Security Update 2006-001 available

Antony · *01 Mar, 2006 5:22 pm* **Security Update 2006-001 available**

Apple released Security Update 2006-001 Mac OS X 10.4.5

J-M · Joined: 25 Jul 2004 Posts: 777 Location: Helsinki, Finland

Serious flaw in Safari browser (see http://sillydog.org/forum/viewtopic.php?t=10910

for details) has been reportedly fixed as well:

Report from SANS Internet Storm Center
http://isc.sans.org/diary.php?storyid=1160

ISC says iChat and Mail are also immune now. Time to patch:
http://www.apple.com/support/downloads/

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.0; fi-FI; rv:1.7.12) Gecko/20050919 Firefox/1.0.7

Antony · *01 Mar, 2006 5:34 pm*

Thanks for confirming Safari and iChat, Mail security related issues, J-M.

UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/417.9 (KHTML, like Gecko) Safari/417.8

MozInfo701

| MacCentre701

| AntBlog701

| don't steal music.

Antony · *01 Mar, 2006 6:35 pm*

Security Update 2006-001 for Mac OS X 10.3.9 Panther users is also available.

Security Update 2006-001(10.3.9 Client)

J-M · Joined: 25 Jul 2004 Posts: 777 Location: Helsinki, Finland

There is an exploit code for "passwd" program temporary file creation vulnerability published too.

Details at
http://www.frsirt.com/english/advisories/2006/0791

-> see The fourth issue...

Code was published at
http://www.frsirt.com/exploits/20060301.xosx-passwd.pl.php

late on Wednesday.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.0; fi-FI; rv:1.7.12) Gecko/20050919 Firefox/1.0.7

J-M · Joined: 25 Jul 2004 Posts: 777 Location: Helsinki, Finland

More information about these security issues has been published at Secunia Advisory SA19064; see
http://secunia.com/advisories/19064/

FrSIRT has its advisory FrSIRT/ADV-2006-0791 located at
http://www.frsirt.com/english/advisories/2006/0791

Both of these have highest severity level in use; Secunia says Extremely Critical (5/5) and FrSIRT Critical Risk (4/4).

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.0; fi-FI; rv:1.7.12) Gecko/20050919 Firefox/1.0.7

Pu7o · Joined: 06 Jan 2005 Posts: 1978 Location: Portugal

The Panther version of the security update seems to bump the Safari useragent to v312.6.

UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/312.8 (KHTML, like Gecko) Safari/312.6

	Forum Index > Mac OS and Apple	All times are CST (GMT -6)
page 1 of 1