CERT lists vulnerabilities addressed in 10.4.9/SecUpd003

Yes, this was poorly written. It would be better off rewritten to say more simply that CERT has issued advisories for things that are already patched.

This is the way CERT works though, in that they do not disclose to the public until after the vendor has a patch. So, a patch comes out, a CERT advisory is published a day or three later. This is so people are encouraged to update and if they do not, they are informed as to what they are vulnerable to.

maybe its me and greenline, but this post reads like its trying to say the vulnerabilities still exist AFTER the patch.

maybe im just tired though

Greenline: The flaws noted were present in previous versions of Mac OS X (10.4.8, or 10.3.9 w/o the security update). The updates provide patches to correct those flaws. You should install them.

Is this a reason to install the update or to not install the update? How can something have flaws and patches for the flaws in the same update?