Security Update 2007-004 1.1 released: resolves issues with initial version

Less than two weeks after the release of Security Update 2007-004, Apple has released a revised version of the update numbered 1.1.

The new version contains the same security refinements as the initial release, but resolves some of the significant issues outlined our Security Update 2007-004 special report.

Though Apple doesn't explicitly state what problems are fixed in this release, solutions for AirPort connectivity issues affecting Mac OS X 10.3.9 systems and an issue where FTP users logged into Mac OS X 10.4.9 server were able to gain access to files outside their normal domain are good guesses.

UPDATE: Confirming our suspicions, Apple Knowledge Base article #305445 states that precisely the two aforementioned issues are fixed in this update:

AirPort for Mac OS X v10.3.9: "This update corrects an issue where the AirPort connection may be lost after waking from sleep. This issue only affects Mac OS X v10.3.9 with Security Update 2007-004."

FTPServer for Mac OS X Server v10.4.9: "Security Update 2007-004 applied an incorrect ftp configuration file for Mac OS X Server v10.4.9 systems. Users with ftp access, who would normally be restricted to certain directories, may be able to access directories outside the normal scope. This update addresses the issue by restoring the correct version of the ftp configuration file. This issue only affects Mac OS X Server v10.4.9 with Security Update 2007-004."

Download links are as follows:

• Security Update 2007-004 v1.1 (for Intel-based Macs running Mac OS X 10.4.9 and all Macs running Mac OS X 10.4.9 Server) [15.7 MB]
• Security Update 2007-004 v1.1 (for PowerPC-based Macs running Mac OS X 10.4.9 [9.1 MB]
• Security Update 2007-004 v1.1 (for Macs running Mac OS X 10.3.9 Client) [36.7MB]

To reduce the risk of problems resultant from this update, use the steps outline in our "applying updates" guide

Problems after updating? Please let us know at late-breakers@macfixit.com.

Resources