Stephen Withers
Friday, 11 September 2009 03:14
Business IT -
Technology
Page 2 of 2
Changes in Apple's own components to remove certain opportunities for arbitrary code execution were made in Alias Manager, CarbonCore, ColorSync (another malicious profile issue), CoreGraphics (including another malicious PDF issue), and ImageIO (maliciously PixarFilm encoded TIFF files).
Improvements to Launch Services make it more likely that users will be warned of potentially unsafe files, while a cross site scripting issue is fixed in Wiki Server.
These updates may be obtained via Software Update or from Apple's
Support Downloads page.
Mac OS X 10.6.1 Update is a little under 72MB for either version, while Security Update 2009-005 ranges from 93MB to 206MB depending on the version being updated.
Since 2009-005 includes all previous security updates, downloads using Software Update are likely to be smaller on systems that are otherwise up to date.
There had been speculation that Apple would not issue any more updates for Tiger following the release of Snow Leopard. The company's typical practice is to deliver updates for the current and immediately previous versions of Mac OS X.
It remains to be seen whether Security Update 2009-005 is Tiger's last hurrah, or if patches will be provided for any security issues that are identified in the future.