Apple releases Mac OS X 10.6.4 update

Apple has released Mac OS X 10.6.4, an update that improves the operating system's stability, compatibility and security. In addition to other changes, the update addresses a total of 28 security holes, some of which can be exploited to hijack a user's system. According to Apple, it's sufficient, in many cases, to simply visit a specially crafted website.

The update includes the latest Safari 5 release, which closed 48 security vulnerabilities last week, and fixes issues causing the keyboard or trackpad to become unresponsive, problems copying, renaming or deleting files on SMB file servers, playback problems in the DVD Player under certain settings, and volume and sleep issues in early 2010 MacBook Pro models. The reliability of VPN connections have been improved and a noise problem related to some third-party FireWire audio devices has also been corrected.

Additionally, the update addresses a number of security issues in Mac OS X, including, for example, problems with the CUPS printing service, ImageIO, Kerberos, iChat and the Samba server. While the update includes version 10.0.45.2 of the Flash Player plug-in, closing two vulnerabilities, the latest version is Flash 10.1, which fixes a total of 32 vulnerabilities, including a recently exploited 0-day flaw. Users who have already installed Flash 10.1 are advised to make sure that it is not overwritten by Apple's update – normally this should not be the case. A full list of changes and security updates can be found in the advisories below.

All users are advised to upgrade to the latest release via the built-in Software Update function as soon as possible. The 10.6.4 client update weighs in at 607.21 MB, while the 10.6.4 combo update that includes 10.6.1 to 10.6.3 comes in at 887.37 MB. The 10.6.4 Server updates are 615.60 MB and 1.05 GB respectively (Standard / Combo).

Apple has also released Security Update 2010-004 for Mac OS X 10.5.8 (Leopard: Client - 222 MB, Server - 380.29 MB) that corrects several security vulnerabilities.

See also:

• About the security content of Security Update 2010-004 / Mac OS X v10.6.4, security advisory from Apple.
• About the Mac OS X v10.6.4 Update, advisory from Apple.
• Adobe releases final version of Flash Player 10.1, a report from The H.
• Apple's Safari updates address 48 security vulnerabilities, a report from The H.

(crve)