User Name
Password
AppleNova Forums » Apple Products »

iTunes 6.0.4, Security Update 2006-001, iPhoto 6.0.2 now in software update!


Register Members List Calendar Search FAQ Posting Guidelines
iTunes 6.0.4, Security Update 2006-001, iPhoto 6.0.2 now in software update!
Page 1 of 2 [1] 2  Next Thread Tools
Quagmire
meh
 
Join Date: May 2004
 
2006-03-01, 16:49

Get this update while it is hot! I wonder if this fixes the Safari problem.

Quote:
Security Update 2006-001 is recommended for all users and improves the security of the following components:

apache_mod_php
automount
Bom
Directory Services
iChat
IPSec
LaunchServices
LibSystem
loginwindow
Mail
rsync
Safari
Syndication

For detailed information on this Update, please visit this website: http://docs.info.apple.com/article.html?artnum=61798
Quote:
With iTunes 6, you can preview, buy, and download over 3,000 music videos and hit TV shows on the iTunes Music Store and sync your music and purchased videos with iPod to enjoy on the go. To watch purchased videos, you must have QuickTime 7.0.3 or later and Mac OS X 10.3.9 or later.

iTunes 6.0.4 addresses stability and performance issues related to Front Row.

Note: After purchasing music from the iTunes Music Store with iTunes 6 or later, you will also need to upgrade your other computers that purchase music from the iTunes Music Store to the latest version of iTunes.
  quote
PKIDelirium
Veteran Member
 
Join Date: Oct 2005
 
2006-03-01, 16:59

Quote:
*

Safari

CVE-ID: CVE-2006-0390/CVE-2005-4504

Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.5, Mac OS X Server v10.4.5

Impact: Viewing a maliciously-crafted web page may result in arbitrary code execution

Description: A heap-based buffer overflow in WebKit's handling of certain HTML could allow a malicious web site to cause a crash or execute arbitrary code as the user viewing the site. This update addresses the issue by preventing the condition causing the overflow. Credit to Suresec LTD for reporting this issue.

*

Safari

CVE-ID: CVE-2006-0387

Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.5, Mac OS X Server v10.4.5

Impact: Viewing a malicious web page may cause arbitrary code execution

Description: By preparing a web page including specially-crafted JavaScript, an attacker may trigger a stack buffer overflow that could lead to arbitrary code execution with the privileges of the user. This update addresses the issue by performing additional bounds checking.

*

Safari

CVE-ID: CVE-2006-0388

Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.5, Mac OS X Server v10.4.5

Impact: Remote web sites can redirect to local resources, allowing JavaScript to execute in the local domain

Description: Safari's security model prevents remote resources from causing redirection to local resources. An issue involving HTTP redirection can cause the browser to access a local file, bypassing certain restrictions. This update addresses the issue by preventing cross-domain HTTP redirects.

*

Safari, LaunchServices

CVE-ID: CVE-2006-0394

Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.5, Mac OS X Server v10.4.5

Impact: Viewing a malicious web site may result in arbitrary code execution

Description: It is possible to construct a file which appears to be a safe file type, such as an image or movie, but is actually an application. When the "Open `safe' files after downloading" option is enabled in Safari's General preferences, visiting a malicious web site may result in the automatic download and execution of such a file. A proof-of-concept has been detected on public web sites that demonstrates the automatic execution of shell scripts. This update addresses the issue by performing additional download validation so that the user is warned (in Mac OS X v10.4.5) or the download is not automatically opened (in Mac OS X v10.3.9).
It looks like they fixed it!
  quote
Zorn
Member
 
Join Date: Feb 2005
 
2006-03-01, 17:24

My Macbook Pro also had the Front Row Update on its software update list, and after installing it, and going to Shared Music on Front Row, it says that I need to have the latest version of iTunes to play shared music. Both my PC and Macbook have been updated to iTunes 6.0.4 Must be a bug.
  quote
Ebby
Subdued and Medicated
 
Join Date: May 2004
Location: Over Yander
Send a message via AIM to Ebby  
2006-03-01, 17:48

OMG My SYS is HOSED!!!!11!!!!

J/K Nice and Snappy. As usual.
  quote
Quagmire
meh
 
Join Date: May 2004
 
2006-03-01, 17:56

There is also seems to be an update to iPhoto.

Quote:
iPhoto Update 6.0.2
iPhoto 6.0.2 resolves several minor issues with playing shared slideshows in Front Row.

Also available as a direct download. http://www.apple.com/support/downloads/iphoto602.html
  quote
jbsengineer
Member
 
Join Date: Feb 2005
 
2006-03-01, 18:36

my frontrow seems to respond better. much smoother. anyone experience this?

Josh
  quote
Ireland
BANNED
I am worthless beyond hope.
 
Join Date: Feb 2006
 
2006-03-01, 18:44

iPhoto is much, much snappier!
Much less drive noise until full speed!
Things can only get better!

I did, Front Row is much better now, and even thinner, ha!
  quote
PKIDelirium
Veteran Member
 
Join Date: Oct 2005
 
2006-03-01, 18:59

I'm not getting an iPhoto update on my Software Update.

Edit: I downloaded the standalone update, and it said an eligible copy of iPhoto was not found on my drive...

WTF, I have iPhoto!

Last edited by PKIDelirium : 2006-03-01 at 19:07.
  quote
onlyafterdark
Sucker for shiny objects
 
Join Date: Jul 2004
Location: Kitchener, ON
Send a message via AIM to onlyafterdark  
2006-03-01, 19:23

Quote:
Originally Posted by PKIDelirium
I'm not getting an iPhoto update on my Software Update.

Edit: I downloaded the standalone update, and it said an eligible copy of iPhoto was not found on my drive...

WTF, I have iPhoto!
Have you moved it or renamed it in any way?
  quote
PKIDelirium
Veteran Member
 
Join Date: Oct 2005
 
2006-03-01, 19:49

Nope, not at all. It's exactly where it was when I first booted my iBook.
  quote
chucker
 
Join Date: May 2004
Location: near Bremen, Germany
Send a message via ICQ to chucker Send a message via AIM to chucker Send a message via MSN to chucker Send a message via Yahoo to chucker Send a message via Skype™ to chucker 
2006-03-01, 19:56

Quote:
Originally Posted by PKIDelirium
Nope, not at all. It's exactly where it was when I first booted my iBook.
And it's version 6.0.1?
  quote
PKIDelirium
Veteran Member
 
Join Date: Oct 2005
 
2006-03-01, 20:14

Oops - Crap, I guess the problem is I don't have ilife '06.
  quote
chucker
 
Join Date: May 2004
Location: near Bremen, Germany
Send a message via ICQ to chucker Send a message via AIM to chucker Send a message via MSN to chucker Send a message via Yahoo to chucker Send a message via Skype™ to chucker 
2006-03-01, 20:22

Yeah, that would help.
  quote
halo1982
Member
 
Join Date: Nov 2005
Location: Tulsa, OK
 
2006-03-01, 20:38

Got these three updates in my Software Update, updated both Windows clients with 6.0.4 too. Then downloaded Front Row seperate from apple, monkied around in the package and installed it on my iBook. Works perfectly with video sharing too!
  quote
Windowsrookie
Veteran Member
 
Join Date: Oct 2005
Location: Minnesota
Send a message via AIM to Windowsrookie Send a message via MSN to Windowsrookie Send a message via Yahoo to Windowsrookie  
2006-03-01, 21:26

wow, can anyone else confirm this? I had to install a h!@# to get it working on my powerbook.

Last edited by Windowsrookie : 2006-03-01 at 21:36.
  quote
chucker
 
Join Date: May 2004
Location: near Bremen, Germany
Send a message via ICQ to chucker Send a message via AIM to chucker Send a message via MSN to chucker Send a message via Yahoo to chucker Send a message via Skype™ to chucker 
2006-03-01, 21:30

Quote:
Originally Posted by windowsrookie
wow, can anyone else confirm this?
Confirm what, exactly?

Quote:
I had to install a hack to get it working on my powerbook.
*coughs*
  quote
Windowsrookie
Veteran Member
 
Join Date: Oct 2005
Location: Minnesota
Send a message via AIM to Windowsrookie Send a message via MSN to Windowsrookie Send a message via Yahoo to Windowsrookie  
2006-03-01, 21:31

Quote:
Originally Posted by halo1982
Then downloaded Front Row seperate from apple, monkied around in the package and installed it on my iBook. Works perfectly with video sharing too!
confirm that. duh
  quote
Windowsrookie
Veteran Member
 
Join Date: Oct 2005
Location: Minnesota
Send a message via AIM to Windowsrookie Send a message via MSN to Windowsrookie Send a message via Yahoo to Windowsrookie  
2006-03-01, 21:33

and don't tell me that you have never hacked anything.
  quote
chucker
 
Join Date: May 2004
Location: near Bremen, Germany
Send a message via ICQ to chucker Send a message via AIM to chucker Send a message via MSN to chucker Send a message via Yahoo to chucker Send a message via Skype™ to chucker 
2006-03-01, 21:34

Quote:
Originally Posted by windowsrookie
and don't tell me that you have never hacked anything.
I didn't, I just know that this topic is frowned upon here.
  quote
Windowsrookie
Veteran Member
 
Join Date: Oct 2005
Location: Minnesota
Send a message via AIM to Windowsrookie Send a message via MSN to Windowsrookie Send a message via Yahoo to Windowsrookie  
2006-03-01, 21:36

that should be better, huh?
  quote
frizz
Member
 
Join Date: Mar 2005
Location: San Jose
Send a message via AIM to frizz Send a message via Skype™ to frizz 
2006-03-01, 22:02

Front row reads aliases now!
  quote
hotch
Member
 
Join Date: Feb 2006
Location: The Rocky Mountains
 
2006-03-02, 00:20

frontrow always read aliases... i've got 800gigs of media i navigate with it... needless to say, it wouldn't all fit on my internal
  quote
nRoth
Member
 
Join Date: Jan 2006
 
2006-03-02, 02:14

Quote:
Originally Posted by Zorn
My Macbook Pro also had the Front Row Update on its software update list, and after installing it, and going to Shared Music on Front Row, it says that I need to have the latest version of iTunes to play shared music. Both my PC and Macbook have been updated to iTunes 6.0.4 Must be a bug.
If it says this then open up itunes, agree with the terms and whatever, then restart. It will work then, or at least thats what happened with me.

And yeah for me too, front row is awesome now, perfect for use in my apartment living room having a total of 5 computers using itunes...
  quote
morningstarrising
Veteran Member
 
Join Date: Jan 2005
Location: Philadelphia, PA
 
2006-03-02, 09:54

Yay iPhoto 6.0.2 in three months! Apple is on a ball in fixing the chugging iPhoto 6.
  quote
morningstarrising
Veteran Member
 
Join Date: Jan 2005
Location: Philadelphia, PA
 
2006-03-02, 12:32

Jeeze, they change stuff in iPhoto again. when you click "show info" on a picture it goes straight to the keywords, which is the reason why I go to "show info" in the first place...so that's nice, but it's the second time they change it via 6.0...

Jebus Google, just buy Apple already...
  quote
dwayne.wilson
New Member
 
Join Date: Sep 2004
 
2006-03-02, 23:23

Did this update take away the ability to buy single tracks on iTunes, or has it been gone for awhile now? I just noticed.....
  quote
Robo
Formerly Roboman, still
awesome
 
Join Date: Jul 2004
Location: Portland, OR
 
2006-03-02, 23:42

Um...I'm sure it didn't.

There would be an unmistakeably outcry if Apple changed that.

You were more likely looking at one of the albums on iTunes that doesn't permit you to download the songs individually.

and i guess i've known it all along / the truth is, you have to be soft to be strong
  quote
stereo144
Member
 
Join Date: Jan 2005
 
2006-03-03, 00:07

If any of you use NewsFire, did it stop working for you after this upgrade? It doesn't want to receive any feeds anymore and I am trying to figure out if this upgrade had something to do with it.
  quote
dwayne.wilson
New Member
 
Join Date: Sep 2004
 
2006-03-03, 02:07

Quote:
Originally Posted by Roboman
Um...I'm sure it didn't.

There would be an unmistakeably outcry if Apple changed that.

You were more likely looking at one of the albums on iTunes that doesn't permit you to download the songs individually.
Nope. Looked at all featured albums on front page and all of Merle Haggard catalog, Cars, Def Leppard, Boston, Elvis Costello, all album purchase only, no song purchase. I may be wrong, but thats what I am seeing. Can you see different?
  quote
Brad
Selfish Heathen
 
Join Date: May 2004
Location: Zone of Pain
 
2006-03-03, 05:50

The overwhelming majority are still by song here in the US. What store are you using?
  quote
Posting Rules Navigation
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Page 1 of 2 [1] 2  Next

Post Reply

Forum Jump
Thread Tools
Similar Threads
Thread Thread Starter Forum Replies Last Post
Security Update 2005-7 v1.1 in Software Update DMBand0026 Apple Products 4 2005-08-19 02:22
Wait a second, did I read that right? OSX for Intel? And other musings. HOM Speculation and Rumors 96 2005-05-26 16:35
Security Update 9-16-2004 in Software Update DMBand0026 Apple Products 2 2004-09-17 00:06
Security Update 9-7-2004 in Software Update DMBand0026 Apple Products 16 2004-09-09 08:07
What's accessing my hard disk??? (Help Please!!) stevegong Genius Bar 36 2004-06-11 19:05


« Previous Thread | Next Thread »

All times are GMT -5. The time now is 05:18.


Powered by vBulletin®
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004 - 2024, AppleNova