For all those MAC Users
Security update notification from the ICT Hub
=============================================
This email contains details of a security vulnerability and reliability
update released by Apple on January 10th 2006.
This update fixes problems and reliability in two components
1, The Mac OS 10.4 operating system
2, Quicktime 7 media player
If you have Apple Update installed these fixes should be automatically
picked up and installed.
Full details for individual patch deployment are provided where automatic
update is not possible.
If you support computers on behalf of other organisations please ensure
their computers are also updated.
Please excuse any cross posting and duplication of emails your may receive.
What are the problems?
======================
1, The 10.4.4 Update delivers overall improved reliability and compatibility
for Mac OS X v10.4 and is recommended for all users.
2, QuickTime 7.0.4 is an important release that delivers numerous bug fixes,
support for iLife ’06, and H.264 performance improvements. This update is
highly recommended for all QuickTime 7 users.
What does it affect?
====================
1, Several reliability issues mainly relating to image handling
2, A maliciously-crafted QTIF or TGA image may result in arbitrary code
execution through triggering a heap buffer overflow.
PC's used by all users on these lists could be affected by this attack ....
if you work with any front line VCS groups that use Mac OS 10 or use
Quicktime 7 for image and media work can you inform them that they need to
ensure this hole is patched.
How do I fix it?
================
1, Update your copy of Mac OS 10 with the download available from Apple (see
link below).
2, Update your copy of Quicktime 7 with the download available from Apple
(see link below).
Details of Specific Problems
============================
1, This problem with Mac OS 10 is described in more depth at:
http://docs.info.apple.com/article.html?artnum=302810
2, This problem with Quicktime 7 is described in more depth at:
http://www.apple.com/support/downloads/quicktime704.html (Quicktime Version
7.0.4 for APPLE PC's)
http://www.apple.com/quicktime/win.html (Quicktime Version 7 for WINDOWS
PC's)
The supplier's page also contains the URL to download the fix: please see
our URL security guide for advice on following links
Thanks
________________________________________________
Paul Webster
ICT Support Officer for National ICT Hub
A : NACVS, 177 Arundel Street, Sheffield, S1 2NU
T : 0114 278 6636 ext 134
F : 0114 278 7004
E : paul@nacvs.org.uk
W : (ICT Hub) www.ictconsortium.org.uk
________________________________________________
The ICT Hub is a consortium of voluntary sector organisations who have come
together to plan and deliver a co-ordinated framework of ICT guidance, good
practice, advice and support for voluntary and community organisations,
accessible at a local level.
________________________________________________
_________________________________________________________________
You received this message as a subscriber on the list:
ukriders@lists.lasa.org.uk
To be removed from the list, send any message to:
ukriders-unsubscribe@lists.lasa.org.uk
For all list information and functions, including changing
your subscription mode and options, visit the Web page:
http://lists.lasa.org.uk/lists/info/ukriders
