Security Issue With Mac Widgets

With Apple’s release of Mac OS X Tiger 10.4 users discovered the first security issue that effected the Apple portion of the operating system directly. The security issue has to do with the ability to automatically install Widgets when a user accessed a Web site.

Apple fixed the problem with Mac OS X Tiger 10.4.1 so now if you download a Widget you will be asked if you want to download the Widget. The idea being that you won’t be installing Widgets unknowingly in the background. If you are running Tiger OS X make sure you have the latest version which is 10.4.2. The 10.4.2 Update delivers overall improved reliability for Mac OS X 10.4 and is recommended for all users. It includes fixes for:

1. File sharing using AFP and SMB/CIFS network file services
2. Single sign-on authentication and reliable access to LDAP and Active Directory servers
3. Autologin for managed user accounts
4. AirPort and wireless access
5. Core Graphics, Core Audio, Core Image, including updated ATI and NVIDIA graphics drivers
6. Finder updates including finding on Kind and using Slideshow
7. Synchronization with .Mac
8. Managing Dashboard widgets and for Address Book, Flight Tracker, Phone Book, and World Clock widgets
9. Address Book, Automator, iCal, iChat, Font Book, Mail, Preview, Safari and Stickies applications
10. Creating and burning disk images using Disk Utility
11. Installation reliability
12. Compatibility with third-party applications and devices

For detailed information on this update, click here. For detailed information on Security Updates, please click here.