Security Update 11-29-2017

[S. L. Garwood]

Watch out for the update … it caused me some issues with Parallels Desktop. I got repeated crashes in dscl - the command line directory services utility. Apple must have plugged some thing Parallels was using. VMWare and VirtualBox are fine.

> On Nov 30, 2017, at 7:00 AM, macports-users-request at lists.macports.org wrote:
> 
> Send macports-users mailing list submissions to
> 	macports-users at lists.macports.org
> 
> To subscribe or unsubscribe via the World Wide Web, visit
> 	https://lists.macports.org/mailman/listinfo/macports-users
> or, via email, send a message with subject or body 'help' to
> 	macports-users-request at lists.macports.org
> 
> You can reach the person managing the list at
> 	macports-users-owner at lists.macports.org
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of macports-users digest..."
> 
> 
> Today's Topics:
> 
>   1. Re: High Sierra security advisory: set your root account
>      password (Chris Jones)
> 
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Wed, 29 Nov 2017 20:51:32 +0000
> From: Chris Jones <jonesc at hep.phy.cam.ac.uk>
> To: Ryan Schmidt <ryandesign at macports.org>
> Cc: MacPorts Users <macports-users at lists.macports.org>
> Subject: Re: High Sierra security advisory: set your root account
> 	password
> Message-ID: <01D969C9-5347-46FC-94AD-08B134033EF2 at hep.phy.cam.ac.uk>
> Content-Type: text/plain; charset="utf-8"
> 
> Hi,
> 
> A security patch is now available, so the work around is no long needed. See
> 
> https://support.apple.com/en-gb/HT208315
> 
> Chris
> 
>> On 29 Nov 2017, at 12:42 am, Ryan Schmidt <ryandesign at macports.org> wrote:
>> 
>> A vulnerability was discovered in macOS High Sierra (10.13, 10.13.1, 10.13.2 beta) today that allows an attacker to gain root access to your system if your root account is disabled and has no password set (which is the default). If you are running High Sierra, please mitigate this attack by enabling your root account and setting a strong password for it.
>> 
>> https://support.apple.com/en-us/HT204012
>> 
>> https://www.macrumors.com/2017/11/28/macos-high-sierra-bug-admin-access/
>> 
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://lists.macports.org/pipermail/macports-users/attachments/20171129/12b12efb/attachment-0001.html>
> 
> ------------------------------
> 
> Subject: Digest Footer
> 
> _______________________________________________
> macports-users mailing list
> macports-users at lists.macports.org
> https://lists.macports.org/mailman/listinfo/macports-users
> 
> ------------------------------
> 
> End of macports-users Digest, Vol 135, Issue 25
> ***********************************************