Slashdot Mirror

← Back to Stories (view on slashdot.org)

Security Update 2004-02-23 Released

Posted by pudge on from the now-i-can-use-insecure-operations-securely dept.

dbesade writes "Apple has released a security update for Mac OS X. The update includes changes to disk arbitration, IPsec, the point-to-point protocol, and tcpdump. As usual the changes have not been posted to the Apple Support Website."

18 of 87 comments (clear)

  1. IPSec working.. by -tji · · Score: 4, Informative

    I am not sure what they changed in IPSec, but I installed the updates and my VPN connections are still working fine to a Check Point VPN-1 device.

    I looked through the man page for racoon.conf, and didn't see any functionality updates mentioned there. I was hoping they had added patches for NAT Traversal or xauth.

    1. Re:IPSec working.. by Anonymous Coward · · Score: 1, Informative
      It's probably the fix for unauthorized deletion of IPsec (and ISAKMP) SAs in racoon as racoon now contains the string "ignore information because the message has no hash payload" which is from the patch.

      NAT-T is supported by Mac OS X, however it's not interoperable with anything apart from Mac OS X as Apple chose to use their own NAT-T Vendor ID (which is used for NAT-T detection) and also they have implemented the latest versions of the NAT-T and udp-encaps drafts only, which nobody else uses.

  2. small download by billbaird · · Score: 3, Informative

    only 1.6 megs, yippee!!

    1. Re:small download by edalytical · · Score: 4, Informative

      Software Update reports it's 5.1 MB, but I'm still running Jag. I'm sure it makes a differences.

      --
      Win a signed Stephen Carpenter ESP Guitar from the Deftones: http://def-tag.com/?r=0008781
  3. Apple Support changes list... Tuesday by Gogo+Dodo · · Score: 4, Informative
    The Security Updates page trails by about a day so the list of changes should be up on Tuesday.

    All of Apple Support things seems to trail by about a day. Things must be published at a set schedule.

    1. Re:Apple Support changes list... Tuesday by Demolition · · Score: 3, Informative

      Yes, these updates automatically appear in Software Update. In fact, Security Updates usually appear in Software Update before they appear on Apple's website. The following day, a standalone downloadable updater is made available.

      D.

  4. Works fine so far... by Anm · · Score: 1, Informative

    PowerBook 800Mhz DVI

  5. More info here by kaan · · Score: 2, Informative

    From this support page at apple.com:

    Security Update 2004-02-23 delivers a number of security enhancements and is recommended for all Macintosh users. This update includes the following components:

    DiskArbitration
    IPSec
    Point-to-Point-Protocol
    Safari

    Additionally, Security Update 2003-11-19 has been incorporated into this security update. Those components are:

    gm4
    groff
    Mail w/CRAM-MD5 authentication
    OpenSSL
    Personal File Sharing
    QuickTime for Java
    zlib "gzprintf()" function

    1. Re:More info here by kaan · · Score: 2, Informative

      oops, posted the wrong link before... at a glance, it looks like it contains the same information.

      here is the correct page for 10.3.x at apple.com

  6. Re:Why didn't you post today's updates by Anonymous Coward · · Score: 2, Informative

    Or you could go into your prefs and turn OFF the apple stuff...

  7. Re:Problem with security update don't install. by davids-world.com · · Score: 1, Informative
    Don't know what your problem is. I never had problems installing an update, I never crashed my machine completely with an official Apple OS X system, or with third-party applications. I never had a virus, and no security breaches either. Now, from my (too) many years of Windows computing (95, NT, 2000), I do know what a crash, a virus or the common 'system slowdown'/DLL hell looks like.

    Maybe your friend was messing around with system files, deleting things from /System or /Library??

  8. Files in distribution by Anonymous Coward · · Score: 5, Informative

    ./System/Library/Frameworks/CoreFoundation.framewo rk/Versions/A/CoreFoundation ./System/Library/Frameworks/CoreFoundation.framewo rk/Versions/A/Resources/Info.plist ./System/Library/Frameworks/CoreFoundation.framewo rk/Versions/A/Resources/version.plist ./System/Library/PrivateFrameworks/DiskArbitration .framework/Versions/A/Resources/Info.plist ./System/Library/PrivateFrameworks/DiskArbitration .framework/Versions/A/Resources/version.plist ./usr/lib/libpcap.A.dylib ./usr/sbin/diskarbitrationd ./usr/sbin/pppd ./usr/sbin/racoon ./usr/sbin/tcpdump

  9. Update just screwed me by strazi · · Score: 1, Informative

    My powerbook 12in 1ghz is booting into a command prompt. Last thing it says is "Root device is mounted read-only" and "Filesystem checks skipped." I cant get it to boot off of any cd, Panther, Jaguar,or Diskwarrior. Was fine until I rebooted after this security update. Umm, HELP!

    1. Re:Update just screwed me by strazi · · Score: 2, Informative

      Okay, got it fixed. Good thing I had another computer to look up things about Open Firmware and how to reset stuff.

    2. Re:Update just screwed me by strazi · · Score: 2, Informative

      "reset-nvram" and then "reset-all" in open firmware, no idea what caused it though

  10. kbase articles by blb · · Score: 5, Informative

    The kbase articles are online, but not mentioned anywhere yet:
    update for 10.2 server
    update for 10.3 client
    update for 10.3 server
    Not sure where 10.2 client is yet...

  11. Re:Problem with security update don't install. by Ohreally_factor · · Score: 4, Informative

    You took the bait, and now you look like a schmuck. This is the 20th time I've seen this troll on slashdot, and I'm not an everyday vistor/poster.

    --
    It's not offtopic, dumbass. It's orthogonal.
  12. Safari Update by Anonymous Coward · · Score: 1, Informative

    The "Safari" update is actually an update to WebCore and JavaScriptCore, the frameworks that Safari is built on top of that are part of Panther.