Apple releases Snow Leopard update with 56 security fixes

The security fixes, which are also available as Security Update 2011-001, include flaws in products ranging from the AirPort server to X11 FreeType.

The vulnerability in the AirPort server, when connected to WiFi, could allow a hacker to enable a system reset. In addition, multiple vulnerabilities in FreeType could lead to arbitrary code execution when processing a maliciously crafted font, Apple explained.

The Snow Leopard update also offers fixes for Windows file sharing and the Back to My Mac remote connectivity system, affecting encrypted connections between computers using IPSec, and updates for third-party software, such as Apache and PHP.

Apple fixed flaws in image and font rending systems, as well as QuickTime media viewing. The flaws might have enabled downloaded files to inject code and shut down systems.

The update also upgrades Safari to version 5.0.4, which fixes over 60 vulnerabilities in the web browser, noted Rich Baldry, senior product manager with responsibility for Sophos's Web Protection and Mac products, in a blog.

In addition to security fixes, the Snow Leopard update improves the reliability of Back to My Mac remote connectivity system, resolves an issue when transferring files to certain SMB servers, and addresses various Mac App Store issues.

While the update includes various improvements to Snow Leopard, apparently it also introduced a problem with MacBook Air. Some owners of the new 13-inch MacBook Air are experiencing crashes when they attempt to run iTunes 10.2.1, according to a thread on the Apple discussion forum.

“Every time I run iTunes 10.2.1 I get as far as the window displaying correctly then within 20 secs the machine freezes and is unresponsive to anything other than a forced shutdown via the power button”, commented one user.

While Apple did not respond to the issue, 9to5 Mac offered a step-by-step fix.

What’s hot on Infosecurity Magazine?