What Is It?

The Mac OS X operating system, including the AirPort wireless adapter software, Safari Web browser, OpenSSL, gzip, Perl, PHP, and other software components that ship with Mac OS X have multiple vulnerabilities, some of which could allow a remote attacker to execute his own code on your computer or to hide their true identity. This could allow the attacker to take over your computer and use it as if it were his, or to steal private information from you.

Of the affected components, everyone should be concerned about Mac OS X operating system, Safari Web browser, OpenSSL, and gzip.

What Should You Do?

Apple Computer, Inc. has released Apple Security Update 2006-007 to correct these problems. You should download and install the updates, using the directions posted at http://docs.info.apple.com/article.html?artnum=106704.

References

• http://docs.info.apple.com/article.html?artnum=106704 contains step by step instructions from Apple Computer, Inc., for updating your system.
• http://www.apple.com/support/downloads/ is the Apple Downloads page. Use this to download updates if you need to update many Macs. Important: If you use this page, note that Apple Security Update 2006-007 is composed of six packages. Be sure that you get all the updates that apply to you.
• http://docs.info.apple.com/article.html?artnum=304829 contains details of the security fixes included in Apple Security Update 2006-007. This article is technical in nature; you need not read it, unless you are insatiably curious, as am I.
• http://www.us-cert.gov/cas/alerts/SA06-333A.html is US-CERT Cyber Security Alert SA06-333A, "Apple Releases Security Update to Address Multiple Vulnerabilities," which is a layman oriented discussion of Apple Security Update 2006-007.
• http://www.us-cert.gov/cas/techalerts/TA06-333A.html is US-CERT Technical Cyber Security Alert TA06-333A, "Apple Releases Security Update to Address Multiple Vulnerabilities," which is a technical discussion of Apple Security Update 2006-007.

David Gray, MBA, Chief Wizard WizardWrx, formerly P6 Consulting
	V: +1 (817) 812-3041 TZ: USA Central, GMT -6 E: dagray@wizardwrx.com W: www.wizardwrx.com	5006 Cloyce Court North Richland Hills, TX 76180-6944 USA
Tell me what you need, and I’ll conjure it.