The latest version of Apple’s operating system includes the usual security updates, networking improvements and bug fixes. It may well be the last update before the company releases its next big OS.
One security fix in Mac OS X 10.4.7 addresses information
disclosure in the AppleShare File Protocol (AFP).
AFP could have allowed
unauthorized users to get search results for files and folders for which the
user should not have access to. According to Apple’s advisory, “this could
result in information disclosure if the names themselves are sensitive
information.”
ImageIO, which handles images in Mac OS X, is also updated due to a potential
arbitrary code execution risk that could occur if a user encounters a
maliciously crafted TIFF image.
This is not the first time that Apple has had
to update ImageIO to protect against a potential image-based attack.
Apple’s last major security update, Security Update 2006-003, also fixed an issue with
ImageIO.
The 10.4.7 release also addresses two issues in open source
Applications that are included in the operating system.
ClamAV, which is OS X now has the ability to respond to Layer 2 ARP (Address Resolution Protocol) enables the translation of Ethernet MAC addresses from IP addresses. Apple’s Virtual Private Network (VPN) According to Apple’s “The installer application will no The next major version of the operating system, code-name Leopard, is due at the company’s Worldwide
an antivirus scanner, is updated to protect against a potential stack-based
buffer overflow vulnerability. And OpenLDAP, which provides LDAP
vulnerability.
On the networking side, 10.4.7 includes a long list of bug fixes and a few
feature improvements.
Multicast ARPs
Syncing is also improved in the 10.4.7 release.
release notes, numerous issues related to the syncing of tasks, bookmarks
and contacts with Apple’s .Mac online network have been corrected. The release
also includes better support for Motorola cell phones that sync via
Bluetooth as well as iSync.
In the update, Apple has also made strides to improve the compatibility of Mac OS X with
Microsoft’s Virtual PC application.
longer unexpectedly quit when performing an uninstallation,” Apple’s release
notes state about Virtual PC running on 10.4.7.
Another quirky bug fixed in the new release involved the Help links within
Apple’s Mail client.
Mac OS X 10.4.7 ” Updates Help links within Mail alert messages so you are
linked to useful content instead of a ‘No pages with your search words were
found’ page.”
The 10.4.7 release could well be the last release in the 10.4.x Tiger
lineup.
Developers Conference (WWDC) in August.