[DM-MUG] Run Software Update ASAP

[Bryan Baker]

--Apple-Mail-20--498013626
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
	charset=US-ASCII;
	format=flowed

There is a rather nasty remotely exploitable hole in the way OSX 
handles the help://runscript url (it shouldn't).
Security Update 2004-05-24 Fixes HelpViewer so it doesn't handle the 
runscript URL when called externally anymore.
Now I can let HelpViewer handle my help: urls again.

--
Bryan Baker
Technology Advocate
Iowa Legal Aid
Suite 230
1111 9th Street
Des Moines, Ia 50314-2527

(515) 243-2151 (x1635)

http://www.iowalegalaid.org
bbaker@iowalaw.org

--Apple-Mail-20--498013626
Content-Transfer-Encoding: base64
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Disposition: attachment;
	filename=smime.p7s
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--Apple-Mail-20--498013626--