Now pointlessly enhanced with AI
While I was busy doing many things away from this blog:
April 24th, 2008
AVG Free 8.0
Available for Windows Vista and Windows XP.
Get it here.
April 26th, 2008
Flock 1.1.2
I launched Flock, and was notified about the update.
Read the release notes here.
April 28th, 2008
New iMac from Apple
1066MHz Front Side Bus, and up to 3.06 GHz Intel Core 2 Duo.
NVIDIA GeForce 8800 GS graphics processor with 512MB of GDDR3 memory is available for 24-inch model.
No Intel Core 2 Extreme anymore.
Apple releases updates to Boot Camp drivers for Windows XP, Windows Vista 32, and Windows Vista 64.
Boot Camp Update 2.1
This update addresses issues and improves compatibility with Microsoft Windows XP, Vista 32, and Vista 64 running on a Mac computer using Boot Camp. It is highly recommended for all Boot Camp users.
Boot Camp Update 2.1 is available through Apple Support Downloads page:
Boot Camp Update 2.1 for Windows XP – 215MB
Boot Camp Update 2.1 for Windows Vista 32 – 228MB
Boot Camp Update 2.1 for Windows Vista 64 – 236MB
UPS delivered the Windows Home Server HP MediaSmart Server EX475 that I ordered from Amazon. Well, to be honest, it’s not for me, but for someone else. There’s nothing better spending other people’s money buying new tech-toys and get to play with it. I am too tired tonight to do anything with that thing. I will open it up on Thursday morning.
Quick look at the Windows Home Sever
HP MediaSmart Server EX475
Stay tuned for more details.
Firefox 2.0.0.14 is available for download. (read more)
Firefox 2.0.0.14 release notes.
Fixed in Firefox 2.0.0.14
MFSA 2008-20 Crash in JavaScript garbage collector
Mozilla Firefox is available for multiple Operating Systems including Linux, Mac and Windows.
Apple releases Safari 3.1.1 to address stability, compatibility and Security.
Safari 3.1.1 is available for Mac OS X Tiger, Leopard, and Windows XP/Vista.
About the security content of Safari 3.1.1
Safari 3.1.1
- Safari
CVE-ID: CVE-2007-2398
Available for: Windows XP or Vista
Impact: A maliciously crafted website may control the contents of the address bar
Description: A timing issue in Safari 3.1 allows a web page to change the contents of the address bar without loading the contents of the corresponding page. This could be used to spoof the contents of a legitimate site, allowing user credentials or other information to be gathered. This issue was addressed in Safari Beta 3.0.2, but reintroduced in Safari 3.1. This update addresses the issue by restoring the address bar contents if a request for a new web page is terminated. This issue does not affect Mac OS X systems.
- Safari
CVE-ID: CVE-2008-1024
Available for: Windows XP or Vista
Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution
Description: A memory corruption issue exists in Safari’s file downloading. By enticing a user to download a file with a maliciously crafted name, an attacker may cause an unexpected application termination or arbitrary code execution. This update addresses the issue through improved handling of file downloads. This issue does not affect Mac OS X systems.
- WebKit
CVE-ID: CVE-2008-1025
Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.2, Mac OS X Server v10.5.2, Windows XP or Vista
Impact: Visiting a malicious website may result in cross-site scripting
Description: An issue exists in WebKi’s handling of URLs containing a colon character in the host name. Opening a maliciously crafted URL may lead to a cross-site scripting attack. This update addresses the issue through improved handling of URLs. Credit to Robert Swiecki of Google Information Security Team and David Bloom for reporting this issue.
- WebKit
CVE-ID: CVE-2008-1026
Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.2, Mac OS X Server v10.5.2, Windows XP or Vista
Impact: Viewing a maliciously crafted web page may lead to an unexpected application termination or arbitrary code execution
Description: A heap buffer overflow exists in WebKit’s handling of JavaScript regular expressions. The issue may be triggered via JavaScript when processing regular expressions with large, nested repetition counts. This may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue by performing additional validation of JavaScript regular expressions. Credit to Charlie Miller for reporting these issues.
Safari 3.1.1 can be obtained through Safari Download Page or Apple Software Updates.
Apple releases QuickTime 7.4.5 in conjunction with iTunes 7.4.2.
QuickTime 7.4.5
QuickTime 7.4.5 includes fixes that enhance reliability, improve compatibility with third-party applications, and address security issues. This release is recommended for all QuickTime 7 users.
For detailed information on the security content of this update, please visit this website: http://www.info.apple.com/kbnum/n61798.
QuickTime is available for Mac OS X Panther, Tiger, and Leopard as well as Windows XP and Vista.
Apple releases iTunes 7.6.2:
Rent and download your favorite movies with iTunes on your computer or directly to your living room on Apple TV. Enjoy rented movies in sizes up to 720p HD with surround sound on your Apple TV and sizes up to DVD-quality on your computer. Transfer your rented movies from iTunes to your iPod or iPhone and enjoy them on the go.
Also, purchase and download your favorite TV shows, music, and more directly on your Apple TV. Effortlessly transfer purchases made on Apple TV back to your computer with iTunes.
iTunes 7.6.2 provides bug fixes to improve stability and performance.
iTunes is available for Mac OSX and Windows XP/Vista