Slashdot Mirror
Mac OS X 10.2.5 Update Available
jarrettwold2002 writes "ThinkSecret mentioned that 10.2.5 would be out this month; well, it's out much sooner than the usual end of the month dates that Apple loves. It might be available via Software Update later today or tomorrow, but is available for purchase on CD via the Apple Store, right now. 'The 10.2.5 Update delivers enhanced functionality and improved reliability for the following applications, utilities, services, and technologies: Address Book, AirPort, AppleScript, Bluetooth, Classic compatibility, Disk Copy, Disk Utility, Finder, Help Viewer, iChat, Image Capture, IP Firewall, Kerberos, Mail, OpenGL, Print Center, Rendezvous, and Sherlock.'" The release notes are not yet available. Update: 04/10 23:09 GMT by P : It is now available via Software Update, too.
You can expect that in 10.3, but this is just another double point release...
That's new... an *intentional* link to a nonexistant page...
It makes sense that Apple won't be bundling Safari with the OS until it has reached 1.0. As nice as it is right now, it's still a beta, and generally you don't give your users a beta for a default browser.
sig
Some (Dual USB) iBook users are having battery problems with 10.2.4 -- seems 10.2.4 messes up something in the power management so that when running unplugged the machine'll run till some arbitrary level of charge remaining (from 50%-90% of capacity left) and then suddenly go into sleep. Plugging the machine in starts the battery charging from 0%. Here's hoping 10.2.5 addresses that.
Here's the release notes from 10.2.4:
Looks pretty similar...
Happiness is like peeing yourself. Everybody can see it but only you can feel its warmth.
Comment removed based on user account deletion
I hope this update will make my 12" TiBook with Airport Extream stop crashing my Linksys Wireless access point.
That is really a problem for me.
-Pete
Soccer Goal Plans
I wonder if I'll finally be able to use my mac as a virtual bluetooth headset. i mean i love being able to dial, send sms messages and answer the phone from my mac but then i have to go into the other room and find my phone to actually talk to anyone. It would be much more awesome to just click answer and then speak/listen, and to be able to use the voice activatable functions in the phone etc. Then my phone can stay in its drawer where it belongs until it's walkies time.
I used to have a better sig than this, but I got tired of it
that link is unusable since it includes the information from your session. it returns a "your session has timed out" error.
Intercarve Networks, LLC
I am currently able to access the update via Software Update
Just popped up on software update. Link to doc is Here
If this article confuses you, don't worry. It was posted yesterday in a much clearer fashion.
The update states: Bluetooth Setup Assistant now works with certain Microsoft keyboards and mouse devices Does that mean we can use a bluetooth mouse and keyboard now? As far as I know, this was not supported before.
Like puzzle games? Warehouse51 for iOS
The specific 10.2.5 changes are here.
R: That voice. Where have I heard that voice before? B: In about 365 other episodes. But I don't know who it is either.
It might just be me... But Software Update told me that I needed "499MB" of free space to do the installation.
.pkg (looking for the Perl script that checks such things) - to no avail.
I started cleaning out some chaff from the disk and wasn't finding enough, so I started digging around in the internals of the
So... After downloading it to the Desktop and starting it up, it tells me that I only need "163MB" of space.
Cool. On I go.
With Audigy/Extigy support rumored for some time now, is anyone able to report back on whether 10.2.5 has improved on this?
IIRC, previous versions had very basic support for the Extigy, and no support for the Audigy at all.
You can get it now at Software Update in System Preferences, or if you rae feeling kicky download the stand-alone installer at:
http://docs.info.apple.com/article.html?artnum=
Bluetooth Setup Assistant now works with certain Microsoft keyboards and mouse devices. .Mac passwords that are up to 32 characters long. /tmp was missing or unavailable.
Includes Bluetooth support for Nokia 7650 and P800 phones.
Improves compatibility for discs burned with certain Panasonic consumer burners.
Adds Image Capture support for Canon EOS 10D, ZR65, and ZR 70 cameras.
Adds disc burning support for several device-LaCie d2 DVD Multi U&I Drive and d2 CD-RW 52x24x52x, Visual Frontier COHH-B1-A48 and COSP-B1-C24, MacPower Cold Chisel 24x12x24x8x, and these BUSlink devices: FW5252FM FireWire 52x24x52x CD-RW drive, FW4848FM FireWire 48x12x48x CD-RW Drive, RW4040FM FireWire 40x12x40 CD-RW Drive.
Addresses an issue in which domain name lookups could fail if the DNS server responded with a very large reply packet.
Improves the way that LDAPv3 connections time out when idle.
Addresses a potential data loss issue that could occur when copying certain files to an SMB volume.
Addresses issues with Internet Sharing when certain types of DSL or cable modem connections are shared.
Improves security by resolving an issue in which a guest could gain read access to the contents of a shared Drop Box folder remotely.
The Internet preference pane can now store
Addresses an issue in which some Apple internal modems could not establish or maintain a connection to certain Scandinavian Internet service providers
Improves Mail's selection of character encoding for messages sent in these languages: Arabic, Bulgarian, Greek, Hebrew, Hungarian, Icelandic, Polish, Romanian, Russian, Thai, Turkish, Ukrainian.
Improves Mail responsiveness for accounts configured with multiple POP servers, when the servers are unavailable.
Addresses an issue in which an application could unexpectedly quit when printing, if
Addresses an issue in which a damaged GIF file, such as a Web site graphic, could cause an application to unexpectedly quit.
Addresses an issue in which certain PICT graphics could not be displayed.
Addresses an issue in which the date may unexpectedly be set to 1969 or 1970 during startup.
Addresses an issue when using the Hanin input method for Traditional Chinese in which Carbon applications could unexpectedly quit if a modifier key (such as Control) was pressed when no text insertion point was available.
Addresses an issue in which Classic fails to start ("Error 1016") when applications available to a non-Admin user are restricted.
Addresses an issue in which the Classic environment could become unresponsive after placing a Classic application's save confirmation dialog box in the background.
Addresses an issue in which using the Command-Option-Shift-Q key command would immediately quit the Classic environment.
Improves the reliability of AppleEvents traffic (inter-application communication) between software running in the Classic environment and native Mac OS X; addresses an issue in which a user might not be able to logout after using a Mac OS 9 version of America Online (AOL).
I'm not really wanting to go out of my way to test this, but does anybody know if the system hang from an inaccessible mounted SMB volume has been fixed? This bug has been around for a long time now...surely it can't be that hard to issue a timeout?!?
I have a TiBook within 30 minutes my computer froze twice... which had never happened before in the past year I have been using Mac os X
According to a vulnerability report release by @Stake, this fixes a serious security hole.
0 41003-1.txt
http://www.atstake.com/research/advisories/2003/a
Overview:
DirectoryServices is part of the MacOS X information and authentication subsystem. It is launched at startup, setuid root and installed by default. It is vulnerable to several attacks ultimately allowing a local user to obtain root privileges.
Details:
During the startup of DirectoryService, the application creates a lock file by executing the touch(1) UNIX command. It executes touch through the system() libc function. This function is inherently insecure and its use is strongly discouraged in privileged applications.
Since this call to system() does not specify a full path to the touch(1) command, it is possible for an attacker to modify the PATH environment variable to specify a directory containing her own version of the touch(1) command. In this instance, this would cause DirectoryService to execute arbitrary commands as root.
In order for an attacker to exploit this vulnerability, they must first cause DirectoryServices to terminate. This can be done by simply connecting to port 625 repeatedly using an automated program.
i don't read slashdot anymore.
In my game tranquility, I'm seeinga solid 10% increase in frame rate. Very nice Apple! Thanks.
From the apple security mailing:
Mac OS X 10.2.5 is now available. It contains fixes for recent
vulnerabilities in:
Apache 2.0: Fixes CAN-2003-0132, a denial of service vulnerability in
Apache 2.0 versions through 2.0.44. Apache 2.0 is distributed only
with Mac OS X Server, and is not enabled by default.
Directory Services: Fixes CAN-2003-0171 DirectoryServices Privilege
Escalation and DoS Attack. DirectoryServices is part of the Mac OS
X and Mac OS X Server information services subsystem. It is
launched at startup, setuid root and installed by default. It is
possible for a local attacker to modify an environment variable
that would allow the execution of arbitrary commands as root.
Credit to Dave G. from @stake, Inc. for the discovery of this
vulnerability.
File Sharing/Service: Fixes CAN-2003-0198 where the contents of the
write-only DropBox folder can be revealed. When enabled, Personal
File Sharing on Mac OS X or Apple File Service on Mac OS X Server,
a "DropBox" folder is available by default to allow people to
deposit files. This update no longer allows the permissions of
the "DropBox" folder to be changed by a guest.
OpenSSL: Fixes CAN-2003-0131 Klima-Pokorny-Rosa attack on PKCS #1 v1.5
padding. The patch from the OpenSSL team, which addresses this
vulnerability, is applied to Mac OS X and Mac OS X Server.
Samba: Fixes CAN-2003-0201 which could allow an anonymous user to gain
remote root access due to a buffer overflow. The built-in Windows
file sharing is based on the open source technology called Samba
and is off by default in Mac OS X.
sendmail: Fixes CAN-2003-0161, where address parsing code in sendmail
does not adequately check the length of email addresses. Only the
patch from the sendmail team is applied to the currently-shipping
version of sendmail in Mac OS X and Mac OS X Server.
Mac OS X 10.2.5 is now available. It contains fixes for recent vulnerabilities in:
Directory Services: Fixes CAN-2003-0171 DirectoryServices Privilege Escalation and DoS Attack. DirectoryServices is part of the Mac OS X and Mac OS X Server information services subsystem. It is launched at startup, setuid root and installed by default. It is possible for a local attacker to modify an environment variable that would allow the execution of arbitrary commands as root. Credit to Dave G. from @stake, Inc. for the discovery of this vulnerability.
File Sharing/Service: Fixes CAN-2003-0198 where the contents of the write-only DropBox folder can be revealed. When enabled, Personal File Sharing on Mac OS X or Apple File Service on Mac OS X Server, a "DropBox" folder is available by default to allow people to deposit files. This update no longer allows the permissions of the "DropBox" folder to be changed by a guest.
OpenSSL: Fixes CAN-2003-0131 Klima-Pokorny-Rosa attack on PKCS #1 v1.5 padding. The patch from the OpenSSL team, which addresses this vulnerability, is applied to Mac OS X and Mac OS X Server.
Samba: Fixes CAN-2003-0201 which could allow an anonymous user to gain remote root access due to a buffer overflow. The built-in Windows file sharing is based on the open source technology called Samba and is off by default in Mac OS X.
sendmail: Fixes CAN-2003-0161, where address parsing code in sendmail does not adequately check the length of email addresses. Only the patch from the sendmail team is applied to the currently-shipping version of sendmail in Mac OS X and Mac OS X Server.
System requirements: Mac OS X 10.2.x (Jaguar)
Mac OS X 10.2.5 may be obtained from:
- Software Update pane in System Preferences
- Apple's Software Downloads web site:
Information will also be posted to the Apple Product Security web site:Updating from Mac OS X 10.2.4:
http://www.info.apple.com/kbnum/n120210
The download file is titled: MacOSXUpdate10.2.5.dmg
Its SHA-1 digest is: 1f98f9a21c3f17be823e2d63d90e534df01b3fdf
Updating from Mac OS X 10.2 through 10.2.3:
http://www.info.apple.com/kbnum/n120211
The download file is titled: MacOSXUpdateCombo10.2.5.dmg
Its SHA-1 digest is: a8ed6287d5bd0bdf67a2c0fd97b3af810f178d21
http://www.apple.com/support/security/security_up
This message is signed with Apple's Product Security PGP key, and details are available at:
http://www.apple.com/support/security/security_pg
Like someone stated earlier, I hope Apple works on their wireless stuff (or hell, networking in general). Throwing karma into the wind, I installed an airport card, and 10.2.0 all at the same time (hey, save uptime ^_^), but upon booting and waking up, it would no longer do DHCP for ethernet. It would connect if I was plugging the cord in, but not if it was plugged in prior to starting the system or waking up. I was miffed for a month or two and finally gave up and did a complete re-install of the system. Didnt help, so after another month, I removed the card, but it didnt solve the issue...
I've seen a few other people have this problem, but nothing widespread. Hoping someday, it will be solved... Kinda like that Scandanavian ISP thingy.
Note, if you have any hints on this, please let me know, thank you.
We don't need an "overrated" so much as we need a "you completely missed the parent's point, dumbass..."
I just updated and I'm restoring my mp3 archive from CDs and the copies keep stalling about 200mb into it.
I'm about to try to copy everything from the terminal...
anyone else having any problems like this?
...spike
Ewwwwww, coconut...
My desktop keeps giving kernal panics, even if I just let it sit there w/out logging in. If I loggin, I get a few minutes of normal activity before *panic* -- I'm at a bit of a loss...
Mine installed fine.
"However," replied the universe, "The fact has not created in me A sense of obligation."
Safari v71 with this upgrade makes browsing the net a dream for an iBook user (600mhz) (2-sec page loads)...thank you Apple!!!. I can just imagine what its like for Mac users with a G4.
I wish they would fix the problem with printing from Adobe to Linux CUPS queues. It produces a PICT/PS format- PICT w/ embedded PS - data stream that only the OS X cups filter can handle (pictpwtops filter).
Send this to a Linux CUPS broadcast queue and it goes in the bit bucket or starts spewing garbage.
"Just Works" my derriere.
Only Apple could take an open printing system and make it proprietary.
There's a new phone on the market called P800 from sonyericsson. It's pretty cool, it does have bluetooth support (as you're aware of since 10.2.4) -but it also has these other applications called Calendar and Messages. You should check these out too. I think these two apps would go great together with iSync.
DP 1ghz desktop, 512 MB, no issues whatsoever.
Imagine a Beowulf cluster of neurons.
My PowerBook's still a WallStreet.
http://docs.info.apple.com/article.html?artnum=
as my
After upgrading to 10.2.5. you can open the Directory Access app and see that it now has an option to configure NIS. Nice.
Upgrade the firmware dude. It'll go away.
:)
(thats what happens when I, I mean you, don't read the upgrade requirements carefully
Worked for me.
Good luck.
Mail: Corrects problem in which Mail is REALLY FUCKING SLOW
I can hope, yes?
sulli
RTFJ.
WINS remains broken. OS X Samba can't browse across a router. At least it not longer has that annoying behavior where you can only browse the WINS server itself.
It is cowardly, and a betrayal of whatever it means to be a Jew, to act as a white man
-James Baldwin
Weird thing happened when I tried to reboot from Battery after applying the patch.
When my iBook 800 rebooted, I got the silver boot screen for 5 seconds then it turned off my machine. After a few attempts of it doing the same thing I tried to reboot with it plugged in.
After I unplugged everything -- scrolly mouse, FW drive, scanner - it booted fine + has stayed cool w/ everything plugged back in, through a reboot and hours of steady use. Weird problem - I'm glad that it stopped happening...
10.2.5 killed my virtualhosts. It commented stuff out in my httpd.conf without making a backup. I fixed the conf and bounced the daemon, still no dice. It'll host stuff up from the default directory if I surf there via IP, but not by domain name. I checked my DNS box too, everything's just peachy there (linux x86) so it's not a resolving issue.
This blows. I use vhosts for work.
"Let him go, Ralph. He knows what he's doing." --Otto Mann (simpsons)
after uncommenting the vhosts modules, bouncing the daemon doesn't do the trick. I rebooted and it's all swell now.
php, perl, ssl and other mods are commented out by the installer (both load and add). I uncommented php4 before the reboot and it's still not working though, so this might not be a global fix for all non-functioning modules.
"Let him go, Ralph. He knows what he's doing." --Otto Mann (simpsons)
(the AC of this thread was ME...) I had the firmware updated allright, I was using 10.2.4 uptill then. But thanks for the tip.
Here's how I recovered:
I booted from 10.2 cd and reinstalled, then reapplied the 10.2.5 update, and no probs this time.
Imagine my rejoicing when after all that my mail-accounts, address, prefs etc were 'imported' (using the 'save previous system' in the 10.2 installer)
Mail is crispier, so is safari, but boot- time has gone up a little -but who cares if you can have days and days of uptime without probs?!
My address book file corrupted when I changed from english to japanese, now when I changed back to english, when I point over it, I get three japanese characters and then when i try to open it, it just doesn't do anything. the icon on it changed to a peice of paper and the big applications A thing. I was hoping the 10.2.5 update would fix this, but no go. Any ideas on how I can restore the address book?