First update for Apple's Snow Leopard released

Apple has released Mac OS X 10.6.1 for Snow Leopard and Security Update 2009-005 for 10.4.11 Tiger and 10.5.8 Leopard systems, fixing several bugs and security vulnerabilities. Mac OS X 10.6.1 upgrades the Adobe Flash Player to the latest 10.0.32.18 release, eliminating several critical security vulnerabilities. Previously, installing Mac OS X 10.6 would downgraded the Flash Player to 10.0.23.1 and users would need to visit the Adobe Flash Player download page to upgrade to the latest release. Users can check what version of Flash Player they currently have installed by going to Adobe's version test page.

Security Update 2009-005 addresses a total of 33 security vulnerabilities in Mac OS X 10.5.8, Server 10.5.8, 10.4.11 and Server 10.4.11, including nine issues related to the Flash Player plug-in, some of which could lead to arbitrary code execution when viewing a maliciously crafted web site. The update fixes several issues with Mac OS X's Alias Manager, CarbonCore, ColorSync, CoreGraphics and ImageIO that could lead to an unexpected application termination, or allow for the execution of arbitrary code. Other updates include changes to Launch Services preventing arbitrary code execution, Samba no longer unexpectedly sharing folders when enabling Windows File Sharing and fixes related to system privileges and access in the Common Unix Printing System (CUPS).

Mac OS X 10.5 has been upgraded to version 5.2.10 of PHP, closing six vulnerabilities, the most serious of which may lead to arbitrary code execution. In addition to updating MySQL to version 5.0.82, Mac OS X Server 10.5.8 closed multiple vulnerabilities in ClamAV 0.94.2 and fixed a cross site scripting issue in Wiki Server that could have allowed a remote attacker to gain access to Wiki Server user accounts.

All users are advised to update using the Software Update service from the Apple Menu or by using a stand alone installer. Mac OS X 10.6.1 is available to download as a 71.4 MB upgrade. Mac OS X 10.5.8 users can get the 2009-05 security update as a 93.14 MB download and Mac OS X 10.4.11 users can download separate security updates for Intel (169.75 MB) systems and PowerPC (77.95 MB) computers.

See also:

• About the Mac OS X v10.6.1 Update, advisory from Apple.
• About the security content of the Mac OS X v10.6.1 Update, security advisory from Apple.
• About Security Update 2009-005 security advisory from Apple.

(crve)