Apple has made available Security Update 2008-04 for users keeping it old school with Mac OS X 10.4 Tiger (read: me). The update is only for Tiger users, because we’re special, but also because Leopard users received the same update as part of the 10.5.4 update released yesterday.
It includes a major fix for Alias Manager, closing a vulnerability that would allow maliciously crafted volume mount information to execute code or terminate applications.
CoreTypes has also been updated to ensure that it always warns users before opening certain potentially unsafe content types.
Here’s another big fix: if your system is set to require a password to wake from sleep, but it falls asleep with Expose hot corners enabled, your Mac could be awaken without the password—until now, that is. This has been fixed, thankfully.
There’s a smathering of fixes listed at the Apple Security Updates site, so read them if you’d like.
As always, the update can be obtained through your Mac’s Software Update feature (Apple menu, Software Update), or can be downloaded here.
MacUser is your source for news, info, and opinion about Apple, the Mac, and the iPod. Our dedicated team of bloggers covers everything that is relevant to Mac users — and, okay, some stuff that’s not quite relevant, but is still a lot of fun.
Leave a comment