Apple iTunes 4.7.1 for iPod Shuffle and Security Enhancement is Out

and available for download via the Software Update system preference pane and from this Apple web page. The Read Me file states that:

iTunes 4.7.1 includes support for iPod shuffle and other performance improvements.

iTunes 4.7.1 also delivers the following security enhancement:

CVE-ID: CAN-2005-0043

Impact: Malicious playlists can cause iTunes to crash and could
execute arbitrary code

Description: iTunes supports several common playlist formats.
iTunes 4.7.1 fixes a buffer overflow in the parsing of m3u and pls
playlist files that could allow earlier versions of iTunes to crash
and execute arbitrary code. Credit to Sean de Regge
(seanderegge[at]hotmail.com) for discovering this issue, and to
iDEFENSE Labs for reporting it to us.

Since the new iPod Shuffle was available as of yesterday, this iTunes update is essential. [Bill Fox]