January 2005 - Security-announce

APPLE-SA-2005-01-25 Security Update 2005-001
by Apple Product Security 25 Jan '05

25 Jan '05

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2005-01-25 Security Update 2005-001 Security Update 2005-001 is now available and delivers the following security enhancements: at commands Available for: Mac OS X v10.3.7, Mac OS X Server v10.3.7 CVE-ID: CAN-2005-0125 Impact: Updates the "at" commands to address a local privilege escalation vulnerability Description: The "at" family of commands did not properly drop privileges. This could allow a local user to remove files not owned by them, run programs with added privileges, or read the contents of normally unreadable files. This update patches the commands at, atrm, batch, atq, and atrun. Credit to kf_lists[at]digitalmunition[dot]com for reporting this issue. ColorSync Available for: Mac OS X v10.3.7, Mac OS X Server v10.3.7, Mac OS X v10.2.8, Mac OS X Server v10.2.8 CVE-ID: CAN-2005-0126 Impact: Malformed ICC color profiles could overwrite the program heap resulting in arbitrary code execution. Description: An out-of-specification or improperly embedded ICC color profile could overwrite the program heap and allow arbitrary code execution. There are no known exploits for this issue. With this update, ColorSync will reject incorrectly-formed ICC color profiles. libxml2 Available for: Mac OS X v10.3.7, Mac OS X Server v10.3.7 CVE-ID: CAN-2004-0989 Impact: The libxml2 library contains unsafe code that may be exploited in applications linked against it. Description: This update fixes several functions in the libxml2 library that have been identified as unsafe due to potentially exploitable buffer overflows. Mail Available for: Mac OS X v10.3.7 Client, Mac OS X Server v10.3.7 CVE-ID: CAN-2005-0127 Impact: Email messages sent from a single machine can be identified Description: A GUUID containing an identifier associated with the ethernet networking hardware was used in the construction an RFC-822 required Message-ID header. Mail now hides this information by computing the Message-ID using a cryptographic hash of the GUUID concatenated with data from /dev/random. Credit to Carl Purvis for reporting this issue. PHP Available for: Mac OS X v10.3.7, Mac OS X Server v10.3.7, Mac OS X v10.2.8, Mac OS X Server v10.2.8 CVE-ID: CAN-2003-0860, CAN-2003-0863, CAN-2004-0594, CAN-2004-0595, CAN-2004-1018, CAN-2004-1019, CAN-2004-1020, CAN-2004-1063, CAN-2004-1064, CAN-2004-1065 Impact: Multiple vulnerabilities in PHP including remote denial of service and execution of arbitrary code Description: PHP is updated to version 4.3.10 to address several issues. The PHP release announcement for version 4.3.10 is located at http://www.php.net/release_4_3_10.php Safari Available for: Mac OS X v10.3.7, Mac OS X Server v10.3.7, Mac OS X v10.2.8, Mac OS X Server v10.2.8 CVE-ID: CAN-2004-1314 Impact: When Safari's "Block Pop-Up Windows" feature is not enabled, a malicious pop-up window could appear as being from a trusted site Description: If the "Block Pop-Up Windows" feature is enabled, then this issue does not occur. If the "Block Pop-Up Windows" feature is not enabled, a user can be misled about the content of a Pop-up window if they used an untrusted link to navigate to a site they wanted to view. This update corrects the issue regardless of the "Block Pop-Up Windows" setting. Credit to Secunia Research for reporting this issue. SquirrelMail Available for: Mac OS X Server 10.3.7 CVE-ID: CAN-2004-1036 Impact: SquirrelMail is updated to address a cross-site scripting vulnerability Description: A cross-site scripting vulnerability in SquirrelMail allowed email messages to contain content that would be rendered by a users web browser. SquirrelMail is updated to address this issue. Further details are available from the SquirrelMail website: http://www.squirrelmail.org/ Security Update 2005-001 may be obtained from the Software Update pane in System Preferences, or Apple's Software Downloads web site: http://www.apple.com/support/downloads/ For Mac OS X v10.3.7 The download file is named: "SecUpd2005-001Pan.dmg" Its SHA-1 digest is: 89aedac4c3824bf7a35c3100894b22fc0db47dd0 For Mac OS X Server v10.3.7 The download file is named: "SecUpSrvr2005-001Pan.dmg" Its SHA-1 digest is: 73d0cd53be0504c10173d7dd6bb9f5fc964e3390 For Mac OS X v10.2.8 The download file is named: "SecUpd2005-001Jag.dmg" Its SHA-1 digest is: 5c364b5f548a7fdced54de2149e79dfb3d90371d For Mac OS X Server v10.2.8 The download file is named: "SecupdSrvr2005-001Jag.dmg" Its SHA-1 digest is: c999c6d2e58cea324dd91188fedf870741b296d4 Information will also be posted to the Apple Product Security web site: http://docs.info.apple.com/article.html?artnum=61798 This message is signed with Apple's Product Security PGP key, and details are available at: http://www.apple.com/support/security/security_pgp.html -----BEGIN PGP SIGNATURE----- Version: PGP 8.1 iQEVAwUBQfagQJyw5owIz4TQAQIragf/YOKFa4pX+9U82YMyRpvtNlEt+7fU9qeS blj/bAj0+/bNLCxhrQIbZkhFafM1mM9Gj5NK6cKR8vWEFj77gQ+xBeBS8UWmfkt4 B6dj99XagcHfQuYbJXVVJNwFedFvkeHfurcCmzaYuWiB56/lQfAUCROVqXw/esiA SXM0636E6ONuH4YPeZ2C7fI954bE3v3/3i0YDPGtXGAbnLBhskzYpcdAipTkwy3W uDGanqFRvR1F4q38eWf48WmmJ+CXqdfCBZQE41LUJMwwBcXsXnsRm1erv6PwfCxU gF3A/pORD0SZGMPqz7HZtOjdkXCpoYkX+mt1ejpW8ADJxWurtoKxhQ== =Acv8 -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/security-announce/site_archiver%40li… This email sent to site_archiver(a)lists.apple.com

1 0

Security Update naming
by Apple Product Security 25 Jan '05

25 Jan '05

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, The naming scheme of Apple Security Updates has changed from a date format (e.g., "Security Update 2004-12-02") to a format based on the year and a sequence number: Security Update YYYY-NNN. For example, the update released today is named "Security Update 2005-001", the next would be "Security Update 2005-002" and so on. The Security Update web site at http://docs.info.apple.com/article.html?artnum=61798 has been improved to provide a list of the releases in a more user-friendly format. The details for each release will be contained in its own separate page to improve clarity and readability. Best regards, Apple Product Security team http://www.apple.com/support/security/ PGP Key ID: 0x08CF84D0 Fingerprint: ADDE FA62 D9B7 013E 07BC 8971 9CB0 E68C 08CF 84D0 -----BEGIN PGP SIGNATURE----- Version: PGP 8.1 iQEVAwUBQfanCpyw5owIz4TQAQJ7Hwf/VUCuwgauN86pLhA5gtKNl/wtCuQa+QZ8 FsNYYzbC1QI6UDVAlImzksOHY2CKWO9xuvyr4DVlDP3OzHEr1fi9IRawxhZvbrZE 2cf9SZvcGFvRyjw0vzNXU2pardAGmjT6y+rLyMsN+i+oxLxmvSb+JPobEZFfEIOf I0YwiaH5C9yMq8VJv3f/5ortWfszrAw9tJn/qqRFHPGhqR8Wm9a5u0qv6cc3yDsK CnenX1Axi1b/49ISrbG9rTegCUymQVmDwOkVqTsazLMKissxdULokZRUHNlcAymo R3JYdprdAGTxfIJy3zv4Z/0ZHg1zg1wap+3FB//EMAtcihV3NejIZA== =FN1+ -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/security-announce/site_archiver%40li… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2005-01-11 iTunes 4.7.1
by Apple Product Security 11 Jan '05

11 Jan '05

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2005-01-11 iTunes 4.7.1 iTunes 4.7.1 is now available and delivers the following security enhancement: CVE-ID: CAN-2005-0043 Impact: Malicious playlists can cause iTunes to crash and could execute arbitrary code Description: iTunes supports several common playlist formats. iTunes 4.7.1 fixes a buffer overflow in the parsing of m3u and pls playlist files that could allow earlier versions of iTunes to crash and execute arbitrary code. Credit to Sean de Regge (seanderegge[at]hotmail.com) for discovering this issue, and to iDEFENSE Labs for reporting it to us. Available for: Mac OS X, Microsoft Windows XP, Microsoft Windows 2000 iTunes 4.7.1 may be obtained from the Software Update pane in System Preferences, or Apple's iTunes download site: http://www.apple.com/itunes/download/ The download file is named: "iTunes4.7.1.dmg" Its SHA-1 digest is: 2ae8c815f18756c24dfbc1ac7d837b75b828b92a Information will also be posted to the Apple Product Security web site: http://docs.info.apple.com/article.html?artnum=61798 This message is signed with Apple's Product Security PGP key, and details are available at: http://www.apple.com/support/security/security_pgp.html -----BEGIN PGP SIGNATURE----- Version: PGP 8.1 iQEVAwUBQeQviJyw5owIz4TQAQIMrgf/fYmI5LZy5DM5a61kbXgnzq5OpQQPaidH disRa8UbjGrr+sSvEytQaxgO5vbDsZWgDGYeeaHTUeyiBdznO/b7X9moUC0uXEtC /a/CC2219AYeoQLJCMWhiIbrkL3OQ8QHoV3KaMlcg98tHgsrZKg1ssqEZszkjNrV Jj1dm3hYn2/DHPqzhGy2+l4Lp/8Bdg2VwXJjCLrqD6cgcSAX0HVdVq+CM2VQ1DGH O9PjkspNxoTR2iV0VbJdc+q/Mi1HXlouNaURgR01oBYGqZoQ2mxYGMLIthgVoyri E/c5iyPq4lwDnhyjii4fajLO/3BW6MY7RVoNWv2ipYjVi1RPQ6d6iQ== =SryY -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/security-announce/site_archiver%40li… This email sent to site_archiver(a)lists.apple.com

1 0