MacDailyNews - Where Mac news comes first

 MacDailyNews Poll

Deal of the Day

5 Day Most Commented

Opinion Archive

Current Headlines

Latest Joy of Tech

  • Latest Joy of Tech!

MacNN

AppleInsider

Macworld UK

TUAW

MacRumors

Yahoo! Finance AAPL

iTunes Top 10 Albums

Mac OS X Downloads

Sat, Nov 21, 2009 - 07:26 AM EST  —  AAPL: 199.92 (-0.59, -0.29%)  |  NASDAQ: 2146.04 (-10.78, -0.5%)

Apple releases Safari 3.1.1 for Mac and Windows
Wednesday, April 16, 2008 - 05:15 PM EST

Apple today released Safari 3.1.1 which is the fastest and easiest-to-use web browser for Macs and Windows PCs. Safari 3 introduces new features to help you find your way and enjoy your time on the web.

Arrange your tabbed windows with just a drag and drop. Instantly and graphically locate any text on the current web page with the new find command. Easily find webpages you have visited with full history search that remembers the text content of sites.

About the security content of Safari 3.1.1:

• Safari
CVE-ID: CVE-2007-2398
Available for: Windows XP or Vista
Impact: A maliciously crafted website may control the contents of the address bar
Description: A timing issue in Safari 3.1 allows a web page to change the contents of the address bar without loading the contents of the corresponding page. This could be used to spoof the contents of a legitimate site, allowing user credentials or other information to be gathered. This issue was addressed in Safari Beta 3.0.2, but reintroduced in Safari 3.1. This update addresses the issue by restoring the address bar contents if a request for a new web page is terminated. This issue does not affect Mac OS X systems.

• Safari
CVE-ID: CVE-2008-1024
Available for: Windows XP or Vista
Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution
Description: A memory corruption issue exists in Safari's file downloading. By enticing a user to download a file with a maliciously crafted name, an attacker may cause an unexpected application termination or arbitrary code execution. This update addresses the issue through improved handling of file downloads. This issue does not affect Mac OS X systems.

• WebKit
CVE-ID: CVE-2008-1025
Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.2, Mac OS X Server v10.5.2, Windows XP or Vista
Impact: Visiting a malicious website may result in cross-site scripting
Description: An issue exists in WebKi's handling of URLs containing a colon character in the host name. Opening a maliciously crafted URL may lead to a cross-site scripting attack. This update addresses the issue through improved handling of URLs. Credit to Robert Swiecki of Google Information Security Team and David Bloom for reporting this issue.

• WebKit
CVE-ID: CVE-2008-1026
Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.2, Mac OS X Server v10.5.2, Windows XP or Vista
Impact: Viewing a maliciously crafted web page may lead to an unexpected application termination or arbitrary code execution
Description: A heap buffer overflow exists in WebKit's handling of JavaScript regular expressions. The issue may be triggered via JavaScript when processing regular expressions with large, nested repetition counts. This may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue by performing additional validation of JavaScript regular expressions. Credit to Charlie Miller for reporting these issues. MacDailyNews Note: Please see related article: Mac hacked in security contest via undisclosed Safari vulnerability - March 28, 2008

System Requirements:
• Mac OS X 10.4.11
• Mac OS X 10.5.2
• Windows XP
• WIndows Vista

Safari 3.1.1 is available via Software Update and also as a standalone installer

More info and download link here.

MacDailyNews Note: 17,000!

Bookmark and Share

Always -- Free ground shipping with orders over $50 at the Apple Store.

Reader Feedback: = registered.
Unregistered users: Feedback from multiple usernames are subject to deletion. Off-topic and posts from suspected astroturfers will be removed.

Apr 16, 08 - 04:20 pm Comment from: shmack

3.1.1 is far snappier than 3.1

Apr 16, 08 - 04:30 pm Comment from: Kevin

me confused . . . 17,000!


17,000 chairs flying in Redmond??

17,000 photocopiers up and running??

17,000 # of shares i wish i had of AAPL

17,000 # of petition signers to keep XP

17,000 Zunes sold (nah, too high)

Apr 16, 08 - 04:32 pm Comment from: Trippy

Has anyone tried the Acid tests with the new version yet?

Apr 16, 08 - 04:41 pm Comment from: c

Does anyone know if this breaks PithHelmet again, after the work around was applied last time?

Apr 16, 08 - 04:42 pm Comment from: KenC

Does it have the new webkit build that scored 100 on the Acid3 test?

Apr 16, 08 - 04:46 pm Comment from: jesus

still does not play well with my work proxy. Can't access gmail or .mac for some reason.

Does not load all images in a page either...

Apr 16, 08 - 04:48 pm Comment from: Franko

Yessss, It's snappy.
I like snappy.

Apr 16, 08 - 04:55 pm Comment from: Gabriel

@ Kevin: Look at the URL of this page - I think it means 17,000 MDN articles posted.

Apr 16, 08 - 04:57 pm Comment from: ACE

I'm glad this came out, the internet is finally running normal again on flash sites again. I was cursing Leopard because the only machine that ran the internet slow was the Leopard machine. Everything is snappy again

Apr 16, 08 - 04:59 pm Comment from: Kevin

Thanks Gabriel . . .

I looked everywhere but the address bar . . .

though i still wish i had 17,000 shares of AAPL

Apr 16, 08 - 05:00 pm Comment from: Rant

well, it would be good if it worked and didn't crash when going to a webpage. I installed the first beta that came out for Safari for Windows. Worked just fine. I saw that Apple suggested to update Flash and Java (it was on the homepage when I first loaded the first beta). So I updated both, and ever since, Safari crashes on startup or crashes when trying to go to any webpage but google (which I made my homepage). Crashes when coming to macdailynews before the top banner even shows completely. I have not found a way to fix this. I have used Macs for about 15 years, but if this is what other people are experiencing as I am with Safari for Windows, and Apple support not having any way to deal with it, or no one to support or fix these problems because it's a Windows machine, then I can see why some people would not buy Apple (and I own AAPL stock, so this definitely is not good when I can't even run Safari for Windows while I hear nothing from Apple about how it's the best. Well, not in my experience it's not. It won't even run).

Apr 16, 08 - 05:03 pm Comment from: Kit-N

So when can we have ftp upload capabilities through the browser like Explorer offers without having to purchase ftp client software?

Apr 16, 08 - 05:06 pm Comment from: Ben

My bookmarks are now syncing correctly between my iMac and MacBook over .Mac. Thanks Apple!

Apr 16, 08 - 05:09 pm Comment from: MadMac

@Kit-n

Don't you already have this in the Finder?

Apr 16, 08 - 05:13 pm Comment from: Bernd

Pith helmet is still working on my iMacG4 800 has been since 3.0 came out. no new updates have been done on pith-helmet since the update for 3.0 release. I have not updated the intel mac mini yet.

Apr 16, 08 - 05:17 pm Comment from: Bart Beaglehole

Much faster on my G4

Apr 16, 08 - 05:21 pm Comment from: AppleMacMan

THIS IS GOOD...but Firefox 3.0 beta 5 with both the Yummy GrApple theme (https://addons.mozilla.org/en-US/firefox/search?q=yummy&cat=all) and fission which gives Firefox a Safari progess bar is BETTER! (https://addons.mozilla.org/en-US/firefox/addon/1951)

Before you say otherwise and insert foot in mouth, at least take a look at these two extensions above and try them out in Firefox 3 beta 5. Trust me these little touches make a big difference. 

Apr 16, 08 - 05:27 pm Comment from: JAYGEE

The update logo bounded with this update, but I haven't downloaded it yet.

Apr 16, 08 - 05:30 pm Comment from: Jubei

@MadMac

Err I do this on the finder also. Why should it be done on a browser? Thats just plain silly or better yet the MS way of doing things.

Apr 16, 08 - 05:33 pm Comment from: Woody

Cool, AppleMacMan. I can get Firefox 3.0 Beta 5, add two hacks, and then it's better than Safari. I'd say it's crack-a-lackin!

Apr 16, 08 - 05:34 pm Comment from: Tiger Leopard

Congrats MDN.....17,000!

Apr 16, 08 - 05:43 pm Comment from: AJKphotography

Safari 3.1.1 only scores 75% on the acid3 test.

Apr 16, 08 - 05:57 pm Comment from: Jamie

Kit-N, have you tried the free CyberDuck?

Or if you aren't too strapped for cash, you could purchase a copy of the excellent Transmit for $29.95.

Apr 16, 08 - 06:03 pm Comment from: Question

Is it as insecure as the Mac version?

Apr 16, 08 - 06:04 pm Comment from: nekogami13

Did they fix cookie handling so it's not all or nothing?
Did they add real ad blocking?

No?
Then who the hell cares.

Apr 16, 08 - 06:06 pm Comment from: Bud Why+Zer

@AJKphotography

Did you notice that Safari gets a 74 on the Acid3 test the first time it is loaded, and then, upon reloading, a 75?

When webkit was announced to have a 100 on the test, I download the webkit nightly build and found that it got a 99 the first try and then 100 upon reloading.

I wonder if there is some weird bug there? Also wondering when the most recent webkit will get into the Mac?

Apr 16, 08 - 06:22 pm Comment from: AJKphotography

@Bud Why+Zer

Yes I noticed that. It's something I always found when I kept updating WebKit to try the test.

It's a known issue.

Apr 16, 08 - 07:10 pm Comment from: Ampar

Happy xvMM Day.

Apr 16, 08 - 07:37 pm Comment from: ken1w

Well, I don't notice anything different. But that's a good thing...

Apr 16, 08 - 08:57 pm Comment from: jonahan

Woah woah woah .. a restart for a web browser? Come on Apple stop tying safari into the OS.

Apr 16, 08 - 09:50 pm Comment from: Jake

What a bunch of WHINERS on this thread!!
Safari is SIMPLY the best browser out there.
GO APPLE!

Apr 16, 08 - 10:46 pm Comment from: ichi

Acid3

94/100

Apr 17, 08 - 12:26 am Comment from: Jim - TIV

Just did a side by side test of Safari and Firefox beta running MLB TV (Padres vs Rockies tonight)

I ran both the browsers on each of the three settings allowed, but at the same time side by side. With pleanty of bandwidth to spare. In other words, I watched two video streams of the same exact live event, on three different settings. (400, 800, 1.2)

Safari's video quality was OBVIOUSLY better. Not just a little better, but far and above better. The firefox video was pixilated and the colors blured.

Safari won this one hands down.

Apr 17, 08 - 06:20 am Comment from: JDavidson

"Safari's video quality was OBVIOUSLY better. Not just a little better, but far and above better. The firefox video was pixilated and the colors blured."

I've noticed that YouTube video is better with Safari. The frame rate seems higher. Firefox looks slightly jerky. Even the latest build. I find it nearly unwatchable, if you are used to Safari.
(My computer is a 1.5MHz G4)

Apr 17, 08 - 07:55 am Comment from: Metryq

"We can pay you 2000 now plus 15 when he reach Alderaan."

Apr 17, 08 - 11:02 am Comment from: anaknipedro

I'm surprised they didn't put in the latest nightly builds. Those guys are doing excellent work on Webkit.

Apr 17, 08 - 11:21 am Comment from: eWorldian

well, it's only about .1 percent snappier... but still the snappiest

Apr 17, 08 - 12:05 pm Comment from: Cubert

@JDavidson,

"(My computer is a 1.5MHz G4)"

So, you have a fourth generation Apple ][?

wink

Apr 21, 08 - 11:51 am Comment from: Kit-N

Jamie,

"...have you tried the free CyberDuck?

Or if you aren't too strapped for cash, you could purchase a copy of the excellent Transmit for $29.95."

I already have Transmit. I like it, but my concern is for my clients uploading files to my ftp site. If they have Explorer, it's a simple, no brainer.

I just don't have the time to educate recent Mac converts on the variables of ftp client software.

I've had several say they absolutely will not use free software (gun shy from M$ experiences?) and if they can't access the ftp though the browser to upload, then they'll just send a disk. What a pain in the ass for me! Now I have to wait for the USPS to deliver to my business and hope the disk isn't damaged or lost.

Browser compatibility for both upload and download would be much nicer.

Apr 21, 08 - 02:04 pm Comment from: Rudge

I still haven't been able to download the Tiger version of Safari yet. It just holds there for hours after I hit the download button. I've tried the reload button, going back a few screens and then coming back, Quitting Safari and going back, accessing the download site through the main Apple page, through the support web site and even through VersionTracker, all with the same negative results. Has any other Tiger user experienced the same problems?

Apr 21, 08 - 07:31 pm Comment from: Kit-N

"…Has any other Tiger user experienced the same problems?"

Mine updated without any problems via Software Update.

Try software update with a different browser open. I was using FireFox at the time I updated.

Reader feedback page 1 of 1 pages:

Always -- Free ground shipping with orders over $50 at the Apple Store.

Add Your Feedback:

Register or Login

Name:

Email: (optional)

Emoticons | Allowed HTML Tags

Remember my info   Notify me of follow-up comments?

Please enter the "MDN Magic Word" you see in the image below: