MAAS History
Archives
Thursday
Apr142011

Apple has released updates for IOS

Apple has released update for iOS which fixes the following. 

APPLE-SA-2011-04-14-1 iOS 4.3.2 Software Update

  • Certificate of Trust issues related to Comodo CA compromise.
  • libxslt 
  • QuickLook
  • WebKit

APPLE-SA-2011-04-14-2 iOS 4.2.7 Software Update for iPhone

  • Certificate of Trust issues related to Comodo CA compromise. 
  • QuickLook
  • WebKit
Thursday
Apr142011

Adobe's update for Flash Fast tracked

Adobe will have a Flash Update ready on Friday April 15, 2011. Users should install this update if they need to use Flash. Our current Risk analysis has determined that if you do not need Flash for critical business functions then it should not be installed on your systems. We further recommend that you do not install Flash on any servers. 

Adobe will also have an update for Reader and Acrobat no later then April 25, 2011. Again, we recommend that you do not install Reader on any Mac OSX Server. For PDF use Preview.app, it will suffice for most cases. 

We will be removing all Flash content from our site by Saturday April 16,2011.

Friday
Apr082011

Microsoft Advanced Notification Includes Mac Office Updates

Microsoft's advanced update notification indicates that next Tuesday's patch day will include updates for Mac Office Products including 2004, 2008 and 2011. They are all tagged as important. We currently believe that the XML file converter issue represented the greatest level of risk. 


       
Tuesday
Mar222011

Adobe Releases Updates to Reader, Acrobat and Flash

Adobe has released updates to Reader, Acrobat and Flash to address the various 0Days which have been used in the wild since the advanced notice. All three products should be updated. We also recommend the following moving forward:

  • Do not install any Adobe products on production servers.
  • Preview.app should remain the application of choice to read PDF files.
  • Install Click to Flash, NoFlash or NoScript to limit Flash.
  • Change you Flash Control Panel Settings to maximize privacy.  
  • After an update your Flash Control Panel Settings change, set them to maximize privacy. 

 Check the referenced links below for more information directly from Adobe. 

Monday
Mar212011

APPLE-SA-2011-03-21-1 Mac OS X v10.6.7 and Security Update 2011-001  

Apple has released MacOSX 10.6.7 and Security Update 2011-001. This update is for server and client and includes over 50 fixes including security fixes for Safari, ImageIO, ATM, ClamAV, HFS, QuickLook and PHP. This update is mandatory is recommended to be installed, the update requires a reboot.

One interesting side note is that the File Quarantine now will flag OSX.OpinionSpy. This seems like an after thought and we recommend that users install a complete finished product such as Virus Barrier or Sophonos AntiVirus. Apple may decide to do something with this in the future or other developers but as it stands this feature does not provide adequate protection.