Security Update 2004-02-23 Released 87

Posted by pudge on Monday February 23, 2004 @06:11PM from the now-i-can-use-insecure-operations-securely dept.

dbesade writes "Apple has released a security update for Mac OS X. The update includes changes to disk arbitration, IPsec, the point-to-point protocol, and tcpdump. As usual the changes have not been posted to the Apple Support Website."

This discussion has been archived. No new comments can be posted.

Security Update 2004-02-23 Released

Load All Comments

Search 87 Comments Log In/Create an Account

Comments Filter:

- small download (Score:3, Informative)
  
  by billbaird ( 166492 ) writes:
  
  only 1.6 megs, yippee!!
  - Re:small download (Score:5, Informative)
    
    by edalytical ( 671270 ) writes: on Monday February 23, 2004 @06:39PM (#8367196)
    
    Software Update reports it's 5.1 MB, but I'm still running Jag. I'm sure it makes a differences.
    
    Parent Share
    twitter facebook
    - Re:small download (Score:1)
      
      by nocturbulous ( 661961 ) writes:
      
      There are separate Jag and Panther updates
- Re:Why didn't you post today's updates (Score:5, Insightful)
  
  by IAmATuringMachine! ( 62994 ) writes: on Monday February 23, 2004 @06:28PM (#8367089)
  
  Slashdot isn't quite the place to come for Windows news, but occasionally makes with the scoop. BSD has its own section. Linux typically makes the front page most of the day. Any other questions?
  
  Why do people come to the Mac section to bitch that there is Mac news in it?
  
  Parent Share
  twitter facebook
  - Re:Why didn't you post today's updates (Score:2)
    
    by NanoGator ( 522640 ) writes:
    
    "Slashdot isn't quite the place to come for Windows news"
    
    Windows news appears on Slashdot ad nauseum. The problem is getting anything out of it besides "Microsoft is evil/incompetent/arrogant."
    - Re:Why didn't you post today's updates (Score:2, Funny)
      
      by Lars T. ( 470328 ) writes:
      
      Windows news appears on Slashdot ad nauseum. The problem is getting anything out of it besides "Microsoft is evil/incompetent/arrogant."
      IOW there is no news about Microsoft on Slashdot.
      - too manny acronyms (Score:1)
        
        by fredmosby ( 545378 ) writes:
        
        what does IOW mean?
        
        Re:too manny acronyms (Score:1)
        
        by Phroggy ( 441 ) * writes:
        
        what does IOW mean?
        
        In Other Words
- Re:Why didn't you post today's updates (Score:5, Insightful)
  
  by justMichael ( 606509 ) writes: on Monday February 23, 2004 @06:28PM (#8367098)
  
  You do relaize that you are reading apple.slashdot.org, right?
  
  You can find *BSD info here [slashdot.org], the linux stuff is pretty much everywhere and Windows has moved to a monthly cycle, so you need to wait a couple more weeks and check here [windowsupdate.com] ;)
  
  Parent Share
  twitter facebook
  - - Re:Why didn't you post today's updates (Score:2, Insightful)
      
      by justMichael ( 606509 ) writes:
      
      Doesn't matter what section it is, it's on the first page anyone sees.
      
      Yeah, as long as you are looking at http://apple.slashdot.org/
      
      Maybe I'm missing something, but the content I get at http://slashdot.org/ is:
      
      US Army Scraps Comanche Helicopter
      Posted by simoniker on 2004-02-23 17:35
      
      Developers: Firebird Relational Database 1.5 Final Out
      Posted by simoniker on 2004-02-23 16:46
      
      Science: Defending Earth From Asteroids With MADMEN
      Posted by simoniker on 2004-02-23 16:01
      
      Book Reviews: Learning Unix for Mac OS
      - Re:Why didn't you post today's updates (Score:1)
        
        by narftrek ( 549077 ) writes:
        
        Oh MY BAD. Sorry I surf /. with ALL articles shown. I wouldn't want to leave out anybody. Not even the Mac fans :)
        
        Re:Why didn't you post today's updates (Score:2, Informative)
        
        by Anonymous Coward writes:
        
        Or you could go into your prefs and turn OFF the apple stuff...
- Re:Why didn't you post today's updates (Score:5, Funny)
  
  by brasten ( 699342 ) writes: on Monday February 23, 2004 @09:54PM (#8369219)
  
  As already noted, Linux, *BSD, etc are already well covered on Slashdot. As far as Windows, have YOU ever tried keeping up with their updates/patches? Dear God...
  
  Parent Share
  twitter facebook
IPSec working.. (Score:5, Informative)

by -tji ( 139690 ) writes: on Monday February 23, 2004 @06:25PM (#8367063) Journal

I am not sure what they changed in IPSec, but I installed the updates and my VPN connections are still working fine to a Check Point VPN-1 device.

I looked through the man page for racoon.conf, and didn't see any functionality updates mentioned there. I was hoping they had added patches for NAT Traversal or xauth.

Share
twitter facebook
- Re:IPSec working.. (Score:1, Informative)
  
  by Anonymous Coward writes:
  
  It's probably the fix for unauthorized deletion of IPsec (and ISAKMP) SAs in racoon [securityfocus.com] as racoon now contains the string "ignore information because the message has no hash payload" which is from the patch.
  NAT-T is supported by Mac OS X, however it's not interoperable with anything apart from Mac OS X as Apple chose to use their own NAT-T Vendor ID (which is used for NAT-T detection) and also they have implemented the latest versions of the NAT-T and udp-encaps drafts only, which nobody else uses.
- - Re:Typical (Score:3, Funny)
    
    by Anonymous Coward writes:
    
    Congratulations, you've figured out that when you post flamebait it will be moderated as such.
    
    For a novel experiment, try posting something insightful or informative and see what happens!
    - Re:Typical (Score:1, Troll)
      
      by TheRaven64 ( 641858 ) writes:
      
      For a novel experiment, try posting something insightful or informative and see what happens!
      I tried it. You get moderated as troll...
- - - Re:Typical (Score:2, Insightful)
      
      by Anonymous Coward writes:
      
      This isn't about bashing a story, this is about you deciding it isn't news suitable for posting on apple.slashdot.org.
      
      It interests Macintosh users, so it's on topic.
      Likewise, any Microsoft story would be relevent on microsoft.slashdot.org if there was one.
      The conclusion remains inescapable: If you're not interested in Apple/Macintosh news, do not pay attention to apple.slashdot.org.
      It isn't as if this was a front page story. Then, you might have reason to complain -- but it would still be offtopic f
It still feels weird... (Score:4, Interesting)

by readpunk ( 683053 ) writes: on Monday February 23, 2004 @06:29PM (#8367100) Journal

It still feels weird wondering if these MAC issues also mean there are changes/upgrades to be made on *nix systems.

Share
twitter facebook
- Re:It still feels weird... (Score:3, Interesting)
  
  by Mr. Darl McBride ( 704524 ) writes:
  
  Most of those have already been patched in other Unices. I've never seen it stated as policy, but Apple seems to bundle local exploit fixes for scheduled updates, saving remote exploits for the surprise updates.
  - Re:It still feels weird... (Score:1, Funny)
    
    by Anonymous Coward writes:
    
    Who the fuck modded this interesting?
  - Re:It still feels weird... (Score:1)
    
    by hexghost ( 444585 ) writes:
    
    Uh, is this a troll or do you have any evidence? Apple's had an average turnaround on security fixes of about a week, if not shorter.
    - Re:It still feels weird... (Score:1, Insightful)
      
      by Mr. Darl McBride ( 704524 ) writes:
      
      Apple's turn-around has been much shorter than a week for remote exploits.
      Mac OS X is quite secure. Please stop trolling.
- Re:It still feels weird... (Score:5, Funny)
  
  by beegle ( 9689 ) writes: on Monday February 23, 2004 @07:50PM (#8367955) Homepage
  
  By MAC, are you referring to the privilege separation of Mandatory Access Control [freebsd.org], Ethernet's Medium Access Control [abdn.ac.uk] (aka "hardware address"), or something else?
  The article was referring to Macintosh (or Mac) issues, and I'm wondering why you're capitalizing the word.
  
  Parent Share
  twitter facebook
  - Re:It still feels weird... (Score:5, Funny)
    
    by JDWTopGuy ( 209256 ) writes: on Monday February 23, 2004 @08:01PM (#8368049) Homepage Journal
    
    MAC: Recursive acronym for the mental disorder "MAC Always Capitalized". Annoying, but not dangerous.
    
    Parent Share
    twitter facebook
  - Re:It still feels weird... (Score:1, Funny)
    
    by readpunk ( 683053 ) writes:
    
    Although incorrect, I felt like making the word stand out. If it confused you, I would reference the context of the post. It makes it pretty clear which mac mAc maC MAc mAC MAC I am talking about.
    - Re:It still feels weird... (Score:5, Funny)
      
      by geoffspear ( 692508 ) * writes: on Monday February 23, 2004 @10:21PM (#8369457) Homepage
      
      It's too bad there aren't other ways to make words stand out besides incorrectly capitalizing tHeM.
      
      Parent Share
      twitter facebook
      - Re:It still feels weird... (Score:2)
        
        by capmilk ( 604826 ) writes:
        
        Yep, that is _really_ very *sad*.
Apple Support changes list... Tuesday (Score:5, Informative)

by Gogo Dodo ( 129808 ) writes: on Monday February 23, 2004 @06:33PM (#8367117)

The Security Updates page [apple.com] trails by about a day so the list of changes should be up on Tuesday.
All of Apple Support things seems to trail by about a day. Things must be published at a set schedule.

Share
twitter facebook
- Re:Apple Support changes list... Tuesday (Score:1)
  
  by ptolemu ( 322917 ) * writes:
  
  Does the OS X automatic updater pick up these updates? You'd think if anything they'd ensure this feature would at least do its job for those who don't visit the Apple site on a regular basis, not to mention check for updates.
  - Re:Apple Support changes list... Tuesday (Score:4, Informative)
    
    by Demolition ( 713476 ) writes: on Tuesday February 24, 2004 @12:09AM (#8370283)
    
    Yes, these updates automatically appear in Software Update. In fact, Security Updates usually appear in Software Update before they appear on Apple's website. The following day, a standalone downloadable updater is made available.
    
    D.
    
    Parent Share
    twitter facebook
- Re:Apple Support changes list... Tuesday (Score:1)
  
  by oneishy ( 669590 ) writes:
  
  But the actual articles are there Update 2004-02-23 for Panther Client (120323) [apple.com] and Update 2004-02-23 for Jaguar Server (120322) [apple.com] and Update 2004-02-23 for Panther Server (120324) [apple.com]
Works fine so far... (Score:1, Informative)

by Anm ( 18575 ) writes:

PowerBook 800Mhz DVI
- Re:Works fine so far... (Score:5, Funny)
  
  by skinfitz ( 564041 ) writes: on Monday February 23, 2004 @07:20PM (#8367644) Journal
  
  I'll see your Powerbook and raise you 200Mhz.
  
  Parent Share
  twitter facebook
  - Re:Works fine so far... (Score:3, Funny)
    
    by batobin ( 10158 ) writes:
    
    I'll see your GHz and raise you a quarter.
  - I fold. (Score:3, Funny)
    
    by krray ( 605395 ) * writes:
    
    Powerbook 667Mhz, crap hand again. I fold.
    No issues otherwise... :)
    - Re:I fold. (Score:1)
      
      by dcocos ( 128532 ) writes:
      
      Actually your pair of 6's beats the pair of 0's and if I remember the rules corrrectly cards (or Mhz) talk.
  - Re:Works fine so far... (Score:2)
    
    by burns210 ( 572621 ) writes:
    
    I'll see your 1ghz, and'll raise you 512meg of RAM!
  - Re:Works fine so far... (Score:1)
    
    by bcjanes ( 469676 ) writes:
    
    You loose Powerbook 1Ghz here :)
- Re:changes to..... (Score:2, Interesting)
  
  by hard-mac ( 753019 ) writes:
  
  and so far detecting some changes to: sshd sendmail slogin passwd cron top
More info here (Score:3, Informative)

by kaan ( 88626 ) writes: on Monday February 23, 2004 @06:53PM (#8367368)

From this support page [apple.com] at apple.com:

Security Update 2004-02-23 delivers a number of security enhancements and is recommended for all Macintosh users. This update includes the following components:

DiskArbitration
IPSec
Point-to-Point-Protocol
Safari

Additionally, Security Update 2003-11-19 has been incorporated into this security update. Those components are:

gm4
groff
Mail w/CRAM-MD5 authentication
OpenSSL
Personal File Sharing
QuickTime for Java
zlib "gzprintf()" function

Share
twitter facebook
- Re:More info here (Score:3, Informative)
  
  by kaan ( 88626 ) writes:
  
  oops, posted the wrong link before... at a glance, it looks like it contains the same information.
  
  here is the correct page for 10.3.x [apple.com] at apple.com
- Re:Problem with security update don't install. (Score:2, Interesting)
  
  by steeviant ( 677315 ) writes:
  
  This sounds like one of those trolls where you change the problem and computer model to reflect the story you're posting about. Like the 'freelance gig' one.
  - Re:Problem with security update don't install. (Score:2)
    
    by baryon351 ( 626717 ) writes:
    
    It is. Part of it's taken from old slashdot apple trolls, and part from a post on Amiga.org [amiga.org].
    
    Personally I found the cat vs dog version of the "freelance gig" mac vs PC troll absolutely hilarious. Wish I could find a link to that one.
    - Re:Problem with security update don't install. (Score:1, Funny)
      
      by Anonymous Coward writes:
      
      Cats
      
      I don't want to start a holy war here, but what is the deal with you cat fanatics? I've been sitting here on my sofa in front of a cat (a sealpoint siamese) for about 20 minutes now while attempting to get it's attention away from a bug on the floor. 20 minutes. At home, with my labrador cross, which by all standards should be a lot dumber than this cat, the same operation would take about 2 minutes. If that.
      
      In addition, during this attention seeking attempt, my children's attention is also held by th
- Re:Problem with security update don't install. (Score:2, Informative)
  
  by davids-world.com ( 551216 ) writes:
  
  Don't know what your problem is. I never had problems installing an update, I never crashed my machine completely with an official Apple OS X system, or with third-party applications. I never had a virus, and no security breaches either. Now, from my (too) many years of Windows computing (95, NT, 2000), I do know what a crash, a virus or the common 'system slowdown'/DLL hell looks like.
  Maybe your friend was messing around with system files, deleting things from /System or /Library??
  - Re:Problem with security update don't install. (Score:4, Informative)
    
    by Ohreally_factor ( 593551 ) writes: on Monday February 23, 2004 @10:50PM (#8369713) Journal
    
    You took the bait, and now you look like a schmuck. This is the 20th time I've seen this troll on slashdot, and I'm not an everyday vistor/poster.
    
    Parent Share
    twitter facebook
- Re:Problem with security update don't install. (Score:3, Funny)
  
  by fredmosby ( 545378 ) writes:
  
  After using Mac OS X for four years I couldn't help but laugh at this troll. Only a windows user would think the problems listed are even remotely plausible.
- Re:Problem with security update don't install. (Score:1, Insightful)
  
  by xKlintx ( 256608 ) writes:
  
  You must be smoking rock. The update took under 5 minutes to download, install, and reboot. I love my G5 more than any Dell I've ever had. If you want to talk about a laundry list of problems, I'll start talking about my 450mhz inspiron laptop. Worst piece of computational garbage I've ever owned.
  
  I'm not the kind of person who likes to (nor can I afford to!) drop money on a new computer every few months. I like to buy things, and have them last. Apple products last. Of the 4 years I used that Dell,
  - Your Dell (Score:1)
    
    by Doc Squidly ( 720087 ) writes:
    
    Just out of curiosity? What OS was on your 450 Mhz Dell? Windows 95 or 98?
    
    Not trolling but, doesn't it seem unfair to compare any modern Computer to something that is 5 to 7 years old.
    
    I could compare my 2.0 Ghz HP Laptop running XP Pro to an iMac I had in '98.
    
    I love my HP more than that iMac (slow & and what's up with that hockey puck mouse?).
    
    Not really a fair comparison, is it?
Files in distribution (Score:5, Informative)

by Anonymous Coward writes: on Monday February 23, 2004 @07:49PM (#8367943)

./System/Library/Frameworks/CoreFoundation.framewo rk/Versions/A/CoreFoundation ./System/Library/Frameworks/CoreFoundation.framewo rk/Versions/A/Resources/Info.plist ./System/Library/Frameworks/CoreFoundation.framewo rk/Versions/A/Resources/version.plist ./System/Library/PrivateFrameworks/DiskArbitration .framework/Versions/A/Resources/Info.plist ./System/Library/PrivateFrameworks/DiskArbitration .framework/Versions/A/Resources/version.plist ./usr/lib/libpcap.A.dylib ./usr/sbin/diskarbitrationd ./usr/sbin/pppd ./usr/sbin/racoon ./usr/sbin/tcpdump

Share
twitter facebook
Update just screwed me (Score:1, Informative)

by strazi ( 445297 ) writes:

My powerbook 12in 1ghz is booting into a command prompt. Last thing it says is "Root device is mounted read-only" and "Filesystem checks skipped." I cant get it to boot off of any cd, Panther, Jaguar,or Diskwarrior. Was fine until I rebooted after this security update. Umm, HELP!
- Re:Update just screwed me (Score:2, Informative)
  
  by strazi ( 445297 ) writes:
  
  Okay, got it fixed. Good thing I had another computer to look up things about Open Firmware and how to reset stuff.
- Re:Update just screwed me (Score:2)
  
  by Phroggy ( 441 ) * writes:
  
  Last thing it says is "Root device is mounted read-only"
  
  This is normal; it must be remounted read-write before you can do anything with it. Normally this is done automatically by a script, but if you're in single-user maintenance mode, the system assumes there could be a problem (e.g. maybe the hard drive is fried) and you might want to read some data off the disk before writing anything to it.
  
  and "Filesystem checks skipped."
  
  OSX 10.3 uses journaling, so checking the filesystem for errors isn't needed
  - Re:Update just screwed me (Score:2, Informative)
    
    by strazi ( 445297 ) writes:
    
    "reset-nvram" and then "reset-all" in open firmware, no idea what caused it though
kbase articles (Score:5, Informative)

by blb ( 412923 ) writes: on Monday February 23, 2004 @09:05PM (#8368720) Homepage

The kbase articles are online, but not mentioned anywhere yet:
update for 10.2 server [apple.com]
update for 10.3 client [apple.com]
update for 10.3 server [apple.com]
Not sure where 10.2 client is yet...

Share
twitter facebook
- Re:kbase articles (Score:1)
  
  by blb ( 412923 ) writes:
  
  Ah, there it is [apple.com]
Safari Update (Score:1, Informative)

by Anonymous Coward writes:

The "Safari" update is actually an update to WebCore and JavaScriptCore, the frameworks that Safari is built on top of that are part of Panther.
Yes, but does it.. (Score:5, Funny)

by dave1212 ( 652688 ) * writes: on Tuesday February 24, 2004 @02:50AM (#8371150) Homepage

fix the iTunes Pepsi hack? [slashdot.org]

Share
twitter facebook
DiskArbitration (Score:2, Interesting)

by stoffel ( 106124 ) writes:

What does that mean??? or should I RTFM :-D
- Re: (Score:2, Funny)
  
  by account_deleted ( 4530225 ) writes:
  
  Comment removed based on user account deletion
Airport dysfunction (Score:1)

by 1010011010 ( 53039 ) writes:

After installing this update, Airport fails to connect reliably, and when it does connect, it's very slow and unpredictable (ping times to the local access point, 6 feet away, vary from 30ms - 200ms).
Works for me. (Score:1)

by Raven42rac ( 448205 ) writes:

Works fine on my Powerbook 12" 1ghz 768MB RAM.
Update works fine (Score:2)

by PurdueGraphicsMan ( 722107 ) * writes:

I'm running a 1Ghz G4 ("Wind Tunnel") :-D
READ ME--really! (Score:1)

by catdevnull ( 531283 ) writes:

Be sure to repair permissions or do any other disk maintenance voodoo that makes you feel best BEFORE applying this (or any other patches) from Apple. I'm pretty sure that's the official line from Apple regarding updates. If it isn't, it should be.

Immediately after applying the updates, I, and several other at MacFixit.com, reported kernel panics when changing locations on powerbooks. This was fixed by repairing permissions with Disk Utility. The problem was only with 10.3.2 not under 10.2.x. Your mileag

There may be more comments in this discussion. Without JavaScript enabled, you might want to turn on Classic Discussion System in your preferences instead.

small download (Score:3, Informative)

Re:small download (Score:5, Informative)

Re:small download (Score:1)

Re:Why didn't you post today's updates (Score:5, Insightful)

Re:Why didn't you post today's updates (Score:2)

Re:Why didn't you post today's updates (Score:2, Funny)

too manny acronyms (Score:1)

Re:too manny acronyms (Score:1)

Re:Why didn't you post today's updates (Score:5, Insightful)

Re:Why didn't you post today's updates (Score:2, Insightful)

Re:Why didn't you post today's updates (Score:1)

Re:Why didn't you post today's updates (Score:2, Informative)

Re:Why didn't you post today's updates (Score:5, Funny)

IPSec working.. (Score:5, Informative)

Re:IPSec working.. (Score:1, Informative)

Re:Typical (Score:3, Funny)

Re:Typical (Score:1, Troll)

Re:Typical (Score:2, Insightful)

It still feels weird... (Score:4, Interesting)

Re:It still feels weird... (Score:3, Interesting)

Re:It still feels weird... (Score:1, Funny)

Re:It still feels weird... (Score:1)

Re:It still feels weird... (Score:1, Insightful)

Re:It still feels weird... (Score:5, Funny)

Re:It still feels weird... (Score:5, Funny)

Re:It still feels weird... (Score:1, Funny)

Re:It still feels weird... (Score:5, Funny)

Re:It still feels weird... (Score:2)

Apple Support changes list... Tuesday (Score:5, Informative)

Re:Apple Support changes list... Tuesday (Score:1)

Re:Apple Support changes list... Tuesday (Score:4, Informative)

Re:Apple Support changes list... Tuesday (Score:1)

Works fine so far... (Score:1, Informative)

Re:Works fine so far... (Score:5, Funny)

Re:Works fine so far... (Score:3, Funny)

I fold. (Score:3, Funny)

Re:I fold. (Score:1)

Re:Works fine so far... (Score:2)

Re:Works fine so far... (Score:1)

Re:changes to..... (Score:2, Interesting)

More info here (Score:3, Informative)

Re:More info here (Score:3, Informative)

Re:Problem with security update don't install. (Score:2, Interesting)

Re:Problem with security update don't install. (Score:2)

Re:Problem with security update don't install. (Score:1, Funny)

Re:Problem with security update don't install. (Score:2, Informative)

Re:Problem with security update don't install. (Score:4, Informative)

Re:Problem with security update don't install. (Score:3, Funny)

Re:Problem with security update don't install. (Score:1, Insightful)

Your Dell (Score:1)

Files in distribution (Score:5, Informative)

Update just screwed me (Score:1, Informative)

Re:Update just screwed me (Score:2, Informative)

Re:Update just screwed me (Score:2)

Re:Update just screwed me (Score:2, Informative)

kbase articles (Score:5, Informative)

Re:kbase articles (Score:1)

Safari Update (Score:1, Informative)

Yes, but does it.. (Score:5, Funny)

DiskArbitration (Score:2, Interesting)

Re: (Score:2, Funny)

Airport dysfunction (Score:1)

Works for me. (Score:1)

Update works fine (Score:2)

READ ME--really! (Score:1)

Related Links Top of the: day, week, month.

Slashdot Top Deals