Safari Update Fixes Serious Security Flaws

Apple has issued a section connector for its Safari scheme application that closes a sort of vulnerabilities, including the digit that caused OS X to retrograde the hacking oppose at CanSecWest, the section word held in March.
Today’s update fixes quaternary flaws in the Windows edition of Safari and digit in the Mac version. Of those patched, the most earnest are the digit flaws that change WebKit on both platforms. WebKit, the engine behindhand Safari, also powers whatever elements of Apple Mail, Dashboard and numerous third-party applications.
As for the CanSecWest contest, though OS X lost, it’s worth noting that the damage required the oppose organizers to meet a primary place that contained vindictive JavaScript code. No digit was healthy to utilise some of the competing OSes (Vista, OS X and Ubuntu) without motion to right applications same scheme browsers.
Also assume in nous that the Javascript damage that section investigate Charlie playwright utilised to utilise WebKit and get the oppose affects some application or another app that’s using WebKit — the difficulty isn’t restricted to Safari.
You crapper clutch today’s connector directly from Apple or, if you’re on a Mac, meet separate Software Update.
If you’re fascinated in acquisition more most how to boost cows up section on your Mac, Ars Technica has a helpful tutorial on Mac OS X security for grey users. It covers concealment locking, Unix enter permissions and code passwords. It’s a primer, so we crapper wait more in-depth topics from Ars in the future.
See Also:
- Vista, Leopard and UNIX Square Off in Hacking Contest
- Apple Release Security Patch for OS X, Safari 3 Beta
- Safari for Windows: Six Security Exploits in One Afternoon
- Safari 3: Dissecting the Reality Distortion Field
Melted From: Wired: Compiler
Tags: apple release, ars technica, charlie miller, contest organizers, intermediate users, mac os x, mac os x security, mac version, mail, party applications, reality distortion field, safari for windows, safari web browser, security conference, security exploits, security flaws, security patch, security research, serious security, unix file permissions
Tue, 25th November 2008
