APPLE-SA-2011-01-06-1 Mac OS X v10.6.6

Apple has released a security update to address CVE related to PackageKit. The update improves the handling of distribution script, which under the previous version could be susceptible to MIM attacks. Users should apply this update using the Software Update tool. 

Update on Thursday, January 6, 2011 at 08:01PM by Sean OConnell Public

PGP WDE customers have issues after the update to 10.6.6, PGP is recommending that users hold off on the system update until PGP Corporation releases an update.

https://pgp.custhelp.com/app/answers/detail/a_id/2288/session/L3NpZC9jQlBwcHBqaw%3D%3D/sno/0

Mac APP Store is Now Open

Apple's Macintosh APP store is now open and ready for business. Users should select software update to get access the the Mac APP store. (Note: restart is required.) The update also includes general operating system fixes that enhance the stability, compatibility, and security of your Mac. (Apple has not posted those details as of yet.)

The Mac App Store, a new application you'll find in the Dock, includes the following features:

• Discover Mac apps: Browse featured apps, top charts, and categories, or search for something specific. Read detailed app descriptions and user reviews, and flip through screen shots.
• Buy and install: Easily purchase apps with your iTunes account.  Apps install in one step and are quickly available from the Dock.
• App updates: The Mac App Store keeps track of all your purchased apps and notifies you when free updates are available.

In a related post make sure that you change your iTunes password, it has been reported that they are aviable for sale at Chinese Auction sites. Since the MacAPP store links to your iTunes account, now may be a good time to change your iTunes Password.

Intego Releases an Update to VirusBarrier X6

Intego has released an update to VirusBarrier X6 to 10.6.10. The update addresses various compatibility and stability issues, we hope that it is far more stable with 64 bit kernel extensions enabled and when switching user settings. The update is available via NetUpdate.

Time Capsule and AirPort Base Station(802.11n) Firmware 7.5.2

Apple has released an update of firmware for the Airport Base Station 802.11N and Time Capsule. This includes a fix for an interger overflow, a rate limiting failure in IPv6 which can cause a DoS, NAT disclose of private FTP server spoof, DHCP attack to devices in Bridge Mode and DOS of the Racoon deamon. 

Please read the following information before doing an update.

• Installation note for Firmware version 7.5.2 Firmware version 7.5.2 is installed into Time Capsule or AirPort Base Station with 802.11n via AirPort Utility, provided with the device.
•  It is recommended that AirPort Utility 5.5.2 be installed before upgrading to Firmware version 7.5.2

Google Chrome 8.0.552.224 Released

An update has been release of Chrome Browser for all platforms to the stable channel. Users should apply this update, it addresses several bug and vulnerabilities. 

• [64-bit Linux only] [56449] High Bad validation for message deserialization on 64-bit builds. Credit to Lei Zhang of the Chromium development community.
• [60761] Medium Bad extension can cause browser crash in tab handling. Credit to kuzzcc.
• [63529] Low Browser crash with NULL pointer in web worker handling. Credit to Nathan Weizenbaum of Google.
• [$1000] [63866] Medium Out-of-bounds read in CSS parsing. Credit to Chris Rohlf.
• [$1000] [64959] High Stale pointers in cursor handling. Credit to Sławomir Błażek and Sergey Glazunov.