Security Update: Apple Xcode Tools 3.1
WHAT'S HAPPENING:
Apple has released security update “APPLE-SA-2008-07-11 Xcode tools 3.1” to address 2 vulnerabilities which affect CoreImage Examples and WebKit. Exploitation of the most serious of these vulnerabilities could allow an attacker to execute arbitrary code.
For a complete description of the security enhancement, refer to Apple's “About the security content of Xcode tools 3.1.”
AFFECTED SYSTEMS:
- Mac OS X v10.5.x
The Xcode developer tools package is included with every Mac, but not installed automatically by default.
WHAT YOU NEED TO DO TO PROTECT YOUR SYSTEM:
- Do NOT take action if you have a Computer Support Coordinator (CSC); your CSC will apply the update for you or assist in instructing you.
- If you do not have a CSC, Xcode tools 3.1 may be obtained from the Downloads section of the Apple Developer Connection Member site at http://developer.apple.com/.
ADDITIONAL INFORMATION:
Enterprise Information Security
http://security.ucsf.edu
UCSF Mac OS X Interest Group
http://www.ucsf.edu/macosx
Apple Security Updates
http://support.apple.com/kb/HT1222
