Apple issues security updates for Tiger
Macworld —
... address security issues that could have cause applications to quit unexpectedly or arbitrarily execute code. Those issues include decompressing maliciously crafted data, viewing a maliciously crafted image with an embedded ColorSync profile, viewing a maliciously crafted OpenEXR, or processing a maliciously crafted PNG image. The update also addressed a format string issue in Login Window that could lead to an unexpected application termination or arbitrary code execution. Additional details of the security updates are available on Apple's Web site.
Mac OS X 10.5.8 Fixes Bugs, Plugs Security Holes
TidBITS: Mac News for the Rest of Us —
... Mac OS X 10.5.8 also addresses a number of security vulnerabilities. A number of the fixes revolve around closing holes related to maliciously crafted images in various formats, but a few of the other issues addressed are more interesting. In particular: ...
OS X 10.5.8 Kills Bugs Dead
Digital Daily —
Apple (AAPL) on Wednesday released OS X 10.5.8, the latest point release to Mac OS X Leopard, even as Amazon (AMZN) takes pre-orders for its next iteration, Snow Leopard (OS X 10.6).
10.5.8 is largely a maintenance update, though it does patch a number of security vulnerabilities (18 to be exact), some of them fairly old.
Among 10.5.8’s improvements:
• Upgrades Safari to version 4.0.2
• Improves the accuracy of full history search in Safari 4
• Resolves an issue in which certain resolutions might not appear in the ...
Boobytrapped images pose threat to Mac users, Apple warns
MacBytes.com —
Users of Mac computers are being advised to install an important security patch, after Apple acknowledged that a serious flaw existed in its Mac OS X operating system that could be exploited by hackers. In a security advisory posted on its website, the Cupertino-based vendor of iMac and MacBook computers warned that it had discovered that hackers could create specially crafted image files capable of running malicious code without the user's authorisation, such as a worm or Trojan horse. The affected image file formats include PNG, Canon RAW and OpenEXR. To circumvent this and ...
New security updates for Tiger are out
The Unofficial Apple Weblog (TUAW) —
... for Leopard users, Apple has also released Security Update 2009-003 for users of Mac OS X 10.4 Tiger. This update fixes 7 of the same ...





