Apple releases Safari 3.2.3 for Mac and Windows — Apple updates Safari 4 Public Beta

Apple updates Safari 4 Public Beta

Tuesday, May 12, 2009 - 10:30 PM EDT

Apple has released and update to Safari 4 Public Beta which is recommended for all users of the Safari 4 Public Beta and includes the latest security updates.

Safari 4 Public Beta Security Update

• libxml

CVE-ID: CVE-2008-3529

Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.7, Mac OS X Server v10.5.7, Windows XP or Vista

Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution

Description: A heap buffer overflow exists in libxml's handling of long entity names. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue through improved bounds checking. This issue is addressed in Safari 3.2.3.

• Safari

CVE-ID: CVE-2009-0162

Available for: Mac OS X v10.5.7, Mac OS X Server v10.5.7, Windows XP or Vista

Impact: Accessing a maliciously crafted "feed:" URL may lead to arbitrary code execution

Description: Multiple input validation issues exist in Safari's handling of "feed:" URLs. Accessing a maliciously crafted "feed:" URL may lead to the execution of arbitrary JavaScript. This update addresses the issues by performing additional validation of "feed:" URLs. These issues do not affect systems prior to Mac OS X v10.5. These issues are addressed in Safari 3.2.3. Credit to Billy Rios of Microsoft Vulnerability Research (MSVR), and Alfredo Melloni for reporting these issues.

• WebKit

CVE-ID: CVE-2009-0945

Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.7, Mac OS X Server v10.5.7, Windows XP or Vista

Impact: Visiting a maliciously crafted website may lead to arbitrary code execution

Description: A memory corruption issue exists in WebKit's handling of SVGList objects. Visiting a maliciously crafted website may lead to arbitrary code execution. This update addresses the issue through improved bounds checking. This issue is addressed in Safari 3.2.3. Credit to Nils working with TippingPoint's Zero Day Initiative for reporting this issue.

Safari Public Beta is available via Software Update.

1 posted on 05/12/2009 9:13:06 PM PDT by Swordmaker

To: ~Kim4VRWC's~; 1234; 50mm; 6SJ7; Abundy; Action-America; acoulterfan; Aliska; aristotleman; ...

Safari Web Browser has been updated. Safari 3.2.3 is now available for all Safari 3 users.

Apple has also updated the public Beta of Safari 4 for all of us who have upgraded to OS X.5.7.

Once Mac users have upgraded to OS X.5.7 today, they need to run "Software Update..." under the Black Apple Menu again to let the system find the Beta update.

Safari updates Ping!

If you want on or off the Mac Ping List, Freepmail me.

2 posted on 05/12/2009 9:16:00 PM PDT by Swordmaker (Remember, the proper pronunciation of IE is "AAAAIIIIIEEEEEEE!)

I thought about downloading Safari to my PC but it sort of scares me because I don’t like messing with Murphy, especially when it comes to computers. Maybe I should just start over with a Mac when this computer dies.

3 posted on 05/12/2009 10:17:58 PM PDT by TheThinker (America doesn't have a president. It has a usurper.)

I’ve been using Safari for PC, and also Google Chrome. Both free browser downloads are Betas, and both work great with WinXP, are very very fast (much faster than the doggy Internet Explorer). I have had zero problems with them.

4 posted on 05/12/2009 10:39:35 PM PDT by webschooner

The update to 3.2.3 was apparently included in my “software update” to 10.5.7, because it was nearly 500MB, and my Safari already says that version (and no new updates available).

5 posted on 05/12/2009 11:00:18 PM PDT by TheBattman (Pray for our country...)

I download Safari 3.2.3 and Safari does seem faster. Then again, it could be because at this time of night, there isn’t a lot of Internet traffic on my ISP.

6 posted on 05/12/2009 11:14:20 PM PDT by Ticonderoga34 (A Community Organizer is the 21st century version of a Ward Heeler.)

Thanks for the advice.

7 posted on 05/12/2009 11:26:29 PM PDT by TheThinker (America doesn't have a president. It has a usurper.)

The update to 3.2.3 was apparently included in my “software update” to 10.5.7, because it was nearly 500MB, and my Safari already says that version (and no new updates available).

That's possible. If you are using OSX.5.7 with Safari 4 public beta, you'll need to re-run software update...

8 posted on 05/13/2009 12:02:39 AM PDT by Swordmaker (Remember, the proper pronunciation of IE is "AAAAIIIIIEEEEEEE!)

If you are using OSX.5.7 with Safari 4 public beta, you'll need to re-run software update...

?? I'm on 10.5.6 - what is 10.5.7, and how do I not have it if I always do the Software Updates?

9 posted on 05/13/2009 2:35:02 AM PDT by conservatism_IS_compassion (The conceit of journalistic objectivity is profoundly subversive of democratic principle.)

If you are using OSX.5.7 with Safari 4 public beta, you'll need to re-run software update...

?? I'm on 10.5.6 - what is 10.5.7, and how do I not have it if I always do the Software Updates?

Mystery solved, sorta. SU alerted me last nite, and I ran it at the time - but whereas others said that it was a big update, for me it went very quickly - too quickly, it turns out. I clicked the black apple this morning, and SU took an unusually long time to find the update to 10.5.7, and a long time to install it.
That done, I clicked the update again and got the 5528.17 version of Safari 4 public beta. All should be right with the world, or at least with my Mac. Doesn't mean the Obama Administration will be any better . . .

10 posted on 05/13/2009 3:28:42 AM PDT by conservatism_IS_compassion (The conceit of journalistic objectivity is profoundly subversive of democratic principle.)

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794