Apple Releases Safari Beta 3.0.2, Security Update 2007-006

MacRumors · Jun 22, 2007, 05:59 PM

Apple has released an update to its Safari browser, Beta 3.0.2 for Mac and PC via its website and Software Update.

Quote:

Changes in Safari 3.0.2 for Windows beta:
- Latest security updates
- Improved stability
- Fixes for text display, non-English systems, and start-up times

Changes in Safari 3.0.2 for Mac OS X beta:
-Latest security updates
-Improved stability
-Improved WebKit support for Mail, iChat and Dashboard

Also released today is Security Update 2007-006 for Mac OS 10.3.9 and Mac OS 10.4.9 and later. The update addresses two vulnerabilities in WebKit, one of which could lead to an unexpected application termination or arbitrary code execution. More information on the update can be found here.

Though still in beta, the initial release of Safari 3.0 had seen 8 vulnerabilities discovered within 24 hours of its release, some of which were cross-platform. Apple quickly released Safari 3.0.1 for Windows which addressed some of the Windows-specific vulnerabilities discovered.

EricNau · Jun 22, 2007, 06:04 PM

The security update isn't showing up for me.

longofest · Jun 22, 2007, 06:06 PM

Quote:

Originally Posted by EricNau

The security update isn't showing up for me.

I haven't seen the security update in Software Update yet, but its on Apple's website.

Peace · Jun 22, 2007, 06:06 PM

I think people with 10.4.10 don't need the security update.I tried to install it and it wouldn't let me.

Luis · Jun 22, 2007, 06:07 PM

Me neither... I guess it needs some time, it always reaches some people first.

NewSc2 · Jun 22, 2007, 06:07 PM

Quote:

Originally Posted by Macrumors

Though still in beta, the initial release of Safari 3.0 had seen 8 vulnerabilities discovered within 24 hours of its release, some of which were cross-platform. Apple quickly released Safari 3.0.1 for Windows which addressed some of the Windows-specific vulnerabilities discovered.

So some of the Apple vulnerabilities haven't been fixed yet? I haven't downloaded Safari 3 myself (quite fond of Firefox) but I thought I'd check it out.

TheAnswer · 06:27 PM

I actually think that you won't get both updates if you are running the beta...since the security update patches WebKit, maybe it's part of the Safari beta update? And those not running the beta will get the security update?

roland.g · Jun 22, 2007, 06:09 PM

3.0.2 still didn't fix the fact that the white headlines within the red bar on the MR front page news items are wayyyy tooo booold. As is everything else. It is so thick and blurry. So much for text display fixes.

Doctor Q · Jun 22, 2007, 06:11 PM

WebCore

Visiting a malicious website may allow cross-site requests

An HTTP injection issue exists in XMLHttpRequest when serializing headers into an HTTP request. By enticing a user to visit a maliciously crafted web page, an attacker could conduct cross-site scripting attacks. This update addresses the issue by performing additional validation of header parameters. Credit to Richard Moore of Westpoint Ltd. for reporting this issue.

WebKit

Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution

An invalid type conversion when rendering frame sets could lead to memory corruption. Visiting a maliciously crafted web page may lead to an unexpected application termination or arbitrary code execution. Credit to Rhys Kidd of Westnet for reporting this issue.

Dr.Gargoyle · Jun 22, 2007, 06:11 PM

Hmmm, looks like we will go to 3.0.97 rather fast.

longofest · Jun 22, 2007, 06:12 PM

Quote:

Originally Posted by NewSc2

So some of the Apple vulnerabilities haven't been fixed yet? I haven't downloaded Safari 3 myself (quite fond of Firefox) but I thought I'd check it out.

yeah... 3.0.1 only addressed the Windows-specific vulnerabilities. Some folks took that to mean that the vulnerabilities that were found WERE only windows-specific, but that's not the case. Apple just took a little while to fix the rest of them. Even now, I'm not sure whether all of them have been patched, as a few more have been trickling out, although they haven't been as severe, hence why we haven't been covering them.

flopticalcube · Jun 22, 2007, 06:19 PM

Safari on OSX requires a restart. Not under Windows. Seems to be working OK.

Eraserhead · Jun 22, 2007, 06:20 PM

Quote:

Originally Posted by Peace

I think people with 10.4.10 don't need the security update.I tried to install it and it wouldn't let me.

I suspect they are only for Safari 2.0.x users, as some vulnerabilities affected that version too, which is why they aren't in software update.

Loge · Jun 22, 2007, 06:21 PM

Quote:

Originally Posted by Peace

I think people with 10.4.10 don't need the security update.I tried to install it and it wouldn't let me.

I'm on 10.4.10 and it did install for me.

Eraserhead · Jun 22, 2007, 06:22 PM

Quote:

Originally Posted by Loge

I'm on 10.4.10 and it did install for me.

Safari 2.0.x user?

IEatApples · Jun 22, 2007, 06:25 PM

It fixed my widgets!

Nermal · Jun 22, 2007, 06:25 PM

I have 10.4.10 and Safari 2.0.4 and it's prompting me to install the update.

Snowy_River · Jun 22, 2007, 06:25 PM

Still hasn't fixed the proxy issue on my work machine.

Running it on my PB, but can't run it on my WinXP work machine because of proxy issues.

MacTheSpoon · Jun 22, 2007, 06:28 PM

Quote:

Originally Posted by roland.g

3.0.2 still didn't fix the fact that the white headlines within the red bar on the MR front page news items are wayyyy tooo booold. As is everything else. It is so thick and blurry. So much for text display fixes.

Crap, that's too bad... hope they fix that in the next update...

Chrysaor · Jun 22, 2007, 06:28 PM

Is it themeable with Shapeshifter yet?

Cameront9 · Jun 22, 2007, 06:29 PM

Installed with no issues on my Windows machine at work. I'm not trying the beta on my Mac, though...

Can I just say that Safari on windows seems Snappier after the update?

Nermal · Jun 22, 2007, 06:29 PM

Quote:

Originally Posted by Snowy_River

Still hasn't fixed the proxy issue on my work machine.

Running it on my PB, but can't run it on my WinXP work machine because of proxy issues.

Ugh, I was hoping to try it at work on Monday but it sounds like it's still not going to work

Cameront9 · Jun 22, 2007, 06:31 PM

Quote:

Originally Posted by roland.g

3.0.2 still didn't fix the fact that the white headlines within the red bar on the MR front page news items are wayyyy tooo booold. As is everything else. It is so thick and blurry. So much for text display fixes.

Not having that issue here on my Windows machine. Have you tried turning the font rending to light under the preferences? I'm finding it looks EXACTLY like Safari for OS X and that the reason you think it looks blurry is psychological, since it looks so different from Windows font smoothing.

MacSA · Jun 22, 2007, 06:32 PM

Safari for Windows: Is the 3.0.2 update only available through software update? Or does the link to the Apple website download 3.0.2 as a complete package? I still haven't been able to get it to work on XP SP2 so i'm not sure if this latest download/update is worth bothering with.

bilbo--baggins · Jun 22, 2007, 06:35 PM

I'd be interested to hear if Safari 3.0.2 fixes the bugs that the previous beta caused in Mail.

Jun 22, 2007, 06:06 PM	#4
Peace macrumors Demi-God Join Date: Apr 2005 Location: On top of the Storm Peaks waiting for the Time-Lost Proto Drake	I think people with 10.4.10 don't need the security update.I tried to install it and it wouldn't let me. Attached Thumbnails

Jun 22, 2007, 06:07 PM	#5
Luis macrumors 65816 Join Date: Jul 2006 Location: Costa Rica	Me neither... I guess it needs some time, it always reaches some people first. __________________ From ashes fire shall be woken, a light from the shadows shall spring, renewed shall be blade that was broken, the crownless again shall be King.

Jun 22, 2007, 06:09 PM	#7
TheAnswer macrumors 68020 Join Date: Jan 2002 Location: Orange County, CA	I actually think that you won't get both updates if you are running the beta...since the security update patches WebKit, maybe it's part of the Safari beta update? And those not running the beta will get the security update? Last edited by TheAnswer : Jun 22, 2007 at 06:27 PM.

Jun 22, 2007, 06:09 PM	#8
roland.g macrumors 68040 Join Date: Apr 2005 Location: One mile up and soaring	3.0.2 still didn't fix the fact that the white headlines within the red bar on the MR front page news items are wayyyy tooo booold. As is everything else. It is so thick and blurry. So much for text display fixes. __________________ I know this because Tyler knows this. You are not a beautiful snowflake. You are the same decaying matter as everything else.

Jun 22, 2007, 06:11 PM	#9
Doctor Q macrumors god Join Date: Sep 2002 Location: at the table with countless relatives	Security Update 2007-006 details WebCore Visiting a malicious website may allow cross-site requests An HTTP injection issue exists in XMLHttpRequest when serializing headers into an HTTP request. By enticing a user to visit a maliciously crafted web page, an attacker could conduct cross-site scripting attacks. This update addresses the issue by performing additional validation of header parameters. Credit to Richard Moore of Westpoint Ltd. for reporting this issue. WebKit Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution An invalid type conversion when rendering frame sets could lead to memory corruption. Visiting a maliciously crafted web page may lead to an unexpected application termination or arbitrary code execution. Credit to Rhys Kidd of Westnet for reporting this issue. __________________ "You've just been abducted, of course you need crepes!" -- Walter Bishop

Jun 22, 2007, 06:04 PM	#2
EricNau macrumors Demi-God Join Date: Apr 2005 Location: Sacramento, CA	The security update isn't showing up for me.

Jun 22, 2007, 06:11 PM	#10
Dr.Gargoyle macrumors 65816 Join Date: Oct 2004 Location: lat: 55.7222°N, long: 13.1971°E	Hmmm, looks like we will go to 3.0.97 rather fast. __________________ Don't insult the freaks.

Jun 22, 2007, 06:19 PM	#12
flopticalcube macrumors 601 Join Date: Sep 2006	Safari on OSX requires a restart. Not under Windows. Seems to be working OK. __________________

Jun 22, 2007, 06:25 PM	#16
IEatApples macrumors Demi-God Join Date: Jan 2004 Location: Northern Hemisphere (Hamar, Norway)	It fixed my widgets! __________________ You think that's air you're breathing now? It's Mac OS Mac Pro 2,8GHz Quad, GTX 285, 6GB RAM, 2,25 TB HDD, Dell 2408WFP MySpace

Jun 22, 2007, 06:25 PM	#17
Nermal Demi-God (Moderator) Join Date: Dec 2002 Location: Whakatane, New Zealand	I have 10.4.10 and Safari 2.0.4 and it's prompting me to install the update.

Jun 22, 2007, 06:25 PM	#18
Snowy_River macrumors 68000 Join Date: Jul 2002 Location: Corvallis, OR	Still hasn't fixed the proxy issue on my work machine. Running it on my PB, but can't run it on my WinXP work machine because of proxy issues. __________________ -Snowy Golden Naga: Indonesian Kung-Fu Geoffrey H Wathen Photography

Jun 22, 2007, 06:28 PM	#20
Chrysaor macrumors regular Join Date: May 2006	Is it themeable with Shapeshifter yet?

Jun 22, 2007, 06:29 PM	#21
Cameront9 macrumors 6502a Join Date: Aug 2006	Installed with no issues on my Windows machine at work. I'm not trying the beta on my Mac, though... Can I just say that Safari on windows seems Snappier after the update?

Jun 22, 2007, 06:32 PM	#24
MacSA macrumors 68000 Join Date: Jun 2003 Location: UK	Safari for Windows: Is the 3.0.2 update only available through software update? Or does the link to the Apple website download 3.0.2 as a complete package? I still haven't been able to get it to work on XP SP2 so i'm not sure if this latest download/update is worth bothering with.

Jun 22, 2007, 06:35 PM	#25
bilbo--baggins macrumors 6502 Join Date: Jan 2006 Location: UK	I'd be interested to hear if Safari 3.0.2 fixes the bugs that the previous beta caused in Mail.

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode