Apple Posts Security Update 2002-11-21
Znonymous Coward writes "Apple has released Security Update 2002-11-21 for Mac OS X 10.2 (Jaguar) via the Software Update utility. The update 'fixes potential vulnerabilities introduced in BIND, the domain server and client library software package from Internet Software Consortium (ISC), that is shipped with Mac OS X and Mac OS X Server. BIND version 8.3.4 addresses the recently-discovered potential vulnerabilities where an unauthorized person may disrupt the normal operation of the DNS name service. BIND is not activated by default on Mac OS X or Mac OS X Server.'"
Really, anybody who cares about MacOS X security updates finds out about them as soon as the software update window pops up automatically telling you to download it. In fact, I'd wager that the person who posted this found out that exact way. So, my question is why is there a slashdot story for every MacOS update when everybody who cares (Read:people with macs) find out automatically anyway? There's got to be some real news to post...
Comparison:
Apple's software updater forces me to reboot all the time.
Microsoft makes me reboot after installing a service pack (and every time I "look" at my network settings).
Redhat's software updater only "asks" me to reboot after a Kernel upgrade is installed.
I wonder if you have to reboot with software update in Apple's OS X server?
Karma: The shiznight, mostly because I am the Drizzle.
So, unless you intentionally activate it, its really a non-issue. And if you know enough to activate it, then you probably know enough to be up to date.
-Ster
If Apple waited for every latest and greatest component to become available (and tested it) prior to releasing OS updates, they would never release anything.
This is particularly true of something like BIND, which is not enabled by default anyway!