Apple mega-patch fixes 19 flaws
The fix is in
Posted in Security, 5th May 2005 10:49 GMT
Free whitepaper – Vulnerability management buyer's checklist
Apple this week posted security updates to fix 19 security vulnerabilities in its Mac OS X operating system. Both client and server versions of a widely used version of its software - Mac OS X v10.3.9 - need patching.
The mega patch (a service pack in all but name) covers a variety of security problems some of which create a means for hackers to remotely commandeer vulnerable systems. The update fixes flaws ranging from the way the OS handles TIFF image files to security controls over how files are passed using Bluetooth short-range wireless technology. Meanwhile a security bug in Apple's LDAP implementation means that under certain circumstances passwords might be stored in plain text. The patch roll-up also resolves a number of privilege escalation and spoofing vulnerabilities.
Security firm Secunia collectively rates the fixes as "highly critical". Apple has posted an explanation of the bugs here. The patches can be downloaded from Apple's website but for most users these will have already been automatically applied after they were issued on Tuesday, 3 May. ®
Related stories
Apple issues nine bug fixes...
Apple patches 'highly critical' iTunes bug
SANS revises Top 20 security vulns list
Apple's Big Virus
Apple posts Mac OS X 10.3.9
Free whitepaper – Avoiding 7 common mistakes of IT security compliance

Analyst Keynote: The Register Agile Data Center Summit
Analyst Keynote: The Register Agile Data Center Summit
Enabling the Agile Data Center
Breaching Fort Apache.org - What went wrong?
Snow Leopard security - The good, the bad and the missing
US Dems fill inboxes with 419 scams
BlockMaster SafeStick hardware-encrypted USB drive