Security updates available for Adobe Reader and Acrobat

Adobe has released a security update to Adobe Reader and Acrobat to address critical vulnerabilities that are being exploited in the wild. 

Try Again:Mac OS X Server v10.6.5 (10H575) Update

Apple pulled and then re-released an update for Mac OSX server after a discovery of a vulnerability in memory aliasing in Dovecot which resulted in a user receiving another users email. If your server is using Dovecot for mail then this update is required, otherwise the update can be applied during off-hours mainly due to requiring a restart.

Apple's gerneralized list of fixes:

• - name queries in Web Calendar match against first name, last name and email attributes 
• - improved setup of Podcast Producer service when bound to an Active Directory server
• - preventing Podcast Capture from always storing passwords in keychain
• - reliability of Web Podcast Capture
• - stopping Podcast Producer recordings with remote cameras 
• - reliability of connections between Podcast Producer server with remote cameras
• - Podcast Producer workflows publishing to a wiki page with an Active Directory account
• - synchronization of audio and video output from Podcast Producer workflows which include intro videos or titling or transitions
• - use of "-" character in specifying DHCP Subnets with Server Admin
• - improved Wiki Server connection latency 
• - use of "/" character with Wiki Server mailing lists
• - configuration of iChat Server when changing host names using changeip 
• - preventing automatic changes to a ".local" domain in iChat Server configuration due to DNS unresponsiveness
• - importing of iChat accounts with Managed Preferences
• - preventing network homes being used after mobile accounts enabled
• - corrections to the iCal Preference Manifest
• - viewing of IPP print queues with Workgroup Manager
• - reliability of External Accounts with FAT32 file systems
• - reliability of applying Managed Preferences to Macs that have been idle
• - allowing administrators to bypass Managed Preferences at login
• - improper removal of older updates by Software Update Server
• - using Server Assistant to setup remote servers
• - reliability and logging of Mail Server
• - reliability of Managed Preferences
• - reliability of Web Server with PHP scripts

ALERT: PGP MAC WDE Compatibility Problem with MAC OS X 10.6.5 Update

This is an Alert directly from the forums at PGP corporation. You will want to decrypted the PGP WDE system and then apply the update. Once this is completed then you can re-encrypt the disk. 

From the PGP Forums:

MAC WDE customers should not apply the recent Mac OS X 10.6.5 update. Compatibility issues may prevent the system from successfully booting. We will provide a detailed update as soon as a solution has been identified.

In the interim, customers can accomplish the upgrade safely if the PGP WDE system is first decrypted, then apply the MAC OS X 10.6.5 update and then re-encrypt.

PGP Technical Support

APPLE-SA-2010-11-10-1 Mac OS X v10.6.5 and Security Update 2010-007

Apple has released a very large security update to Mac OSX v10.6.5 Client and Server to address a host of CVE related to AFP Server, Apache, Apache mod_Pearl, AppKit, ATS, Core Foundation Network, directoryServices, OpenLDAP, CUPS, diskdev_cmds, gzip, ImageIO, neon, and Core Text and Graphics. Total download size is 517 megabytes for client and over 700 megabytes for OSX Server. Also remember that a restart is required. 

Taken directly from Software Update:

The 10.6.5 Update is recommended for all users running Mac OS X Snow Leopard and includes general operating system fixes that enhance the stability, compatibility, and security of your Mac, including fixes that:

• improve reliability with Microsoft Exchange servers
• address performance of some image-processing operations in iPhoto and Aperture
• address stability and performance of graphics applications and games
• resolve a delay between print jobs
• address a printing issue for some HP printers connected to an AirPort Extreme
• resolve an issue when dragging contacts from Address Book to iCal
• address an issue where dragging an item from a stack causes the Dock to not automatically hide
• resolve an issue with Wikipedia information not displaying correctly in Dictionary
• improve performance of MainStage on certain Mac systems
• resolve spacing issues with OpenType fonts
• improve reliability with some Bluetooth braille displays
• resolve a VoiceOver issue when browsing some web sites with Safari 5

The 10.6.5 update is recommended for all servers currently running Snow Leopard Server. This update includes general operating system fixes, as well as specific fixes for:

• - name queries in Web Calendar match against first name, last name and email attributes 
• - improved setup of Podcast Producer service when bound to an Active Directory server
• - preventing Podcast Capture from always storing passwords in keychain
• - reliability of Web Podcast Capture
• - stopping Podcast Producer recordings with remote cameras 
• - reliability of connections between Podcast Producer server with remote cameras
• - Podcast Producer workflows publishing to a wiki page with an Active Directory account
• - synchronization of audio and video output from Podcast Producer workflows which include intro videos or titling or transitions
• - use of "-" character in specifying DHCP Subnets with Server Admin
• - improved Wiki Server connection latency 
• - use of "/" character with Wiki Server mailing lists
• - configuration of iChat Server when changing host names using changeip 
• - preventing automatic changes to a ".local" domain in iChat Server configuration due to DNS unresponsiveness
• - importing of iChat accounts with Managed Preferences
• - preventing network homes being used after mobile accounts enabled
• - corrections to the iCal Preference Manifest
• - viewing of IPP print queues with Workgroup Manager
• - reliability of External Accounts with FAT32 file systems
• - reliability of applying Managed Preferences to Macs that have been idle
• - allowing administrators to bypass Managed Preferences at login
• - improper removal of older updates by Software Update Server
• - using Server Assistant to setup remote servers
• - reliability and logging of Mail Server
• - reliability of Managed Preferences
• - reliability of Web Server with PHP scripts

Update on Thursday, November 11, 2010 at 07:18AM by drStrangeP0rk

They have patched over 70 issues, the update list is incredibly long so I am still checking all the details. In addition there have been some issues for users of Whole Disk Encryption from PGP corporation. 

Directly from there site. http://forum.pgp.com/t5/PGP-Whole-Disk-Encryption-for/ALERT-PGP-MAC-WDE-Compatibility-Problem-with-MAC-OS-X-10-6-5/td-p/40568

Microsoft Office for Mac 2011 14.0.1 Update

Microsoft has released and Update to Office 2011 Mac to address a crtical issue which may result in application crash allowing a malicious user to execute code. Users should apply this update to Microsoft Office for the Mac and can download it directly from this address. 

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=8bd6ca3b-8004-4e8d-a09d-220dcbbce799&displayLang=en