Apple releases security update 2007-005

May 25, 2007 |

Apple releases security update 2007-005

By Triston McIntyre

Apple releases security update 2007-005 Those of you with Macs are probably already aware of this little gem, but if you weren’t, Apple released its 5th security update of 2007 today, and the update addresses a smorgasboard of fixes and problems, so update away!

The key players of the 005 update are iChat and VPN, and also include a few unix utilities and code lines that needed a facelift as well:

Alias Manager. Impact: Users may be misled into opening a substituted file

BIND. Impact: Multiple vulnerabilities in BIND, the most serious of which is remote denial of service

CoreGraphics. Impact: Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution

crontabs. Impact: The daily /tmp cleanup script may lead to a denial of service

fetchmail. Impact: fetchmail password disclosure may be possible

file. Impact: Running the file command on a maliciously crafted file may lead to an unexpected application termination or arbitrary code execution

iChat. Impact: An attacker on the local network may be able to cause a denial of service or arbitrary code execution

mDNSResponder. Impact: An attacker on the local network may be able to cause a denial of service or arbitrary code execution

PPP. Impact: A local user may obtain system privileges

ruby. Impact: Denial of service vulnerabilities in the Ruby CGI library

screen. Impact: Multiple denial of service vulnerabilities in GNU Screen

texinfo. Impact: A vulnerability in texinfo may allow arbitrary files to be overwritten

VPN. Impact: A local user may obtain system privileges

That list was provided by the good folks at TUAW, and I thank them for summarizing all the deathly boring information I really have very little interest in.

Lets hope this update isn’t accompanied with network errors like the 004 update. On a sweeter note, very soon the WWDC will begin, and in regard to what Apple has in store…Steve never kisses and tells, but rumors of new Macbooks, iMacs, Mac Minis, Leopard, and the iPhone are flying around like, well…Apple rumors, so keep your browser tuned into Mac.Blorge.com for the breaking news!