<http://schema.org/articleBody>
"&amp;lt;vc&amp;gt;&amp;lt;strong&amp;gt;Security Update 2005-009&amp;lt;/strong&amp;gt;\r\n\r\nApple on Tuesday released &amp;lt;a href=\\\"http://www.info.apple.com/kbnum/n61798\\\"&amp;gt;Security Update 2005-009&amp;lt;/a&amp;gt;, which delivers a number of security enhancements and is recommended for all Macintosh users.\r\n\r\nAccording to the release notes, the update addresses issues with apache_mod_ssl, CoreFoundation, CoreTypes, curl, iodbcadmin, OpenSSL, Safari, sudo, and syslog.\r\n\r\nMost notably, the update rectifies issues where: &amp;lt;ul&amp;gt;&amp;lt;li&amp;gt;local users may gain elevated privileges;&amp;lt;/li&amp;gt;&amp;lt;li&amp;gt; maliciously-crafted URLs may result in crashes or arbitrary code execution;&amp;lt;/li&amp;gt;&amp;lt;li&amp;gt;applications using OpenSSL may be forced to use the weaker SSLv2 protocol;&amp;lt;/li&amp;gt;&amp;lt;li&amp;gt;local users on Open Directory master servers may gain elevated privileges;&amp;lt;/li&amp;gt;&amp;lt;li&amp;gt;Safari may download files outside of the designated download directory;&amp;lt;/li&amp;gt;&amp;lt;li&amp;gt;JavaScript dialog boxes in Safari may be misleading;&amp;lt;/li&amp;gt;&amp;lt;li&amp;gt;visiting malicious web sites with WebKit-based applications may lead to arbitrary code execution;&amp;lt;/li&amp;gt;&amp;lt;li&amp;gt;local users may be able to gain elevated privileges in certain sudo configurations;&amp;lt;/li&amp;gt;&amp;lt;li&amp;gt;system log entries may be forged;&amp;lt;/li&amp;gt;&amp;lt;/ul&amp;gt;\r\n\r\nSecurity Update 2005-009 also includes enhancements to Safari to improve handling of credit card security codes (Mac OS X v10.3.9 and Mac OS X v10.4.3), CoreTypes to improve handling of Terminal files (Mac OS X v10.4.3), QuickDraw Manager to improve rendering of PICT files (Mac OS X v10.3.9), documentation regarding OpenSSH and PAM (Mac OS X v10.4.3), and ServerMigration to remove unneeded privileges.\r\n\r\n&amp;lt;strong&amp;gt;Aperture arrives on doorsteps&amp;lt;/strong&amp;gt;\r\n\r\nAlso on Tuesday, several readers wrote in to share their excitement at receiving the first shipping copies of Aperture, Apple\\'s new \\\"everything you need for after the shoot\\\" post-production tool for professional (or amateur) photographers.\r\n\r\n&amp;lt;div align=\\\"center\\\"&amp;gt;&amp;lt;a href=\\\"http://www.amazon.com/exec/obidos/ASIN/B0007LW1RC/reality?creative=327641&amp;amp;camp=14573&amp;amp;link_code=as1\\\"&amp;gt;&amp;lt;img src=\\\"http://images.appleinsider.com/images/aperture_box.gif\\\" width=\\\"167\\\" height=\\\"200\\\" alt=\\\"Aperture Retail Box\\\" border=\\\"0\\\" /&amp;gt;&amp;lt;/a&amp;gt;&amp;lt;/div&amp;gt;\r\n\r\nIt was previously reported that Aperture was due to ship on November 30th (tomorrow) after &amp;lt;a href=\\\"http://www.amazon.com/exec/obidos/ASIN/B0007LW1RC/reality?creative=327641&amp;amp;camp=14573&amp;amp;link_code=as1\\\"&amp;gt;Amazon.com&amp;lt;/a&amp;gt; published the release date on its website. The online retailer is offering an instant &amp;lt;a href=\\\"http://www.amazon.com/exec/obidos/ASIN/B0007LW1RC/reality?creative=327641&amp;amp;camp=14573&amp;amp;link_code=as1\\\"&amp;gt;$50 markdown&amp;lt;/a&amp;gt; on the software, bringing the cost down to $449. "^^<http://www.w3.org/2001/XMLSchema#string>
<http://appleinsider.com/articles/05/11/29/apple_releases_security_update_2005_009_aperture_arrives>