TidBITS Watchlist: Notable Software Updates for 28 April 2014

Adobe Flash Player 13.0.0.206 — Quickly responding to yet another critical security vulnerability, Adobe has updated the Mac version of the standalone Flash Player to version 13.0.0.206. According to this Adobe security bulletin, the update patches an exploit that has been used to target Flash Player users on the Windows platform to take control of a system remotely. But because this threat can also be exploited on Mac (and Linux) systems, Adobe recommends all users update Flash Player for Mac 13.0.0.201 and earlier to this new release. To
see which version of Flash you have installed, visit this Adobe page. If you use the Google Chrome Web browser, make sure to close and restart it to get Chrome 34.0.1847.131, which includes Flash Player 13.0.0.206. (Free, 15 MB, release notes, 10.6+)

Read/post comments about Adobe Flash Player 13.0.0.206

Instacast 1.2 — Vemedio has released version 1.2 of Instacast for Mac with a new architecture for synchronizing podcasts between your Mac and iOS devices. By sending smaller bits of data, this new scheme ensures that all your devices are synced with the same state while also saving on network traffic, storage requirements, mobile data charges, and battery power. You’ll need to update to version 4.5 of Instacast for iOS to continue syncing your podcast subscriptions to your iPhone, iPad, or iPod touch. ($19.99
new from Vemedio and the Mac App Store, free update, 7.0 MB, release notes, 10.8+)

Read/post comments about Instacast 1.2.

VMware Fusion 6.0.3 and Fusion 6.0.3 Professional — VMware has updated its popular virtualization package VMware Fusion to version 6.0.3 with standard and Professional editions, both of which resolve OpenSSL security vulnerabilities related to the Heartbleed bug (see “The Normal Person’s Guide to the Heartbleed Vulnerability,” 9 April 2014). The release also resolves an issue that prevented USB devices from connecting to a virtual machine, improves performance and compatibility with USB audio and video
devices, reduces the number of crashes when your Mac comes out of sleep mode, and improves support for using two monitors with the same virtual machine. It also prevents several instances of a screen or window turning black, including when returning to the Mac desktop while the virtual machine is running, resizing a Windows XP virtual machine window, and using an Apple TV as an external display. ($59.99/129.99 new, free updates, 514 MB, release notes, 10.7+)

Read/post comments about VMware Fusion 6.0.3 and Fusion 6.0.3 Professional.

DEVONagent Lite, Express, and Pro 3.8 — DEVONtechnologies has updated all three editions of its DEVONagent research software (Lite, Express, and Pro) to version 3.8, updating nearly all of its plug-ins while also adding a language-aware “Shopping > Amazon” plug-in and a submenu that provides quicker access to recently used plug-ins and search sets. DEVONagent Express and Pro also add support for JSON-based plug-ins and search results from search engines in JSON format, improve the recognition of inactive results in the menu extra, add support for VoiceOver search results, and add support
for Yahoo. On its own, DEVONagent Pro adds support for language-specific keywords entered in the address bar of browser windows (if available), brings support for FTP on OS X 10.9 Mavericks, and enables the optional UserAgent plug-in key to specify the HTTP user agent. (All updates are free. DEVONagent Lite, free, release notes; DEVONagent Express, $4.95 new, release notes; DEVONagent Pro, $49.95 new with a 25 percent discount for TidBITS members, release notes. 10.6.8+)

Read/post comments about DEVONagent Lite, Express, and Pro 3.8.

DEVONthink and DEVONnote 2.7.5 — DEVONtechnologies has updated all three versions of DEVONthink (Personal, Pro, and Pro Office) and DEVONnote to version 2.7.5, with added support for MultiMarkdown syntax. All three editions of DEVONthink and DEVONnote receive improved tagging capabilities, with tags from OS X 10.9 Mavericks receiving higher priority than OpenMeta tags. DEVONthink also improves the restoration of workspaces and window handling after restoring a backup, speeds up indexing of HTML pages, fixes an issue with searching in
found PDF documents, and improves the German localization. DEVONthink Pro and Pro Office now display the progress of loading multiple databases at startup and add support for RSS feeds containing HTML code in the author field. DEVONthink Pro Office’s mobile Web interface now displays Markdown files, and dragging multiple messages from Apple Mail now retains the received/sent dates and the unread status. (All updates are free. DEVONthink Pro Office, $149.95 new, release notes; DEVONthink Professional, $79.95 new, release notes;
DEVONthink Personal, $49.95 new, release notes; DEVONnote, $24.95 new, release notes; 25 percent discount for TidBITS members on DEVONnote and all editions of DEVONthink. 10.6.8+)

Read/post comments about DEVONthink and DEVONnote 2.7.5.

OmniOutliner 4.0.5 — The Omni Group has released OmniOutliner 4.0.5, a small maintenance release that nonetheless eases some frustration with the previous version by fixing its most frequently reported crash (which would occur randomly with any simple action). The outline and information organization app also fixes its Outline view so that rows not in the focused view are visible when switching sections, ensures that hyperlinks aren’t lost after making an edit to a row, and removes the selected state in the sidebar when you change focus. For our review, see “OmniOutliner 4
Refines the Outlining Process” (31 January 2014) ($49.99 new, free update, 45 MB, release notes, 10.9+)

Read/post comments about OmniOutliner 4.0.5.

1Password 4.3 — AgileBits has issued a “massive update” with the release of 1Password 4.3 for Mac. The password manager improves 1Password mini with a speedier appearance, the capability to search through all fields (from usernames to secure notes), and the addition of keyboard shortcuts — including Command-O to anchor a details view window and Command-E to enter edit mode in the details view. The update also ensures that a change to your Master Password gets synced to other devices, improves how 1Password interacts with Dropbox, enables you to export items to CSV and plain text, adds the capability to move and
copy items from one vault to another, adds support for syncing with removable USB drives, and adds full screen support. The release provides a goodly number of other fixes, including for manual text fields created in 1Password 3 not displaying in Web form details, printing of multi-line notes, and several issues related to item syncing when using multiple vaults.

In addition to the Mac version, AgileBits has updated 1Password for iOS to version 4.5 with improvements to Wi-Fi sync, addition of tags, and an improved 1Browser with all logins, identities, and credit cards available under the same button. To celebrate the release of these new versions, AgileBits has cut the price of both 1Password for Mac and 1Password for iOS in half through 27 April 2014, making it $24.99 for the Mac version from AgileBits and the Mac App Store and $8.99 for the universal iOS app from the App Store. (Normally $49.99 new with a 25 percent discount
for TidBITS members when purchased from AgileBits, free update, 38.7 MB, release notes, 10.8+)

Read/post comments about 1Password 4.3.

AirPort Base Station Firmware Update 7.7.3 — Apple has released AirPort Base Station Firmware Update 7.7.3, which is recommended for all AirPort Extreme and AirPort Time Capsule base stations with 802.11ac. Related to the recently exposed Heartbleed bug (see “The Normal Person’s Guide to the Heartbleed Vulnerability,” 9 April 2014), the firmware update fixes an OpenSSL vulnerability that was exposed when the Back to My Mac feature was turned on. After updating the firmware, you may need to re-enable Back to My Mac using AirPort Utility and your Mac’s System
Preferences. You must update your AirPort base station using AirPort Utility on your Mac or an iOS device with the free AirPort Utility app installed (the download isn’t available via the Apple Support Web page or Software Update).

Read/post comments about AirPort Base Station Firmware Update 7.7.3.

Paprika 2.0.3 — Hindsight Labs LLC has released Paprika 2.0.3, a small update that fixes the importing of .paprikarecipe files in the recipe manager (see “FunBITS: Paprika Recipe Manager for iPhone, iPad, and Mac,” 14 March 2014). The update also now correctly stores the name setting for an export calendar, makes tweaks to the MMF importer, improves the capability of dragging a subcategory out of its parent category to the top level, and fixes a printing issue when viewing a recipe through the meal planner. ($19.99 new from the Mac App Store, free update, 3.5 MB, 10.8+)

Read/post comments about Paprika 2.0.3.

Security Update 2014-002 (Mavericks, Mountain Lion, and Lion) — Apple has released Security Update 2014-002 with security fixes for OS X 10.9 Mavericks, as well as for those still using 10.8 Mountain Lion, 10.7 Lion, and 10.7 Lion Server. According to the release notes, the security update patches a vulnerability with HTTP headers that enabled attackers to obtain Web site credentials, which affected all three versions of OS X. It also fixes a particularly ugly vulnerability to a “triple
handshake” attack that could affect both Mavericks and Mountain Lion. However, the bulk of the changes focus on Mavericks, addressing vulnerabilities with CoreServicesUIAgent Web site validation, Heimdal Kerberos authentication, ImageIO’s handling of JPEG images, and a power management issue that could prevent the system from going to sleep and keep the screen unlocked. (All updates are free. For 10.9 Mavericks, 80.5 MB; for 10.8 Mountain Lion, 135.9 MB; for 10.7 Lion, 126.9 MB; for 10.7 Lion Server, 177.2 MB.)

Read/post comments about Security Update 2014-002 (Mavericks, Mountain Lion, and Lion).