Condition Remains GREEN

Google has released Chrome 12.0.742.112 to the Stable Channel which includes an update for Flash Player. 

The update addresses the following issues:

• [$1000] [77493] Medium CVE-2011-2345: Out-of-bounds read in NPAPI string handling. Credit to Philippe Arteau.
• [$1000] [84355] High CVE-2011-2346: Use-after-free in SVG font handling. Credit to miaubiz.
• [$1000] [85003] High CVE-2011-2347: Memory corruption in CSS parsing. Credit to miaubiz.
• [$500] [85102] High CVE-2011-2350: Lifetime and re-entrancy issues in the HTML parser. Credit to miaubiz.
• [$500] [85177] High CVE-2011-2348: Bad bounds check in v8. Credit to Aki Helin of OUSPG.
• [$1000] [85211] High CVE-2011-2351: Use-after-free with SVG use element. Credit to miaubiz.
• [$1000] [85418] High CVE-2011-2349: Use-after-free in text selection. Credit to miaubiz.

Users should review their Flash Player Setting once the update is applied. 

Condition Remains GREEN

Apple has released Mac OSX v 10.6.8 and Security Update 2011-004. This update does requirer a reboot and should be applied. It includes the following high level fixes:

Mac OSX

• Enhance the Mac App Store to get your Mac ready to upgrade to Mac OS X Lion
• Resolve an issue that may cause Preview to unexpectedly quit
• Improve support for IPv6
• Improve VPN reliability
• Identify and remove known variants of Mac Defender 

Mac OSX Server:

• Properly displaying videos in Wiki pages when viewed from Firefox or Internet Explorer browsers
• Reliability of using sharepoints with Time Machine
• Reliability of vacation mail notices
• Improved reliability of processing international character encodings in iCal Server
• Improved authentication support when accessing iCal Server from iOS devices
• Properly enabling previous updates in Software Update Server
• Improved reliability for cascading Software Update Servers