November 25, 2008

Apple updates Safari for second time in two weeks

While the earlier update added anti-phishing protection and patched 11 security vulnerabilities, this minor upgrade was for unspecified 'stability improvements'

For the second time in less than two weeks, Apple updated its Safari Web browser by issuing version 3.2.1 Monday.

Unlike the Nov. 13 update, which added anti-phishing protection and patched 11 security vulnerabilities -- more than two-thirds of them critical -- today's minor upgrade was for unspecified "stability improvements," according to a terse notice on the Apple Web site.

[ Apple's browser has had a string of security woes this year: "Apple's Safari browser likened to malware,"  "Apple dismisses Safari download issue," and "Safari flaw worse than first thought." ]

Although the notice included a link to the "Apple security update" page -- where the company normally provides pointers to security advisories associated with such updates -- there was no listing there for Safari 3.2.1.

A security researcher who in the past has taken Apple to task for its unpredictable patching schedule did so again Monday. "It would be too much of an understatement to say 'more of the same'," said Andrew Storms , director of security operations at vendor nCircle Network Security, in an instant message. "But in doing so, it also represents the lethargic approach we've come to expect with Apple updates.

"If only they would put some of that creative spirit we love about Apple into their security development life-cycle," Storms added.

Although Apple's scanty information about Safari 3.2.1 made it impossible to know for certain, some people speculated on the company's support forum that the update was aimed at fixing problems users reported with Safari 3.2 since its release. Among the complaints: Frequent crashes, particularly when the new anti-phishing feature was enabled.

One thread on the Safari support forum titled "Safari 3.2 is Unusable -- Spontaneously Quits," has collected more than 100 messages and been viewed nearly 4,000 times since it was opened on Nov. 13.

There were few reports early Monday evening about whether the day's update had stopped browser crashes. One user, at least, said it had not. "[Safari] 3.2.1 still crashed for me," reported a user identified as Raymond Smith in a message posted around 7 p.m. EST.

Other users running PithHelmet -- a third-party ad-blocking plug-in -- also reported that the 3.2 update frequently crashed.

Apple updated both the Mac OS X and Windows versions of Safari to 3.2.1.

Mac OS X users can download and install 3.2.1 using Safari's built-in update feature, or on Windows, by running the separate Apple Software Update utility.

Computerworld is an InfoWorld affiliate.

Close

On Twitter now

Applications

Powered by Twitter

On Twitter now

additional resources
White Paper - How to Improve Delivery of Advanced Web Applications

White Paper

Virtual Workforce: The Key to Expanding The Business While Cutting Costs

Get the independent advice and expertise you need to support a virtual workforce.

Go inside:
The three-step approach to making a virtual workforce a reality.
The four flavors of client virtualization technologies.
The three key initiatives that solve IT challenges.
Download now »
White Paper: Successfully Secure Your Wireless LAN With Wi-Fi firewalls.

White Paper

Addressing Linux Threats Leveraging Fewer Resources

The increase in Linux popularity has increased the frequency and sophistication of malware attacks. Read this 2 page white paper now to learn how you can protect your Linux environment with real-time protection that is certified by all major Linux vendors.

Download now »
White Paper - The 2009 Handbook of Application Delivery

White Paper

The 2009 Handbook of Application Delivery

Ensuring acceptable application delivery will become even more difficult over the next few years. As a result, IT organizations need to ensure that the approach that they take to resolving the current application delivery challenges can scale to support the emerging challenges. This handbook elaborates on the key tasks associated with planning, optimization, management and control and provides decision criteria to help IT organizations choose appropriate solutions.

Download now »
White Paper - Is Your Backup System Outdated?

White Paper

Mid-range Storage Considerations

A common misconception is that mid-range storage requirements are dramatically different than that of a larger enterprise. Mid-range storage users may require less capacity, but they have similar functionality and management requirements. This ESG paper examines mid-range storage needs and reviews a new solution that adjusts size while retaining value, performance and functionality.

Download now »

Sign up to receive Applications Resource Alerts

Subscribe to the Today's Headlines: First Look Newsletter

Find out what will be news for the day, with our first-thing-in-the-morning briefing.

©1994-2010 Infoworld, Inc.