... And the Hits Just Keep On Coming

Vokbain writes "Security Update 2003-12-19 is now available. This update includes the following components: AFP Server, ASN.1 Decoding for PKI, cd9660.util, Directory Services, fetchmail, fs_usage, rsync, and System Initialization. Get it now in Software Update." This security update appears to be for 10.3.2, and, as stekylsha writes, "contains among other things -- wait for it -- the fix for the cd9660.util buffer overflow. What was the turn around on that? Three days?" EverLurking writes "Yet another update from Apple, this time they've updated Java to 1.41.1_01. You can find it in Software Update, a restart is required." I see no Java update of this sort, but I do see an update to the MPEG-2 component, as well as the 10.3.2 update for Mac OS X Server. (As usual, the technotes on Apple's site don't appear to be updated yet.)

Comments

Snagged this last night

[Pope]

I was very happy about the MPEG-2 update, previewing my m2v files in VLC is a pain compared to QuickTime's player, simply because the control in QT is much better.

Also nice to see all the other Security fixes happening. gg Apple!

Apple is killing me!

[UV_Haze]

They keep updating things. In a way you could say this is cool. Kinda like end of year/quarter house cleaning; however, I don't see any obvious reason why they could not release all of this stuff on the same day at the same time.

I only ever reboot my machine when the software update thing tells me to, so generally that's about once every other month. I've rebooted every day this week.

ARGH..

Apple.. please get better release management going. I know its nice to make the headlines everyday on slashdot (and other news sites) because you've updated something, but you're killing me here with updates.

And yes, I know I could set software update to checking once a week instead of once a day... But I like to stay current. ;-)

Re:Three days turn around on the Buffer Overflow..

[stekylsha]

In all fairness, there were a number of people offering patches for cd9660.util hours after the vulnerability was announced. On the other hand, Apple was very quick to get the patch as part of the "official" Apple release.

Personally? This rocks. It means Apple's listening and are responsive to security issues.

Re:10.2.8 kernel panic?

[dave1212]

Get the heck off Norton, it's a waste of money. None of their programs are of any use on a Mac running OS X, and if you run Panther, the updates don't even exist for some of the apps.
Filesaver is one sure way to damage a drive badly, as well as make a mess of your system (throwing many files everywhere) and slow everything down by half, making a point to rescan and log every single file you open or move, as well as many other things you might do in regular use. In all I've seen, heard, and read, it has *never* been used reliably to recover a drive to a fully usable state.
Antivirus is full of crap, it's lying to you that it's doing anything useful. If you're really *that* paranoid to want a commercial virus-checker on a Mac, get Virex.

Problems with Warcraft III: Frozen Throne?

[Nova Express]

I installed all the latest Apple updates, including Quicktime 6.5, just before installing a copy of Warcraft III: The Frozen Throne. The game seems to play OK, but the cinematic cutscreens are all screwed up, playing in overlapping tiles rather than fullscreen.

The vitals: Duel 1 GHz PowerMac G4, 768 MB, Radeon 9000, 10.3.2 and all the latest and greatest.

Anyone else seen this problem?