Apple on Tuesday released Security Update 2010-001, a collection of fixes for users of Mac OS X Leopard (10.5) and Snow Leopard (10.6).
As with most security releases, the latest Mac OS X update fixes issues within the core system and does not add new features to built-in applications or fix application bugs.
Security Update 2010-001 fixes an issue in Mac OS X's CoreAudio where a maliciously crafted MP4 audio file could be used as a way to execute code or terminate an application on the user's computer. Image RAW's handling of DNG files has also been updated to avoid what Apple calls "arbitrary code execution."
The Flash Player plug-in has been updated to version 10.0.42 fixing multiple vulnerabilities, including code execution on the user's computer. Adobe issued an update for this in early December, but Apple has included it with this release.
Additional changes in other system level components like ImageIO, CUPS and OpenSSL provide further security for Mac OS X users.
Security Update 2010-001 is available through the software update mechanism in Mac OS X.
In addition to updating Mac OS X, Apple also released an update for users of its Boot Camp software. According to notes provided with the update, Boot Camp 3.1 "adds support for Microsoft Windows 7 (Home Premium, Professional, and Ultimate)."
The update also fixes a couple of bugs with the trackpad, turns off the digital audio LED when not in use, and adds support for wireless keyboards and the Apple Magic Mouse.
Boot Camp allows users to create a partition on a Mac and install Windows. Unlike virtualization apps like Parallels or VMware Fusion, Boot Camp users must restart their computers to use Windows.
Boot Camp 3.1 can be downloaded from Apple's support Web site.