Apple does not assign ratings or severity scores to the bugs it patches, unlike other major software makers, such as Microsoft and Oracle.Īpple plugged holes in 37 different components of Mac OS X, ranging from AFP Client and the open-source Apache Web server software to CoreGraphics, the Help Viewer and the Spotlight desktop search engine. More than half of the vulnerabilities patched today, 32 out of the 58, were accompanied by the phrase “may lead to arbitrary code execution,” which is Apple’s way of saying that a flaw was critical and could be used by attackers to hijack a Mac. Microsoft, which unlike Apple sets a regular schedule for its security updates, is slated to deliver six updates Tuesday that will patch 15 vulnerabilities. “Thank goodness Apple didn’t release it tomorrow,” Storms said.
In May, Apple patched a record 67 vulnerabilities it addressed 55 in February, 33 in September, and 19 in two separate August updates. “Seems a little large, but really, it’s par for the course for Apple,” said Andrew Storms, director of security operations at nCircle Network Security, referring to the number of individual bugs quashed in today’s 2009-006 update. Today’s security update was the sixth from Apple this year, and the second that included patches for Snow Leopard, launched in late August. Apple traditionally stops providing security updates for its oldest still-supported OS several months after the release of a new edition.
Apple patched 58 vulnerabilities in its Mac operating systems today, the most since May 2009, including several in the QuickTime media player that it had fixed separately in early September.Īpple apparently also retired Mac OS X 10.4, aka Tiger, from security support none of the patches affect that operating system, which debuted in April 2005.
0 kommentar(er)
