Apple Releases Security and Xcode Updates

optikz writes "A security update is available in Software Update. 'Security Update 2003-11-04 addresses a potential vulnerability with the Terminal application in Mac OS X v10.3 and Mac OS X Server v10.3 that could allow unauthorized access to a system.'" sandrift writes "Software Update just popped up with Xcode Update 2003-11-03" Apple notes that "The Xcode update addresses an issue in the Xcode IDE that could potentially lead to data corruption or the loss of files particularly when source files contain illegal characters." Apple does not note, however, that Software Update will attempt to quit Terminal.app when installing the Security Update.

Re:So?

[Anonymous Coward]

Also, the operative word there is "try." If your terminals are active (running anything other than a shell, that is), you'll get a "do you really want to quit?" alert.

Re:Patch bug or PEBKAC?

[Elwood P Dowd]

Some software updates reappear until you reboot.

Re:What about File Vault?

[Anonymous Coward]

It corrupts many files.

Something often asserted, but never actually observed under controlled conditions.

I've lost half of my preferences because of File Vault.

You are aware, are you not, that FileVault has nothing to do with preferences? Perhaps there's something going in inside the NSUserDefaults runtime environment. Ever considered that?

It also has a hard time recovering unused space.

"A hard time?" Not sure what you mean by that.

Use it for more than 20 seconds next time.

I've been using it full-time since June on three different machines. During those early post-WWDC builds... woah. That was some bad stuff. But since about 7B74, it's worked flawlessly.

You, incidentally, are one of those people I was referring to when I said that the target audience is too stupid to understand how FileVault works.

Re:So?

[rixstep]

I mean, if it's replacing the application, it's kinda going to have to quit it!

Not at all. You've obviously never tried. What's loaded is loaded - you won't get any new NIBs if the old ones are removed - but you're perfectly capable of overwriting the disk image of a running process.

Re:And it doesn't require restart!

[stripes]

Now if Avid could update ProTools, and I can get ssh to listen over port 23 again (my place of employment has telnet open, but nothing else - I need to read slashdot!)

Doesn't adding "Port 23" to /etc/sshd_config do it? (not that I have tryed, but a quick scan of hte man page says it will... oh, you probbably have to HUP sshd). Or are you asking how to get the client to use another port (-p 23 I think).

Good luck.