Apple issues Mac OS X security update

Posted on 26 Jan 2005 at 13:25

Apple has released an update for Mac OS X which fixes potential security issues with several components of the operating system.

Security Update 2005-001 is available from Apple's Web site, or via the system's Software Update preference pane. The issues addressed by the update include a potential problem with OS X's 'at' command, where privileges were not dropped back to user level correctly, which could allow a local user to remove files that did not belong to them.

Also fixed is a bug in ColorSync, where a malformed ICC profile could allow the execution of arbitrary code, as well as issues with libxml, PHP, and SquirrelMail.

The update also addresses two security issues with Apple applications. A bug fix for Mail prevents the identification of an email as coming from a particular machine via its Ethernet MAC address, which had been mistakenly included in some header information. Also fixed is a bug in Safari where, if the program's pop-up blocker was not enabled, a malicious Web page could use a pop-up to redirect the browser to another site while appearing to still be part of the trusted site.

Author: Ian Betteridge

Get more reviews, tutorials and in-depth advice, every month with Computer Shopper.
Click here to try 3 issues for £1

< Previous News : General Next >

Be the first to comment on this article

You need to Login or Register to comment.