Shockwave Security Update ISSUES

Following the announcement of the vulnerabilities found in the Shockwave web player (http://www.vupen.com/english/advisories/2009/3134), I updated all of my lab machines. Following the update, when a student tries to access a Shock embed they are confronted with the query attached below.
I don't allow students to run with Administrative priveleges, but they need to be able to access the learning content. Any help here?
OK, I'll answer my own question.
After installing the update (I used the full standalone version), I simply logged out. When a student came behind me and tried to access Shockwave content, the error presented.
The solution?
Once installed, open the browser and go to a page with a shockwave embed.
The installer performs an additional happy dance and downloads "compatibility ... blah, blah".
Log out.
Now users can log in, go to a page with a shockwave embed and not be hassled with the "Run software as..." query.
Why Adobe® decided that one must visit affected content, as well as simply installing a security patch, is beyond me.
Why they didn't tell anyone they need to take this additional step is a *real* mystery.

Unresponsive, thanks for your reply, but it's too little too late in this situation.
I am going to go out on a limb here, and conjecture that the MSI is available separately as an Adobe Distribution Licensee, yes?
Because, when one goes to the normal update page, you are given no choice other than slim or full, nor is mention made of any other option.
Which I agree would have been a better option, had it been made clear, or available, from the very start.
"Adobe's documentation is awesome. /s"
Really? After downloading and popping the install, there is no Read Me, AJAX-ified instructions that open in a browser, or anything else to let someone who has used Adobe updates in the past, or is unfamiliar with MSI distribution, *know* that they will need, as an administrator on a Windows PC, to open affected content after installation, in order to download additional components, to ultimately make it playable for non-admin accounts.
I don't know about you, but that's hardly awesome documentation in my book.
In fact, it's more like byzantine, totally lazy, and more than marginally sadistic.

Similar Messages

HT5228 I am running OS 10.5.8 on an iMac. There is no security update issued for this operating system - it only covers 10.6. Is my comuter vulnerable? Do I need to do anything?

I am running OS 10.5.8 on an iMac. There is no security update issued for this operating system - it only covers 10.6. Is my comuter vulnerable? Do I need to do anything?

I'm still not clear why Apple only issued security updates for 10.6 and later. I assume they think we should all update our operating systems or maybe they are just focusing on the majority of users?
Apple has had a long standing policy of only supporting the current and previous operating system releases. Whether they decide to make an exception for even older releases is anyone's guess.
You can send them feedback to express your opinion.
Or does the new Trojan not affect older OS? I'd like to know , if anyone has information.
As far as is known, it does affect older unsupported releases. Disabling Java in your web browser is the current preventive approach (and that is a community derived approach)

Is there a consensus on how to solve security update issues?

hi,
i'm writing to you from a PPC G4 (AGP graphics) that will self-destruct by the time i switch off and (attempt) to re-start tomorrow. i will then need to do a re-install, just to see if i have gotten any replies (grinds teeth to the root). it will probably be my 8 th re-install in the past month. i just can'st takes no mores, Cap'n
<exasperation>deep breath... each time i have done a clean install, zero-ed all data when erasing (7 times over, on this occasion), repaired permissions before and after each software update, and followed every advice i could find via google to pre-empt another "Error: underlying task reported failure on exit" and the inevitable hanging grey screen; i have earned nothing but another Disk Utility report of the same problem. my HD seems to be OK - Disk Utility and Disk Warrior both say it's "verified" by SMART (although i've read this could be no assurance...). it's 40 GB, nothing else installed but NetBarrier; nothing saved on it (just 3GB of OS).
i've searched this forum over the last weekend and come across a diverse range of methods in resolving software update issues. i have tried downloading the security update and safari 3.2 directly from the site and bypassing Software Update- to no avail (but noticed that they are quite larger in MB than via Software Update??).
the one suggestion the intrigued me was installing the update via Terminal. why would this be any different? the worst thing about this is that there is no universal way that'll work for all, just individual solutions for different macs??? could my problem be exacerbated by using the double layer (double the permissions to fix?) of a Panther OS with Tiger Upgrade disk?
when i last tried to resolve the "error" with safe mode, fsck and DU Repair Disk/Permissions, which initially failed, i resorted to Disk Warrior, which re-built the directory, and "fixed" the HD. when i re-tried fsck it said the HD was "ok", but i still had the "error: underlying task..." on DU?
is there an issue with the Security Update oo8 because it's PRIMARILY for 10.5 and not Tiger? why have some encountered this problem and others escaped any seeming conflicts ? is this problem also caused by JAVA updates (there are, after all, 4 updates!)
more importantly, WHAT CAN I DOOOOOOOO?
thank you

looking at your suggestion to check /Library/Startup items in the concurrent thread ("Help needed after installing Security Update 2008-008"), i recalled that the only thing i have in this file system is 3 folders concerning Intego, NetBarrier and Virus Barrier. one of these contains the NetBarrier x4 daemon which has no image, just the apple "pencil, ruler, pen on paper" "A" image. i don't think it correctly downloaded, but this the case in every instance.
i'm running netbarrier x4 10.4.5 updated and downloaded on installation. intego Support says that there should be nothing in my "Startup/Login items". i thought they meant Login items (users>login items) because when i take the folders out of my "/Library/Startup items", NetBarrier fails to "initialize".
intego is now on newtbarrier x5, but they say x4 is fully compatible with Tiger???
my baby maybe getting on, but it's strong enough, i just need to know what's bugging it!

Security Update Issues

After updating my iMac Desktop with the latest security update, now I can't connect to the internet. Every other computer can connect to the internet, so it is not my network. Is anyone else having issues and is there anything that can fix it?

Same issue.. my post is here https://discussions.apple.com/message/25032610#25032610.
No replies as of yet.

Security Update Issues Solutions Required Please :)

I've been having issues since the latest security update for OS 1.5.8. I want to restore my system to a Time Capsule backup but my OSX install disks are for 1.4 and don't have the option to restore from backup, as far as I can see...Help?

hi Auds77, this is probably caused by microsoft update kb3013455 which can cause font rendering issues on vista:
<blockquote>After you install security update 3013455, you may notice some text quality degradation in certain scenarios. The problem only occurs on systems that are running Windows Vista SP2 or Windows Server 2003 SP2. Microsoft is researching this problem and will post more information in this article when the information becomes available. </blockquote>
<sup>reference: https://support.microsoft.com/kb/3013455</sup>
one option may be to [http://windows.microsoft.com/en-us/windows/remove-update#1TC=windows-vista roll-back this particular update] for now until there is a fix by microsoft or you could also look if there is a [[Upgrade your graphics drivers to use hardware acceleration and WebGL|graphics driver update]] available on the website of the vendor (intel/amd/nvidia) which might also resolve this problem in some cases.

Recent Security Update Issues

After installing the most recent security update, my mac started experiencing problems with SLEEP - computer would hang when energy saver kicked on, failed wake when prompted, monitor wouldn't turn on after sleep.
The only solution was to force shut down and restart.
Permissions. Yes, usually the first course of action is to repair permissions from the install disk ... here's the issue this time ... my computer locks up as soon as the "choose your language screen" appears. Cursor freezes and the keyboard is locked out so I can't even return past this screen. Nothing happens. I can't repair permissions and have to force restart.
Any thoughts? Or, am I looking at an archive and install?
G5 Mac OS X (10.4.8) 8gb ram, airport, bluetooth, 30" flatscreen

Sounds like your optical drive or your installation disk is damaged. Call AppleCare to ask for a replacement disk first to see if it is the disk. You can repair permissions though from the Applications -> Utilities folder. You can't repair disk (which is the directory repair) from the Utilities folder Disk Utility.

Security update issues for Dreamweaver 8

I've updated my Dreamweaver 8 to the 8.02, but when I open
Dreamweaver it still says "security update available for the insert
flash video command". I'm a newbie to web design/development as
well as this program, but pretty sure I followed the instructions
accordingly. I also get an error when I try to view my tutorial
page that had flash in it. I still have the Dreamweaver 8 disc.
I've been coming back to this off and on for months. Now I really
need to finish building my website. Should I just
uninstall/reinstall the whole program?
Could I have screwed things up by downloading adobe flash
player active x or shockwave? I also currently use adobe creative
suite 2, if that is relevant. Any suggestions would be appreciated!
Kim

The update being described to you is unrelated to the 8.02
update and was released after it. Follow this KB article for your
solution:
http://kb.adobe.com/selfservice/viewContent.do?externalId=kb402925&sliceId=1

HT1222 MacOSX v10.6.8 mail and security update issues - help?

in the system profiler, my mail app is showing as v4.5 but has the application name Mail 3.6
Not sure if that matters but I read to reinstall updcombo and security update but when installing the security update I get:
security update 2012-004 can't be installed on this disk. This volume does not meet the requirements
Help?

this is where the install stops

BIP Desktop - windows security update issue

Hi Wizards,
My PC has automatically installed Windows 7 security updates yesterday. As a result, the BI Publisher Add-In has disappeared from the ribbon in Word (it is fine in Excel though). A similar situation happened in August, where BIP did not work correctly due to another update.
I have already removed and re-installed BIP Desktop (11.1.1.5.0) with no success at the end.
I urgently need the fix, could someone point me to the right place in this forum or somewhere else, please?
Thank you, Peter Subert

Try following the steps detailed in:
BI Publisher Desktop Stopped Working With MS Word After Windows Security Update (Doc ID 1485988.1)
Regards
Sarah Griffiths

SCCM 2012- Security updates issue

We are unable to find MS13-053 bulletin ID in our SCCM 2012 meta data list while we have already selected Critical updates and Security updates in classification list for Windows 7 and Windows 8 from products list of Software update point component properties.
Please let me know if i have missed something.
Please help.
Thanks
Mohit Kumar

Hi,
That’s very strange. How about re-run synchronization? Any changes?
If MS13-053 still cannot show up, you could also
download these updates manually, then deploy them.
Best Regards,
Joyce Li
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Tring to install Security Update for Lync Server 2010 (KB2982388) ...patch failed to install

Hi
Idenitfied the lync security update issue below on server....
Worker process exited prematurely. The process will be automatically restarted.
Process: 'C:\Program Files\Microsoft Lync Server 2010\Server\Core\RtcHost.exe' Exit Code: E0434F4D!_HRX! (No Message Text Found!_HRM!).
The KB2982385 has tried to installed and failed 7 times....and as such my lync edge server is down.
Found solution:
http://www.microsoft.com/en-us/download/details.aspx?id=44080&fa43d42b-25b5-4a42-fe9b-1634f450f5ee=True
Downloaded patch and then ran lyncserverupdateinstaller...however it doesnt recognise that there is a patch to be deployed or a component to update.
Further running the msp by itself results in:
The upgrade patch cannot be installed by the windows insteller service because thje program to be upgraded may be missing or the upgrade patch may be a different version...
Please advise how i can get this issue resolved.

Hi,
Did you try to download and install the update manually?
Here is a similar case below, it seems something wrong when updating through Windows Update automatically.
http://social.technet.microsoft.com/Forums/en-US/dea0e9e2-8375-4599-b4cc-7a0cd45cd9de/kb-2982385-has-broken-my-edge-servers?forum=ocsedge
You can refer to the step of “Step 1: Install the cumulative updates”, choose “Method 3 Manual install” in the link below:
http://support.microsoft.com/kb/2493736
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Issue after latest security update on WEBCAM via WiFi (MOBIOLA WEBCAM APP)

Hello everyone,
I've used for a long time Mobiola WEBCAM (app that turns one's iPhone/iPad into a webcam via WIFI) in Skype/Viber and video chat sites like Omegle (all done through GOOGLE CHROME), up until yesterday.
As of today, any of my browsers or my Skype?Viber applications on my MAC MINI (late 2012) won't recognize my Video FEED.
I do get a connection between the iPhone/iPAD and the MAC MINI, I see the video working properly on the app (MOBIOLA WEBAM) but the VIDEO is not being "fed/transferred" for some reason to any browser or Skype/Viber.
I've have tried to use the WEbcam on other browsers such as Safari, Firefox and Opera to no avail. I'm simply not able to make it work.
I've uninstalled and reinstalled diferent veriosn of FLASH player, and the problem still persists.
I'm begging to wonder that all this issue has got something to do with the latest MAC OS X security update and nothing with the browsers, adobe flash player/shockwave or application versions.
Is it a adobe flash issue? Mac os x issue? I should I proceed?
Any help is appreciated...
Technical INFO:
Skype version: 6.15
MAC OS X Mountain Lion 10.8.5
iOs: 8.1.1 (on both ipad and iphone)
Google Chrome: 39.0.2171.71 (64-bit)
Thanks a lot,
Chen

I'm certain it's not a network issue. I have two Powerbook G4s. One of these is running Tiger and the other Panther. The G4 running Tiger had 10.4.8 and was recently updated to 10.4.9. This G4 developed problems doing software updates after I did the upgrade to 10.4.8 and it continues to have problems with 10.4.9. My other G4 running 10.3.9 Pather could connect on this network to do updates (even though my G4 running Tiger could not) until recently when I did an upgrade to install a security patch. After installing the security patch on my G4 running 10.3.9, it also could no longer connect to do software updates. When this first occured on my Tiger G4, I trashed the System Configuration file in my Library folder, restarted my computer and was able to do a software update. When I try this now on either computer it no longer works and can't do software updates. I have also trashed my cache file without being able to resolve the problem.

Security Update 2008-008 installs old version of Shockwave plugin

It appears that the recent Security Update 2008-008 for 10.4.x does not properly check to see if a newer version of Shockwave plugin is installed.
We have Shockwave 11.0.3r470 installed, but the Security Update 2008-008 has installed version 10.1.1.r116
This results in two version of Shockwave being installed on the system.

BDAqua wrote:
Hi , and a warm welcome to the forums!
Thanks BD Aqua, Hello to all.
What locations are those two please?
The Shockwave Plugin is at:
/Library/Internet Plug-Ins/DirectorShockwave.plugin (for Shockwave 11.x)
/Library/Internet Plug-Ins/NP-PPC-Dir-Shockwave (for Shockwave 10.x and earlier)
Support files for Shockwave 11 are at:
/Library/Application Support/Adobe/Shockwave 11
while support files for Shockwave 10 are located:
/Library/Application Support/Macromedia/Shockwave 10
The issue here is that the SecurityUpdate 2008-008 will install Shockwave 10 even if Shockwave 11 is already present. This results in having two different version installed simultaneously.
Safari even reports both in the "Installed Plug-ins" report.
My guess would be that it is not good to have both installed at the same time!

Safari won't launch after security update. ATSServer issue?

I installed Security Update 2008-007, restarted my machine and went to launch Safari. The icon bounced but the menu bar at the top didn't change to Safari and after a few minutes I got a window appear telling me Safari had quit unexpectedly.
I went through some forums and tried a bunch of fixes: I re-installed, trashed the prefs, history etc, removed all the plug-ins but none of this worked.
In the end I found mention of the ATSServer, which I killed in the terminal. Immediately Safari launched. What's the issue here? Has the latest update caused a problem with ATSServer?
My Mac is:
System Version: Mac OS X 10.5.5 (9F33)
Model Name: Mac mini
Model Identifier: PowerMac10,1
Processor Name: PowerPC G4 (1.1)
Processor Speed: 1.42 GHz
Number Of CPUs: 1
L2 Cache (per CPU): 512 KB
Memory: 1 GB
Bus Speed: 167 MHz
Boot ROM Version: 4.8.9f1

I presume when you were doing the Repair function booted from the CD that eventually you said "Repair" and it scanned the drive and said in green, "No problems found" or similar stuff.
Another way to effect repairs is to hold down the Shift key at Startup, which does a Disk Repair as it starts up, so it takes a while longer that usual, then loads the smallest-possible set of extensions and boots into "Safe Mode".
Directory problems like "Keys out of order" or reports that there is a problem, but Disk Utility cannot repair it are a serious concern, and may require industrial-strength disk recovery tools.

PHP/MySQL issue after security update 2010-005

Hello,
I run Apache/PHP/MySQL on my MBP for testing Web sites.
After the 2010-005 security update I can't connect to my databases anymore.
I don't know how to fix this, I even don't know where to start looking.
Ideas, anyone?

coloma wrote:
etresoft, thanks for sharing this ... I decided to go with the TriangleJuice suggestion instead for two reasons ... first is that I wasn't sure where to find this launchd file.
There is nothing wrong with TriangleJuice's suggestion. My only issue with creating a php.ini file is that now I have to worry about all those other settings in the ini file. If something else in PHP breaks, I have to figure out if I am the one who broke it.
Apple ships MySQL with MacOS X Server. They probably adjusted the PHP settings to match how they have MySQL setup in MacOS X Server.
For MySQL's, no, Sun's - drat! no, Oracle's part, they still haven't acknowledged the fact that Apple has shipped MacOS X 10.4. MySQL still ships with a Startup Item. If you don't know where the launchd file is, it is because you don't have one. You probably have a MySQL entry in /Library/StartupItems or maybe /System/Library/StartupItems. Startup Items were deprecated in 10.4. Oracle should be creating a file named com.mysql.mysqld.plist in /Library/LaunchDaemons.
Here is what mine looks like now:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<true/>
<key>Label</key>
<string>com.mysql.mysqld</string>
<key>ProgramArguments</key>
<array>
<string>/usr/local/mysql/bin/mysqld</string>
<string>--socket=/var/mysql/mysql.sock</string>
<string>--basedir=/usr/local/mysql</string>
<string>--datadir=/usr/local/mysql/data</string>
<string>--user=mysql</string>
<string>--log-error=/usr/local/mysql/data/Pele.local.err</string>
<string>--pid-file=/usr/local/mysql/data/Pele.local.pid</string>
</array>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>
I also don't have a /var/mysql directory and wasn't sure whether I should just create one or if this meant my configuration was different. If you feel like explaining any of this, I'd be curious to know.
You have to create one. Such a directory probably already exists on MacOS X Server. Just make sure it is owned by mysql.
sudo mkdir /var/mysql
sudo chown _mysql:staff /var/mysql
sudo chmod 0755 /var/mysql
[jdaniel@Pele:516] /var $ ls -al /private/var | grep mysql
drwxr-xr-x 3 _mysql staff 102 Aug 26 20:03 mysql
Of course, /var is a symbolic link to /private/var. Long story there.

Shockwave Security Update *ISSUES*

Similar Messages

Maybe you are looking for

Shockwave Security Update ISSUES