[eddie5659]

Hiya

Sticking this for a week

This has a few updates, but these are the ones they address:

Impact: Multiple security issues in PHP 4.4
Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.5, Mac OS X Server v10.4.5

Impact: Malicious network servers may cause a denial of service or arbitrary code execution
Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.5, Mac OS X Server v10.4.5

Impact: Directory traversal may occur while unpacking archives with BOM
Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.5, Mac OS X Server v10.4.5

Impact: Malicious local users may create and manipulate files as root
Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.5, Mac OS X Server v10.4.5

Impact: FileVault may permit access to files during when it is first enabled
Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.5, Mac OS X Server v10.4.5

Impact: Remote denial of service against VPN connections
Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.5, Mac OS X Server v10.4.5

Impact: Attackers may cause crashes or arbitrary code execution depending upon the application
Available for: Mac OS X v10.4.5, Mac OS X Server v10.4.5

Impact: Download Validation fails to warn about unsafe file types
Available for: Mac OS X v10.4.5, Mac OS X Server v10.4.5

Impact: Perl programs may fail to drop privileges
Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9

Impact: Authenticated users may cause an rsync server to crash or execute arbitrary code
Available for: Mac OS X v10.4.5, Mac OS X Server v10.4.5

Impact: Viewing a maliciously-crafted web page may result in arbitrary code execution
Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.5, Mac OS X Server v10.4.5

Impact: Viewing a malicious web page may cause arbitrary code execution
Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.5, Mac OS X Server v10.4.5

Impact: Remote web sites can redirect to local resources, allowing JavaScript to execute in the local domain
Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.5, Mac OS X Server v10.4.5

Impact: Viewing a malicious web site may result in arbitrary code execution
Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.5, Mac OS X Server v10.4.5

Impact: Subscriptions to malicious RSS content can lead to cross-site scripting
Available for: Mac OS X v10.4.5, Mac OS X Server v10.4.5





http://docs.info.apple.com/article.html?artnum=303382

Regards

eddie