Apple unloads torrent of patches, plus the first iPhone update

If you own a Mac or an iPhone, chances are you'll need to download at least one of the security updates issued by Apple late Tuesday.

Dozens of vulnerabilities and bugs were covered by a total of six downloads for Mac OS 10.3.9 (Panther), Mac OS 10.4.10 (Tiger) on PowerPC, and the Universal version of Mac OS 10.4.10, as well as the server versions of each of those operating systems. Each download contains several patches to correct flaws, and Apple is recommending that all users of those operating systems download the updates.

Some of the vulnerabilities seem quite serious, leading to arbitrary code execution, downed applications or both. You can download the updates for your specific Mac at Apple's support Web site or by clicking on the "Software Update" selection under the Apple menu.

Apple also issued the first software update for the iPhone as part of Tuesday's releases. Unlike the Mac updates, the iPhone update will be delivered through iTunes the next time you sync your iPhone with your Mac or PC. It corrects a few flaws in Safari as well as in Webcore and Webkit, apparently the iPhone versions of some flaws Apple fixed for Mac users of Safari back in June.

Finally, Apple also released a new version of Safari 3.0, which is still in beta. The new version, Safari 3.0.3, fixes some security flaws for both the Windows and Mac OS versions of the browser.

The flood of patches comes as the security community is gathered in Las Vegas for the annual Black Hat conference.

[MaLvaDo39]

Still no Viruses or Trojan horses in the wild :)

After six years and counting!

[catch23]

If living on borrow time

and the good graces of thieves is what you call safety, then enjoy your delusional hiding place.

[FutureGuy]

there are no Macs..

..in the wild either.

[rbunker]

not on borrowed time, just easier time

Of course the day will come when there is a virus or trojan. So I run an anti-malware package (intego). But even after one does show up, os X will still have 10^5 or so fewer viruses to contend with than msft operating systems. In what way can this possibly be construed as a bad thing?

[catch23]

I run msft OS's

and never had an issue, be it at home or on the corporate network. So I have the very same success rate as OSX; I've had the same number of viruses and mal-ware affect me.
I don't give a damn about 10^5. I worry about the one (be it a Mac or Linux or Windows) problem that gets through.
Arrogance will only help that along. thanks for putting the bulls-eye on your back.

[MadKiwi]

Dozens?

They may have published a number but hardly any user will have
to download them all. In my case it was 3 - security update, wifi
update and Safari 3 beta update.

I have to question c|net's motivation in using "torrents of
patches" in their headline.

I have never had to dowload more patches on my Mac than I
have on my PC (the record there was 63 for a fresh install of XP
- do a fersh install of OS X and you get one major "bundle" plus
a few others that came out after the bundle).

[Tom Krazit]

That was a lot of patches

The headline referred more to the specific patches within each update. I only downloaded the Intel one, myself, but there were lots of fixes inside that one update.

[frankwick]

SP

The major bundles in MS world are the SPs. Since SPs are more than simple roll-ups, they are released infrequently. In addition, MS will occasionally create roll-ups (for IE, for example).

If you do a fresh install, install the latest service packs and roll-ups first. Also install the latest versions of software so you don't have to patch the old versions before you upgrade. (WMP11, IE6, Windows Movie Maker, etc..) Your patching time will be greatly reduced.

[SiXiam]

So Quick...

It takes microsoft months to make patches for Vista and even service pack 1 has been delayed.

Interesting indeed...

[ThatScienceGuy]

Kind of funny

If it was microslop releasing a patch this early for a new product, you'd probably be saying: "See, it's so full of bugs, they had to release a fix already!"

I'm not particulary fond of either company's poorly written code, but I'm just sayin'....

[sal-magnone]

NOPE, MS Patches faster Than Linux/Apple

Here is the data on the first 90 days:
http://blogs.csoonline.com/node/218


Check the symantec site for this year's security roundup. They say that VISTA is most secure widely distributed OS-

http://www.symantec.com/enterprise/theme.jsp?themeid=threatreport

[frankwick]

must disagree

Where's your proof that Apple releases updates more quicky that microsoft? If a ciritical issue is reported, then a ptach is usually available during the next round of patching. If it is really ciritical, then MS will release the update before the next scheduled round.

I like the organized manner in which MS releases patches for Windows & Office. They are scheduled for the 2nd Tuesday each month. Of course this is aimed at corporate types so they can implement change control, but as a home user I appreciate this also.

Regarding Vista SP1 timing, what were the official dates MS released? You said it is now delayed. What is the new official date. I wasn't aware of a specific release date - just generalities reported by the media and speculation from the bloggers. [Not flaming, just seeking info on this subject]

[billmosby]

You make it sound like a lot of work!

Which it is not so much...

[Mapper99]

Busy Bees...

I think they had this one in the works long before the release...

http://iphone.corank.com

[qx2]

Ha! Ha! Ha! my Mac cannot be hacked!!!

How pathetic your reteric now seems. Your purrfect mac has more holes than swiss cheese ... :) I love it!!!! The immaculate OS is not so perfect huh? HEE HEE.

[Jim_Mattos]

It's more a matter of percentage...

I find it funny how some Mac owners boast about the "unhackable"
nature of the Mac. I think the fact that Mac's are hacked on a less
frequent basis is due to the fact that Mac's have never exceeded 6%
of the total number of computers out in the market place. I think
that it is more likely that hackers can't be bothered by the distinct
minority out there.

Unhackable...not possible! Not worth some people's time...most
plausible!

[qx2]

Pedestal is required.

Need a pedestal to go with that mac?

[M C]

Ridiculous CNet teasers reveal need to drum up page views

There's ONE patch for Macs. ONE patch for the iPhone. They fix multiple aspects of the system. "Torrent of Patches" and "Users have got some downloading to do" may be something you can get away with writing, but <irony>I'm starting to wish Murdoch would buy CNet Networks so the reporting will get better.</irony>