Apple has released Security Update 2014-002 for 10.8 Mountain Lion, 10.7 Lion, and 10.7 Lion Server, with many of the same security fixes applied to the recently released OS X 10.9.4 Mavericks (see “OS X 10.9.4 Includes Wi-Fi, Wake from Sleep Fixes,” 30 June 2014). All three releases receive updates to the certificate trust policy, as well as fixes for vulnerabilities in maliciously crafted ZIP files, cURL re-using NTLM connections, and the Dock’s handling of messages from applications. The Mountain Lion Security Update also patches vulnerabilities related to a kernel memory issue with graphics drivers, a validation issue in the handling of OpenCL API calls, and array indexing with IOAcceleratorFamily (see the full list of patched vulnerabilities). (All updates are free. For 10.8 Mountain Lion, 139.3 MB; for 10.7 Lion, 134 MB; for 10.7 Lion Server, 184.3 MB.)
Always Show Recipient In iChat
In iChat under Snow Leopard, choosing View > Always Show Recipient Bar puts a buddy's status message and color at the top of any iChat window. It can also be used to select among multiple open iChat logins you have to send a message to that buddy, or to select among multiple accounts you have registered in Address Book for that buddy.
Security Update 2014-003 (Mountain Lion and Lion)
Check out the perks at <http://tidbits.com/member_benefits.html>
Special thanks to Tim Hannon, Bill Pester, Chris Culy, and Greg Lyon
for their generous support!