Apple today released Security Update 2007-009 which is recommended for all users and improves the security of the following components:
– Core Foundation
– CUPS
– Flash Player Plug-in
– Launch Services
– perl
– python
– Quick Look
– ruby
– Safari
– Samba
– Shockwave Plug-in
– Spin Tracer
Security Update 2007-009 is available via Software Update and also as standalone installers.
More info and download links:
• Security Update 2007-009 (10.5.1) – 35.6MB
• Security Update 2007-009 (10.4.11 Universal) – 27.4MB
• Security Update 2007-009 (10.4.11 PPC) – 15.9MB
Flash player plug-in?
I feel safer already.
Hey, MDN please explain why this is necessary. There are not suppose to be any security issues with Macs or OSX or anything Apple. With your reassurance, I’ll continue to ignore these unnecessary notices. Thanks.
Jackson R. Lewis please note…
Apple’s are not invulnerable, and I do not believe MDN argues such. However, OS X is the currently the most secure platform. Security updates would still be necessary as vulnerabilities are discovered. This still doesn’t change the fact that it is the most secure platform.
@Jackson Lewis
There is a HUGE difference between pro-active security updates versus an exploit that is already “in the wild”. The Mac difference is that the OS gets patched before the problem begins to be exploited and there are far FEWER of them.
Another day, another security update from Cupertino to patch their 30-year old dinosaur OS. Reminds me of the guy down the street who somehow keeps his ’77 Chevy Monza running. These patches are like the primer he uses on the rust spots. Wish he’d do something about the stinky exhaust.
When will Apple get it right? If you MAC lemmings want the latest in a superfast, fantastic looking and solidly secure OS look no further than Magnificent Windows Vista. This Vista thing doesn’t need any patches.
I almost forgot:
Your potential. Our passion.™
Getting sloppy Zune Tang, just like your hero, M$
Wish he’d do something about the stinky exhaust.
who’d’a ever thought
the great and terrible “Zune”–
turns out she’s a chick!
Apple has third party companies like Symantec to search out vulnerabilities. One was recently discovered in Quicktime Player, where an outside source (if the firewall was turned off) could execute arbitrary code on the Mac.
These updates are necessary.
My MacBook’s security is now snappier. Whatever that means.
my MBP is now flashier than before.
Hey, silly rabbits–
These updates are the reason why Macs don’t have security problems.
It’s not for ALL users, it’s for all users of 10.4 or 10.5. OS X 10.3 isn’t covered.
OOh, good. Now I can take that condom off.
And BTW, a 77 Chevy Monza? My God, I had forgotten they even existed!
If there is one thing that can spoil a good discussion at MDN it is the useless and boring Zune Tang … Zune great cut and paste posts … same ole same ole … go away …
I second Bob’s emotion!
If I remember correctly, Chevy stuffed a V8 into some of those Monzas. You had to unbolt the motor mounts and jack up the engine to change the spark plugs. American engineering at it’s finest.
It’s nice to know that Apple at least notifies you of updates. Unlike Zune Tongued in the Butts favorite company, there are no updates installed behind your backs. Those MS guys sure love sticking their codes in behind your computers “back doors”. Although it makes ZTITB all squirmy and happy inside.
” width=”19″ height=”19″ alt=”wink” style=”border:0;” />
Zune Tang, do you wanna know what you can do with your Vista?
” width=”19″ height=”19″ alt=”smile” style=”border:0;” />
I agree. What a joke.
Macs suck. They are insecure, like their users.
Blah de blah…
Well, at least thanks to registration, there’s only ONE Zune Tang, instead of dozens of idiots pretending to be him, just like Sputnik before him.
Isn’t Vista still a DOS program? When you build a good base for the OS you can milk…er use it for 30 years.
— m$… we don’t have the time to breed a new OS—
Transplants and resuscitations are the way to the
money…
Works for m$ i guess.
Zune Tang! Leave my ’77 Chevy Monza alone othervise I’ll tell everybody that underneath your new black Ford F150 skin is actually a pink -79 International Harvester Scout II. And fix those damn brakes, they squeal like a pig in heat.
The comments on this site are strange!
Thy basically Killed off DOS with Windows ME (or XP) . The DOS base was being replaced with Win32 code in 98 and ME, while they were working on their (separately purchased) NT server stuff. they basically rolled out XP as “Windows, when it was actually NT. Same With Vista.
Just as Apple Took OS 7 Out back and shot it finally when OS X was released, they had to limp along on their old code, updating it to OS 8 and OS 9, while they prepped their New OS – OpenStep – they got when they bought NeXT. They slowly rebranded The server and the client with the SAME OS (after some initial frustrations) – MacOS X – While MS decided to keep them separate until XP. MS also keeps different versions of the code separate (32 / 64) so there are differences there too….
SO with 2 core OSes in transition, and each with different builds and codebases, – even when they finally “simplified” to having 3 or 4 base ones (with Win CE) – Look at what vista turned into. Apple has one base – OS X – That powers their desktops and servers, the same code made to compile for 2 different CPU’s (the intel’s & PPC’s) and a client and server version. And it even runs on ARM processors for the iPods and iPhones.
There is no magic solution – for MS to come in and buy a Newer OS to replace their messy base code, nor does anyone seem to have the guts to take anything out back any more and shoot it – and finally write their crap again from the ground up and make it modern – or base it on open source and make the interface private, Like Apple does.
they painted themselves into a corner, and it’s gonna be fun to watch them try to get out of it. I bet they’re gonna have to walk through their paint eventually.
A lot of the info I got was reading the history stuff from RoughlyDrafted(dot)com – Daniel seems pretty good at telling the tail of the OSes and the people involved.
RickS,
The comments are nothing compared to the people. We’re a bunch of freaks. Well, at least I am. Was that a strange comment?
Well, glad to see these got patched. Some were pretty serious:
CFNetwork
Desktop Services
GNU Tar
Launch Services – Description: Launch Services does not handle HTML files as potentially unsafe content.
Quick Look (both)
Safari (both)
Software Update
Those were the main ones that stuck out to me, but, alas, they are fixed.
Yeah, but is it a “snappy” feeling security update?
The patch for the Flash plug in is pretty important. Flash has been making Safari quite unstable since the release of 10.5. Glad that is fixed…. I hope.
We aussie are pretty dumb sometimes
http://www.smh.com.au/news/technology/the-ipod-speaker-that-comes-with-builtin-tuna/2007/12/15/1197568324984.html
Hey, MDN please explain why this is necessary. There are not suppose to be any security issues with Macs or OSX or anything Apple.
It’s the same reason even the best automakers issue service bulletins, recall vehicles, and have parts & service departments at their dealerships.
For problems, it’s a question of how many, how serious, and how proactive vs. reactive. Are we dealing with cup holders that might rattle, or widespread total brake failures? Are new-style locks issued as a precaution, or an urgent response because everyone’s car is getting stolen?
We shouldn’t have to point out the parallels to which OS…
Anyone else notice their spotlight not working or the search dialog not even showing up after the update?
Damn funny… thx
jay
Don’t install Leopard, it’s a mess.
A little Cupertino bird told me.
“The comments on this site are strange!”
I like reading the comments more than the articles
” width=”19″ height=”19″ alt=”smile” style=”border:0;” />
Lots of creative people here…
“The comments on this site are strange!”
As the Doors sang:
People are strange when you’re a stranger
Faces look ugly when you’re alone
Women seem wicked when you’re unwanted
Streets are uneven when you’re down
or as I like to sing:
Leopard seems strange when you’re a stranger (to it)
And Vista look’s ugly because it’s a clone
ZuneTang seems wicked when she is babbling
She’s only jealous Vista’s fulla holes
Ah Sputnik,
I remember him/her well.
WC
“The Mac difference is that the OS gets patched before the problem begins to be exploited and there are far FEWER of them.”
That’s for sure. there are far fewer Macs. So few in fact that any Macs you encounter in the wild are probably a figment of your imagination.
@Bartsimpsonhead
Love the sing dude.
And yes, I too believe Zune Tang is a woman and a Mac user with a sadistic streak that wants to get us all riled up. I have asked MDN to think about an icon that shows either an Apple, a Tux icon or a Doze logo next to each post so we can recognise people who are just on here to have a laugh from the real Windows zealots. What do you reckon guys? Good idea or what?
I’m guessing the real Mac Heads and Real Windows users will like this idea while the impostors won’t. We’ll see!!!
That should have been “love the song dude”
D’oh!
dk: Anyone else notice their spotlight not working or the search dialog not even showing up after the update?
Nope. Still works normally here. On both Tiger and Leopard.
” . . . any Macs you encounter in the wild . . .”
Well, safari, so good. And why there was an elephant in my pajamas I’ll never know.
My MPB 15″ (late 2006 model) had trouble rebooting after this one. Actually I got tired of waiting for the spinning wheel and went to bed. Six hours later my wife found it and shut down the computer. When I awoke I pushed the power button and it’s working.
I did the update. Now I’m in a setup assistant loop. It shows my old log in icon and every time I log in it goes back to setup assistant and asks for my info again. I can’t log out or exit. Anyone else have similar issues?
Here are the step if you get caught in the Leopard Setup Assistant Loop Bug:
1) Boot into Safe Mode by holding down the shift key upon boot.
2) Do not login.
3) Hit the back arrow key.
4) Then, hit the restart button.
5) It will then rerun the updates.
6) Wait until the process is complete and it will finally restart.
Should be, “Here are the steps . . .”
Unintended anti-pluralism.
Nothing for 10.3.9? Does this mean Apple is done supporting my system and I need to upgrade if I want to continue to use it to browse the web?
Yaardvark:
Re: Panther Security
You might find answers here:
http://www.apple.com/support/security/
Or here:
http://discussions.apple.com/category.jspa?categoryID=161
My MacBook completed the download and install, but the battery died before it could restart. Now the LED on the charger plug alternately blinks orange and green. What should I do?