Slashdot Mirror

← Back to Stories (view on slashdot.org)

Apple Security Update Posted

Posted by pudge on from the but-i-got-r00ted-in-the-meantime dept.

patpro writes "Apple has just released a security update for Mac OS X. It includes Apache 1.3.23, OpenSSH 3.1p1, PHP 4.1.2, rsync 2.5.2, and sudo 1.6.5p2 (among other things). For the moment it's available only via the Software Update pane in System Preferences, but it should be available later at the Apple Downloads Page."

6 of 57 comments (clear)

  1. PHP Module Replaced by Paul+Burney · · Score: 5, Informative

    This update will replace the current PHP module you have installed.

    Many people use a version of the Apache PHP module compiled for OS X by Marc Liyanage that has PDF/Postgres/curl/gd, etc. enabled, rather than the stock Apple installed module.

    After applying the update, you will need to reinstall the Liyanage module. It only takes 3 minutes. The instructions and download are located here:

    http://www.entropy.ch/software/macosx/php/

    --
    <?php while ($self != "asleep") { $sheep_count++; } ?>
  2. Surely not fast enough in fact... by patpro · · Score: 2, Informative

    I'm affraid the rsync 2.5.2 Apple just released for OSX is still vulnerable...

    the FreeBSD-SN-02:01 Security Notice reads this :

    Port name: rsync
    Affected: versions < rsync-2.5.4
    Status: Fixed.
    Incorrect group privilege handling, zlib double-free bug.
    URL:http://online.securityfocus.com/bid/4285
    URL:http://www.rsync.org/

    so what ? is MacOSX immune to the "Incorrect group privilege handling" bug of rsync < 2.5.4 or does Apple just released a buggy sec. update ? This bug appears to be known for 3 weeks now...

  3. No reboot required! by rgraham · · Score: 2, Informative

    Not like these sorts of updates should require a reboot but sometimes they do, like with the recent Airport software update.

  4. Re:Fast, but not Red Hat Fast by schwanerhill · · Score: 3, Informative

    "What i want is to get those things off my list of updates to download." In Software Update, select the update(s) you don't want and choose "Make Inactive" from the Update menu.

  5. Re:Fast, but not Red Hat Fast by bdesham · · Score: 1, Informative
    I'd like a command-line accessible fortune, though. All the versions I've found so far are GUI.
    IIRC, you can get one by installing fortune-mod with Fink.
    --
    Alcohol and Calculus don't mix. Don't drink and derive.
  6. Re:Open SSL Version Mismatch by pfistech · · Score: 2, Informative
    You likely installed a custom build of OpenSSH at some point in time and now when you run 'ssh' it runs this outdated copy instead of Apple's copy. Outdated here means that it was built against OpenSSL 0.9.4something or 0.9.5something, not the 0.9.6b that is currently provided by Apple.

    Run "which ssh" and see what it tells you. If it says "/usr/local/bin/ssh", you may want to remove that copy of ssh so that it uses Apple's version (/usr/bin/ssh).

    --
    -chrisp

    "If that makes any sense to you, you have a big problem."