Apple Patches 25 Mac OS X Security Vulnerabilities

[Nomad559]

Apple Patches 25 Mac OS X Security Vulnerabilities

Apple patched some 25 security holes in various flavors of Mac OS X Thursday by releasing Security Update 2006-003.

Issues addressed include a Safari problem that could allow owners of a malicious Web site to run an application on a user's system, several issues involving maliciously created image files, security holes in Mail.app, one basic buffer overflow problem, issues involving keychain, and more.

[Nomad559]

1. Mac OS X security patch falls short

http://www.macworld.com/news/2006/05/15/security/index.php

Apple released its third major patch this year for Mac OS X on Thursday, fixing 31 software vulnerabilities in a range of products that could be used by remote attackers to compromise Mac OS systems.

Security Update 2006-003 was published on Apple’s Web site and includes software fixes for holes in OS X, the Safari Web browser, and Mac components for viewing image and video files.

Also included are fixes for a number of security flaws publicized by independent researcher Tom Ferris in April. However, Ferris says the latest patch doesn’t cover other critical holes he reported to Apple, and that he may soon publish the details of those flaws, too.

[realisticphish]

4. the thing is

a large number of those holes only exist for certain users, using certian preference sets on certain programs, on certain networks. It's not like everyone is at risk :shrug:

[benburch]

2. How many unpatched vulnerabilities exist in Windows now? nt

[realisticphish]

3. shh

we're not allowed to talk about that, what's news is

APPLE HAS BUGS OMG THEIR USERS ARE GOING TO DIE!111!1!