| View previous topic :: View next topic |
| Author |
Message |
admin
Site Admin
Joined: 21 Jan 2005
Posts: 2047
Location: U.S.A
|
 Posted: Wed Mar 01, 2006 7:05 pm Post subject: Apple releases Security Update 2006-001 |
 |
|
Apple releases Security Update 2006-001
Wednesday March 1, 2006
Apple today released Security Update 2006-001 via Mac OS X's Software Update Utility and on the Web. The company says this release improves the security of the following components: apache_mod_php, automount, Bom, Directory Services, iChat, IPSec, LaunchServices, LibSystem, loginwindow, Mail, rsync, Safari, and Syndication.
http://www.123macmini.com/news/story/448.html |
|
| Back to top |
|
 |
resuna
Member
Joined: 15 May 2005
Posts: 215
|
| Posted: Thu Mar 02, 2006 7:51 am Post subject: Didn't really fix Safari or LaunchServices |
|
|
| As expected, they just patched this particular instance of the hole. They didn't either disable "Open Safe Files After Downloading" or modify LaunchServices to support a separate interface with a database of "Safe applications to open files with" for programs like Safari to use. |
|
| Back to top |
|
|
picaman
Veteran Member
Joined: 16 Aug 2005
Posts: 1444
Location: NYC
|
| Posted: Thu Mar 02, 2006 10:51 am Post subject: Re: Didn't really fix Safari or LaunchServices |
|
|
| resuna wrote: | | As expected, they just patched this particular instance of the hole. They didn't either disable "Open Safe Files After Downloading" or modify LaunchServices to support a separate interface with a database of "Safe applications to open files with" for programs like Safari to use. |
It's a bit disappointing. Maybe these issues will be addressed in the next OS X point upgrade rather than with a security update? I hope so.
Jamie |
|
| Back to top |
|
|
resuna
Member
Joined: 15 May 2005
Posts: 215
|
| Posted: Thu Mar 02, 2006 8:04 pm Post subject: |
|
|
Turning off "Open safe files after download" by default, removing archives from the list of "safe" files, and adding some text like Camino had to the effect that opening "safe" files after download is risky... that wouldn't have taken any effort at all.
So, no, I don't think they have any plans at all of actually addressing the problem. |
|
| Back to top |
|
|
|
FAQ 
Search 
Memberlist 
Photo Gallery
Register
Profile 
Log in to check your private messages 
Log in 
