[OS X TeX] i-Installer 2.82 released. Security release: all users requested to upgrade

Davia Shana Cox coxdavia at msu.edu
Wed Oct 11 04:11:54 CEST 2006


I am having trouble loading the new i-installer 2.82, when I install and 
configure of the new i-installer it stalls at the configuration portion of 
loading the software. Any suggestions? 

Davia Cox 

Davia S. Cox
Research Assistant/Doctoral Student
Department of Political Science & Global Urban Studies Program
Michigan State University
447 Berkey Hall
East Lansing, MI 48824 

517-353-6855 Home
517-353-5987 Office
517-353-6880 Fax 

Gerben Wierda writes: 

> On Oct 11, 2006, at 00:41 , Alain Schremmer wrote: 
> 
>> Gerben Wierda wrote: 
>> 
>>> I have noticed that the setup of i-Installer brings with it a  potential 
>>> security issue which is also potentially serious. This  find (by myself, 
>>> luckily) is not a happy event for me. 
>>> 
>>> I have patched i-Installer. As a result, installing i-Installer  with 
>>> drag-and-drop from the II2.dmg volume is now deprecated. The  II2.dmg 
>>> now contains an Apple Installer.app package which installs  i- 
>>> Installer. Also, upgrading with the i-Installer i-Package is  supported. 
>>> 
>>> i-Installer itself now contains some basic checks for this  security 
>>> issue. 
>>> 
>>> All i-Packages will be upgraded/released shortly and they will all  
>>> contain a check for i-Installer version 2.82 or up to force users  to 
>>> upgrade.
>> 
>> Am I correct to understand this to mean that it is /installing/  that is 
>> a potential security issue but that stuff that is already / 
>> installed/—in my case v2.65.2 and stuff of that same age—are OK as  
>> long as I don't install anything else with it?
> 
> Correct. 
> 
> As far as I know, there is no actual exploit and there is only a  possible 
> exploit if someone already has access to your system through  a real login 
> (no exploit via network or so). 
> 
> G------------------------- Info --------------------------
> Mac-TeX Website: http://www.esm.psu.edu/mac-tex/
>          & FAQ: http://latex.yauh.de/faq/
> TeX FAQ: http://www.tex.ac.uk/faq
> List Archive: http://tug.org/pipermail/macostex-archives/ 
> 
> 
 


------------------------- Info --------------------------
Mac-TeX Website: http://www.esm.psu.edu/mac-tex/
          & FAQ: http://latex.yauh.de/faq/
TeX FAQ: http://www.tex.ac.uk/faq
List Archive: http://tug.org/pipermail/macostex-archives/




More information about the macostex-archives mailing list