'Huge' Apple update plugs 40 Leopard security holes

"Happy patching"

NEWS

Apple has released an update to Mac OS X patching more than 40 security holes, as detailed in Security Update 2008-003/Mac OS X 10.5.3.

The update, released this week, plugs flaws that render OS X Leopard users vulnerable to systems compromises including denial-of-service attacks, information disclosure and remote code execution.

Included in the update is a patch for multiple vulnerabilities in the Adobe Flash Player plug-in. Currently at least 20,000 websites have been infected with code that exploits the flaws, which occur when Flash Player processes a malicious Shockwave Flash (SWF) file. Normally, SWF files contain animations or interactive applications.

Security research and training organisation the Sans Institute commented in a blog post that the Apple update was "huge", and wished everybody "happy patching".

Comments

There is 1 comment. Join the discussion

  1. 1. Bruce Campbell

    ...and I ran the patches once the OS Software update announced they were available, and in 20 minutes, everything was back up and running. What's the problem? Apple releases regular software updates, which never take longer to install that 5 minutes, rarely need a restart, and fix things that need fixing, and award credit to the IT pros that help them find the problems.

    Beats "Patch Tuesday" from Redmond any day!

    • 4 June 2008 06:10
    • Add comment

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your silicon.com account below

  • Login

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy.

Questions about membership? Find the answers in the Membership FAQ

Get silicon.com's daily newsletter

  • Register on silicon.com

    Enter your email to register

Keep in touch with silicon.com

silicon.com newsletters