<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; ">Hi Paul,<DIV><BR class="khtml-block-placeholder"></DIV><DIV>With Tiger 10.4 I also get a hard freeze when starting up the toolkit. I haven't had time to try to figure out what/why/when/where it is though.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>Interesting through that with 10.3.9 and 10.4 we get freezes. I don't even get to the rat though.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>When I say freeze... i mean freeze. Lockup hard. I have to hold down the power key to reset the machine. Someone else in my dept. reports the same thing.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>-JQ</DIV><DIV><BR><DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><FONT face="Helvetica" size="2" style="font: 10.0px Helvetica">--<SPAN class="Apple-converted-space"> </SPAN></FONT></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><FONT face="Helvetica" size="2" style="font: 10.0px Helvetica">John I. Quebedeaux, Jr.</FONT></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><FONT face="Helvetica" size="2" style="font: 10.0px Helvetica">Louisiana State University</FONT></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><FONT face="Helvetica" size="2" style="font: 10.0px Helvetica">Computer Manager / LBRN & CCT / 131 Life Sciences Bldg. & 339 Johnston Hall</FONT></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><FONT face="Helvetica" size="2" style="font: 10.0px Helvetica">e-mail: <A href="mailto:johnq@lsu.edu">johnq@lsu.edu</A> or <A href="mailto:johnq@cct.lsu.edu">johnq@cct.lsu.edu</A> / web: <A href="http://lbrn.lsu.edu">http://lbrn.lsu.edu</A> & <A href="http://cct.lsu.edu">http://cct.lsu.edu</A></FONT></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><FONT face="Helvetica" size="2" style="font: 10.0px Helvetica">phone: 225-578-0062 / fax: 225-578-2597</FONT></DIV> </DIV><BR><DIV><DIV>On May 9, 2005, at 7:23 PM, Paul Mercer wrote:</DIV><BR class="Apple-interchange-newline"><BLOCKQUOTE type="cite"><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><SPAN class="Apple-converted-space"> </SPAN>All</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">After installing the Apple Security Update 2005-05 for 10.3.9, my machine now freezes when rat starts.<SPAN class="Apple-converted-space"> </SPAN>An X11 window opens, as usual, and then a short while later my machine freezes requiring a restart.</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Has anyone else experienced this?</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">I also installed the following updates at the same time.</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Java Update for 10.3.9</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Quicktime 7.0</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Remote Desktop Admin. 2.2</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Security Update 2005-05</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">X11 fixes in update:</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "># libXpm</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">CVE ID: CAN-2004-0687 CERT: VU#882750</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Available for:<SPAN class="Apple-converted-space"> </SPAN>Mac OS X v10.3.9, Mac OS X Server v10.3.9</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Impact:<SPAN class="Apple-converted-space"> </SPAN>A vulnerability in the parsing of malformed XPM files could</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">allow arbitrary code execution</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Description:<SPAN class="Apple-converted-space"> </SPAN>The xpmParseColors() function in the XFree86 libXpm</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">library contains a vulnerability in the parsing of malformed image</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">files that may lead to a stack overflow and could allow arbitrary</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">code execution.<SPAN class="Apple-converted-space"> </SPAN>Images downloaded via a web browser may use the XPM</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">format and allow remote exploitability.<SPAN class="Apple-converted-space"> </SPAN>libXpm is not installed by</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">default on Mac OS X or Mac OS X Server systems.<SPAN class="Apple-converted-space"> </SPAN>It is an optional</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">install item via the X11 package.<SPAN class="Apple-converted-space"> </SPAN>Credit to Chris Evans</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><<A href="mailto:chris@scary.beasts.org">chris@scary.beasts.org</A>> for reporting this issue.</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "># libXpm</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">CVE ID:<SPAN class="Apple-converted-space"> </SPAN>CAN-2004-0688 CERT:<SPAN class="Apple-converted-space"> </SPAN>VU#537878</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Available for:<SPAN class="Apple-converted-space"> </SPAN>Mac OS X v10.3.9, Mac OS X Server v10.3.9</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Impact:<SPAN class="Apple-converted-space"> </SPAN>A vulnerability in the parsing of malformed XPM files could</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">allow arbitrary code execution</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Description:<SPAN class="Apple-converted-space"> </SPAN>Multiple libXpm routines contain integer overflow</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">vulnerabilities that may allow an attacker to cause a</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">denial-of-service condition or execute arbitrary code.<SPAN class="Apple-converted-space"> </SPAN>Images</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">downloaded via a web browser may use the XPM format and allow remote</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">exploitability.<SPAN class="Apple-converted-space"> </SPAN>libXpm is not installed by default on Mac OS X or</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Mac OS X Server systems.<SPAN class="Apple-converted-space"> </SPAN>It is an optional install item via the X11</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">package.<SPAN class="Apple-converted-space"> </SPAN>Credit to Chris Evans <<A href="mailto:chris@scary.beasts.org">chris@scary.beasts.org</A>> for</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">reporting this issue.</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Any help will be appreciated.</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Thanks</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Paul</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">--<SPAN class="Apple-converted-space"> </SPAN></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Paul Mercer</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Arctic Region Supercomputing Center</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">907 450 8649</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV> <BR class="Apple-interchange-newline"></BLOCKQUOTE></DIV><BR></DIV></BODY></HTML>