Apple + Security & Privacy

Apple has released an update for the Safari web browser, which improves the stability of the Nitro JavaScript engine, and also contains two security fixes. These security fixes patch one issue with “WebKit’s handling of the parent and top objects” which “may result in a cross-site scripting attack when visiting a
maliciously crafted website,” and a “memory corruption issue in WebKit’s handling of numeric character references.” This is a 40 MB update, available from Software Update or from the Safari download page. More information about this security update is available here.