Apple ships 50+ security updates

Discussion Policy
Comments that include profanity or personal attacks or other inappropriate comments or material will be removed from the site. Additionally, entries that are unsigned or contain "signatures" by someone other than the actual author will be removed. Finally, we will take steps to block users who violate any of our posting standards, terms of use or privacy policies or any other policies governing this site. Please review the full rules governing commentaries and discussions. You are fully responsible for the content that you post.
Brian Krebs
Copyright 2009
Tuesday, November 10, 2009; 11:11 AM

Apple has shipped a large security update for computers running its Leopard and Snow Leopard operating systems for the Mac. The bundle contains security fixes for more than 50 vulnerabilities, including updates for components like Adaptive Firewall, FTP server, QuickTime and Spotlight. The update applies to Snow Leopard (10.6.x) and Mac OS X Leopard (10.5.8) systems, as well as OS X Server versions of these operating systems. Users can grab the patches directly from Apple Downloads or via the Mac's built-in Software Update feature. Some of the individual fixes in these bundles are interesting in their own right. For example, Apple said that a vulnerability in Snow Leopard's Login Window could let a user log in to any account without supplying a password. Another update, this one for a bug in Leopard' Dictionary program, is limited to users on the local network, but gives a whole new meaning to the term "dictionary attack"; Apple said a maliciously crafted Javascript could allow a user on the local network to drop hostile code on another Mac user's system. Read more about the individual updates here.



More Washington Post Opinions

PostPartisan

Post Partisan

Quick takes from The Post's opinion writers.

Washington Sketch

Washington Sketch

Dana Milbank writes about political theater in the capital.

Tom Toles

Tom Toles

See his latest editorial cartoon.

© 2009 Washingtonpost.Newsweek Interactive