Apple patches 36 bugs in Snow Leopard, preps OS for Lion upgrade
July's release of Lion means security support for Leopard will end soon
Computerworld - Apple on Thursday released the final feature update for Snow Leopard as it prepared users' Macs for the upcoming Lion upgrade set to ship next month.
Included in the update to Mac OS X 10.6.7 were patches for 36 vulnerabilities in Snow Leopard and Snow Leopard Server.
Apple also issued a security-only update for Mac OS X 10.5, better known as Leopard, that fixed 13 flaws in the 2007 operating system.
But most Mac users will be interested in the update because it's a prerequisite for Lion, the $30 Mac OS X upgrade Apple plans to sell through the Mac App Store in July.
At the top of the list of changes in 10.6.8, Apple put "Enhancements to the Mac App Store to get your Mac ready to upgrade to Mac OS X Lion."
Apple did not elaborate on what had changed in Mac App Store.
Because Lion will be sold solely through Apple's e-mart and weigh in at 4GB, some Mac users have complained that their Internet connection won't allow them to download the upgrade.
Other improvements and non-security-related bug fixes ranged from additional VPN reliability to a stability fix for Preview. Apple also shipped new signatures to detect and delete variants of the MacDefender "scareware" -- worthless programs that pose as antivirus software and transmit persistent alerts to try to frighten people into paying up to $80 to get rid of phony bugs.
Apple has delivered 12 different MacDefender signatures since it acknowledged the scareware problem in late May.
Mac OS X 10.6.8 will be the last non-security update to Snow Leopard. Once a new edition of Mac OS X appears, Apple issues only vulnerability patches for the previous version.
Tucked into Mac OS X 10.6.8 were patches for 36 security flaws, 29 of them tagged with Apple's traditional phrase "arbitrary code execution," the company's way of saying the flaws are critical. Apple does not assign severity rankings to vulnerabilities.
According to Apple's advisory, one of the bugs can be exploited by "drive-by" attacks that execute as soon as a victim with an unpatched Mac OS X visits a malicious website. Eight of the vulnerabilities could be triggered simply by viewing a malformed file -- a Microsoft Office document in one case, a malicious image in most of the others -- that could be used to inject attack code.
Five of the image-related flaws were in QuickTime, Apple's media player.
Other components patched Thursday ranged from ATS (Apple Type Services), Mac OS X's font renderer to MySQL, the open-source database bundled with the server versions of Leopard and Snow Leopard. Oracle, which acquired the relational database three years ago, patched the MySQL bugs in February.
Apple also reported a bug in the App Store that in some circumstances could disclose the Apple ID used to sign in to the download site. Interestingly, the patch applied to both Snow Leopard -- which already supports the Mac App Store -- as well as Leopard, which does not.
Yesterday's patch count was significantly lower than the last major Mac security update of March, when Apple fixed 55 flaws.
Although Apple will continue to provide security-only updates to Snow Leopard once Lion launches, the clock will start ticking for Leopard, which will be shuffled off the support list this year, if past practice is any guide.
In 2009, for example, Apple shipped the final security update for Mac OS X 10.4, a.k.a. Tiger, just a month after it released Snow Leopard.
Mac OS X 10.6.8 and the separate 2011-004 security update for Leopard can be downloaded at the Apple site or installed using the operating system's built-in update service.
The update downloads weigh in between 256MB and 474MB for the client versions of Leopard and Snow Leopard.
Gregg Keizer covers Microsoft, security issues, Apple, Web browsers and general technology breaking news for Computerworld. Follow Gregg on Twitter at @gkeizer, or subscribe to Gregg's RSS feed . His email address is firstname.lastname@example.org.
- Hands on: Apple's Mac Pro is the fastest Mac ever
- Apple CFO to retire in September after he cashes in $53M stock award
- Apple's CarPlay to spark mobile apps war in your car
- Apple retires Snow Leopard from support, leaves 1 in 5 Macs vulnerable to attacks
- Apple patches critical 'gotofail' bug with Mavericks update
- Why Apple needs a $700 MacBook Air
- Apple takes top spot in brand value computation
- Apple gets a patent for health-monitoring ear buds
- Apple shifts to hardware-first TV strategy with revamped set-top box
- iTunes is almost as big a biz as OEM Windows
Read more about Mac OS X in Computerworld's Mac OS X Topic Center.
- 15 Non-Certified IT Skills Growing in Demand
- How 19 Tech Titans Target Healthcare
- Twitter Suffering From Growing Pains (and Facebook Comparisons)
- Agile Comes to Data Integration
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- Pay-as-you-Grow Data Protection: IBM Tivoli's Full-featured Data Protection Suite for Small to Medium Businesses IBM Tivoli Storage Manager Suite for Unified Recovery gives small and medium businesses the opportunity to start out with only the individual solutions...
- Streamline Data Protection with IBM Tivoli Storage Manager Operations Center IBM Tivoli Storage Manager (TSM) has been an industry-standard data protection solution for two decades. But, where most competitors focus exclusively on Backup...
- Simplify and Consolidate Data Protection for Better Business Results Learn about IBM® Tivoli® Storage Manager Operations Center, which provides advanced visualization, built-in analytics and integrated workflow automation features that leapfrog traditional backup...
- HP HAVEn: See the big picture in Big Data HP HAVEn is the industry's first comprehensive, scalable, open, and secure platform for Big Data. Enterprises are drowning in a sea of data...
- Meg Whitman presents Unlocking IT with Big Data During this Web Event you will hear Meg Whitman, President and CEO, HP discuss HAVEn - the #1 Big Data platform, as well...
- The New Way to Work Knowledge Vault This Knowledge Vault focuses on how, in today's increasingly virtual world, it's more important than ever to engage deeply with employees, suppliers, partners,... All Mac OS X White Papers | Webcasts