After our battle scars from the April patches, Microsoft’s May patches were a bit of a breather for consumers.
While the Exchange patch meant homework for administrators, home users at least had a break after the “double patch” bout we had in April. But lest you think everything is rosy on the other side of the operating system, even Apple folks had to deal with their share of patch pain this month.
Apple users, we feel your pain
First off, I have to say that I love the new Apple-versus-PC advertising campaign. You’ve seen them, haven’t you? The Security Awareness blog links to a few of the better ones, but all six can be found at the Apple Web site.
I don’t quite agree that Apple is immune to any disease, as the funny “virus” video implies. Unfortunately, our Apple brothers have had their share of patching issues this month, as have Windows users. Having Adobe’s Version Cue software in the Startup menu, as mentioned in the Apple support forums, appears to be causing issues for many Mac users. As a precaution, ensure that Version Cue is not in your Startup if you install Apple’s latest security bundle.
But don’t just read that and think, “I don’t have a Macintosh, so there’s nothing of interest for me.” Even us Windows folks need to be aware of the QuickTime issues that were recently patched, as reported by ZDNet. To ensure that you only get the QuickTime patch, and not the bundled version that includes iTunes, use Apple’s standalone QuickTime Player link.
Exchange patch builds confusion
In early builds of Exchange 2003, any user with permissions set to “Full Mailbox Access” has the ability to “Send As” the owner of the mailbox. Microsoft determined that this level of security permissions wasn’t granular enough. The company thus changed this behavior in later editions of Exchange.
Microsoft indicates in Knowledge Base article 916803 that only Exchange 2003 SP1, and not SP2 or 2000, would be affected by the new “Send As” permissions in the MS06-019 security bulletin, released on May 9. The change in “Send As” behavior is also discussed in KB 895949.
But administrators found that some other builds of Exchange are also affected. This prevents e-mails from being sent to BlackBerrys and possibly other handheld devices. The situation has been reported on at PatchManagement.org, which provides a workaround.