Apple's iLife suite gets security patch for Tiger

Stephen Withers
Tuesday, 11 November 2008 02:11

Opinion and Analysis

iLife is the target of the latest in a run of security-related patches.

iLife is the application suite that Apple provides with most new Macs and sells separately for owners of older systems.

It comprises iPhoto (photo management), iMovie (video editing), GarageBand (music making), iWeb (website building) and iDVD (video DVD creating).

Overnight, Apple released iLife Support 8.3.1, said to improve overall stability and address a number of other minor issues.

Among those issues are three security vulnerabilities that are present when iLife 08 is running on Mac OS X 10.4.11. The issues have already been addressed at the operating system level by Mac OS X 10.5.5.

The three issues all relate to image handling. Without the update, viewing maliciously crafted TIFF or JPEG images in an iLife application running on Mac OS X 10.4.9 to 10.4.11 can result in an unexpected application termination (the rest of us would likely call that a crash) or the execution of arbitrary code.

Since iLife Support 8.3.1's scope is not limited to these image-related issues, Apple recommends its installation by all iLife 08/Mac OS X 10.4.11 Tiger users.

The update is available via Software Update or Apple Downloads.