Apple mega-patch fixes 19 flaws
The fix is in
Posted in Security, 5th May 2005 10:49 GMT
Free whitepaper – Securing your online data transfer with SSL
Apple this week posted security updates to fix 19 security vulnerabilities in its Mac OS X operating system. Both client and server versions of a widely used version of its software - Mac OS X v10.3.9 - need patching.
The mega patch (a service pack in all but name) covers a variety of security problems some of which create a means for hackers to remotely commandeer vulnerable systems. The update fixes flaws ranging from the way the OS handles TIFF image files to security controls over how files are passed using Bluetooth short-range wireless technology. Meanwhile a security bug in Apple's LDAP implementation means that under certain circumstances passwords might be stored in plain text. The patch roll-up also resolves a number of privilege escalation and spoofing vulnerabilities.
Security firm Secunia collectively rates the fixes as "highly critical". Apple has posted an explanation of the bugs here. The patches can be downloaded from Apple's website but for most users these will have already been automatically applied after they were issued on Tuesday, 3 May. ®
Related stories
Apple issues nine bug fixes...
Apple patches 'highly critical' iTunes bug
SANS revises Top 20 security vulns list
Apple's Big Virus
Apple posts Mac OS X 10.3.9
Free whitepaper – Vulnerability management buyer's checklist


The future of SaaS and IT infrastructure management
The mandate for application security
Extended Validation SSL Certificates
Avoiding 7 common mistakes of IT security compliance
The best practices guide for application security
Google cloud told to encrypt itself
Chinese firm hits back at cyberspy claims
BlockMaster SafeStick hardware-encrypted USB drive