Apple security updates (25 Jan 2005 to 21 Dec 2007)

This document outlines security updates for Apple products released from 25 Jan 2005 to 21 Dec 2007.

For the protection of our customers, Apple does not disclose, discuss or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To find out more about Apple Product Security, see the Apple Product Security website.

Important: This document outlines security updates for Apple products released from 25 Jan 2005 to 21 Dec 2007 only. For information about later security updates, see this article.

Obtaining Mac OS X

Information about obtaining Mac OS X (client) can be found here. Information about obtaining Mac OS X Server can be found here.

Software updates for Mac OS X are available via:

• Software Update preferences

• Apple Downloads

Apple Product Security PGP Key

For information, see How to use the Apple Product Security PGP Key.

Security Updates (25 Jan 2005 to 21 Dec 2007)

Name and information link — Released for — Release date

• Security Update 2007-009 v1.1 — Mac OS X 10.4.11, Mac OS X 10.5.1 — 21 Dec 2007

• Safari 3 Beta 3.0.4 Security Update v1.1 — Windows Vista/XP — 21 Dec 2007

• Safari 3 Beta Update 3.0.4 Security Update — Windows Vista/XP — 17 Dec 2007

• Security Update 2007-009 — Mac OS X 10.4.11, Mac OS X 10.5.1 — 17 Dec 2007

• Java Release 6 for Mac OS X 10.4 — Mac OS X 10.4.10, Mac OS X 10.4.11 —13 Dec 2007

• QuickTime 7.3.1 — Mac OS X v10.3.9, Mac OS X v10.4.9 or later, Windows Vista/XP — 13 Dec 2007

• Mac OS X 10.5.1 — Mac OS X 10.5, Mac OS X Server version 10.5 — 15 Nov 2007

• Mac OS X 10.4.11 and Security Update 2007-008 — Mac OS X 10.3.9 (for Security Update 2007-008), Mac OS X 10.4 or later (for Mac OS X 10.4.11 Update) — 14 Nov 2007

• Safari 3 Beta Update 3.0.4 — Windows XP/Vista — 14 Nov 2007

• iPhone 1.1.2 and iPod touch 1.1.2 — iPhone 1.0 to 1.1.1, iPod touch 1.1 and 1.1.1 — 12 Nov 2007

• QuickTime 7.3 — Mac OS X v10.3.9, Mac OS X v10.4.9 or later, Mac OS X v10.5, Windows Vista, XP SP2 — 05 Nov 2007

• Xcode Tools 2.5 — Mac OS X 10.4.x, Mac OS X 10.5 — 30 Oct 2007

• Security Update for QuickTime 7.2 for Windows — QuickTime 7.2 for Windows — 03 Oct 2007

• iPhone 1.1.1 Update — iPhone — 27 Sept 2007

• iTunes 7.4 — Mac OS X 10.3.9, Mac OS X 10.4.7 or later, Windows XP/Vista — 05 Sept 2007

• Firmware Update 7.2.1 for AirPort Extreme Base Station with 802.11n — AirPort Extreme (802.11n) Base Station — 29 Aug 2007

• Security Update 2007-007 — Mac OS X 10.3.9, Mac OS X 10.4.10 — 31 July 2007

• iPhone v1.0.1 Update — iPhone v1.0 — 31 July 2007

• Safari 3 Beta Update 3.0.3 — Mac OS X v10.4.9 or later, Windows XP/Vista — 31 July 2007

• QuickTime 7.2 — Mac OS X 10.3.9, Mac OS X 10.4.9 or later, Windows XP, Windows Vista — 11 July 2007

• Security Update 2007-006 — Mac OS X 10.3.9, Mac OS X 10.4.9 or later — 22 June 2007

• Mac OS X 10.4.10 — Mac OS X 10.4 or later — 20 June 2007

• Apple TV 1.1 — Apple TV — 20 June 2007

• Xserve Lights-Out Management Firmware Update 1.0 — Intel-based Xserve — 31 May 2007

• Security Update (QuickTime 7.1.6) — QuickTime 7.1.6 on Mac OS X and Windows XP/2000 — 29 May 2007

• Security Update 2007-005 — Mac OS X 10.3.9, Mac OS X 10.4.9 — 24 May 2007

• Darwin Streaming Server 5.5.5 — Open source — 10 May 2007

• Security Update 2007-004 v1.1 — Mac OS X 10.3.9, Mac OS X 10.4.9 — 01 May 2007

• QuickTime 7.1.6 — Mac OS X 10.3.9, Mac OS X 10.4.9, Windows XP/2000 — 01 May 2007

• Security Update 2007-004 — Mac OS X 10.3.9, Mac OS X 10.4.9 — 19 Apr 2007

• Firmware Update 7.1 for AirPort Extreme Base Station with 802.11n — AirPort Extreme (802.11n) Base Station — 09 Apr 2007

• Mac OS X 10.4.9 and Security Update 2007-003 — Mac OS X 10.3.9, Mac OS X 10.4 or later — 13 Mar 2007

• iPhoto 6.0.6 — Mac OS X 10.3.9, Mac OS X 10.4.3 or later — 13 Mar 2007

• AirPort Extreme Update 2007-002 — Mac OS X 10.4.8 — 08 Mar 2007

• QuickTime 7.1.5 — Mac OS X 10.3.9 or later, Windows Vista/XP/2000 — 05 Mar 2007

• Security Update 2007-002 — Mac OS X 10.3.9, Mac OS X 10.4.8 — 13 Feb 2007

• AirPort Extreme Update 2007-001- Mac OS X 10.4.8 — 25 Jan 2007

• Security Update 2007-001 — QuickTime 7.1.3 — 23 Jan 2007

• Security Update 2006-008 — Mac OS X 10.4.8 — 19 Dec 2006

• Security Update 2006-007 — Mac OS X 10.3.9, Mac OS X 10.4.8 — 28 Nov 2006

• Apple Remote Desktop 3.1 — Apple Remote Desktop 3.0 — 16 Nov 2006

• Xcode Tools 2.4.1 — Mac OS X 10.4 or later — 31 Oct 2006

• Mac OS X 10.4.8 and Security Update 2006-006 — Mac OS X 10.3.9, Mac OS X 10.4 or later — 29 Sep 2006

• AirPort Update 2006-001 and Security Update 2006-005 — Mac OS X 10.3.9, Mac OS X 10.4.7 — 21 Sep 2006

• QuickTime 7.1.3 — Mac OS X 10.3.9 or later, Windows XP/2000 — 12 Sep 2006

• Xsan Filesystem 1.4 — Mac OS X 10.4.7 — 17 Aug 2006

• Security Update 2006-004 for Mac Pro — Mac Pro with Mac OS X 10.4.7 — 09 Aug 2006

• Security Update 2006-004 — Mac OS X 10.3.9, Mac OS X 10.4.7 — 01 Aug 2006

• iTunes 6.0.5 - Mac OS X 10.2.8 or later, Windows XP/2000 — 29 June 2006

• Mac OS X 10.4.7 Update — Mac OS X 10.4 to 10.4.6 — 27 June 2006

• Xcode Tools 2.3 — Mac OS X 10.4 or later — 23 May 2006

• Security Update 2006-003 — Mac OS X 10.3.9, Mac OS X 10.4.6 — 11 May 2006

• QuickTime 7.1 — Mac OS X 10.3.9, Mac OS X 10.4 or later, Windows XP/2000 — 11 May 2006

• J2SE 5.0 Release 4 — Mac OS X 10.4.5 — 17 Apr 2006

• Mac OS X 10.4.6 Update — Mac OS X 10.4 to 10.4.5 — 03 Apr 2006

• Security Update 2006-002 — Mac OS X 10.3.9 Mac OS X 10.4.5 — 13 Mar 2006

• Security Update 2006-001 — Mac OS X 10.3.9 Mac OS X 10.4.5 — 01 Mar 2006

• Mac OS X 10.4.5 Update — Mac OS X 10.4 to 10.4.4 — 14 Feb 2006

• QuickTime 7.0.4 — Mac OS X 10.3.9 or later Windows XP/2000 — 10 Jan 2006

• AirPort Firmware Update 5.7 AirPort Firmware Update 6.3 — AirPort Express AirPort Extreme — 03 Jan 2006

• Security Update 2005-009 — Mac OS X 10.4.3 Mac OS X 10.3.9 — 29 Nov 2005

• J2SE 5.0 Release 3 — Mac OS X 10.4.2 — 15 Nov 2005

• iTunes 6 for Windows — Microsoft Windows XP/2000 — 15 Nov 2005

• Mac OS X 10.4.3 Update — Mac OS X 10.4 to 10.4.2 — 31 Oct 2005

• QuickTime 7.0.3 — Mac OS X 10.3.9 to 10.4.2 — 12 Oct 2005

• Security Update 2005-008 — Mac OS X 10.4.2, Mac OS X 10.3.9 — 22 Sept 2005

• Java Security Update — Mac OS X 10.3.9 — 13 Sept 2005

• Java 1.3.1 and 1.4.2 Release 2 — Mac OS X 10.4.2 — 13 Sept 2005

• Security Update 2005-007 — Mac OS X 10.3.9, Mac OS X 10.4.2 — 15 Aug 2005

• AirPort 4.2 update — Mac OS X 10.3.3 to 10.3.9, Mac OS X 10.4.2 — 14 July 2005

• Mac OS X 10.4.2 Update — Mac OS X 10.4.1, Mac OS X 10.4 — 12 July 2005

• Security Update 2005-006 — Mac OS X 10.4.1 , Mac OS X Server 10.4.1 Mac OS X 10.3.9, Mac OS X Server 10.3.9 — 08 June 2005

• QuickTime 7.0.1 — QuickTime 7 — 31 May 2005

• Keynote 2.0.2 update — Keynote 2.0, Keynote 2.0.1 — 25 May 2005

• Mac OS X 10.4.1 Update — Mac OS X 10.4, Mac OS X 10.4 Server — 16 May 2005 (client), 19 May 2005 (server)

• iTunes 4.8 — Mac OS X 10.2.8 or later Windows XP, Windows 2000 — 09 May 2005

• Security Update 2005-005 — Mac OS X 10.3.9 Mac OS X Server 10.3.9 — 03 May 2005

• Security Update 2005-004 — iSync 1.5 — 19 Apr 2005

• Mac OS X 10.3.9 Update — Mac OS X 10.3 to 10.3.8 — 15 Apr 2005

• Security Update 2005-003 — Mac OS X 10.3.8, Mac OS X Server 10.3.8 — 21 Mar 2005

• Security Update 2005-002 — Java 1.4.2 — 22 Feb 2005

• Mac OS X 10.3.8 Update — Mac OS X 10.3 to 10.3.7 — 09 Feb 2005

• Security Update 2005-001 — Mac OS X 10.3.7, Mac OS X Server 10.3.7 Mac OS X 10.2.8, Mac OS X Server 10.2.8 — 25 Jan 2005

Security updates are usually incorporated into later software updates

Security updates released for Mac OS X are usually incorporated into the next Mac OS X Software Update. For example, Security Update 2005-001 can be installed on Mac OS X 10.3.7. However, the Mac OS X 10.3.8 Update included all of the fixes contained in Security Update 2005-001, so computers using Mac OS X 10.3.8 or later will not see Security Update 2005-001 in Software Update preferences.

Security updates are also available for software released independently from Mac OS X. For example, Security Update 2005-002 is only available for systems containing the vulnerable version of Java 1.4.2. Software updates are packaged in a manner to keep systems secure. Security updates are only offered to systems that need the update, and not to later versions that have incorporated the security update. For more information, see the "Some, but not all, updates are displayed" section of this document.