Security Update 2007-004 may affect SQL Anywhere 9, IBM Workplace Forms Viewer, some other applications

Issue or symptom

Applications that use the DYLD_LIBRARY_PATH environmental variable may have issues after installing Security Update 2007-004.

Products affected

• SQL Anywhere 9
• IBM Workplace Forms Viewer
• Other applications that use the DYLD_LIBRARY_PATH environmental variable

Solution

Check with the application's vendor to see if a later version is available (that is, a newer version of the application that does not depend on the DYLD_LIBRARY_PATH environmental variable).

If no updated version is available, you can use one of the following workarounds to avoid the issue.

Workaround: Edit the application's info.plist

This workaround is recommended because it does not reintroduce the vulnerability that was addressed by Security Update 2007-004.

1. Quit the affected application if it is running.
2. Go to the application's icon in the Finder.
3. Control-click or right-click the application's icon.
4. From the contextual menu that appears, choose Show Package Contents.
5. Open the Contents folder.
6. Open the "info.plist" file in a text editor, such as TextEdit.
7. Add the following to the file:

<key>LSEnvironment</key>
<dict>
<key>VARIABLE</key>
<string>VALUE</string>
</dict>

Note: If you later wish to undo this change, edit the info.plist file again and remove the text you added above.

Workaround: Use Terminal

1. Log in as an administrator.
2. Open Terminal (/Applications/Utilities).
3. Type this command on a single line, followed by Return.
   

   sudo touch /var/db/.AllowDYLDEnvironmentVariables

Note: This workaround will reintroduce the DYLD_LIBRARY_PATH environmental variable vulnerability that was addressed by Security Update 2007-004. After installing a version of the affected application that does not depend on the DYLD_LIBRARY_PATH environmental variable, you should use this Terminal command to "undo" the command in step 3 above:

sudo rm /var/db/.AllowDYLDEnvironmentVariables

Important: Information about products not manufactured by Apple is provided for information purposes only and does not constitute Apple's recommendation or endorsement. Please contact the vendor for additional information.