Feeds

Apple patches steaming heap of Safari bugs

Fixes record number of security vulns, adds speed

Intelligent flash storage arrays

Apple has released an update for its Safari browser that patches a record number of serious security vulnerabilities, promises JavaScript performance improvements, and eliminates the annoying "white flash" page-switching bug.

The JavaScript performance increase isn't trivial: Apple promises an "up to" 11 per cent speed-up. Neither is the number of security vulns fixed: 83 – a load that Computerworld says is a new record, surpassing the 62 vulns fixed in Safari update 5.0.4.

Safari 5.1.4 'Software Update' notice

Click to read Safari 5.1.4's
Software Update notice

By the way, don't bother checking the web page to which Apple sends you for details on Safari 5.1.4's security update – at least not yet. As is Apple's tradition, they're late on providing that info, and the page had yet to be updated by 10:00am Pacific Time on Monday. Check that first link in our previous paragraph, instead.

The vast majority of the patches – 72 – are for vulnerabilities in WebKit, including some that could, in Apple's standard wording, result in the dreaded "arbitrary code execution". Another vuln, now fixed, allowed cookies to be set even when Safari was set to block them.

Other niceties are also delived in Safari 5.1.4. For example, links in downloaded PDFs are now preserved, a bug that caused screen dimming when watching HTML5 movies has been fixed, and cookies that are set during regular browsing sessions are now available during Private Browsing sessions – meaning that any cookies you set when you were in the open will work when you're hiding, but you still won't set any when you're private.

The update is for Safari running on OS X Lion 10.7.3 and Snow Leapord 10.6.8, and Windows XP SP2, Vista, or Windows 7. You can find it in all the usual places: the Apple menu's Software Update or download page, and Windows users running Safari will be notified by the Apple Software Update utility. ®

Security for virtualized datacentres

More from The Register

next story
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
BlackEnergy crimeware coursing through US control systems
US CERT says three flavours of control kit are under attack
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Internet Security Threat Report 2014
An overview and analysis of the year in global threat activity: identify, analyze, and provide commentary on emerging trends in the dynamic threat landscape.