My next class:
LINUX Incident Response and Threat HuntingOnline | US EasternJan 29th - Feb 3rd 2025

Apple Security Updates 2011-004

Published: 2011-06-23. Last Updated: 2011-06-24 15:37:15 UTC
by Jim Clausing (Version: 2)
4 comment(s)

Apple has released Mac OS X 10.6.8 and security update 2011-004.  These updates address 39 CVE entries.  The updates cover many components of the core operating system and many popular applications so you should probably plan to update ASAP.  The bulletin went out on Apple's security-announce mailing list, but the security update web page doesn't have the details yet, they should be there shortly.

Update 2011-06-24 16:30 UTC: As mentioned in the comments, some folks seem to have issues after applying the update and are subsequently unable to boot their machines.  Until we get some guidance from Apple and/or figure out exactly what is causing the issue, I guess we need to exercise a bit of caution updating critical machines (based on your own definition of critical).  There is a thread here discussing the issue, and another here suggesting the problem may be with PGP WDE, but I've heard from others who use PGP WDE who didn't have any issues, so I'm still not sure what the problem is.  Any of our users using PGP WDE who have successfully applied the update, please comment below or via the contact page.

References:

http://support.apple.com/kb/HT1222

http://support.apple.com/kb/HT4723 (info about the actual update)

---------------
Jim Clausing, GIAC GSE #26
jclausing --at-- isc [dot] sans (dot) edu
SANS FOR558 Network Forensics coming to central OH in Sep see http://www.sans.org/mentor/details.php?nid=25749

4 comment(s)
My next class:
LINUX Incident Response and Threat HuntingOnline | US EasternJan 29th - Feb 3rd 2025

Comments

Hope this this just a local issue.

Applied ... restarted and now, no more boot like a brick (mac book air).
- http://h-online.com/-1267147
24 June 2011 - "... plugs a total of 39 security holes... "
Also - Leopard:
> http://support.apple.com/kb/DL1404 - Client
> http://support.apple.com/kb/DL1405 - Server
June 23, 2011
.
I didn't hear about the problem until it was too late - blue screen and it powers off. Most of the forums mention Sophos or some other applications need to be removed but that didn't seem to help. I removed Sophos in Safe Boot - hold the left shift button at start-up. It still would power off after a few minutes in Safe Boot. I ended up running the original OS X 10.6.6 install disk. Luckily this is not Windows and the install didn't delete my data. My daughters MacBook (2 years old MB) didn't have any issues. My early 2011 MBP had the issue. Good luck - by the way after the install I ran the Combo Updater without any issues.
This issue happened on my G5 PowerMac. It rebooted after the upgrade, then I shut it down. The next day it wouldn't boot. The machine chimed, then gray screen with spinner, some disk activity, then the fans would increase speed until the whole machine sounded like a jet engine. The whole process from start-up button press to jet engine took about 10 minutes.

Fix:
Disk Warrior - no help
Boot from install disk (10.5.6), re-install OS X, two rounds of Software Update.


Diary Archives