Late last week, Apple released Security Update 2007-006 to address bugs in the WebCore and WebKit code upon which Safari and many other Web-savvy Macintosh applications rely. The details are unimportant, but both exploits required the user to be enticed into visiting a maliciously crafted Web page, emphasizing the advice to be aware of what sort of Web sites you're reading. Security Update 2007-006 is available via Software Update and as standalone downloads for Mac OS X 10.3.9 (2.2 MB [1]) and for Mac OS X 10.4.9 or later in both PowerPC (2.7 MB) and universal (4.5 MB [2]) versions. Note that if you've installed the Safari 3 beta, you won't see Security Update 2007-006 in Software Update.
That's because Safari 3 Beta Update 3.0.2 includes the fixes in Security Update 2007-006 and addresses two other security problems, one that's specific to the Windows version of Safari 3 and another that can affect both Macintosh and Windows users of the beta-release Web browser. Apple also claims that Safari 3.0.2 features improved stability and provides better WebKit support for Mail, iChat, and Dashboard (several TidBITS staff members had to uninstall the initial beta of Safari 3 because of annoying interactions with iChat). The 9.5 MB Safari 3 Beta Update 3.0.2 is available only through Software Update, although downloading a new copy of the Safari beta [3] also gets you the fixes.
[1]: http://www.apple.com/downloads/macosx/apple/security_updates/securityupdate20070061039.html
[2]: http://www.apple.com/downloads/macosx/apple/security_updates/securityupdate2007006universal.html
[3]: http://www.apple.com/safari/download/