The Safari for Windows release has led to a number of criticisms of Apple and of the browser, most notably related to security. Security experts and bug hunters had a field day with the launch, causing Apple to issue a security update for Safari soon thereafter. And now, hot on the heels of the 10.4.10 update, we've got yet another Safari update, as well as a Security Update for OS X.
First up is Safari. The 3.0.2 update fixes a number of issues for Mac and Windows users, and also includes some security fixes. On the Mac side, the update fixes some crash issues with parental controls and Google Reader, fixes some HTML issues in Mail, and deals with assorted iChat and Dashboard problems.
The Windows version received significantly more tweaks. A good number of crash bugs, caused by everything from RSS to authentication were fixed. Apple also fixed problems with text disappearing depending on where Safari was installed or how many fonts the user had installed.
Last but not least are the security updates. Two Safari-specific security holes were patched; the first involved a website being able to modify the address bar, and the second fix was for a cross-site scripting hole in JavaScript. The Safari update also includes two fixes for WebKit along with all of the other feature and security updates, so it's probably a good idea to grab it. Oh, and you'll need to actually download it, since it's not in Software Update.
If you're not using Safari 3 but still want to be secure, Apple is taking care of you with Security Update 2007-006. As mentioned, this update fixes two security holes in WebKit and WebCore that are also fixed by Safari 3.0.2. The WebKit issue allows hackers to crash Safari or execute code by corrupting memory, and the WebCore issue allows cross-site scripting via HTTP. Since these two security holes are also fixed in the Safari update, you don't need to grab this if you already have Safari 3.0.2, but it's in Software Update if you're still using Safari 2 or just want to feel twice as secure.
Source |
