Security firm goes public after missed deadlines
[Update: This bug has been fixed as part of Security Update 2010-007, released today] An important security bug in Mac OS X 10.5 (Leopard) that remains unpatched despite missed deadlines from Apple has forced Core Security Technologies to go public with the exploit, even though a fix may be imminent. Apple was informed of the flaw, which has also been used to create jailbreaking software for iOS devices, and has already developed a patch -- but has missed two promised deadlines to release it, says the firm.
XgridLite 1.1 ($15) is a preference pane that allows users to enable the Xgrid controller on standard desktop versions of Mac OS X. It allows users to turn on and off the built-in Xgrid controller with a single click, set passwords for client and agent authentication, reset the controller to default settings, and more. [Download - 0.17MB]
Jumsoft: Mail Stationery
Mac OS X 10.5 users can choose from 50 new stationery templates for Leopard's built-in Mail application. Jumsoft has released its Mail Stationery pack including "designs for "every occasion". Grouped by themes such as "invitations," "seasons," "family," and "congratulations," the professionally-designed templates add the personal touch that sems to have disappeared with the switch from paper to electronic mail.
Brother Printer Driver 1.1
Apple on Thursday used its Software Update to push out updated printer drivers for both Canon and Brother's line of printers. Users with the software installed were prompted for a software update called "Brother Printer Driver Update 1.1". The update was released Thursday afternoon as a 23MB download. Brother printers drivers for Mac OS X 10.5 are currently located on the original CD and the company did not specify the changes in the current driver, except to say "The Brother Printer Driver Update includes the latest drivers for printers you have used on your system." Update: The Brother driver added new models and fixed a minor Memory leak with their ICA module, while the Canon drivers, noted below, have minor improvements related to wireless printing. [Correction: Apple has used the Software Update to deliver third-party printer updates for sometime]
Apple: critical updates
Apple on Wednesday released dozens of security updates part of its Mac OS X 10.5.3 update for Leopard and Security Update 2008-003(PPC Tiger client, Intel Tiger client, PPC Server, Universal Server) for Mac OS X Tiger, including critical bugs for remote shutdown, arbitrary code execution (multiple including JPG2000 issues), denial of service (via viewing PNG files), private information information disclosure (via SSL, Tiger Mail, Unicode, malicious BMP/GIF files and Image Capture) as well as a critical code execution bug for the continually updated Adobe Flash plugin. Apple also updated its Single Sign-On feature (CVE-ID: CVE-2008-1578) to prevent passwords from being supplied other local users.
Mac OS X 10.5.3
Apple has posted Mac OS X 10.5.3 to Software Update. This relatively major release addresses a number of issues extant in previous editions of Mac OS X 10.5.x, including problems with AirPort, Time Capsule, Mail, iChat, iCal and more. With regard to general fixes, the update a font issue that could result in Helvetica Narrow being used in applications instead of Helvetica and also addresses an issue with stuttering video and audio playback in certain USB devices. It also fixes an issue in which certain attached hard drives may not show up in the Finder.
Quay 1.1 update
Coder Rainer Brockerhoff has released a fresh update to Quay, a Dock extender for Mac OS X Leopard. The app restores hierarchical menus to the OS -- last found in Tiger -- and also lets users sort Stacks in a variety of ways. Quay can be set to work only with specific Stacks, and can be toggled off completely by holding down the Option key.
Leopard gets Java SE 6
Apple has released Java for Mac OS X 10.5 Update 1 for 64-bit Intel Macs, finally enabling Java 1.6 on the newest Mac OS X Leopard release. The update adds support for Java SE 6, specifically version 1.6.0_05, although v1.6.0_06 is the latest release. Apple says that the release "does not change the default version of Java" and is only for Mac OS X v10.5.2 and later; it should not be installed on earlier versions of Mac OS X: "This release is for 64-bit Intel-based Macs only and cannot run on PowerPC-based or 32-bit Intel-based Macs," Apple wrote in its documentation. The 58MB update is available via the Mac OS X Software Update. Apple notes that the release, first seeded to developers in early March, provides several additional features including support for AppleScript as a javax.script language, new API for altering the application Dock icon, and native support for document modal sheets.