OS X 10.8.5, which went out as a free update on Thursday, brings a handful of bug fixes and security patches. After nearly three months of beta testing with developers, Apple has rolled out another update to its desktop operating system. Follow Gregg on Twitter at or subscribe to Gregg's RSS feed. Gregg Keizer covers Microsoft, security issues, Apple, Web browsers and general technology breaking news for Computerworld. OS X 10.8.5, likely the last Mountain Lion update to offer more than security fixes, patched 30 vulnerabilities in the soon-to-be-superseded Mac operating system.
The updates can also be downloaded manually from Apple's support site.Īpple has not yet revealed a release date for OS X Mavericks, the successor to Mountain Lion, but it will probably ship in the second half of next month. OS X 10.8.5 and Security Update 2013-003 - the latter targets OS X Snow Leopard and OS X Lion, which at this point receive only security fixes - can be retrieved by selecting "Software Update." from the Apple menu, or by opening the Mac App Store application and clicking the Update icon at the top right. Apple had patched the same bugs in the newer Safari 6 last year. The sudo flaw had been identified in OS X in March, but attracted more attention two weeks ago after Metasploit, the popular open-source penetration toolkit, added a module that made it easy to exploit the bug.Īlso published Thursday was an update to Safari 5, the Apple browser for Snow Leopard the separate update patched a pair of vulnerabilities, including one revealed at the September 2012 Mobile Pwn2Own hacking contest by a Dutch team who used it to exploit iOS. By resetting the system clock, hackers who have already managed to grab limited control of a Mac can sidestep the need for the root-access password. One of the patches was for a several-months-old vulnerability in the Unix component known as "sudo," which lets users gain super-user or "root" rights. The fixes quashed bugs in several open-source components integrated with Mountain Lion, such as Apache (4 patches) Bind (5), the most widely-used DNS (domain name system) software for routing Internet requests to the correct addresses OpenSSL (3) and PHP (4), the server-side scripting language.Īlso included in the update were patches to stymie attacks using rogue PDF documents, one to fix a problem with Macs coming out of sleep to a locked state, and another to plug a hole in QuickTime, Apple's often-buggy media playing software. arbitrary code execution," which is Apple's way of saying that they're critical. On the security side, 10.8.5 patched 30 vulnerabilities, including 7 labeled with the line "may lead to.
0 kommentar(er)
