OS X Mavericks, Apple’s latest Mac operating system, has gotten its first major update. Granted, they’re mostly non-security specific, but it comes bundled with the Safari Web browser 7.01 update, which does address some vulnerabilities.
The accompanying Safari browser update, which includes support for older versions of Mac OS X, can be applied either with the Mavericks update or separately. The Safari patch addresses an issue with the credit-card autofill feature, which may allow user credentials to be disclosed to an unexpected site via autofill.
Specifically, Safari may have autofilled user names and passwords into a subframe from a different domain than the main frame. This issue was addressed through improved origin tracking.
The patch also addresses a data leakage flaw and eight vulnerabilities that "may lead to an unexpected application termination or arbitrary code execution." Apple didn’t disclose additional details.
The update also repairs unresponsive forms on sites such as FedEx.com, makes the streamlines the VoiceOver feature with Facebook and keeps Safari Sidebar links updated.
Read more: http://www.infosecurity-magazine.com/view/36196/apple-give-os-x-mavericks-its-first-update/
The accompanying Safari browser update, which includes support for older versions of Mac OS X, can be applied either with the Mavericks update or separately. The Safari patch addresses an issue with the credit-card autofill feature, which may allow user credentials to be disclosed to an unexpected site via autofill.
Specifically, Safari may have autofilled user names and passwords into a subframe from a different domain than the main frame. This issue was addressed through improved origin tracking.
The patch also addresses a data leakage flaw and eight vulnerabilities that "may lead to an unexpected application termination or arbitrary code execution." Apple didn’t disclose additional details.
The update also repairs unresponsive forms on sites such as FedEx.com, makes the streamlines the VoiceOver feature with Facebook and keeps Safari Sidebar links updated.
Read more: http://www.infosecurity-magazine.com/view/36196/apple-give-os-x-mavericks-its-first-update/
