Safari 4.0.2 Includes Security Updates and Stability Fixes

Apple has released Safari 4.0.2 for Tiger, Leopard, and Windows. This latest version of the browser addresses two security issues found in the underlying WebKit framework.

Safari

CVE-2009-1724: Corrects a weakness that could result in a cross-site scripting attack if you visit a maliciously crafted web site.

CVE-2009-1725: Could cause Safari to unexpectedly terminate, or execute arbitrary code, if you visit a maliciously crafted web site.

Safari 4.0.2 also offers improved stability, with its new Nitro JavaScript engine. The Nitro engine is one of the keys to the speedier performance you should notice from Safari when visiting web sites that use JavaScript.

Because of the security concerns, Safari 4.0.2 is a recommended update for all Safari 4.x users.

You can download the Safari 4.0.2 update directly from Apple’s web site, or by using the Software Update feature in the Apple menu.