Tag: Apple

Posted on

Apple Issues Patch for Critical NTP Vulnerability

Apple NTP Security Update 20141222

Apple issues OS X NTP Security Update for Mountain Lion, Mavericks and Yosemite.

OS X NTP Security Update
ntpd

Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10.1

Impact: A remote attacker may be able to execute arbitrary code

Description: Several issues existed in ntpd that would have allowed an attacker to trigger buffer overflows. These issues were addressed through improved error checking.

To verify the ntpd version, type the following command in Terminal: what /usr/sbin/ntpd. This update includes the following versions:

Mountain Lion: ntp-77.1.1
Mavericks: ntp-88.1.1
Yosemite: ntp-92.5.1

CVE-ID

CVE-2014-9295 : Stephen Roettger of the Google Security Team

From ICS-CERT:

Google Security Team researchers Neel Mehta and Stephen Roettger have coordinated multiple vulnerabilities with CERT/CC concerning the Network Time Protocol (NTP). As NTP is widely used within operational Industrial Control Systems deployments, NCCIC/ICS-CERT is providing this information for US Critical Infrastructure asset owners and operators for awareness and to identify mitigations for affected devices. ICS-CERT may release updates as additional information becomes available.

These vulnerabilities could be exploited remotely. Exploits that target these vulnerabilities are publicly available.

Products using NTP service prior to NTP-4.2.8 are affected. No specific vendor is specified because this is an open source protocol.

Posted on

Google Chrome Crashes in OS X Yosemite 10.10.2 Beta

Google Chrome Crases in OS X 10.10.2 beta build 14C68k

From Chromium Project:

Steps to reproduce the problem:
1. Open Chrome.
2. Attempt to interact with the browser in any way.

What is the expected behavior?
Browser should work.

What went wrong?
The browser crashes completely on every start attempt.

After further investigation, it seems the crash happens when built-in Trackpad or Magic Trackpad is used to interact with Google Chrome on any Macs running OS X Yosemite 10.10.2 build 14C68k.

Further discussion:

#9 Mike.Had…@gmail.com
-[NSTouch _initWithPreviousTouch:newPhase:position:isResting:]: unrecognized selector sent to instance

isResting Available in OS X v10.6 through OS X v10.9

ie deprecated in 10.10 Yosemite and looks like removed in 10.10.2

https://developer.apple.com/library/mac/documentation/AppKit/Reference/NSTouch_Class/index.html

We’ll see if this issue would be resolved in the next build of OS X Yosemite 10.10.2 seed.