Apple Releases Mac OS X 10.3.5, Security Update 2004-08-09 -- Late Monday, Apple released via Software Update Mac OS X 10.3.5 and Security Update 2004-08-09. Bearing in mind that we heard about these updates right before putting the issue to bed and so can confirm nothing, here are the improvements that seem most relevant to us (the first link below offers more complete release notes). Mac OS X 10.3.5 offers updated Mail and Image Capture applications, improved compatibility for third-party applications, improved font management, additional FireWire and USB device compatibility, and better Bluetooth compatibility for the Apple Wireless Keyboard and Mouse and Bluetooth cell phones. People working in mixed platform scenarios should appreciate enhanced support for NTFS-formatted volumes, and those in highly networked environments should see improved reliability for user logins and mounting of home directories. Mac OS X 10.3.5 rolls in all previous standalone security updates and also includes fixes for a problem that could cause Safari to resubmit form data when using the forward/back buttons and the TCP/IP-based denial-of-service "Rose Attack." The 10.3.5 update varies in size depending on what you need to download; Software Update told me it was 22.9 MB. A stand-alone version that updates 10.3.4 to 10.3.5 and a combined version that updates any version of 10.3 to 10.3.5 should be available from the Apple Downloads page shortly. As always, be sure to back up before installing such a major update.
Security Update 2004-08-09 updates Mac OS X's code for handling graphics in the PNG (Portable Network Graphics) format to work around a problem in which malicious PNG image could cause application crashes and execute arbitrary code. Security Update 2004-08-09 is included in Mac OS X 10.3.5, so you don't need to download it if you're updating to Mac OS X 10.3.5. [ACE]