Apple Ships Mac OS X Mega Update | eWeek

Apple Ships Mac OS X Mega Update

Écrit par
Ryan Naraine
Ryan Naraine
Mar 18, 2008
1 minute read
eWeek Le contenu et les recommandations de produits sont indépendants de la rédaction. Nous pouvons gagner de l'argent lorsque vous cliquez sur des liens vers nos partenaires. En savoir plus

It’s officially Patch Day in the land of the Mac.
On the heels of the release of Safari 3.1, with patches for more than a dozen browser vulnerabilities, Apple has shipped a mega update for its flagship Mac operating system, fixing at least 80 documented vulnerabilities in a wide range of core components.
The Security Update 2008-002, available for Mac OS X desktop and server, covers several critical issues that could lead to remote code execution attacks.
On the desktop side, the Foundation bug (CVE-2008-0059) appears to be the most serious. “Processing an X M L document may lead to an unexpected application termination or arbitrary code execution,” Apple warns, noting that an attacker could use a booby-trapped X M L file to exploit a race condition in NSX M L.
On the server side, security experts are calling attention to a bunch of ClamAV and CUPS vulnerabilities that could cause remote compromise if mail or printer sharing is enabled.
The mega update addresses publicly known flaws in several open-source components-Apache, PHP, ClamAV, OpenSSH and Kerberos-and multiple holes in AppKit.
Other flawed components fixed with this update include Core Foundation, Core Services, curl, Emacs, Help Viewer, ImageRaw, mDNSResponder, Podcast Producer, Preview, Printing and System Configuration.

eWeek Logo

eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site's focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

Propriété de TechnologyAdvice. © 2026 TechnologyAdvice. Tous droits réservés

Divulgation publicitaire : Certains des produits qui apparaissent sur ce site proviennent d'entreprises dont TechnologyAdvice reçoit une compensation. Cette compensation peut influencer la façon dont les produits apparaissent sur ce site, notamment l'ordre dans lequel ils apparaissent. TechnologyAdvice n'inclut pas toutes les entreprises ou tous les types de produits disponibles sur le marché.