My MacOS X

Apple today released Safari 4.0.5 for Mac (Tiger, Leopard and Snow Leopard) bringing a number of enhancements to Apple’s Internet browser application.

This update is recommended for all Safari users and includes improvements to performance, stability, and security including:

• Performance improvements for Top Sites
• Stability improvements for 3rd-party plug-ins
• Stability improvements for websites with online forms and Scalable Vector Graphics
• Fixes an issue that prevented Safari from changing settings on some Linksys routers
• Fixes an issue that prevented some iWork.com users from commenting on documents

For detailed information on the security content of this update, please visit this site: http://support.apple.com/kb/HT1222.

Safari 4.0.5 is available via Software Update and Apple’s Safari download page. The download weighs in at 30.52 MB (Snow Leopard), 38.59 MB (Leopard), 26.78 MB (Tiger).

Provides system software resources that are shared by iLife and other applications. This update improves overall stability for the Media Browser and iPhoto slideshows. It also provides compatibility between Aperture 3 and the Media Browser.

The update is recommended for all users of iLife ’09, iWork ’09, and Aperture.

Available via software update

Google today announced  the release of a new beta of Google Chrome for Mac, adding several new features such as extensions and bookmark syncing that were left out of the initial beta released in December while also focusing on a “snappy, safe, and simple browsing experience” for users.

With this new version, you’ll be able to install any of over 2,200 extensions (and counting!) currently available in Chrome’s extensions gallery. Extensions can add useful, informative, fun, or quirky functionality to the browser. You can manage your extensions by clicking on the Window menu and choosing “Extensions.”

Bookmark syncing allows Chrome users to keep their bookmarks synchronized among Chrome browsers on Mac, Windows, and Linux machines. Also added in the new beta are bookmark, cookie, and task managers for increased functionality. A new video preview of Google Chrome for Mac has also been posted.

Existing Chrome users should be automatically upgraded to the new beta (version 5.0.307) within the next day.

iTunes 9.0.3 is available from Apple’s Website or via the Software Update mechanism in OS X.

iTunes 9.0.3 provides a number of important bug fixes, including:

• iTunes no longer ignores your “Remember password for purchases” setting.
• Addresses problems with syncing some Smart Playlists and Podcasts with iPod.
• Resolves a problem recognizing when iPod is connected.
• Addresses issues that affect stability and performance.
• iTunes 9 comes with many new features and improvements, including:

• An improved look and feel, including a new Column Browser for easily browsing your artists or albums, movies, TV shows, and more.
• iTunes Store has a brand new look, with improved navigation for quick and easy exploration.
• iTunes LP and iTunes Extras create unique experiences that feature exclusive interviews, videos, photos, and more — available with select album and movie purchases on the iTunes Store.
• Home Sharing helps you manage your family’s iTunes collection between computers in your home. iTunes can automatically transfer new purchases, or you can choose just the items you want.
• Genius Mixes are created for you by iTunes and play songs from your library that go great together.
• iPod and iPhone syncing now allows you to organize your iPhone and iPod touch home screens directly in iTunes. Syncing is now also more flexible, allowing you to sync individual artists, genres, or TV show and Podcast episodes.
• iTunes U items are now organized into their own section in your iTunes library.
• Sync with iPod nano (5th generation), iPod classic (Fall 2009), and iPod touch (Fall 2009).
• iTunes 9 also includes many other improvements, such as HE-AAC encoding and playback, more flexibility with Smart Playlists rules, simpler organization of your media files inside an iTunes Media folder, and more.

Apple has released a firmware update for 2007 aluminum Apple keyboards.
The update improves battery performance when using the Apple Wireless Keyboard in conjunction with other Bluetooth devices such as the Magic Mouse or some Bluetooth headsets. It also fixes an issue that occurred with both the regular and wireless keyboard wherein keys could repeat randomly when typing.
More information, including installation instructions, is available on Apple’s Web site.

The update is available via Software Update and the Apple Support Downloads page. (Free 1.52 MB)

There Security Update 2010-001,
which can be downloaded and installed via Software Update preferences, or from Apple Downloads

Size: 22.4MB

• CoreAudio CVE-ID: CVE-2010-0036Available for: Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6.2, Mac OS X Server v10.6.2

  Impact: Playing a maliciously crafted mp4 audio file may lead to an unexpected application termination or arbitrary code execution

  Description: A buffer overflow exists in the handling of mp4 audio files. Playing a maliciously crafted mp4 audio file may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved bounds checking. Credit to Tobias Klein of trapkit.de for reporting this issue.

• CUPS CVE-ID: CVE-2009-3553Available for: Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6.2, Mac OS X Server v10.6.2

  Impact: A remote attacker may cause an unexpected application termination of cupsd

  Description: A use-after-free issue exists in cupsd. By issuing a maliciously crafted get-printer-jobs request, an attacker may cause a remote denial of service. This is mitigated through the automatic restart of cupsd after its termination. This issue is addressed through improved connection use tracking.

• Flash Player plug-in CVE-ID: CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800, CVE-2009-3951Available for: Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6.2, Mac OS X Server v10.6.2

  Impact: Multiple vulnerabilities in Adobe Flash Player plug-in

  Description: Multiple issues exist in the Adobe Flash Player plug-in, the most serious of which may lead to arbitrary code execution when viewing a maliciously crafted web site. The issues are addressed by updating the Flash Player plug-in to version 10.0.42. Further information is available via the Adobe web site at http://www.adobe.com/support/security/bulletins/apsb09-19.html Credit to an anonymous researcher and Damian Put working with TippingPoints Zero Day Initiative, Bing Liu of Fortinet’s FortiGuard Global Security Research Team, Will Dormann of CERT, Manuel Caballero and Microsoft Vulnerability Research (MSVR).

• ImageIO CVE-ID: CVE-2009-2285Available for: Mac OS X v10.5.8, Mac OS X Server v10.5.8

  Impact: Viewing a maliciously crafted TIFF image may lead to an unexpected application termination or arbitrary code execution

  Description: A buffer underflow exists in ImageIO’s handling of TIFF images. Viewing a maliciously crafted TIFF image may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved bounds checking. For Mac OS X v10.6 systems, this issue is addressed in Mac OS X v10.6.2.

• Image RAW CVE-ID: CVE-2010-0037Available for: Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6.2, Mac OS X Server v10.6.2

  Impact: Viewing a maliciously crafted DNG image may lead to an unexpected application termination or arbitrary code execution

  Description: A buffer overflow exists in Image RAW’s handling of DNG images. Viewing a maliciously crafted DNG image may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved bounds checking. Credit to Jason Carr of Carnegie Mellon University Computing Services for reporting this issue.

• OpenSSL CVE-ID: CVE-2009-3555Available for: Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6.2, Mac OS X Server v10.6.2

  Impact: An attacker with a privileged network position may capture data or change the operations performed in sessions protected by SSL

  Description: A man-in-the-middle vulnerability exists in the SSL and TLS protocols. Further information is available at http://www.phonefactor.com/sslgap A change to the renegotiation protocol is underway within the IETF. This update disables renegotiation in OpenSSL as a preventive security measure. The issue does not affect services using Secure Transport as it does not support renegotiation. Credit to Steve Dispensa and Marsh Ray of PhoneFactor, Inc. for reporting this issue.

Apple today released Mac OS X 10.6.2, the second maintenance update for Snow Leopard, via Software Update. The update brings several bug fixes, reportedly including one for a serious issue involving Guest accounts that has caused some users to lose all data from their primary user accounts.

The 10.6.2 Update is recommended for all users running Mac OS X Snow Leopard and includes general operating system fixes that enhance the stability, compatibility, and security of your Mac, including fixes for:

- an issue that might cause your system to logout unexpectedly
- a graphics distortion in Safari Top Sites
- Spotlight search results not showing Exchange contacts
- a problem that prevented authenticating as an administrative user
- issues when using NTFS and WebDAV file servers
- the reliability of menu extras
- an issue with the 4-finger swipe gesture
- an issue that causes Mail to quit unexpectedly when setting up an Exchange server
- Address Book becoming unresponsive when editing
- a problem adding images to contacts in Address Book
- an issue that prevented opening files downloaded from the Internet
- Safari plug-in reliability
- general reliability improvements for iWork, iLife, Aperture, Final Cut Studio, MobileMe, and iDisk
- an issue that caused data to be deleted when using a guest account

For detailed information on this update, please visit this website: http://support.apple.com/kb/HT3874.
For information on the security content of this update, please visit: http://support.apple.com/kb/HT1222.

iTunes 9.0.2 is available via Software Update, and with that comes compatibility with Apple TV 3.0, an “improved look and feel,” and an easier-to-explore iTunes Store.

iTunes 9.0.2 adds support for Apple TV software version 3.0, adds an option for a dark background for Grid View, and improves support for accessibility.

iTunes 9 comes with many new features and improvements, including:

• An improved look and feel, including a new Column Browser for easily browsing your artists or albums, movies, TV shows, and more.

• iTunes Store has a brand new look, with improved navigation for quick and easy exploration.

• iTunes LP and iTunes Extras create unique experiences that feature exclusive interviews, videos, photos, and more – available with select album and movie purchases on the iTunes Store.

• Home Sharing helps you manage your family’s iTunes collection between computers in your home. iTunes can automatically transfer new purchases, or you can choose just the items you want.

• Genius Mixes are created for you by iTunes and play songs from your library that go great together.

• iPod and iPhone syncing now allows you to organize your iPhone and iPod touch home screens directly in iTunes. Syncing is now also more flexible, allowing you to sync individual artists, genres, or TV show and Podcast episodes.

• iTunes U items are now organized into their own section in your iTunes library.

• Sync with iPod nano (5th generation), iPod classic (Fall 2009), and iPod touch (Fall 2009).

• iTunes 9 also includes many other improvements, such as HE-AAC encoding and playback, more flexibility with Smart Playlists rules, simpler organization of your media files inside an iTunes Media folder, and more.

Apple today released iMovie 8.0.5, bringing several compatibility improvements and bug fixes to the company’s consumer-level video editing application.

This update improves compatibility with a number of devices and fixes other minor issues, including:

- Improved compatibility with camcorders using the iFrame video format
- Improved compatibility with importing video captured on the iPod nano
- Fixed problems with resizing the iMovie window during playback

CNET offers additional detail on the new iFrame video format for which support is included in the update, noting that it brings smaller file sizes and faster importing speeds, as well as simplifying editing of footage.

Dubbed iFrame, the new video format is based on industry standard technologies like H.264 video and AAC audio. As expected with H.264, iFrame produces much smaller file sizes than traditional video formats, while maintaining its high-quality video. Of course, the smaller file size increases import speed and helps with editing video files.

The iFrame format, developed by Apple, is currently limited to two Sanyo camera models unveiled earlier today.

iFrame is a computer-friendly video format that has been specifically designed to simplify the process of working with video recorded from a camera. With iFrame, the video recorded in the camera is in the same format that will be used for editing, which means that importing video is fast and file sizes are small. This translates to quick and easy editing and sharing of movies across multiple platforms and devices. This new format can also be used with both Mac and PC compatible applications due to the use of standards-based technologies such as H.264, AAC, MP4 and MOV.

iMovie 8.0.5 weighs in at 35.56 MB and requires OS X 10.5.6 or later.

The seed is said to contain dozens of minor bug fixes and performance improvements in these areas:

Address Book, AppleScript, AppleScriptObjC, ATS, ColorSync, Component Manager, Core Animation, Core Audio, Core Chinese Engine, Core Data, Core Graphics, Core Text, File Manager, Garbage Collection, Graphic drivers, Help Viewer, ImageKit, IOHIDFamily, Networking, NS Image, OpenCL, OpenGL, OSA, QT Kit, Speech Recognition, Sync Services, and Xtype.

The seed notes reportedly include a caution that there is a known issue with optical drives: that they may not be recognized and the eject key may not eject the media, and that DVD Player may hang. As a result, not all developers may choose to install this build.
Note: Mac OS X 10.6.1 was released September 10.

Today Apple released a new iTunes 9.0.1 update for MacOS X and Windows systems. iTunes 9.0.1 provides a number of important bug fixes.

In iTunes 9, if you wanted the miniature iTunes player window, you had to hold the Option key while clicking the green button. As of iTunes 9.0.1, the pre-iTunes 9 behavior has returned—clicking the green button switches to the miniature player mode. (Option-clicking the green button now maximizes the window.)

iTunes 9.01

iTunes 9 comes with many new features and improvements, including:

• Resolves issues browsing the iTunes Store.
• Addresses a performance issue where iTunes may become unresponsive.
• Fixes a problem where iTunes may unexpectedly quit.
• Fixes a problem syncing Podcasts in playlists to iPod or iPhone.
• Fixes a problem sorting albums with multiple discs.
• Addresses an issue with the Zoom button not switching to Mini Player.
• Improves application syncing for iPod touch and iPhone.
• Genius is now automatically updated to show Genius Mixes.
• An improved look and feel, including a new Column Browser for easily browsing your artists or albums, movies, TV shows, and more.
• iTunes Store has a brand new look, with improved navigation for quick and easy exploration.
• iTunes LP and iTunes Extras create unique experiences that feature exclusive interviews, videos, photos, and more — available with select album and movie purchases on the iTunes Store.
• Home Sharing helps you manage your family’s iTunes collection between computers in your home. iTunes can automatically transfer new purchases, or you can choose just the items you want.
• Genius Mixes are created for you by iTunes and play songs from your library that go great together.
• iPod and iPhone syncing now allows you to organize your iPhone and iPod touch home screens directly in iTunes. Syncing is now also more flexible, allowing you to sync individual artists, genres, or TV show and Podcast episodes.
• iTunes U items are now organized into their own section in your iTunes library.
• Sync with iPod nano (5th generation), iPod classic (Fall 2009), and iPod touch (Fall 2009).
• iTunes 9 also includes many other improvements, such as HE-AAC encoding and playback, more flexibility with Smart Playlists rules, simpler organization of your media files inside an iTunes Media folder, and more.

The 82.95MB iTunes 9.0.1 update is available through Software Update, or via Apple’s download page.

Apple released the first dot update of Snow Leopard on Thursday. The 75.1MB update fixes a few minor issues mostly related to the functionality of Mac OS. Here is a complete list of included fixes.

• Improves compatibility with some Sierra Wireless 3G modems
• Addresses an issue in which some printer compatibility drivers might not appear properly in the Add Printer browser
• Addresses an issue that might cause DVD playback to stop unexpectedly
• Addresses an issue that might make it difficult to remove an item from the Dock
• Resolves an issue in which the Command-Option-T keyboard shortcut would sometimes bring up the special characters menu in applications such as Mail and TextEdit
• Addresses instances in which auto account setup in Mail might not work
• Resolves issues when sending mail with certain SMTP servers
• Addresses an issue in which Motion 4 could become unresponsive
• Includes an update to Adobe Flash Player plug-in version 10.0.32.18

This update addresses an important security issue, the update to Flash Player 10.0.32.18. Snow Leopard had been recently criticized for shipping with and out-of-date and vulnerable version on Flash Player.