Sparkle Updater Framework HTTP man-in-the-middle vulnerability



Sparkle is an open source update framework that is used within thousands of Mac apps, including my own AutoCasperNBI & AutoImagrNBI.

A vulnerability within which was recently disclosed, with an update to Sparkle issued soon after.

However, the update may take some time to reach all the apps that are on the Macs that we admin. So the below is some more detail, methods of mitigation & detection.

Continue reading

Installing Adobe Unit Types 2.1.0


This post advises why you may need to update the Adobe Unit Types.osax file & how to do so using Casper.

The Adobe Unit Types.osax file that shipped with Photoshop CS4 and CS3 is a 32-bit component. Mac OS X 10.6 (Snow Leopard) requires some 64-bit scripting environments.

This file is placed in /Library/ScriptingAdditions/ & can cause Applescripts to fail to run.

Both Adobe & JAMF have posted help docs on how to fix this & this post is to advise how I’ve deployed to corrected osax file to affected machines. Continue reading