Apple Safari 5.0.1 has been released, alongside Safari 4.1.1 fixing last weeks auto-fill vulnerability.
Safaro 5.0.1 also enables extensions for the browser, with Apple also releasing a gallery with some of the early Safari 5 extensions.
Apple has also released a security bulletin explaining the vulnerabilities that have been fixed.
Safari 5.0.1 can be downloaded from the Apple website, while extensions can be downloaded from the new Safari Extensions Gallery.
Details have emerged of a new high risk vulnerability discovered in Apple’s Safari web browser.
The exploit could allow a malicious user to execute arbitrary code on a remote system and is rated highly critical by Secunia.
“The vulnerability is caused due to an error in the handling of parent windows and can result in a function call using an invalid pointer. This can be exploited to execute arbitrary code when a user e.g. visits a specially crafted web page and closes opened pop-up windows” says the Secunia security advisory.
The vulnerability affects both Mac OS X and Windows versions of the browser. Apple is yet to release an update to close the flaw.
Apple has released a new version of Safari, taking the browser to version 4.0.5.
According to Apple, the release fixes several issues:
This update is recommended for all Safari users and includes improvements to performance, stability, and security including:
Mac and Windows users can download the update from the Safari website, or it will be pushed out via Apple’s Software Update tool.
Apple have pushed out an update for Safari users, taking the browser to version 4.04.
The update improves JavaScript and History performance, while also fixing 6 security holes.
This update is recommended for all Safari users and includes improvements to performance, stability, and security including:
For detailed information on the security content of this update, please visit this site: http://support.apple.com/kb/HT1222.
The update will pushed out to existing Safari 4 users, or can be downloaded from Apple’s Safari website.
Apple has released Safari 4.0.2 for both Mac and Windows, which is available through either software update or through the Safari website.
The update addresses two security vulnerabilities and improves the stability of the Nitro JavaScript engine used by Safari and are described below:
The update is recommended for all Safari users.
Apple has released a press release stating that Safari 4 has been downloaded over 11 million times in just 3 days.
Breaking these down, there were 6 million downloads for Windows and 5 million downloads for Mac OS X.
To compare, Firefox 3 was downloaded 20 million times in 7 days, so the numbers from Apple seem quite reasonable.
Apple claims that Safari 4 is “nearly eight times faster than IE 8 and more than four times faster than Firefox 3. Safari quickly loads HTML web pages more than three times faster than IE 8 and three times faster than Firefox 3”.
Safari 4 can be downloaded for Windows and Mac from the Apple Safari website.
At today’s World Wide Developer Conference (WWDC), Apple announced the immediate availability of Safari 4 final for both Mac and PC.
Safari 4 contains over 150 new features, including a screen reader, basic HTML5 support, and a much improved JavaScript engine. A full list of new features can be found online.
The latest release is now the first browser not in beta to score a full 100% in Acid3 tests, which tests a browsers support for JavaScript and CSS3.
Safari 4 can be downloaded from the Apple Safari website.