Apple Security Update 2006-002 patches Mail, Safari

***AppleInsider*** · 03-13-2006, 06:12 PM

Apple this afternoon released Security Update 2006-002, which is recommended for all users and improves the reliability and security of the following components: apache_mod_php, CoreTypes, LaunchServices, Mail, Safari, rsync. Specifically, the update attempts to repair issues where remote web sites can cause JavaScript to bypass the same-origin policy, double-clicking an attachment in Mail may result in arbitrary or malicious code execution, and where viewing a malicious web site may result in arbitrary or malicious code execution.

[ View this article at AppleInsider.com ]

Ireland · 03-13-2006, 06:27 PM

Safe as houses!!

I say ha ha to all those PC fools who wont give in and stop playing with dull beige boxes. Here's to the future!

1337_5L4Xx0R · 03-13-2006, 08:22 PM

You're not familiar with computer security, are you?! And to suggest that "PC fools" buy their "dull beige boxes" to "play" is a bit extreme, no? I use PCs at school to do a bit more than play, and I'm no fool.

Mac koolaid drinker zealots give normal mac users a bad name. It's a computing platform, not a religion.

aplnub · 03-13-2006, 08:50 PM

You both need help...

Ireland · 03-13-2006, 10:04 PM

Safety first!

Gene Clean · 03-13-2006, 11:12 PM

Quote:

Originally posted by 1337_5L4Xx0R
You're not familiar with computer security, are you?! And to suggest that "PC fools" buy their "dull beige boxes" to "play" is a bit extreme, no? I use PCs at school to do a bit more than play, and I'm no fool.

Mac koolaid drinker zealots give normal mac users a bad name. It's a computing platform, not a religion.

QTF.

jdbartlett · 03-14-2006, 01:05 AM

Does no one else find it disturbing that Safari, unlike most other browsers, falls for the infinite JavaScript loop? Today, I tried setting up a do...while(1==1) loop in JavaScript and loaded the page in Safari. Other browsers (Firefox, etc.) catch on to the fact that the script is taking too long to run and bring up a popup alert to halt it. Safari, though, happily churns away until so many resources are used up the system has to be restarted.

I'm just about to install this security update - I'll let you know if it 'fixes' the problem.

jdbartlett · 03-14-2006, 01:21 AM

Quote:

Originally posted by jdbartlett
I'm just about to install this security update - I'll let you know if it 'fixes' the problem.

Nope, still crashes. I used a do..while loop like that mentioned in my last post. Only hope is to catch it in time to manually force quit Safari. Leave it too long and you have to restart your whole mac.

That strikes me as a pretty silly trick for a browser to fall for.

jdbartlett · 03-14-2006, 08:08 AM

One more note, this one relevant to the new update: after installing this update on my powerbook, I found the headphone speaker balance set way over to the left.

fuyutsuki · 03-14-2006, 08:55 AM

Quote:

Originally posted by jdbartlett
One more note, this one relevant to the new update: after installing this update on my powerbook, I found the headphone speaker balance set way over to the left.

I've got the same thing on my PowerBook from updates (or something fairly regular) for years! Left balance ... juh?

Also, Safari has been so unstable for me since 10.4.2 or so that I've taken to using Camino as my maim browser. Crashes on OS X are something you hope not to see and usually only have to once in a blue moon, but Safari's been bombing out on me (in repeatable fashion) once a day or more.

aplnub · 03-14-2006, 09:23 AM

Quote:

Originally posted by fuyutsuki
I've got the same thing on my PowerBook from updates (or something fairly regular) for years! Left balance ... juh?

Also, Safari has been so unstable for me since 10.4.2 or so that I've taken to using Camino as my maim browser. Crashes on OS X are something you hope not to see and usually only have to once in a blue moon, but Safari's been bombing out on me (in repeatable fashion) once a day or more.

I have never had a problem with Safari. Maybe you have some other problem that is causing it?

Robin Hood · 03-14-2006, 10:13 AM

What steps have you taken to troubleshoot your Safari issue? I have never had that problem; Safari is pretty much rock solid for me. Yes, it has quit, but no more than once every couple of months.

jdbartlett · 03-14-2006, 11:29 AM

Quote:

Originally posted by fuyutsuki
I've got the same thing on my PowerBook from updates (or something fairly regular) for years! Left balance ... juh?

Also, Safari has been so unstable for me since 10.4.2 or so that I've taken to using Camino as my maim browser. Crashes on OS X are something you hope not to see and usually only have to once in a blue moon, but Safari's been bombing out on me (in repeatable fashion) once a day or more.

Safari's generally pretty stable for me, I'm using it right now. This is the first time I've noticed anything I've thought an especially big oversight in its development. Camino is an awesome browser, though. I still use Firefox for development because of its DOM inspector.

[alloc init] · 03-14-2006, 07:16 PM

Quote:

Originally posted by jdbartlett
Safari's generally pretty stable for me, I'm using it right now. This is the first time I've noticed anything I've thought an especially big oversight in its development. Camino is an awesome browser, though. I still use Firefox for development because of its DOM inspector.

Turing on Safari's Debug menu might give you what you need. Not a web developer, so I'm only offering this as a suggestion. You can enable the Debug menu by launching Terminal.app and typing:

defaults write com.apple.safari IncludeDebugMenu 1

Ireland · 03-14-2006, 10:41 PM

Adam from the Maccast podcast on today the 14th March episode, said it does not fix 2 other vulnerabilities in iTunes and Quicktime.

They will sort them out soon, hopefully!

Not that don't feel pretty safe already.

jdbartlett · 03-15-2006, 12:45 AM

Quote:

Originally posted by [alloc init]
Turing on Safari's Debug menu might give you what you need. Not a web developer, so I'm only offering this as a suggestion. You can enable the Debug menu by launching Terminal.app and typing:

defaults write com.apple.safari IncludeDebugMenu 1

Wow, that's pretty cool! Thanks!

It doesn't have everything I use in Firefox's DOM inspector, but there are a lot of tools in the Debug winow that Firefox either doesn't have or I haven't found. Great!

jonnyboy · 03-15-2006, 06:32 AM

seems to somehow disable the "bevel" display style in growl

**JeffDM** · 03-15-2006, 08:39 AM

Quote:

Originally posted by aplnub
You both need help...

I think the point needs to be made is that platform zealotry is stupid.

re: Safari issue, if you are running plug-ins, uninstall the ones you added and see if that changes things.

jdbartlett · 03-15-2006, 04:48 PM

Quote:

Originally posted by JeffDM
re: Safari issue, if you are running plug-ins, uninstall the ones you added and see if that changes things.

No plugins. Almost a clean install of OS X (about a month old).

**JeffDM** · 03-15-2006, 05:00 PM

Quote:

Originally posted by jdbartlett
No plugins. Almost a clean install of OS X (about a month old).

Ouch. If you can find a site that it predictably crashes on, that would be a good thing to pester an Apple tech with, maybe at a Genius Bar if you can get to one.

jonnyboy · 03-16-2006, 03:16 AM

Quote:

Originally posted by jonnyboy
seems to somehow disable the "bevel" display style in growl

now seems to be working again!

03-13-2006, 06:12 PM	#1
*AppleInsider* Kasper's Automated Slave Join Date: Nov 1997 Posts: 6,166	Apple Security Update 2006-002 patches Mail, Safari Apple this afternoon released Security Update 2006-002, which is recommended for all users and improves the reliability and security of the following components: apache_mod_php, CoreTypes, LaunchServices, Mail, Safari, rsync. Specifically, the update attempts to repair issues where remote web sites can cause JavaScript to bypass the same-origin policy, double-clicking an attachment in Mail may result in arbitrary or malicious code execution, and where viewing a malicious web site may result in arbitrary or malicious code execution. [ View this article at AppleInsider.com ]

03-13-2006, 06:27 PM	#2
Ireland Registered User Join Date: Feb 2006 Location: Ireland Posts: 8,564	Safe as houses!! I say ha ha to all those PC fools who wont give in and stop playing with dull beige boxes. Here's to the future! Collecting my SSD iMac Fry-die. :D

03-13-2006, 08:22 PM	#3
1337_5L4Xx0R Registered User Join Date: Dec 2002 Location: the misty climes of the west coast Posts: 1,328	You're not familiar with computer security, are you?! And to suggest that "PC fools" buy their "dull beige boxes" to "play" is a bit extreme, no? I use PCs at school to do a bit more than play, and I'm no fool. Mac koolaid drinker zealots give normal mac users a bad name. It's a computing platform, not a religion. stimuli.ca \| freshtunes.ca

03-13-2006, 08:50 PM	#4
aplnub Registered User Join Date: Nov 2004 Location: The kool-aid stand... Posts: 2,189	You both need help... Hardcore.

03-13-2006, 10:04 PM	#5
Ireland Registered User Join Date: Feb 2006 Location: Ireland Posts: 8,564	Safety first! Collecting my SSD iMac Fry-die. :D

03-14-2006, 01:05 AM	#7
jdbartlett Registered User Join Date: Aug 2005 Posts: 87	Does no one else find it disturbing that Safari, unlike most other browsers, falls for the infinite JavaScript loop? Today, I tried setting up a do...while(1==1) loop in JavaScript and loaded the page in Safari. Other browsers (Firefox, etc.) catch on to the fact that the script is taking too long to run and bring up a popup alert to halt it. Safari, though, happily churns away until so many resources are used up the system has to be restarted. I'm just about to install this security update - I'll let you know if it 'fixes' the problem.

03-14-2006, 08:08 AM	#9
jdbartlett Registered User Join Date: Aug 2005 Posts: 87	One more note, this one relevant to the new update: after installing this update on my powerbook, I found the headphone speaker balance set way over to the left.

03-14-2006, 10:13 AM	#12
Robin Hood Registered User Join Date: Sep 2004 Posts: 490	What steps have you taken to troubleshoot your Safari issue? I have never had that problem; Safari is pretty much rock solid for me. Yes, it has quit, but no more than once every couple of months.

03-14-2006, 10:41 PM	#15
Ireland Registered User Join Date: Feb 2006 Location: Ireland Posts: 8,564	Adam from the Maccast podcast on today the 14th March episode, said it does not fix 2 other vulnerabilities in iTunes and Quicktime. They will sort them out soon, hopefully! Not that don't feel pretty safe already. Collecting my SSD iMac Fry-die. :D

03-15-2006, 06:32 AM	#17
jonnyboy Registered User Join Date: Jan 2005 Location: Tokyo, Japan Posts: 477	seems to somehow disable the "bevel" display style in growl

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode