Apple’s Latest OS Fixes

The latest version of Apple’s operating system includes the usual security updates, networking improvements and bug fixes. It may well be the last update before the company releases its next big OS.

One security fix in Mac OS X 10.4.7 addresses information
disclosure in the AppleShare File Protocol (AFP).

AFP could have allowed
unauthorized users to get search results for files and folders for which the
user should not have access to. According to Apple’s advisory, “this could
result in information disclosure if the names themselves are sensitive

ImageIO, which handles images in Mac OS X, is also updated due to a potential
arbitrary code execution risk that could occur if a user encounters a
maliciously crafted TIFF image.

This is not the first time that Apple has had
to update ImageIO to protect against a potential image-based attack.

Apple’s last major security update, Security Update 2006-003, also fixed an issue with

The 10.4.7 release also addresses two issues in open source
Applications that are included in the operating system.

ClamAV, which is
an antivirus scanner, is updated to protect against a potential stack-based
buffer overflow vulnerability. And OpenLDAP, which provides LDAP user authentication, is now protected against a potential denial-of-service

On the networking side, 10.4.7 includes a long list of bug fixes and a few
feature improvements.

OS X now has the ability to respond to Layer 2
Multicast ARPs .

ARP (Address Resolution Protocol) enables the translation of Ethernet MAC addresses from IP addresses. Apple’s Virtual Private Network (VPN) client is now more compatible with Cisco’s VPN via its new support for group on Cisco VPN servers.

Syncing is also improved in the 10.4.7 release.

According to Apple’s
release notes, numerous issues related to the syncing of tasks, bookmarks
and contacts with Apple’s .Mac online network have been corrected. The release
also includes better support for Motorola cell phones that sync via
Bluetooth as well as iSync.

In the update, Apple has also made strides to improve the compatibility of Mac OS X with
Microsoft’s Virtual PC application.

“The installer application will no
longer unexpectedly quit when performing an uninstallation,” Apple’s release
notes state about Virtual PC running on 10.4.7.

Another quirky bug fixed in the new release involved the Help links within
Apple’s Mail client.

Mac OS X 10.4.7 ” Updates Help links within Mail alert messages so you are
linked to useful content instead of a ‘No pages with your search words were
found’ page.”

The 10.4.7 release could well be the last release in the 10.4.x Tiger

The next major version of the operating system, code-name Leopard, is due at the company’s Worldwide
Developers Conference (WWDC) in August.

News Around the Web