• On MovieTome: X-Men: First Class' shooting next year?
December 17, 2007 3:18 PM PST

Apple releases dozens of Tiger, Leopard security updates

by Tom Krazit
  • Font size
  • Print
  • 47 comments

It's download time again for Mac OS X users, as 31 new security-related fixes for both Tiger and Leopard were made available by Apple Monday afternoon.

The security patches are mostly geared for users of Mac OS X 10.4, known as Tiger, but there's a bunch as well for version 10.5, known as Leopard. They should be automatically pushed to Mac users through the Software Update function, but you can also go to Apple's Web site and download the patches.

A number of serious vulnerabilities, such as ones that could lead to a malicious attack on your system, are fixed with the latest update. This includes several flaws that could lead to a remote attacker executing malicious code on a Mac in programs like Address Book, the Safari browser's RSS feed, and CUPS (common Unix printing system), among other things.

Apple updated QuickTime last week in order to fix an important flaw in that program. As part of Monday's patches, Apple also shipped a patch for Windows users of Safari that was addressed for Mac users as part of the larger series of patches.

Tom Krazit writes about the ever-expanding world of Internet search, including Google, Yahoo, online advertising, and portals, as well as the evolution of mobile computing. He has written about traditional PC companies, chip manufacturers, and mobile computers, spending the last three years covering Apple. E-mail Tom.
Recent posts from Apple
Microsoft exec: Mac OS inspired Windows 7
Google plans Chrome Mac beta for December
Orange sells 30,000 iPhones in U.K. on first day
Apple overtakes Nokia in phone profits
Apple rejects MAD artist's iPhone caricature app
In Apple parody, Florida says 'there's no app for this'
Apple updates Mac OS X Snow Leopard
Apple Store opens in the Louvre: Where next?
Add a Comment (Log in or register) (47 Comments)
  • prev
  • 1
  • next
DOZENS of updates?
by OohYah December 17, 2007 4:11 PM PST
Give me a break!
It was ONE update!! There are many fixes within the one update,
but isn't that a normal practice?
Seems like this is a little bit of "Sensationalism" here.
Gee, lets try to make OS X look as bad as XP or Vista!
Reply to this comment
Yes Dozens of updates
by pcbear December 17, 2007 4:17 PM PST
yes dozens of update! There were a multitude of updates to different products.
Each component was updated
by Tom Krazit December 17, 2007 4:50 PM PST
Address Book was updated. iChat was updated, CUPS was updated, Core Foundation was updated, Desktop Services was updated, Mail was updated, Launch Services was updated, Safari was updated, Software Update was updated, Spotlight was updated......

Yes, I understand, all those updates come in one file. But you're telling me you guys would have been more satisfied with a headline that said "Apple corrects 31 flaws in Mac OS X" or maybe "Dozens of Mac OS X problems, some critical, corrected by Apple?"

Somehow, I doubt that.
View all 2 replies
Wow
by DrtyDogg December 18, 2007 8:50 AM PST
A little sensitive are we? It's OK, lord Jobs is aware of your loyalty and you will be rewarded in the promised land.
Did CNet hire Joris Evers back?
by M C December 17, 2007 4:42 PM PST
Because that was a textbook Evers headline (I think even a plagiarized one).

Apple released ONE update that fixed numerous bugs.

Didn't you just whine about the mean Mac people crabbing at you for everything? Well, you clearly knew what you were doing here. And you used to be so smart about this stuff...

The Jeff Gerstmann reverberations apparently continue.
Reply to this comment
Whaa...Tiger, Leopard needs update?
by email11101498 December 17, 2007 6:15 PM PST
Isn't Tiger and Leopard already perfect without flaws? I thought you never needed fixes or patches for security or vulnerabilities?

Surely it's a mistake!

BTW, that's really smart of them to figure out a way to patch 31 issues in a single update. Mac is wonderful.
Reply to this comment
clueless
by The_Decider December 17, 2007 7:43 PM PST
No one said it is perfect.

It is, however, way more secure then windows.

I will spare you the lecture about flaws vs. exploited flaws since you likely won't be able to understand it.
View all 2 replies
WOW!
by roozbehn December 17, 2007 7:16 PM PST
I thought Mac's are perfect!!!?
so they do have bugs too!!!!
Reply to this comment
OMG
by tanis143 December 17, 2007 7:40 PM PST
I knew as soon as I read this story that macbois would be flaming up a storm. Whenever there is something that could even have a slight chance of possibly flicking a bit of dirt on their pristine white (cough)overrated(cough) computers they start whining as if their favorite Starbucks ran out of creamer.

Get a grip.

Yes, there were several updates contained in while patch. If multiple applications were updated, each one counts as a separate update regardless of how many files have to download. Apple just packaged all the updates (notice the plural use?) in one handy downloaded file.
Reply to this comment
And of course
by Lee in San Diego December 17, 2007 7:57 PM PST
"I knew as soon as I read this story that macbois would be
flaming up a storm."

As soon as Apple issued the update the blogs you find on the
magazine rack at the checkout line would have flaming
headlines.

"Headless Server Found in Topless Bar!"

"Program Caught in a Loop Chews Off its Own Foot!"

"Almost Perfect OSX Made Even More Perfect!"
View reply
Do you know what would be news?
by The_Decider December 17, 2007 7:44 PM PST
If OSX was actually exploited in the wild.

Do you know what is not news?

Windows getting successfully attacked.
Reply to this comment
How about...
by Vegaman_Dan December 17, 2007 9:11 PM PST
The_Decider chooses not to be negative for a change?

Look, it's an update. So there is one file or a bunch of files. It doesn't matter- updates are way of life for any OS and that includes Windows and Linux.
View reply
Social engineering, anyone?
by alegr December 18, 2007 12:02 PM PST
So called "Windows attacks" is mostly a triumph of plain old social engineering.
It won't take long before people start receiving emails: "Urgent notification from Apple: Install this security update". They are already primed to accept as a fact that OS X _needs_ security updates.
Perspective...
by Kings X Rocks! December 18, 2007 4:44 AM PST
But, by using the phrase "security updates" in the title of the article, a shadow of vulnerability is cast on OS X...

It is always so comical to read the reactions!
Reply to this comment
Apple labels them Security Updates
by Lee in San Diego December 18, 2007 6:14 AM PST
Even if most of the fixes were not security related problems Apple
still refers to them as Security Updates, see http://www.apple.com/support/downloads/

Now the sensational blog headlines are another thing.
Okay
by wolivere December 18, 2007 4:48 AM PST
http://blogs.pcmag.com/securitywatch/2007/12/unpatched_quicktime_bug_exploi.php

http://software.silicon.com/malware/0,3800003100,39162900,00.htm

http://www.itwire.com/content/view/15601/53/

http://findarticles.com/p/articles/mi_zdpcm/is_200611/ai_n19420332

Just a quick search.. but.. oh well
Reply to this comment
To be fair
by Seaspray0 December 18, 2007 12:07 PM PST
All operating systems are not immune from malicious attacks. Please people, stop this nonsense and treat this for what it is... a security update. Like we haven't seen one before? Updates are a good thing. I would worry more about software that doesn't get fixed. I would also recommend you excercise good judgement by keeping your computer updated, using a good firewall, and protecting yourself against viruses. It's common sense like wearing a seatbelt.
Was about to get OS X
by FutureGuy December 18, 2007 7:53 AM PST
thinking that its bug free, only windows gets patches, ohh well, live and learn.
Reply to this comment
RE: Was about to get OS X
by mikeschr December 18, 2007 10:13 AM PST
You know, I have a feeling this guy wasn't really about to get OS X.
View reply
Learning the hard way
by NewsReader_ December 18, 2007 1:01 PM PST
This is commercial software folks. Whether it comes from Microsoft, Apple, Sun, IBM, where ever, it is going to have bugs. All of this bickering about which OS is better is pointless.

This will not change until consumers are willing to pay more and wait longer for higher quality software. In other words, never.

The biggest lesson that Apple followers are going to have to learn is that as your numbers grow; so will the number of defects found. Unless you enjoy eating crow, you may want to pipe down the "My OS is better" rhetoric.
Reply to this comment
This just in...
by AppleSuxLeo December 18, 2007 10:36 PM PST
Leoptard just renamed Swiss Cheese !
Reply to this comment
Not just updates
by sagan.nexx December 19, 2007 10:51 AM PST
Remember, the release date was a cut-off for features, but some features that did not make the release date are added to the post-release update(s) e.g. an updated Java run-time. Face it, nothing gets patched more than Windows.
Reply to this comment
(47 Comments)
  • prev
  • 1
  • next

As alternative energy grows, NIMBY greens

With more renewable energy projects trying to come online, the country grapples with the balance between local land use and a national push for clean energy.

Google to remake programming with Go

A Unix co-creator is among those behind a language Google hopes will speed computers and programming. Today, Go becomes open-source software.

About Apple

At the start of the 21st century, there's no tech outfit more influential than Apple. CNET News' Erica Ogg and other reporters will attempt to make sense of the rumors, hype, products, and people that will shape the future of the company. But Apple's not the only game in town, as the established cell phone companies and others strike back against the iPhone. E-mail Erica at erica.ogg@cnet.com.

Add this feed to your online news reader

Apple topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right