Despite initially maintaining that the Safari for Windows "carpet bomb" issue was not a security vulnerability, Apple has decided to release a patch.