APPLE-SA-2008-12-15 Security Update 2008-008 / Mac OS X v10.5.6

The 10.5.6 Update is recommended for all users running Mac OS X Leopard and includes general operating system fixes that enhance the stability, compatibility and security of your Mac.

For detailed information on this update, please visit this website: http://support.apple.com/kb/HT3194.
For detailed information on security updates, please visit this website: http://support.apple.com/kb/HT1222.

iLife Support 8.3.1 is now available and addresses the following security issues:

ImageIO
CVE-ID:  CVE-2008-2327
Available for:  iLife 8.0 or Aperture 2, on Mac OS v10.4.9 through v10.4.11
Impact:  Viewing a maliciously crafted TIFF image may lead to an unexpected application termination or arbitrary code execution
Description:  Multiple uninitialized memory access issues exist in libTIFF's handling of LZW-encoded TIFF images. Viewing a maliciously crafted TIFF image may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue through proper memory initialization and additional validation of TIFF images. These issues are already addressed in systems running Mac OS X v10.5.5. Credit: Apple.

ImageIO
CVE-ID:  CVE-2008-2332
Available for:  iLife 8.0 or Aperture 2, on Mac OS v10.4.9 through v10.4.11
Impact:  Viewing a maliciously crafted TIFF image may lead to an unexpected application termination or arbitrary code execution
Description:  A memory corruption issue exits in the handling of TIFF images. Viewing a maliciously crafted TIFF image may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue through improved processing of TIFF images. This issue is already addressed in systems running Mac OS X v10.5.5. Credit to Robert Swiecki of Google Security Team for reporting this issue.

ImageIO
CVE-ID:  CVE-2008-3608
Available for:  iLife 8.0 or Aperture 2, on Mac OS v10.4.9 through v10.4.11
Impact:  Viewing a large maliciously crafted JPEG image may lead to an unexpected application termination or arbitrary code execution
Description:  A memory corruption issue exists in ImageIO's handling of embedded ICC profiles in JPEG images. Viewing a large maliciously crafted JPEG image may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue through improved processing of ICC profiles. This issue is already addressed in systems running Mac OS X v10.5.5. Credit: Apple.

iLife Support 8.3.1 may be obtained from the Software Update pane in System Preferences, or Apple's Software Downloads web site:
http://www.apple.com/support/downloads/

The download file is named: "iLifeSupport.dmg"
Its SHA-1 digest is: 2911f4608c3c69eb8056a5bf6d5186a4f403517d

Information will also be posted to the Apple Security Updates
web site: http://support.apple.com/kb/HT1222

From SANS: http://www.sans.org/newsletters/newsbites/newsbites.php?vol=10&issue=52&rss=Y#sID312

Microsoft Retires Windows XP, Will Support OS Through 2014 (June 30, 2008)
As of July 1, Microsoft will no longer be making its Windows XP operating system available to computer makers or consumers. XP will still be made available to small, independent computer makers through July 2009, and to manufacturers of low cost computers such as Asus until 2010. Some manufacturers are taking advantage of a loophole in Microsoft's licensing agreement that allows users to downgrade to earlier versions of operating systems at no cost. The decision to discontinue XP has met with protests from users who are unhappy with Windows Vista. In response, Microsoft has recently announced that it will support Windows XP through 2014.


http://www.informationweek.com/news/windows/operatingsystems/showArticle.jhtml?articleID=208801694

Sample files and documentation from the April 2008 TIG meeting on Macintosh OS X / Active Directory integration may be found online at:

http://www.afp548.com/article.php?story=20080304215842264&query=sandbox

Good to see all of you again!

...roy

The latest version of Apple's Macintosh OS X (10.5) called "Leopard" hits the shelves today!

http://www.apple.com/macosx/features/

The 10.4.10 Update is recommended for PowerPC and Intel-based Mac computers currently running Mac OS X Tiger.  This update includes general operating system fixes, as well as specific fixes or compatibility updates for the following applications and technologies: 

- RAW camera support
- Mounting and unmounting external USB devices
- Support for 3rd party software applications
- Security updates

For detailed information on this update, please visit this website: http://www.info.apple.com/kbnum/n305533.
For detailed information on security updates, please visit this website: http://www.info.apple.com/kbnum/n61798.

APPLE-SA-2007-06-14 Safari Beta 3.0.1 for Windows

The Safari 3 Public Beta was released on June 11 for Mac OS X and
Windows XP/Vista. This beta software is for trial purposes and
intended to gather feedback prior to a full release. As with all our
products, we encourage security researchers to report issues to
product-security@apple.com.

Security Update 2007-004 is recommended for all users and improves the security of the following components:

AFP Client
AirPort
CarbonCore
diskdev_cmds
fetchmail
ftpd
gnutar
Help Viewer
HID Family
Installer
Kerberos
Libinfo
Login Window
network_cmds
SMB
System Configuration
URLMount
Video Conference
WebDAV

For detailed information on this update, please visit this website:
http://docs.info.apple.com/article.html?artnum=61798

Microsoft released today Service Pack 2 for Server 2003.

According to Microsoft...

SP2 contains the latest collection of updates to help improve the security, reliability, and performance of the following operating systems:

• Windows Server 2003 All Editions (32-bit x86)
• Windows Server 2003 Itanium-based Editions
• Windows Server 2003 x64 Editions
• Windows Server 2003 R2 Editions
• Windows Server 2003 Storage Server R2 Edition
• Windows Server 2003 Compute Cluster Edition
• Windows Server 2003 for Small Business Servers R2 Edition
• Windows XP Professional x64 Edition

Get yours today!

http://www.microsoft.com/technet/windowsserver/sp2/overview.mspx

iPhoto 6.0.6
This update to iPhoto addresses issues associated with EXIF data compatibility and Photocasting.

10.4.9
The 10.4.9 Update is recommended for PowerPC and Intel-based Mac computers currently running Mac OS X Tiger version 10.4.8 and includes general operating system fixes, as well as specific fixes or compatibility updates for the following applications and technologies:

- RAW camera support
- Handling of large or malformed images that could cause crashes
- Image capture performance
- Mouse scrolling and keyboard shortcuts
- Font handling
- Playback quality, and bookmarks in DVD Player
- USB video conferencing cameras for use with iChat
- Bluetooth devices
- Browsing AFP servers
- Apple USB Modem
- Windows-created digital certificates
- Open and Print dialogs in applications that use Rosetta on Intel-based Macs
- Time zone and daylight saving for 2006 and 2007
- Security updates

For detailed information on this Update, please visit this website: http://www.info.apple.com/kbnum/n304821.
For detailed information on Security Updates, please visit this website: http://www.info.apple.com/kbnum/n61798.