22 Sept 2009 - Apple has released iTunes 9.0.1 to address a security vulnerability when
opening a maliciously crafted .pls file which may lead to an unexpected application termination or arbitrary code execution.
iTunes 9.0.1 is available for Mac OS X v10.4.11 or later, Mac OS X Server v10.4.11 or later, Windows XP SP2, Vista, and Windows 7.
For more info, see About the security content of iTunes 9.0.1.
iTunes 9.0.1 may be obtained automatically by using the Software Update system preference in Mac OS X or the Software Update for Windows utility.
iTunes 9.0.1 may also be downloaded manually from the iTunes website.
For a list of all security updates, see the Apple Security Updates web site.