Apple has released Mac OS X 10.5.8, a bug-fix update to Leopard that addresses a number of relatively uncommon bugs [1] in various parts of the operating system. Although Apple provides standalone downloads (most useful for the combo updates that increment any version of Mac OS X 10.5 to 10.5.8), Software Update is the easiest way to get the new version.

As always, although there's no reason to suspect any trouble with installing 10.5.8 right away, the cautious user will wait a few days to see if significant problem reports crop up online.

Changes in 10.5.8 -- Although the release notes mention the inclusion of Safari 4.0.2 as new and claim improvements in the accuracy of full history searches, Safari 4.0.2 was the current version before the release of 10.5.8. Practically speaking, if you hadn't upgraded to Safari 4.0.2 individually before this, you'll get it now. Other networking-related fixes include improved compatibility and reliability when working with MobileMe and iDisk, with AFP (AppleTalk Filing Protocol), and with Managed Client. Lastly, though the release notes also claim improvements in joining AirPort networks, there have been anecdotal reports [2] of AirPort connection failures after updating.

On the imaging front, the update fixes a bug that could prevent importing of large photo and movie files from digital cameras, and another that invoked an iPhoto action when dragging an Aperture image into Automator. Also, raw image support has been extended to additional new cameras; see the full list [3].

In other fixes, the Displays pane of System Preferences now shows certain resolutions that might not have appeared previously. iCal reportedly has improved reliability when working with MobileMe Sync and CalDAV, and Sync Service bugs have been addressed. Compatibility with certain USB external drives has been improved. Finally, overall Bluetooth reliability has been enhanced when working with external devices, USB webcams (straight from the release notes - we're not sure what the relationship between Bluetooth and a USB webcam is either), and printers.

VMware is reporting [4] that Mac OS X 10.5.8 includes new 3D drivers from ATI that fix a compatibility problem suffered by VMware Fusion 2.0.5 under Mac OS X 10.5.7.

Mac OS X 10.5.8 also addresses security vulnerabilities [5]. A number of the fixes revolve around closing holes related to maliciously crafted images in various formats, but a few of the other issues addressed are more interesting. In particular:

• A maliciously crafted Web site reached via a redirect could have displayed a certificate warning that used the name of the redirecting site.
• Additional content types will generate prompts when accessed in certain ways, such as when they're downloaded from a Web page.
• The Dock previously allowed a user with physical access to a locked system to use four-finger multi-touch gestures to manage applications or use Expose.
• The launch service was vulnerable to a denial-of-service attack.
• Signing out of MobileMe via the preference pane wasn't properly removing all login credentials.

The Mac OS X 10.5.8 Update weighed in at only 165 MB via Software Update on my Mac Pro and MacBook, but the standalone delta update [6] from 10.5.7 is 274 MB from Apple's Support Downloads site. The combo update [7] that works with any version of 10.5 is 759 MB.

Leopard Server 10.5.8 -- Along with all the changes in the desktop version of Mac OS X 10.5.8, the server version receives additional tweaks [8]. Notably:

• The AFP Server receives a fix that prevents unwarranted CPU use when no users are connected. Another fix prevents the AFP Client from infinitely repeating unsuccessful connection attempts after waking from sleep.
• Several different bugs were addressed in the Managed Client, resolving login issues from PowerPC-based Macs, improving reliability of synchronized files from SMB servers, fixing launch problems for login items on a network home directory, and proper disabling of simultaneous logins.
• Server Admin no longer freezes when propagating permissions, and it (along with the updated System Image Utility) now includes NetBoot/NetInstall filters for Macs released in June 2009. Alas, it doesn't appear to include the fix necessary to make Server Admin stop corrupting Apache httpd.conf files.

The Mac OS X Server 10.5.8 Update is 274 MB in delta form [9]; the combo update [10] is 978 MB.

Security Update 2009-003 -- The security fixes included in Mac OS X 10.5.8 are also available (as appropriate) for users still running Mac OS X 10.4 Tiger. All previous security updates have been incorporated in Security Update 2009-003, so you shouldn't need to do the multiple download dance if you're not up to date.

Four variants are available, as always, a desktop version for PowerPC-based Macs [11] (76 MB) and another for Intel-based Macs [12] (166 MB), and a server version for PowerPC-based Macs [13] (130 MB) and another for PowerPC- or Intel-based Macs that Apple labels as Universal [14] (204 MB).

[1]: http://support.apple.com/kb/HT3606
[2]: http://db.tidbits.com/article/10461#comments_530
[3]: http://support.apple.com/kb/HT1475
[4]: http://blogs.vmware.com/teamfusion/2009/08/vmware-fusion-mac-os-x-1058-and-ati-graphics-controllers-so-happy-together.html
[5]: http://support.apple.com/kb/HT3757
[6]: http://support.apple.com/downloads/Mac_OS_X_10_5_8_Update
[7]: http://support.apple.com/downloads/Mac_OS_X_10_5_8_Combo_Update
[8]: http://support.apple.com/kb/HT3607
[9]: http://support.apple.com/downloads/Mac_OS_X_Server_10_5_8_Update
[10]: http://support.apple.com/downloads/Mac_OS_X_Server_10_5_8_Combo_Update
[11]: http://support.apple.com/downloads/Security_Update_2009_003__Tiger_PPC_
[12]: http://support.apple.com/downloads/Security_Update_2009_003__Tiger_Intel_
[13]: http://support.apple.com/downloads/Security_Update_2009_003__Server_Tiger_PPC_
[14]: http://support.apple.com/downloads/Security_Update_2009_003__Server_Tiger_Universal_

Permanent article URL: http://db.tidbits.com/article/10461
This is a specially formatted version of this TidBITS article that removes colors, and optionally removes images; it's designed to minimize the use of ink and paper.
Unless otherwise noted, this article is copyright © 2009 TidBITS Publishing, Inc.. TidBITS is copyright © 2008 TidBITS Publishing Inc. Reuse governed by this Creative Commons License: http://www.tidbits.com/terms/.