disclosed by the January Month of Apple Bugs project. If Apple sorted bugs by a ranking system -- as do other vendors, including Microsoft Corp. -- most of the bugs fixed by Security Update 2007-005 would be rated less than critical. In eight out of the 17, for example, exploits could do no more damage than to generate a denial of service of, or crash, the affected component. Microsoft typically pegs such vulnerabilities as "important" rather than "critical." Only five of the patched vulnerabilities could result in an attacker executing his own code. Among the serious bugs is one in how Mac OS X 10.4, known as Tiger, handles PDF files. "By enticing a user to open a maliciously crafted PDF file, an attacker could trigger the overflow, which may lead to an unexpected application termination or arbitrary code execution," Apple's advisory said. Attacks sporting this strategy, although rare on Macs, are common threats faced by Windows users, who have had to learn -- sometimes unsuccessfully -- to be wary of unexpected file attachments. Another dangerous flaw fixed Thursday exists in the code that maps ports on home networks in iChat, Apple's instant messaging service and software. An attacker need only send a malformed packet to trigger a buffer overflow, which could then be used to add malicious code to the Mac. The hacker, however, must have access to the local network to exploit the bug. Other parts of Mac OS X that were patched Thursday include BIND (Berkeley Internet Name Domain), the de facto standard Domain Name System server software, which was patched against four vulnerabilities; the Ruby CGI library (two vulnerabilities); and Fetchmail (one vulnerability). Although Thursday's update pushed Apple's year-to-date patch total to over 100, there was a bright side: It included fixes for fewer flaws thanÂ last monthÂ (25) and the month before (45). The security update can be downloaded from theÂ Apple siteÂ or using Mac OS X's built-in update service.
55085
Microsoft advised users of its Mac version of Microsoft Office that a security patch inadvertently issued through its software update service was not ready for release. It advised those that may have applied the patch to uninstall the update.
11788
The Mac maker patches a bushel of security issues in its flagship operating system, some of which are considered "critical."