ITSS-Advisory : Medium : Apple : OSX multiple applications and products

THREAT LEVEL
============
Medium

INFORMATION
===========
Impact: Increased Privileges
Execute Arbitrary Code/Commands
Modify Arbitrary Files
Denial of Service
Access Confidential Data
Inappropriate Access
Cross-site Scripting
Access: Remote/Unauthenticated

AFFECTED PLATFORMS
==================
Product: AFP Server
Apple Pixlet Video
CarbonCore
CFNetwork
Certificate Assistant
ClamAV
CoreText
CUPS
DS Tools
fetchmail
Folder Manager
FSEvents
Java
Network Time
perl
Printing
python
Remote Apple Events
Safari RSS
servermgrd
SMB
SquirrelMail
X11
XTerm
Publisher: Apple
Operating System: Mac OS X
Mac OS X Server

ACTION
======

Administrators of affected computers are advised to review the
bulletins, test and apply relevant updates.

Security Update 2009-001 may be obtained from the Software Update pane in System Preferences, or Apple's Software Downloads web site:
http://www.apple.com/support/downloads/

Apple Security Updates web site:
http://support.apple.com/kb/HT1222

For Mac OS X v10.5.6
The download file is named: "SecUpd2009-001.dmg"
Its SHA-1 digest is: 08d8e962e2687f01b3cdc4cb386ef4e44992a1e0

For Mac OS X Server 10.5.6
The download file is named: "SecUpdSrvr2009-001.dmg"
Its SHA-1 digest is: b44344f918cbf15266cde2c989c443e455ccd88f

For Mac OS X v10.4.11 (Intel)
The download file is named: "SecUpd2009-001Intel.dmg"
Its SHA-1 digest is: e1e1a09d9543fe1a1acc759c5ed11dde58f84e0e

For Mac OS X v10.4.11 (PPC)
The download file is named: "SecUpd2009-001PPC.dmg"
Its SHA-1 digest is: a9158bed12fa6650634bc8f972a7990cddb765d9

For Mac OS X Server v10.4.11 (Universal) The download file is named: "SecUpdSrvr2009-001Univ.dmg"
Its SHA-1 digest is: 6b056d47bbf2566cda7908590fc2ccd0ab4b889f

For Mac OS X Server v10.4.11 (PPC)
The download file is named: "SecUpdSrvr2009-001PPC.dmg"
Its SHA-1 digest is: a9f97ba89b8acc6927779859bbec3787d1fb3b2a

For Mac OS X and Mac OS X Server
Java for Mac OS X 10.4, Release 8
The download file is named: JavaForMacOSX10.4Release8.dmg
Its SHA-1 digest is: 32a5be5e8bdfd9d6ba95d08eb45f9ef4edfd877e