Apple slides security fixes into Safari update

Some of the flaws in Safari could allow for remote code execution

Apple has packed a major security update into its Safari browser in the shadow of Monday's product rollout at the company's Worldwide Developers Conference in San Francisco.

The updated version of the browser contains some 51 vulnerability fixes for issues in both the Mac and Windows versions. Some of the flaws could allow for remote code execution, information disclosure and cross-site scripting attacks.

The security fixes come as part of a larger update for Safari, which includes faster JavaScript execution and a new cover flow history browsing feature.

Graham Cluley, senior technology consultant at security firm Sophos, suggested that all users should update the browser not just for the features, but for the added protections.

"In the past, some computer users have made the mistake of thinking that Apple's security updates for Safari are only relevant for Mac owners," Cluley wrote in a blog post. "But many of the fixes are also relevant to Safari users running Windows XP and Vista."