Apple released Xcode Tools 2.4.1 with Security Fix

The developer kit Xcode Tools 2.4.1 is available for download from this Apple Web page (requires Apple developer ID and password). According to Apple,

Xcode 2.4.1 addresses several issues in DWARF debugging and improves overall stability and security. It is recommended that all Xcode users install this update.

The details are

• Selected fixes were made in the Xcode IDE, cctools, debugger, and compiler.
• CHUD has been updated to version 4.4.3.
• The 10.3.9 and 10.4u SDK’s have been updated.

Along with functionality improvements (see release notes), it also fixes the following security issue:

GDB
CVE-ID: CVE-2006-4146
Available for: Mac OS X v10.4 and later
Impact: Opening a maliciously-crafted DWARF binary with GDB may
lead to arbitrary code execution
Description: GDB, the GNU Debugger, is susceptible to multiple
vulnerabilities that may lead to arbitrary code execution when
loading maliciously-crafted DWARF binaries. This update
addresses the issues by performing additional validation while
handling DWARF binaries. Credit to Will Drewry and Tavis Ormandy
of the Google Security Team for reporting this issue.

[Bill Fox]