Apple Releases Safari 8.0.6 With Security Improvements

Apple today released Safari 8.0.6 for OS X Yosemite, bringing new security fixes to the browser. Apple has also released Safari 7.1.6 for Mavericks users and Safari 6.2.6 for Mountain Lion users. According to a security support document, the update addresses several WebKit vulnerabilities that could lead to arbitrary code execution or compromised personal information.

WebKit
Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite v10.10.3
Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution
Description: Multiple memory corruption issues existed in WebKit. These issues were addressed through improved memory handling.

WebKit History
Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite v10.10.3
Impact: Visiting a maliciously crafted website may compromise user information on the filesystem
Description: A state management issue existed in Safari that allowed unprivileged origins to access contents on the filesystem. This issue was addressed through improved state management.

WebKit Page Loading
Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite v10.10.3
Impact: Visiting a malicious website by clicking a link may lead to user interface spoofing
Description: An issue existed in the handling of the rel attribute in anchor elements. Target objects could get unauthorized access to link objects. This issue was addressed through improved link type adherence.

Today's Safari 8.0.6 update is recommended for all OS X Yosemite users and can be downloaded using the software update mechanism in the Mac App Store.

The Safari 8.0.6 update comes almost a month after the launch of Safari 8.0.5, which was bundled into the OS X Yosemite 10.10.3 release on April 8.

Tag: Safari

Top Rated Comments

(View all)

funkymonkeyboy

42 months ago

You need to install safari adblock for that. That'll stop the livejasmin popups.

I highly recommend uBlock

Link to site (https://chrismatic.io/ublock/)

Download Safari Extension (https://chrismatic.io/ublock/ublock-latest.safariextz)

Virustotal Results (https://www.virustotal.com/en/file/bc08c77445c3d234926210a25f0299ab3aa1d171006f8dc167cde9ae430c8f82/analysis/)

Rating: 7 Votes

mentaluproar

42 months ago

does this affect the average user, or only those who work with webkit?

Safari is built around webkit.

Rating: 6 Votes

brdeveloper

42 months ago

What should be updated is the behavior of alert boxes (typically the alert() javascript function) which are modal not only for its parent tab, but also to the whole browser. You can't even close the tab without clicking "ok".

Rating: 5 Votes

nattK

42 months ago

Is it available for those running OS X 10.10.4 as well? Because I'm not seeing it.

Rating: 5 Votes

laurim

42 months ago

Wonder if this will fix Safari from CONSTANTLY choking on "Safari Web Content" and flash. I have turned off practically everything in preferences and it's still happening. I'm ready to jump ship to Firefox or something! I've never had so many issues with Safari and I don't know what upgrade ruined it.

Rating: 5 Votes

ThunderSkunk

42 months ago

Will any of these fix that stupid Call 1.800... pop-ups that happen in Safari

You need to install safari adblock for that. That'll stop the livejasmin popups.

Rating: 5 Votes

chrfr

42 months ago

Which is ludicrous, given the changes slipstreamed into 10.10.3.

There's nothing new about how Apple is handling this update. Safari 6.1.6 is only for 10.8.5 and Safari 7.1.6 is only for 10.9.5. Apple doesn't continue to issue patches for versions of OS X earlier than the most recent minor version 10.8.5, 10.9.5, and 10.10.3, in this case, and never has.

Rating: 5 Votes

tywebb13

42 months ago

Rating: 4 Votes