Slashdot Mirror


... And the Hits Just Keep On Coming

Vokbain writes "Security Update 2003-12-19 is now available. This update includes the following components: AFP Server, ASN.1 Decoding for PKI, cd9660.util, Directory Services, fetchmail, fs_usage, rsync, and System Initialization. Get it now in Software Update." This security update appears to be for 10.3.2, and, as stekylsha writes, "contains among other things -- wait for it -- the fix for the cd9660.util buffer overflow. What was the turn around on that? Three days?" EverLurking writes "Yet another update from Apple, this time they've updated Java to 1.41.1_01. You can find it in Software Update, a restart is required." I see no Java update of this sort, but I do see an update to the MPEG-2 component, as well as the 10.3.2 update for Mac OS X Server. (As usual, the technotes on Apple's site don't appear to be updated yet.)

9 of 72 comments (clear)

  1. Re:Apple is killing me! by MoneyT · · Score: 4, Insightful

    It's a matter of not being able to please everyone at once. When they did the bulk updates, people were ticked because they couldn't pick and choose what to install, so now you get them piece by piece, of course, now people want them all at once

    --
    T Money
    World Domination with a plastic spoon since 1984
  2. Advice by phorking · · Score: 4, Insightful

    You want to stay current but don't want to reboot your machine every day. You want 2 completley mutualy exclusive operations here. In your choice where Apple only releases updates once a week you are not staying any more current than you would if you only patched yourself once a week. Instead, you are only being ignorant to your current patched status. The patches are still waiting at Apple and you still have not applied them. You have not actualy gained anything by waiting for Apple to release those updates on a schedule. So, just update once a week. It makes no difference in the end. If you want to stay current, stay current and don't complain about rebooting. TTFN =)

    1. Re:Advice by Senjaz · · Score: 4, Insightful

      Not true. Patching doesn't always require a reboot. Any system service could be updated and it's process restarted individually instead of taking down the entire system. Unfortunately Apple's updates tend to want to reboot the entire machine. I suspect further effort could be made to improve the software updater so that machine reboots were not required as often. All but very core stuff could be suspended while a updated process is swapped out for a newer one.

      --
      Don't blame me - this .sig had steal me written all over it.
    2. Re:Advice by Anonymous Coward · · Score: 4, Insightful

      If I update my linux boxes I reboot them.

      Why? I've been caught before, having a machine up & running for months, updating a dozen small things that restart just fine, and I get used to how they work.

      Then on a reboot, things AREN'T identical. It's just not worth trying to trace down why the system isn't working as I'm used to when I could have completely avoided problems with a reboot. Granted it's rare, but if I'm going to do 10 reboots over a few months that's better than spending a few hours poring over a system to find why it's not working how it used to, when it's not working how it SHOULD and not how it did without the reboot.

      A reboot costs 45 seconds. That's worth it. Screw uptime

    3. Re:Advice by Anonymous Coward · · Score: 1, Insightful

      "I suspect further effort could be made to improve the software updater"

      I suspect that further efforts are being made to improve it but I'm what you might call an optimistic pessimist; I'm certain that something horrible is going to happen but I am, at the same time, certain it won't hurt too much. As little sense as that makes, it's enough for me. ;-)

  3. Re:Snagged this last night by tgibbs · · Score: 5, Insightful

    Also nice to see all the other Security fixes happening. gg Apple!

    Also nice to see Apple giving public credit to the people who reported these security holes.

  4. Re:Apple is killing me! by macmurph · · Score: 3, Insightful

    If you have ever worked in a software company you would know how incredibly difficult it is to syncronize the release of components...even within the same product. Even if everything is on a schedule, last minute bugs can delay a component for several days.

    Apple is doing the right thing by releasing updates as they become available instead of what you propose (batching updates).

    As others have said, a restart is not required in many cases, and maybe apple could eventually eliminate the need to restart. But restarting is fairly harmless in most cases.

  5. Re:Apple is killing me! by Onan · · Score: 2, Insightful

    For them to release updates at the same time, they'd need to either 1) rush the later ones, involving less testing, or 2) delay the earlier ones, which you could easily do yourself.

    Which one of these strikes you as a good idea?

  6. Apple is killing you? by Steve+Cowan · · Score: 2, Insightful

    Um, how old are you?

    One one hand you're saying you'd like Apple to hold off on releasing security patches so that they come out at the same time as other stuff to save you having to reboot your machine.

    On the other hand you're saying that you have Software Update checking for updates every day. And you don't want to set it to every week (or every month) because you want to stay current.

    I say bite the bullet, Einstein! Set your software update to once a week. Let Apple release updates on their own schedule. Trust me -- it is better for the world when Apple releases updates as they are developed. Stop wasting your bandwidth, as well as Apple's (and Slashdot's).