Apple Patches 25 Mac OS Security Flaws

<a href="http://www.macworld.com/article/134236/2008/07/safari.html">Macworld</a>, <a href="http://computerworld.com/action/article.do?command=viewArticleBasic&articleId=9105238&intsrc=hm_list">Computerworld</a>

Jim Manico, OWASP Global Board Member

July 1, 2008

1 Min Read

Apple has patched 25 security vulnerabilities, more than half of which involved open-source code, in its Tiger (10.4) and Leopard (10.5) operating systems.Eleven of the flaws addressed by Security Update 2.008-004 (downloadable from Apple's Web site) were deemed critical, having to do with arbitrary code execution. Affected open-source components include Ruby, an object-oriented open-source scripting language, and Apache Tomcat, which provides a server environment for running Java. Other bugs have to do with bypassing the password requirement in Leopard's Dock and a vulnerability in how WebKit handles JavaScript that could enable hackers to take over a Mac.

Apple also updated Safari for the Mac to plug a hole already fixed in the Windows version of the browser and released an update to bring the operating system to Version 10.5.4.Macworld, Computerworld

Read more about:

2008

About the Author(s)

Jim Manico

OWASP Global Board Member

Jim Manico is a Global Board Member for the OWASP foundation where he helps drive the strategic vision for the organization. OWASP's mission is to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks. OWASP's AppSecUSA<https://2015.appsecusa.org/c/> conferences represent the nonprofit's largest outreach efforts to advance its mission of spreading security knowledge, for more information and to register, see here<https://2015.appsecusa.org/c/?page_id=534>. Jim is also the founder of Manicode Security where he trains software developers on secure coding and security engineering. He has a 18 year history building software as a developer and architect. Jim is a frequent speaker on secure software practices and is a member of the JavaOne rockstar speaker community. He is the author of Iron-Clad Java: Building Secure Web Applications<http://www.amazon.com/Iron-Clad-Java-Building-Secure-Applications/dp/0071835881> from McGraw-Hill and founder of Brakeman Pro. Investor/Advisor for Signal Sciences.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights