CERT mailing list archives

Current Activity - Apple Releases Security Update 2010-004 and Mac OS X v10.6.4


From: Current Activity <us-cert () us-cert gov>
Date: Wed, 16 Jun 2010 10:03:25 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

US-CERT Current Activity

Apple Releases Security Update 2010-004 and Mac OS X v10.6.4

Original release date: June 16, 2010 at 9:54 am
Last revised: June 16, 2010 at 9:54 am


Apple has released Security Update 2010-004 and Mac OS X v10.6.4 to
address multiple vulnerabilities that affect a number of applications.
These vulnerabilities may allow an attacker to execute arbitrary
code,  cause a denial-of-service condition, operate with elevated
privileges, conduct man-in-the-middle attacks, alter configuration
settings, or conduct cross-site scripting attacks.

Note that these Apple updates include Adobe Flash Player plugin
version 10.0.45.2, which contains vulnerabilities previously
identified in Adobe Security Bulletin APSB10-14. The Adobe Product
Security Incident Response Team (PSIRT) has published a blog entry
recommending that Mac OS X users upgrade to the latest version of the
Flash Player (version 10.1.53.64) after applying these Apple updates.

US-CERT encourages users and administrators to review Apple Article
HT4188 and the Adobe PSIRT blog entry and apply any necessary updates
to help mitigate the risks.

Relevant Url(s):
<http://blogs.adobe.com/psirt/2010/06/apple_security_update_2010-004.html>

<http://support.apple.com/kb/HT4188>

<http://www.adobe.com/support/security/bulletins/apsb10-14.html>

====
This entry is available at
http://www.us-cert.gov/current/index.html#apple_releases_security_update_20103

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iQEVAwUBTBjZnj6pPKYJORa3AQLuPwf+KQ6TPCjrUocseJ+w7eBWPfw2t3ShLvMi
HicJm0vYhz/4IKEfDGXIalyHHuzzgkapn1mJvVYg2gjEzIftBgkSUYC97DRveJvf
DCeZPRP0ZG7YpOGfbTaFGvGDCqi9crlrhwgSVJL1Yj/dMb/WUcbdJWqGxMTjVKoN
vDKxQrolHcv/0ajL1Hii9Xx4g8TjDIJiQF2mSAgM/89v77rGBFbAHQmA8H1QSZNP
7KrLyIIgVZw2U6mmLuNuaQlH+IXDbEfVuVdKpEAXZ5jUCvXoZvtFcyPxH2lptgxz
10NQPJPBVM8DsJ9nknZ16F+8wzT+xY0Yr8vcl5jdrRdbRoN3IumNZg==
=Gb0b
-----END PGP SIGNATURE-----


Current thread: