Apple releases Security Update 2005-006 for Mac OS X

Apple today released Security Update 2005-006 via Software Update which delivers a number of security enhancements and is recommended for all Macintosh users. This update includes the following components:

AFP Server
Bluetooth
CoreGraphics
Folder Permissions
launchd
LaunchServices
NFS
PHP
VPN

Detailed information on this Update here.

16 Comments

  1. Widgets won’t install themselves anymore, they will ask first. Better web security.

    Apple’s in a great {position} with Tiger… now let’s see the updates start coming slower.

  2. Speaking of feeling stupid….

    I keep hearing about self-installing Widgets, but I have never seen that. I have always had to dig into /library/widgets and drop them there. Dropping them onto my hard drive icon just drops them into the hard drive outside of any folders.

    How do I get widgets to self-install?

  3. In response to Sputnik,

    Let me prelude this by saying that I am currently not an Apple user, but rather have two Windows XP machines which I CAN’T WAIT to stop using. BUT, I am waiting (do you hear me Apple… WAITING for 3 months) for a new iBook before I’ll make the switch.

    I can totally understand your feelings, even I was totally depressed and angered June 3rd when I heard the news from CNet, and even moreso on the 6th when Jobs confirmed it true. I have been slowly learning to think past my emotions though, and rather think for the good of Apple and its users.

    Imagine 2007…

    (1) Microsoft releases its long awaited Longhorn OS directly adjacent to the release of Mac OS 10.5 Leopard, which will (hopefully) run Windows apps with little or no performance hits.

    (2) Longhorn fails to excite as much enthusiasm as the most casual Windows guy hoped, but rather is plagued with the same security issues as XP, and has an ugly GUI (from the looks of it now).

    (3) Leopard is touted even more highly than Tiger by the mainstream press, and has a shockingly beautiful GUI, nearly perfect security, and excellent stability. To boot, it will run Windows applications and MS Office.

    (4) Apple somehow has prices remotely comparable to the mainstream PC makers (hey, we can hope!), and the GHz is the same, if not faster.

    (5) Seeing the clear advantage, millions of PC users switch to Mac, who are so impressed and happy that they tell all their friends about it…

    What will happen to Microsoft, and conversely… what will happen to Apple? THAT will be a show.

    If our dreams come true, will it really matter that most of Apple’s computers are 32-bit? They probably won’t be 32-bit by ’07 anyway.

  4. Will people PLEASE stop responding to putzes like Sputnik? For crying out loud, that’s almost certainly not even the “real” Sputnik. The classic Sputnik pontificates for paragraphs about the “real IT world”. This was a one-liner worthy of a 12-year-old.

  5. “Why even bother to update a once cool 64 bit OS when it soon will be an old school 32 bit WinTel box….”

    Sputnik, do you ever read anything other than your own posts? Are you willfully ignorant, or just being a PITA?

    It’s abundantly clear that Mactels will be running on something other than Pentium 4s, probably something quite a bit better like the dual-core 64-bit Dothan chip. Steve Jobs hinted very openly that much more advanced chips would be coming from Intel in the near future. The only reason the developer boxes are running P4s is that that’s all that’s available today.

  6. It amazes me how Sputnik and StantheMan(therealone) always manage to get people to answer here.

    C’mon, don’t you know a troll when you see one?

    I am (despite being a rather savvy Windows user ” width=”19″ height=”19″ alt=”smile” style=”border:0;” />) not an expert on security.

    Could someone tell what kind of security issues are adressed in these updates? Virusfree, so there must be a different angle. Exploits? Of what type?

  7. Knowing nothing specific about this update, I’ll say, in general these types of updates will fix vulnerabilities and bugs that leave permissions set improperly. They may also improve a method implementation in one or more components to make failures less likely (bug fix).

    Usually the exploits that are repaired are ones that could only run locally, but sometimes VPN vulnerabilities are fixed that could have caused a hacker to listen to your traffic or allow them to pretend they are part of your session.

    The launchd related ones probably prevent programs and widgets from running without first getting your permission.

    Most often these thigs fix issues that you would never ever think of or be able to understand without a great deal of training. I know I don’t.

    Hope that helps. You might be able to see how far MS has to go to patch Windows since they started with open permissions and are now trying to close it up, while Mac OS X started closed and is simply trying to remain so.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.