Security Update 2006-007 Special Report: Release notes, update recommendations

On November 28th, Apple released Security Update 2006-007, addressing a number of potentially significant vulnerabilities discovered or reported in the past few months. The update addresses security concerns regarding the following components:

• AirPort
• ATS
• CFNetwork
• Finder
• Font Book
• Font Importer
• Installer
• OpenSSL
• PHP
• PPP
• Samba
• Security Framework
• VPN
• WebKit
• gnuzip
• perl

The new release is available through Software Update or via the following download links:

• for Mac OS X 10.3.9 Client 33MB
• for Mac OS X 10.3.9 Server 46MB
• for Mac OS X 10.4.8 Client Intel 23MB
• for Mac OS X 10.4.8 Client PPC 11MB
• for Mac OS X 10.4.8 Server PPC 12MB
• for Mac OS X 10.4.8 Server Universal 25MB

Full contents of this update can be found in Knowledge Base article #304829, but of particular note is a fix for the much-hyped flaw affecting original (non-Extreme) AirPort cards. 

Update procedure recommendation First, avoid performing any other operations (in Mac OS X or third-party applications) while the update process is occurring. In addition, before installing this security update, make sure all Apple-installed applications and utilities are in their original locations. Moving one of these applications to a different location on your hard drive can lead to an incomplete update. Also, disconnect any FireWire/USB devices before applying the update (except for your startup drive, if it is FireWire or USB, and your keyboard/mouse), then re-connect the devices one by one (checking for issues created by any particular device) after the update process is complete and the system has restarted.

Index:

• AirPort connectivity: Loss of
• Application launch delay
• Bluetooth: Loss of
• Excessive iMac fan speed
• Font Book: Inability to launch
• General fixes for common problems
• Getting the update off your Mac
• Login to secure sites fails
• Microsoft Office applications: Problems
• Palm synchronization dificulties
• Release notes, update recommendations
• Slow access to network drives
• Startup problems
• USB/FireWire device connectivity issues

Resources