Apple Releases 10.5.8 Security Update and OS X 10.6.3
Apple released two important updates yesterday: Security Update 2010-002, which patches OS X v10.5.8, and an updated version of OS X v10.6, v10.6.3. Both address multiple vulnerabilities in a number of applications. You can read Apple's datasheet on the updates on the Apple support site.
The vulnerabilities may allow an attacker to execute arbitrary code, bypass security restrictions, or operate with elevated privileges. The vulnerable applications include a number of commonly used programs, and the long list of patches includes work on:
- Application Firewall, some rules of which may become disabled after a restart
- AppKit, to correct a vulnerability that may lead to "arbitrary code execution" when spell checking a malicious document
- AFP Server, which has multiple vulnerabilities patched
- CoreAudio, also to correct a vulnerability that may lead to "arbitrary code execution" when malicious audio content is played
- QuickTime, again to correct a vulnerability that may lead to "arbitrary code execution," this time when viewing malicious video content
Follow Technorati