Leave a Comment

Apple releases iLife Support update to patch security issues
The Unofficial Apple Weblog (TUAW) — ... According to the Apple Knowledge Base, the update addresses three issues with ImageIO, a system component that allows applications to read and write popular image formats. Two of the issues were discovered by Apple, and concerned the way the component handled specially-created TIFF and JPEG images. Google found a third problem also related to meticulously-crafted TIFF images. All three issues, unpatched, could "lead to an unexpected application termination or arbitrary code execution." ...

Support iLife on Tiger; get the v8.3.1 update from Apple
MacUser — ... Apart from that, this update also improves overall stability, has some security related fixes, and fixes other minor bugs. To know more about the security content of the update, pay a visit to this knowledge base article. As usual, the update can be grabbed either via Software Update or directly through the ...

Apple releases iLife Support 8.3.1 with security fixes
Infinite Loop — ... in July, and the 8.3 and 8.3.1 updates share equally vague descriptions. iLife Support 8.3.1 "improves stability" and also fixes "other minor issues," but there's actually some detail available on the handful of security updates. In particular, the update includes three fixes for the ImageIO framework, all of which are related to code execution or application termination security holes related to malicious image files. In all three cases, a memory corruption or access hole can be exploited by a malicious TIFF or JPEG file, but this update should take care of all of that. The ...

TidBITS Watchlist: Notable Software Updates for 17-Nov-08
TidBITS: Mac News for the Rest of Us — ... from Apple is a minor security update to the suite of iTunes, iPhoto, iWeb, iDVD, iMovie, and GarageBand. According to Apple's support page, "This update improves overall stability and addresses a number of other minor issues." More specifically, the update addresses three bugs that cause program crashes and arbitrary code executions when viewing certain malicious TIFF and JPEG files. The update is necessary for only for Mac OS X 10.4.11 Tiger, and can be downloaded via Software Update, or as a standalone download. (Free update, 11.7 MB) ...