Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Security Update 2012-004 and Mail Plugins

Why does Security Update 2012-004 for 10.6 kick out Mail 4.6 Plugins like GrowlMail 1.2.5?

MacBook Pro, Mac OS X (10.6)

Posted on Sep 19, 2012 3:12 PM

Reply
Question marked as Best reply

Posted on Sep 19, 2012 4:21 PM

from http://support.apple.com/kb/HT5501

"Impact: Viewing an e-mail message may lead to execution of web plugins

Description: An input validation error existed in Mail's handling of embedded web plugins. This issue was addressed by disabling third-party plug-ins in Mail."


I don't pretend to understand the technical nature of the vulnerability, but simply read those Mail plug-ins could be risky.


Isn't it great that Snow Leopard got a security update!!! A big THANK YOU Apple. Keep it going.

72 replies

Sep 20, 2012 1:17 PM in response to jazzmosax

Mail Act-On has an update you can install to solve this problem.


But sorry, I don't understand what you mean by "The bottom one (under 5.) works for Letterbox and for MailActOn as well, just change 'GrowlMail' to 'Letterbox' or to 'MailActOn'."


Can you elaborate a tad on that please. I'm livid trying to live without Letterbox.

Sep 20, 2012 1:59 PM in response to Sweejak

Sweejak, if possible, undo what you did. I'm also running 10.7.5, Growl 2.0 and GrowlMail 1.3.3. Based on the info thankfully provided by lesse, here is precisely what I did and I hope it works for you:


1. Close Mail


2. If the plugin already got moved to “~/Library/Mail/Bundles (Disabled)/” move it back to “~/Library/Mail/Bundles/”


3. Open Terminal


4. defaults write ~/Library/Mail/Bundles/GrowlMail.mailbundle/Contents/Info SupportedPluginCompatibilityUUIDs -array-add "758F235A-2FD0-4660-9B52-102CD0EA897F"


5. defaults write ~/Library/Mail/Bundles/GrowlMail.mailbundle/Contents/Info SupportedPluginCompatibilityUUIDs -array-add "3335F782-01E2-4DF1-9E61-F81314124212"

Sep 20, 2012 2:23 PM in response to Don Parr

Many thanks Don, I admit it, I'm a P***y when it comes to the Terminal, but that worked just fine.


I've got a further question now that I'm getting notifications, I'm not getting sound. Do I turn off the sound in Mail and then turn on sound in GrowlMail by going to GrowlMail>notifications> Actions> SoundAction?

Once there I see that there isn't a pull down to select a sound.


Or, Just go to Mail turn on the sound I want and set GrowlMail to "Application Default"?


On edit... I've got it so nevermind. I've set it to SoundAction in GrowlMail And left the sound in Mail active.


Message was edited by: Sweejak

Security Update 2012-004 and Mail Plugins

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.