Apple Patches Sendmail Bug Quickly

90XDoubleSide writes "Apple has released Security Update 2003-03-03 (available through Software Update) which addresses the sendmail vulnerability reported earlier today, and includes a newer version of OpenSSL. Seems that Apple is getting much faster with their patches."

Comments

Why Wait?

[rrf]

ssh (login)@(yourmacbox)
sudo softwareupdate

Of course, this only works if you have access to it from the outside ;)

Insightful, my arse

[Xenex]

"Redhat was much faster. Look at the post on the original slashdot article, Redhat had allready a patch available."

Look at the original Slashdot story yourself. The comment relating to Apple's patch was there within 3 hours of the one relating to Red Hat.

And note, that is when Slashdot mentioned it, not when Apple posted it. Basically, the two companies had patches out at virtually the same time.

Quick, yes, but not as quick as you think

[Hanashi]

It's worth noting the vendors were all notified of the sendmail problem in mid-February. They all agreed to release the patches and the vulnerability announcements on 3 March.

One of my colleagues was complaining about not being notified immediately, but I think the situation was rather well handled (in contrast to some other recent vulnerability disclosures I could name). The vendor patches were available nearly as soon as I had heard of the vulnerability, and I won't even *guess* when the last time that happened to me was.