Apple has released update 10.7.3 for Mac OS X 10.7 Lion.
This update plugs up more than 50 vulnerabilities, ranging from Apache vulnerabilities to offering protection against certificates issued to DigiCert Malaysia.
Security Update 2012-001 10.6.8 is also available for Mac OS X Snow Leopard.Two certificate authorities in the list of trusted root certificates have independently issued intermediate certificates to DigiCert Malaysia. DigiCert Malaysia has issued certificates with weak keys that it is unable to revoke. An attacker with a privileged network position could intercept user credentials or other sensitive information intended for a site with a certificate issued by DigiCert Malaysia. This issue is addressed by configuring default system trust settings so that DigiCert Malaysia’s certificates are not trusted.
Users can download the updates via Software Update, or from Apple’s Downloads page.
Source: ZDNet.
No comments:
Post a Comment