14 DAY TRIAL // OS X Server v3.1.2 is now available from the Mac App Store. The latest version of Apple’s Server software for desktop computers and network administrators in general, OS X Server 3.1.2, delivers numerous improvements and fixes, including security patches.
Announced yesterday on Apple Support Downloads, OS X Server 3.1.2 packs more changes than initially disclosed by Apple. A Support document on the company’s web site reveals that the update features a long list of fixes and improvements, including a security fix patching Ruby.
“OS X Server v3.1.2 is available from the Mac App Store. It appears in the Updates pane if you have OS X Server (Mavericks) installed. Click the Update button to install it. To prevent the interruption of services, Server updates are not automatically installed, even if you have chosen to automatically install other updates from the Mac App Store,” Apple says.
The Mac maker proceeds to outline the changes, noting that “Server v3.1.2 improves the general stability of OS X Server and delivers the following specific improvements.”
This includes fixes for deploying profiles containing variables when code signing is enabled in Profile Manager, more reliability for sending Volume Purchase Program invitations, better management of Device Enrollment Program systems with long descriptive names, improvements to Messages Server in Chat Rooms, and better delivery of messages to Mail groups.
The Cupertino company asks users to note that “the Mail service cannot deliver messages that contain unencoded 8-bit data to a group.”
When coupled with OS X Mavericks 10.9.3 update, which is actually the minimum requirement, Server 3.1.2 further fixes problems with copying files to an SMB shared folder and Active Directory accounts logging into Messages.
Finally, Apple directs customers to a security advisory that describes the Ruby patch included in Server 3.1.2. Affecting OS X 10.9.3 users, “A heap-based buffer overflow issue existed in Ruby when converting a string to a floating point value,” reads the description.
“An attacker could send a specially crafted request to Profile Manager or to a Ruby script, which may lead to an application hang or arbitrary code execution. This issue was addressed through additional validation of floating point values,” Apple confirms.
Weighing in at 179 MB, OS X Server 3.1.2 is a free download for all existing Server 3 users. Newcomers must pay $19.99 / €17.99 for the software. Supported languages include English, Chinese, Dutch, French, German, Italian, Japanese, Korean, and Spanish. As noted above, OS X 10.9.3 or later is required for this update.