Apple releases security, Java updates
Apple on Thursday released the first security update of 2009, the aptly named Security Update 2009-001. The update, which is available in versions for Leopard, Leopard Server, Tiger for Intel Macs, Tiger for PowerPC-based Macs, Tiger Server for PowerPC-based Macs, and Server Universal addresses a number of flaws in OS X. Security Update 2009-001 is recommended for all users and is available via Apple's site or Software Update.
Among the fixes in Security Update 2009-001 are a patch for the Safari RSS vulnerability demonstrated by developer Brian Mastenbrook last January. Also fixed were a denial of service vulnerability in AFP server, a flaw in CoreText that could allow maliciously crafted Unicode content to execute arbitrary code, and a security hole that could let other local users access a user’s Downloads folder, and several other vulnerabilities
