Adium X Updated to 1.3.3

Posted by:
Date: Friday, February 20th, 2009, 07:07
Category: Software

adiumducky.gif
Adium, the open source instant message chat client with support for multiple programs (including AOL Instant Messenger, ICQ, Jabber, MSN, Yahoo! Google Talk, Bonjour, etc.) has been updated to version 1.3.3.
The new version, a 23.4 megabyte download, sports the following major fixes and changes listed here.
Adium X is available for free and requires Mac OS X 10.4 or later to run. The program functions as a Universal Binary and runs at native speeds on both PowerPC and Intel-based hardware.
If you’ve tried the new build and have any feedback, positive or negative, let us know in the comments or forums.

(more…)

Cocktail 4.3.1 Leopard Edition Released

Posted by:
Date: Friday, February 20th, 2009, 07:43
Category: Software

cocktaillogo.jpg
On Friday, shareware developer Maintain released version 4.3.1 of Cocktail (Leopard Edition), Cocktail, the popular shareware utility program that allows for additional Mac OS X system tests.
The new version, a 1.8 megabyte download, adds the following fixes and changes:

  • Addresses an issue in which Cocktail may stop responding during a scheduled clearing of system caches.
  • Added clearing of the trojan Lamzev.A and the worm Inqtana.A.
  • Minor improvements on the clear potentially harmful files procedure.
  • Cocktail 4.3 retails for a US$14.95 shareware registration fee and requires Mac OS X 10.5 or later to run.
    If you’ve tried the new version and have any kind of feedback about it, let us know in the comments or forums.

    (more…)

    Rumor: Apple Executives Rethinking iPhone Pricing for 2009

    Posted by:
    Date: Wednesday, February 18th, 2009, 13:54
    Category: iPhone

    3giphone.jpg
    With a new generation of iPhones all but certain this year, a discussion between analysts and Apple’s top brass has also dropped clues that the iPhone’s pricing may not be static this year.
    According to AppleInsider, Toni Sacconaghi of Bernstein Research mentions in a research note that a discussion with Apple COO Tim Cook, CFO Petter Oppenheimer and worldwide marketing senior VP Phil Schiller point both to an upgrade to the touchscreen device as well as to the possibility of “different pricing/price points” this year, with Cook “examining iPhone’s business model” for possible changes.
    Apple execs Cook and Schiller have dropped teasers regarding 2009 as being “very exciting” year for the company’s handset.
    With no concrete details emerging, Sacconaghi was quick to dampen rumors of an iPhone nano or a similar low-budget cellphone. Without naming a source, he gathers from his investigations that the company isn’t presently chasing such a concept.
    Any future iPhone, Mr. Sacconaghi said, will probably have at least a web browser and access to the App Store, the latter of which has Cook, Oppenheimer and Schiller particularly “bullish” about the iPhone’s success as it gives Apple an advantage over rival smartphone makers.
    One detail which remained static was Cook and Schiller’s continued insistence that the iPhone wouldn’t come with a hardware keyboard. The duo seemed to inflect that a fixed set of keys made it harder to implement different keyboards, especially where different languages were concerned and would also make it harder for third-party developers hoping to use their own custom control schemes. Using the touchscreen as the primary input improves Apple’s bottom line by letting it ship what’s essentially the same phone across many different regions, the executives say.
    Were a price shakeup to occur, it wouldn’t be out of character for Apple. Each year of the iPhone’s existence has had at least one major price shakeup: the iPhone’s maximum price fell from US$599 to US$399 in 2007, while the iPhone 3G in 2008 not only reduced this top price to US$299 but switched the behind-the-scenes profit model from revenue sharing with carriers to a heavy device subsidy.
    While Sacconaghi doesn’t make many predictions in his report, he repeats frequent expectations of an iPhone in summer and also believes Apple may update the iMac in March.
    If you have any thoughts on this, please let us know in the comments or forums.

    (more…)

    Adobe Developing Flash Light for Mobile Phones, Application Still Not iPhone-Ready

    Posted by:
    Date: Tuesday, February 17th, 2009, 09:23
    Category: iPhone

    3giphone.jpg
    Adobe’s Flash Lite multimedia player, while still lacking iPhone compatibility, may reach one billion mobile phones by the end of March according to market researcher Strategy Analytics. In a recent report, the company said that Adobe could reach its desired target mark one year ahead of schedule given its recent support for HD video as well as Nokia’s agreements to install Flash Lite on its phones. Another factor mentioned by the company is the absence of real competition for Adobe’s Flash Lite player. Representatives from the firm went on to predict that another 1.5 billion smartphones could carry the software within two years according to ComputerWorld.
    On the competition end, Microsoft is currently developing a Silverlight for Mobile Player for release on Nokia’s Symbian S60 devices and its own Windows Mobile Phones. Representatives from the company expressed opinions that the plugin won’t make a significant impact on Flash Lite’s current increases.
    To help continue with its progress, Adobe will be demonstrating a Flash Player 10 for smartphones at Mobile World Congress in Barcelona this week. Along with the Flash 10 beta, Adobe will also be releasing the beta of a new Flash Lite distributable player based on Flash Lite 3.1.
    Even with the increase in phones using Flash Lite, Adobe is still thought distant from getting an equivalent application onto the iPhone. Analysts with Strategy Analytics claimed that Adobe is working diligently to get Flash onto the iPhone and is looking to have it ready to go much later this year.
    Independent analyst Jack Gold of J. Gold Associates claims that performance and business are the chief obstacles to Flash on the iPhone. In order to get high performance, Flash must run in the lower layers of the OS, which Apple restricts as part of its iPhone SDK guidelines. Gold stated that Apple will want to push its own technology, such as QuickTime, rather than depend on a third party’s development, despite Apple’s long history with Adobe.
    As always, let us know what you think of the situation in the comments or forums.

    (more…)

    CoolBook Updated to 2.13, Receives Unibody MacBook Support

    Posted by:
    Date: Monday, February 16th, 2009, 08:30
    Category: Software

    coolbook.jpg
    Over the weekend, developer Magnus Lundholm released CoolBook 2.13, the latest version of his shareware CPU frequency, voltage and temperature monitoring program.
    The new version, a 600 kilobyte download, adds support for Apple’s new unibody MacBooks as well as repairs the following bugs and features:

  • Fixed a bug adding invalid values to the frequency selector.
  • Fixed an issue with the throttling level selector.
  • Additional fixes to support the new unibody models.
  • CoolBook 2.13 retails for a US$10 shareware registration fee and requires Mac OS X 10.4 or later and an Intel-based Mac to run.
    If you’ve tried the program and have either positive or negative feedback about it, let us know over in the forums.

    (more…)

    Apple Releases Security Update 2009-001

    Posted by:
    Date: Friday, February 13th, 2009, 09:56
    Category: Software

    applesecurity.jpg
    Making Friday a somewhat official update-o-rama, Apple released Security Update 2009-001, its first collection of security fixes for the new year.
    The 43.4 megabyte download contains the following fixes and features:

  • AFP Server:
    Impact: A user with the ability to connect to AFP Server may be a able to trigger a denial of service
    Description: A race condition in AFP Server may lead to an infinite loop. Enumerating files on an AFP server may lead to a denial of service. This update addresses the issue through improved file enumeration logic. This issue only affects systems running Mac OS X v10.5.6.
  • Apple Pixlet Video:
    Impact: Opening a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution
    Description: A memory corruption issue exist in the handling of movie files using the Pixlet codec. Opening a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue through improved bounds checking. Credit: Apple.
  • CarbonCore:
    Impact: Opening a file with a maliciously crafted resource fork may lead to an unexpected application termination or arbitrary code execution
    Description: A memory corruption issue exists in Resource Manager’s handling of resource forks. Opening a file with a maliciously crafted resource fork may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue through improved validation of resource forks. Credit: Apple.
  • CFNetwork:
    Impact: Restores proper operation of cookies with null expiration times
    Description: This update addresses a non-security regression introduced in Mac OS X 10.5.6. Cookies may not be properly set if a web site attempts to set a session cookie by supplying a null value in the “expires” field, rather than omitting the field. This update addresses the issue by ignoring the “expires” field if it has a null value.
  • CFNetwork:
    Impact: Restores proper operation of session cookies across applications
    Description: This update addresses a non-security regression introduced in Mac OS X 10.5.6. CFNetwork may not save cookies to disk if multiple open applications attempt to set session cookies. This update addresses the issue by ensuring that each application stores its session cookies separately.
  • Certificate Assistant:
    Impact: A local user may manipulate files with the privileges of another user running Certificate Assistant
    Description: An insecure file operation exists in Certificate Assistant’s handling of temporary files. This could allow a local user to overwrite files with the privileges of another user who is running Certificate Assistant. This update addresses the issue through improved handling of temporary files. This issue does not affect systems prior to Mac OS X v10.5. Credit: Apple.
  • ClamAV:
    Impact: Multiple vulnerabilities in ClamAV 0.94
    Description: Multiple vulnerabilities exist in ClamAV 0.94, the most serious of which may lead to arbitrary code execution. This update addresses the issues by updating ClamAV to version 0.94.2. ClamAV is distributed only with Mac OS X Server systems. Further information is available via the ClamAV website at http://www.clamav.net/.
  • CoreText:
    Impact: Viewing maliciously crafted Unicode content may lead to an unexpected application termination or arbitrary code execution
    Description: A heap buffer overflow may occur when processing Unicode strings in CoreText. Using CoreText to handle maliciously crafted Unicode strings, such as when viewing a maliciously crafted web page, may result in an unexpected application termination or arbitrary code execution. This update addresses the issue through improved bounds checking. This issue does not affect systems prior to Mac OS X v10.5. Credit to Rosyna of Unsanity for reporting this issue.
  • CUPS:
    Impact: Visiting a maliciously crafted website may lead to an unexpected application termination
    Description: Exceeding the maximum number of RSS subscriptions results in a null pointer dereference in the CUPS web interface. This may lead to an unexpected application termination when visiting a maliciously crafted website. In order to trigger this issue, valid user credentials must either be known by the attacker or cached in the user’s web browser. CUPS will be automatically restarted after this issue is triggered. This update addresses the issue by properly handling the number of RSS subscriptions. This issue does not affect systems prior to Mac OS X v10.5.
  • DS Tools:
    Impact: Passwords supplied to dscl are exposed to other local users
    Description: The dscl command-line tool required that passwords be passed to it in its arguments, potentially exposing the passwords to other local users. Passwords exposed include those for users and administrators. This update makes the password parameter optional, and dscl will prompt for the password if needed. Credit: Apple.
  • fetchmail:
    Impact: Multiple vulnerabilities in fetchmail 6.3.8
    Description: Multiple vulnerabilities exist in fetchmail 6.3.8, the most serious of which may lead to a denial of service. This update addresses the issues by updating to version 6.3.9. Further information is available via the fetchmail web site at http://fetchmail.berlios.de/
  • Folder Manager:
    Impact: Other local users may access the Downloads folder
    Description: A default permissions issue exists in Folder Manager. When a user deletes their Downloads folder and Folder Manager recreates it, the folder is created with read permissions for everyone. This update addresses the issue by having Folder Manager limit permissions so that the folder is accessible only to the user. This issue only affects applications using Folder Manager. This issue does not affect systems prior to Mac OS X v10.5. Credit to Graham Perrin of CENTRIM, University of Brighton for reporting this issue.
  • FSEvents:
    Impact: Using the FSEvents framework, a local user may be able to see filesystem activity that would otherwise not be available
    Description: A credential management issue exists in fseventsd. By using the FSEvents framework, a local user may be able to see filesystem activity that would otherwise not be available. This includes the name of a directory which the user would not otherwise be able to see, and the detection of activity in the directory at a given time. This update addresses the issue through improved credential validation in fseventsd. This issue does not affect systems prior to Mac OS X v10.5. Credit to Mark Dalrymple for reporting this issue.
  • Network Time:
    Impact: The Network Time service configuration has been updated
    Description: As a proactive security measure, this update changes the default configuration for the Network Time service. System time and version information will no longer be available in the default ntpd configuration. On Mac OS X v10.4.11 systems, the new configuration takes effect after a system restart when Network Time service is enabled.
  • perl:
    Impact: Using regular expressions containing UTF-8 characters may lead to an unexpected application termination or arbitrary code execution
    Description: A memory corruption issue exists in the handling of certain UTF-8 characters in regular expressions. Parsing maliciously crafted regular expressions may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue by performing additional validation of regular expressions.
  • Printing:
    Impact: A local user may obtain system privileges
    Description: An error handling issue exists in csregprinter, which may result in a heap buffer overflow. This may allow a local user to obtain system privileges. This update addresses the issue through improved error handling. Credit to Lars Haulin for reporting this issue.
  • python:
    Impact: Multiple vulnerabilities in python
    Description: Multiple vulnerabilities exist in python, the most serious of which may lead to arbitrary code execution. This update addresses the issues by applying patches from the python project.
  • Remote Apple Events:
    Impact: Sending Remote Apple events may lead to the disclosure of sensitive information
    Description: An uninitialized buffer issue exists in the Remote Apple Events server, which may lead to disclosure of memory contents to network clients. This update addresses the issue through proper memory initialization. Credit: Apple.
  • Remote Apple Events:
    Impact: Enabling Remote Apple Events may lead to an unexpected application termination or the disclosure of sensitive information
    Description: An out-of-bounds memory access exits in Remote Apple Events. Enabling Remote Apple Events may lead to an unexpected application termination or the disclosure of sensitive information to network clients. This update addresses the issue through improved bounds checking. Credit: Apple.
  • Safari RSS:
    Impact: Accessing a maliciously crafted feed: URL may lead to arbitrary code execution
    Description: Multiple input validation issues exist in Safari’s handling of feed: URLs. esp issues allow execution of arbitrary JavaScript in the local security zone. This update addresses the issues through improved handling of embedded JavaScript within feed: URLs. Credit to Clint Ruoho of Laconic Security, Billy Rios of Microsoft, and Brian Mastenbrook for reporting these issues.
  • servermgrd:
    Impact: Remote attackers may be able to access Server Manager without valid credentials
    Description: An issue in Server Manager’s validation of authentication credentials could allow a remote attacker to alter the system configuration. This update addresses the issue through additional validation of authentication credentials. This issue does not affect systems prior to Mac OS X v10.5. Credit: Apple.
  • SMB:
    Impact: Connecting to a maliciously crafted SMB file system may lead to an unexpected system shutdown or arbitrary code execution with system privileges
    Description: An integer overflow in SMB File System may result in a heap buffer overflow. Connecting to a maliciously crafted SMB file system may lead to an unexpected system shutdown or arbitrary code execution with system privileges. This update addresses the issue through improved bounds checking. This issue does not affect systems prior to Mac OS X v10.5. Credit: Apple.
  • SMB:
    Impact: Connecting to a maliciously crafted SMB file server may lead to an unexpected system shutdown
    Description: A memory exhaustion issue exists in the SMB File System’s handling of file system names. Connecting to a maliciously crafted SMB file server may lead to an unexpected system shutdown. This update addresses the issue by limiting the amount of memory allocated by the client for file system names. Credit: Apple.
  • SquirrelMail:
    Impact: Multiple vulnerabilities in SquirrelMail
    Description: SquirrelMail is updated to version 1.4.17 to address several vulnerabilities, the most serious of which is a cross-site scripting issue. Further information is available via the SquirrelMail web site at http://www.SquirrelMail.org/
  • X11:
    Impact: Multiple vulnerabilities in X11 server
    Description: Multiple vulnerabilities exist in X11 server. The most serious of these may lead to arbitrary code execution with the privileges of the user running the X11 server, if the attacker can authenticate to the X11 server. This update addresses the issues by applying the updated X.Org patches. Further information is available via the X.Org website at http://www.x.org/wiki/Development/Security
  • X11:
    Impact: Multiple vulnerabilities in FreeType v2.1.4
    Description: Multiple vulnerabilities exist in FreeType v2.1.4, the most serious of which may lead to arbitrary code execution when processing a maliciously crafted font. This update addresses the issues by incorporating the security fixes from version 2.3.6 of FreeType. Further information is available via the FreeType site at http://www.freetype.org/ The issues are already addressed in systems running Mac OS X v10.5.6.
  • X11:
    Impact: Multiple vulnerabilities in LibX11
    Description: Multiple vulnerabilities exist in LibX11, the most serious of which may lead to arbitrary code execution when processing a maliciously crafted font. This update addresses the issues by applying the updated X.Org patches. Further information is available via the X.Org website at http://www.x.org/wiki/Development/Security These issues do not affect systems running Mac OS X v10.5 or later.
  • XTerm:
    Impact: A local user may send information directly to another user’s Xterm
    Description: A permissions issue exists in Xterm. When used with luit, Xterm creates tty devices accessible by everyone. This update addresses the issue by having Xterm limit the permissions so tty devices are accessible only by the user.
  • Security Update 2009-001 requires Mac OS X 10.5 or later to install and run.
    If you’ve tried the update and noticed any changes, please let us know in the comments or forums.

    (more…)

    Apple Releases Java for OS X 10.5 Update 3

    Posted by:
    Date: Friday, February 13th, 2009, 08:39
    Category: Software

    applelogo1.jpg
    Early Friday, Apple released its Java for Mac OS X 10.5 Update 3 patch. The 3.1 megabyte download, adds the following fix:

  • Java: Impact: Multiple vulnerabilities in Java Web Start and Java Plug-in
    Description: Multiple vulnerabilities exist in Java Web Start and the Java Plug-in, the most serious of which may allow untrusted Java Web Start applications and untrusted Java applets to obtain elevated privileges. Visiting a web page containing a maliciously crafted Java applet may lead to arbitrary code execution with the privileges of the current user. This update provides patches for the Java Bug IDs 6694892, 6707535, 6727081 and 6767668 from Sun Microsystems.
  • The update requires Mac OS X 10.5 or later to install and run.
    If you’ve tried the update and have any feedback to offer, let us know in the comments or forums.

    (more…)

    VMWare Releases Fusion 2.0.2

    Posted by:
    Date: Thursday, February 12th, 2009, 09:45
    Category: Software

    vmwarelogo.jpg
    Late Wednesday, virtualization softare maker VMWare released version 2.0.2 of its Fusion software for the Mac.
    Similar to other virtualization software packages, VMWare allows users to run alternate operating systems such as Windows and Linux distributions on Intel-based Macs at native speeds. Other features, such as Unity, allow users to run and minimize Windows applications from the Mac OS X Dock.
    The new version, a 246 megabyte download, offers the following new features and fixes:

  • Allows importing Windows virtual machines from both Parallels Desktop 4.0 and Parallels Server for Mac.
  • Supports mounting unencrypted .dmg file format as a CD/DVD disk image, in addition to .iso file format.
  • Supports Mac OS X 10.5.6 as a host operating system.
  • Provides experimental support for Mac OS X Server 10.5.6 as a guest operating system.
  • Supports Ubuntu 8.10 as a guest operating system, including features such as VMware Tools with prebuilt kernel modules, Easy Install, and Unity.
  • Ships with a 12-month complimentary subscription to McAfee VirusScan Plus 2009 antivirus software, with localization support for French, German, Italian, Spanish, Simplified Chinese, and Japanese.
  • Provides performance improvements when browsing mirrored folders and shared folders in Windows virtual machines.
  • Supports display of Windows applications in Unity view as 48 pixel x 48 pixel icons.
  • Resolves issues with “Optimize for Mac OS application performance” preference option for Mac OS X 10.5.5 and later.
  • The software requires Mac OS X 10.4 or later to install and run and retails for US$79.99.
    If you’ve tried VMware Fusion 2.0 or have a favorite virtualization program of choice, let us know in the comments or forums.

    (more…)

    Microsoft Implements Hotmail POP3 Support in United States, Other Countries

    Posted by:
    Date: Wednesday, February 11th, 2009, 10:55
    Category: iPhone

    3giphone.jpg
    Back in January, Microsoft announced that the company would be bringing POP3 access to its Hotmail services in select countries, a change which would prove helpful to a number of iPhone owners. Unfortunately, the service had yet to become available in the United States.
    According to iPhone Alley, Microsoft seems to have implemented this feature in the United States as well as other countries since the announcement. Per notice received today, POP3 support is currently active and working on the iPhone.
    In order to get Hotmail POP3 up and running on your iPhone, you’ll have to manually set everything up. To do this, use pop3.live.com (port 995) for incoming mail and smtp.live.com (port 25) for outgoing. Your account will be your full Hotmail/Live address.
    If you’ve tried this on your iPhone or iPod touch and can offer any feedback, please let us know in the comments or forums.

    (more…)

    MobileChat AIM Client Released for iPhone

    Posted by:
    Date: Wednesday, September 5th, 2007, 08:24
    Category: iPhone


    For anyone who ever wanted to use their iPhone as an AOL Instant Messenger device, the guys over at twenty08 have announced the release of MobileChat, their first AIM client for the handset.
    According to MacSlash, the program can be installed via NullRiver‘s AppTapp Installer and worked with from there. The program’s source code is also available for download, review and tinkering with on your end.
    MobileChat is currently still a beta and a few minor glitches have been reported to date. Users can also take a look at ApolloIM, another open source iPhone AIM client.
    If you’ve tried either of these programs or have feedback of any sort, let us know in the comments or forums.

    (more…)