O'Grady's PowerPage » bug

Dropbox 2.0.0 released

Posted by:
Date: Tuesday, March 12th, 2013, 11:27
Category: News, Software

A nifty thing has just hit version 2.0.0.

On Tuesday, Dropbox released version 2.0.0 of its cloud-based storage client for Mac OS X. The new version, a 26.1 megabyte download (via MacUpdate), which adds the following fixes and changes:
- Fix a bug where discrete graphics would be enabled on OS X laptops.

- Add support for Brazilian Portuguese.

- Other small fixes.

Dropbox 2.0.0 requires Mac OS X 10.4 or later to install and run.

If you’ve tried the new beta and have any feedback to offer, please let us know in the comments.

Microsoft releases Office 2011 14.3.2, Microsoft Office 2008 12.3.6 updates for Mac

Posted by:
Date: Tuesday, March 12th, 2013, 09:17
Category: News, Software

On Tuesday, Microsoft released its Microsoft Office 2011 14.3.2 update. The update, a 118 megabyte download, adds the following fixes and features:

- This update fixes critical issues and also helps to improve security. It includes fixes for vulnerabilities that an attacker can use to overwrite the contents of your computer’s memory with malicious code.

Microsoft Office 2011 14.3.2 requires Mac OS X 10.5.8 or later to install and run.

The company also released its Office 2008 12.3.6 update, a 219.9 megabyte download (via MacUpdate), which offers the following fixes and changes:

- This update fixes critical issues and also helps to improve security. It includes fixes for vulnerabilities that an attacker can use to overwrite the contents of your computer’s memory with malicious code.

Microsoft Office 2008 12.3.6 requires Mac OS X 10.4.9 or later to install and run.

Google Chrome updated to 25.0.1364.160

Posted by:
Date: Friday, March 8th, 2013, 07:52
Category: News, security, Software

google-chrome-logo

You can’t fault a company for regularly updating its software.

On Friday, Google released version 25.0.1364.160 of its Chrome web browser. The update, a 48.8 megabyte download, adds the following fixes and changes:

- [Fixed] High CVE-2013-0912: Type confusion in WebKit.

Google Chrome 25.0.1364.160 requires an Intel-based Mac with Mac OS X 10.6 or later to install and run. If you’ve tried the new version and have any feedback to offer, please let us know in the comments.

Mozilla releases Firefox 19.0.2 update

Posted by:
Date: Friday, March 8th, 2013, 07:33
Category: News, Software

elfirefox

Hey, an update’s an update.

On Friday, Mozilla.org released version 19.0.2 of its Firefox web browser. The new version, a 39.6 megabyte download and adds the following fixes and changes:

- Security-driven release: [Fixed] Use-after-free in HTML Editor.

Firefox 19.0.2 requires an Intel-based Mac running Mac OS X 10.6 or later to install and run.

If you’ve tried the new version and have any feedback to offer, please let us know in the comments.

Google Chrome updated to 25.0.1364.155

Posted by:
Date: Thursday, March 7th, 2013, 06:09
Category: News, Software

google-chrome-logo

Hey, an update’s an update.

On Wednesday, Google released version 25.0.1364.155 of its Chrome web browser. The update, a 48.8 megabyte download, adds the following fixes and changes:

- This release fixes a crash when typing in the Omnibox.

Google Chrome 25.0.1364.155 requires an Intel-based Mac with Mac OS X 10.6 or later to install and run. If you’ve tried the new version and have any feedback to offer, please let us know in the comments.

Apple releases Java 2013-002 update for Mac OS X 10.7, 10.8 operating systems, Java for Mac OS X 10.6 Update 14

Posted by:
Date: Tuesday, March 5th, 2013, 07:38
Category: News, security, Software

applelogo_silver

A security update never truly goes unappreciated.

Following up on recently discovered zero-day Java security holes, Apple releases Java updates for its Mac OS X 10.6, 10.7 and 10.8 operating systems.

The first update, Java for Mac OS X 10.6 Update 14, stands as a 72.8 megabyte download and offers the following fixes and changes:

- Delivers improved security, reliability, and compatibility by updating Java SE 6 to 1.6.0_41.

The update requires an Intel-based Mac running Mac OS X 10.6.8 or later to install and run.

The second update, Apple Java 2013-002, stands as a 68.3 megabyte download and offers the following fixes and changes:

- Uninstalls the Apple-provided Java applet plug-in from all web browsers. To use applets on a web page, click on the region labeled “Missing plug-in” to go download the latest version of the Java applet plug-in from Oracle.

- Removes the Java Preferences application, which is no longer required to configure applet settings.

The update requires an Intel-based Mac running Mac OS X 10.7 or later to install and run.

The updates can be located, snagged and installed via the Software Update feature built into the Mac OS X operating system.

If you’ve tried the updates and have any feedback to offer, please let us know in the comments.

Researcher locates HTML 5 exploit, floods hard drive with cat images in proof of concept video

Posted by:
Date: Monday, March 4th, 2013, 07:32
Category: News, security, Software

HTML5_Logo_256

In as much as Java and Adobe Flash Player have taken recent beatings where security is concerned, apparently no platform is safe.

Per the BBC, a recently discovered flaw in the HTML 5 coding language could allow websites to bombard users with gigabytes of junk data, with a number of popular browsers being open to the vulnerability.

According to developer Feross Aboukhadijeh, who uncovered the bug this week and posted it to his blog, data dumps can be performed on most major Web browsers, including Apple’s Safari, Google’s Chrome, Microsoft’s Internet Explorer and Opera, the BBC reported. The only browser to stop data dump tests was Mozilla’s Firefox, which capped storage at 5MB.

If in doubt, this proof of concept video sorta says it all…:



The problem is rooted in how HTML 5 handles local data storage. While each browser has different storage parameters, many of which support user-definable limits, all provide for at least 2.5 megabytes of data to be stored on a user’s computer.

Aboukhadijeh discovered a loophole that bypasses the imposed data cap by creating numerous temporary websites that are linked to a user-visited site. Because most browsers don’t account for the contingency, the secondary sites were allowed local storage provisions in amounts equal to the primary site’s limit. By generating a multitude of linked websites, the bug can dump enormous amounts of data onto affected computers.

In testing the flaw, Aboukhadijeh was able to dump 1GB of data every 16 seconds on his SSD-equipped MacBook Pro with Retina display. He noted that 32-bit browsers like Chrome may crash before a disk is filled.

“Cleverly coded websites have effectively unlimited storage space on visitor’s computers,” Aboukhadijeh wrote in a blogpost.

The developer has released code to exploit the bug and has created a dedicated website called Filldisk to highlight the flaw. In true internet meme fashion, the site dumps images of cats on to an affected machine’s hard drive.

Bug reports have already been sent to makers of the affected Web browsers, and Aboukhadijeh said malicious use of his code has yet to been seen in the wild.

Stay tuned for additional details as they become available.

CrossOver updated to 12.1.2

Posted by:
Date: Monday, March 4th, 2013, 07:47
Category: News, Software

You can’t knock a decent update.

CrossOver, the popular virtualization program from CodeWeavers, has been updated to version 12.1.2. The new version, a 76 megabyte download, is available as a demo, offers the following fixes and changes:
- Fixed a bug which caused Steam to get stuck in a loop while trying to update.

- Fixed a bug which caused performance to suffer badly in Skyrim, and possibly some other games, on certain Linux systems.

- Fixed a bug which caused Outlook 2010 to fail to open .xlsx, .pptx, and .docx attachments.

- Fixed a bug which caused Quicken to fail to connect to Chase Bank online.
Office 2007 and 2010 will now display help topics!

Mac OS X:
- We have improvements to windowing in the Mac Driver.

- We are hopeful that changes in this version of CrossOver will mean that gaming performance will improve when Apple releases its upcoming OS X 10.8.3.

CrossOver 12.1.2 retails for US$59.95 and requires Mac OS X 10.6 and or later and an Intel-based Mac to install and run.

If you’ve tried the new version and have any feedback to offer, please let us know in the comments.

VirtualBox updated to 4.2.8

Posted by:
Date: Monday, March 4th, 2013, 06:17
Category: News, Software

virtualbox.png

VirtualBox, an open source x86 virtualization project available for free has just hit version 4.2.8. The new version, a 109 megabyte download, features the following fixes and changes:
- VMM: fixed guest crash with huge amount of guest RAM on VT-x hosts (bug #11306)

- GUI: fixed a layout bug in the Mac OS X clone VM dialog (bug #10982).

- GUI: not all the translation tags were taken into account during the language switch (bug #11342).

- GUI: take guest screenshot dialog sometimes had no keyboard input available on Windows host.

- Main/Machine: fix generation of spurious event for inaccessible VMs which triggered an endless event generation loop in cooperation with the GUI which became unresponsive (4.2.6 regression, bug #11323).

- Main/Display: fix for an access violation under certain conditions in multi-monitor configurations (bug #10539).

- Main/Metrics: network metrics are now collected for active (up) interfaces only, the state of an interface being evaluated when the associated metric is enabled via setupMetrics.

- Snapshots: reduce the time for merging snapshots under certain conditions.

- Storage: fixed data corruption after resizing a VDI image under certain circumstances (bug #11344).

- Storage: fixed non working online merging of snapshots (4.2.6 regression, bug #11359).

- Storage: fixed crash when connecting to certain QNAP iSCSI targets.

- Storage: fixed incompatibility of VHD differencing images with Hyper-V (bug #5990).

- Bridged Networking: fixed TCP pseudo header checksum computation for IPv6 (bug #9380).

- 3D support: fix Battlefield 1942 game crashes (bug #11369).

- Settings: really sanitize the name of VM folders and settings file, the code was disabled before (bug #10549).

- Settings: allow to change VRDE settings for saved VMs.

- VBoxManage: don’t crash during screenshotpng if there is no display (bug #11363).

- Linux hosts: work around gcc bug 55940 which might lead to wrong kernel module code if gcc 4.7 is used to compile the 32-bit Linux host kernel (bug #11035).

- Linux hosts: fixed inconsistent lock state and deadlock warnings on module load and VM startup when CONFIG_PROVE_LOCKING is enabled (bug #11318).

- Linux hosts: made “]” key work again on Japanese keyboards.

- Mac OS X hosts: don’t crash the kernel during dtrace if the VBox kernel extensions are loaded (10.6 hosts only; bug #11273).

- Solaris / Mac OS X hosts: machine CPU load metrics now report 100% when all cores are fully utilized (used to be a single core).

- Solaris 11 host installer: wait for any services left over from a previous installation to be terminated to avoid confusing SMF.

- Guest Additions: don’t block signals for processes executed via guest control.

- Guest Additions: fixed a small memory leak in VBoxService (bug #10970).

- Windows Additions: fixed shared folder issue with large reads/writes on 64 bit Windows guests (bug #11115).

- Linux Additions: Linux 3.8 compile fixes (bug #11036).

- X11 Additions: fixed blocked SIGALRM in 3D desktop sessions (bug #10987).

- X11 Additions: fixed an unresolved reference in vboxvideo_drv for X.org 6.8 guests and before (e.g. RHEL4; 4.2.0 regression).

- X11 Additions: fixed screen automatic resizing for guests with X.org 1.3 or older (4.2.0 regression).

VirtualBox 4.2.8 is available for free and requires an Intel-based Mac running Mac OS X 10.6 or later and an Intel-based Mac to install and run.

If you’ve tried the new version and have any feedback, please let us know.

Mozilla releases Firefox 19.0.1 update

Posted by:
Date: Friday, March 1st, 2013, 07:24
Category: News, Software

elfirefox

Well, a new update can’t hurt.

On Tuesday, Mozilla.org released version 19.0.1 of its Firefox web browser. The new version, a 39.6 megabyte download and adds as-yet-unspecified fixes and changes.

Long story short, if you’re feeling a bit courageous, give it a try and let us know what you think in the comments.

Firefox 19.0.1 requires an Intel-based Mac running Mac OS X 10.6 or later to install and run.

If you’ve tried the new version and have any feedback to offer, please let us know in the comments.