Apple fixes Safari in latest Security Update

Macworld ^ | 11/29/2005 | Jim Dalrymple

[Panerai]

Apple on Tuesday released Security Update 2005-009, which addresses issues with both Mac OS X and Mac OS X Server. Among the components affected in this release are apache_mod_ssl; CoreFoundation; CoreTypes; curl; iodbcadmin; OpenSSL; Safari;sudo; and syslog.

The biggest changes for Mac OS X users are with the company’s Web browser software, Safari. In total, four separate issues have been fixed in this release.

The first issue fixes a problem that affects Safari’s download directory, which is normally specified by the user. However, if a web site suggests an overlong filename for a download, it is possible for Safari to create this file in other locations. Apple notes that the filename and location of downloaded file content cannot be directly specified by remote servers, but this may still lead to downloading content into locations accessible to other users.

Apple also fixed a potential problem when visiting Web sites with WebKit-based applications. According to Apple, WebKit contains a heap overflow that may lead to the execution of arbitrary code. This may be triggered by content downloaded from malicious Web sites in applications that use WebKit such as Safari.

Two problems with JavaScript have addressed. Safari now has a new JavaScript engine to combat a potentially exploitable heap overflow. The new engine incorporates a more robust input validation, according to Apple. The second JavaScript issue addressed adds the name of the originating Web site to the dialog boxes.

The update can be downloaded from Apple’s Web site or by using the Software Update mechanism in Mac OS X. More information on the other changes in the security update is available from Apple’s Web site.

[Panerai]

Apple posts another Security Update via Software Update

[Auntie Mame]

FYI

[Swordmaker]

Software Updates for Macs... PING!

Includes security fixes for Safari and Java.

If you want on or off the Mac Ping List, Freepmail me.

[SunkenCiv]

seen this?

http://www.caminobrowser.org/

[cowboyway]

Have you tried it?

[jimtorr]

I've used Camino 0.8.4 a fair amount. A good browser, better in some ways than Safari and Firefox, which is ironic, since Camino is sort of a subset of Firefox specialized for the Mac.

When Camino is more mature, it will be a very good browser indeed, and may replace the others on my desk top.

[Uri’el-2012]

Thanks!

Done.

[spower]

I'll say it before someone else -

"But I thought Mac OS X was perfect..?"

DISCLAIMER: I am a Mac User.

[SunkenCiv]

I've tried it, it was okay. Generally I use iCab.

[js1138]

MACs don't have any security defects. Never have had.

[Swordmaker]

I'll say it before someone else - "But I thought Mac OS X was perfect..?"

Now its more perfect...