Security Update 2005/08 - Page 1

ImageIO : Impact: Viewing a maliciously-crafted GIF image may result in arbitrary code execution.
LibSystem : Impact: Insecure file handling may result in local privilege escalation.
Mail : Impact: When using auto-reply rules, Mail.app may expose the contents of encrypted messages ; Impact: Using Kerberos Version 5 for SMTP authentication Mail.app may disclose sensitive information.
QuickDraw : Impact: Viewing a maliciously-crafted PICT image may result in arbitrary code execution.
Ruby : Impact: Ruby applications utilizing the xmlrpc module may be vulnerable to arbitrary code execution. (hé ben punaise !)
SecurityAgent : Impact: A user with physical access to the system may be able to bypass the "Require password to wake this computer from sleep or screen saver" setting.
securityd : Impact: Malicious users may grant themselves rights to manipulate arbitrary files or perform other privileged actions.

Quicktime : Impact: An untrusted applet may gain elevated privileges.
Safari : Impact: Maliciously crafted web archives could potentially allow cross-site scripting. (safari, saymal)


Et MaJ ipod (à peu près tous)

Non aucun maj pour l'iPod, juste ajout du nano dans la liste,

ha si le shuffle, passe de 1.1 a 1.1.2