Security Update 2006-002 Fixes the Fixes -- Apple today released Security Update 2006-002 that, along with closing a few new holes, addresses issues created by Security Update 2006-001 (which is included as well, just to ensure that everyone has it). New improvements include a fix for a buffer overflow exploit that could affect a user who double-clicked an attachment within Mail and an update to CoreTypes that closes a JavaScript-related hole. Also included in the security update are additional checks to prevent Safari from automatically opening a file that appears to be safe but isn't, the elimination of bogus warnings about Word documents and files with custom icons as being unsafe, a correction in apache_mod_php that prevented SquirrelMail from functioning, and a fix to rsync that re-enables the "--delete" command line option. Security Update 2006-002 is available via Software Update and as standalone downloads for Mac OS X 10.4.5 Client and Server (PowerPC), Mac OS X 10.4.5 Client (Intel), Mac OS X 10.3.9 (Client and Server) in sizes ranging from 13 MB to 39 MB. [ACE]

<http://docs.info.apple.com/article.html? artnum=303453>
<http://www.apple.com/support/downloads/ securityupdate2006002macosx1045ppc.html>
<http://www.apple.com/support/downloads/ securityupdate2006002macosx1045clientintel.html>
<http://www.apple.com/support/downloads/ securityupdate20060021039client.html>
<http://www.apple.com/support/downloads/ securityupdate20060021039server.html>