News, info, and opinion by Mac users, for Mac users.

July 1, 2008

updates

Security Update 2008-004 for Tiger

Posted Jul. 1, ’08, 1:26 PM PT by David Dahlquist
Category | Software » Updates

Apple - Support - Downloads - Security Update 2008-004 (Intel).jpgApple has made available Security Update 2008-04 for users keeping it old school with Mac OS X 10.4 Tiger (read: me). The update is only for Tiger users, because we’re special, but also because Leopard users received the same update as part of the 10.5.4 update released yesterday.

It includes a major fix for Alias Manager, closing a vulnerability that would allow maliciously crafted volume mount information to execute code or terminate applications.

CoreTypes has also been updated to ensure that it always warns users before opening certain potentially unsafe content types.

Here’s another big fix: if your system is set to require a password to wake from sleep, but it falls asleep with Expose hot corners enabled, your Mac could be awaken without the password—until now, that is. This has been fixed, thankfully.

There’s a smathering of fixes listed at the Apple Security Updates site, so read them if you’d like.

As always, the update can be obtained through your Mac’s Software Update feature (Apple menu, Software Update), or can be downloaded here.


Leave a comment

 




Visit other IDG sites: