Apple, the computer manufacturer, has announced the release of updates to patch 13 vulnerabilities in the client and server software of the Panther (Mac OS X 10.3.9) and Tiger (10.4.3) operating systems.
Four out of the numerous patches are aimed at fixing vulnerabilities in Apple’s Safari web browser, while two patches address issues related to the open-source web server software Apache. Additionally, several patches target vulnerabilities in other components such as OpenSSL, Open Directory, and system administration access functions.
Security experts indicate that four of the 13 vulnerabilities could allow hackers to install their own code on vulnerable systems. Although Apple’s vulnerabilities are not rated as highly critical as those of Microsoft, any vulnerability that permits access and the installation of dangerous code is considered a serious threat by security providers and analysts. Consequently, Apple’s vulnerabilities are also classified under a high alert level.
Security organizations like Symantec and the SANS Institute have recently warned Mac users that Apple’s operating systems are becoming increasingly susceptible to attacks.
Recently, Apple released the November update titled “Security Update 2005-009” to update both the Panther and Tiger operating systems, with separate updates for client and server software for each OS. Users can download the updates from Apple’s website.