Safari 3.1.1 is now available for both Windows and OS X. According to Apple, this update "includes improvements to stability, compatibility and security."On the security front, this security bulletin outlines the changes. It appears as if a vulnerability existed that could allow malicious sites to spoof URL headers or execute arbitrary code. There are two issues that specifically affect the Windows version of Safari, so users on both platforms should be sure to update.
Just a reminder -- some plugins, like Saft, will stop working after installing the update. Visit the plugin author's homepage to download the newest versions as they become available.
Thanks Ben!
Reader Comments (Page 1 of 2)
4-16-2008 @ 5:44PM
ben said...
no worries, i should be working but dam my mac fetish i cannot stop checking for everything mac.
Reply
4-16-2008 @ 5:51PM
Eric said...
I just updated Safari last night after holding out...
Reply
4-16-2008 @ 5:51PM
Morpheusmorph said...
At the end of the security bulletin it says:
"Credit to Charlie Miller for reporting these issues."
Nice Apple =)
Reply
4-16-2008 @ 5:55PM
Joshua Ochs said...
Apple always credits those who report issues. Which is why you never saw David Maynor on any of those security updates. =p
4-16-2008 @ 5:54PM
Joshua Ochs said...
Just a reminder - those aren't plugins, they're sketchy hacks using completely undefined and unsupported interfaces to screw with things (this includes Saft, Chax, Inquisitor, PithHelmet, etc, etc). They should not be condoned as "plugins", because they're not.
These things are every bit as bad as INITs and extensions of OS 9. For example, how else could Logitech Control Center disable Growl?
http://groups.google.com/group/growldiscuss/msg/a741b6a430b299b7
Reply
4-16-2008 @ 5:59PM
Luigi193 said...
Why the hostilities towards pluggins? I couldn't live without SafariBlock!
4-16-2008 @ 6:08PM
Quine said...
thanks for the link Josh, it was a very interesting read. I share your opinions on these "plugins" and never use them.
4-16-2008 @ 6:11PM
jus10 said...
Well if Apple actually provided a standard extension interface we wouldn't need the input manager route.
I'm not using Safari without Safari Adblock. Its that simple.
4-17-2008 @ 2:10PM
Simon Arch said...
CDEVs and INITs weren't a problem. Sloppy programming and extension overload were the problem. I knew some people who loaded up their Classics with fifty extensions and wondered why their system crashed or ran super-slow. If you kept your System Folder tidy and only kept the extensions you needed you didn't have a problem.
It should also be noted that INITs and CDEVs were the Apple-approved way to extend your system, not unapproved hacks.
4-16-2008 @ 6:00PM
Ian said...
Crap. Does this mean I'll have a fresh round of Apple nagging me to "Update" the non-existant install of Safari on Windows?
Reply
4-16-2008 @ 6:16PM
Mauricio Armada said...
Could this update be the one to fix the problem that allowed the winner of the cansecwest competition to hack into the macbook air in two minutes flat??
Reply
4-16-2008 @ 6:22PM
STL said...
It was the 2nd day of the contest when Charlie Miller directed the MacBook Air to the site he'd spent time setting up prior to the start of the contest.
As mentioned by Morpheusmorph
"At the end of the security bulletin it says:
"Credit to Charlie Miller for reporting these issues."
Nice Apple =)"
Reply
4-16-2008 @ 6:24PM
Goomba said...
But is it snappier?
Reply
4-16-2008 @ 6:26PM
Simon said...
Why the hell do they force a reboot on this. Argh.
Reply
4-16-2008 @ 11:34PM
andrew Harrison said...
i was going to say the same thing. i just rebooted from the quicktime update, first time in about 10 day. it's a PITA.
4-17-2008 @ 3:23PM
Simon Arch said...
Because chances are they've updated WebKit or core or whatever the hell they call it these days. What I want to know is why the reboot had to take two minutes. I'd begun to think the update had hosed my system.
4-16-2008 @ 6:37PM
5cents said...
Did Safari have a lozenge button before? Cos' it doesn't now and I can't remember if it did back then...
Reply
4-16-2008 @ 7:01PM
Blaktornado said...
Inquisitor and Safari Adblock still work :)
Reply
4-16-2008 @ 7:30PM
blinkcowz182 said...
Hopefully 1password doesn't have any issues. I installed the update without thinking about it but haven't restarted yet.
Reply
4-17-2008 @ 12:30PM
Sandy Santra said...
The 1Password developer responded to me in an email:
Thanks for taking the time to contact us.
1Password is ready for the new Safari 3.1.1 release. I'm running Safari 3.1.1 now with the latest 2.6 beta of 1Password, but the current 2.5.12 'official' release of 1Password will also work with the new Safari update.