Security Update 2004-02-23 Released

dbesade writes "Apple has released a security update for Mac OS X. The update includes changes to disk arbitration, IPsec, the point-to-point protocol, and tcpdump. As usual the changes have not been posted to the Apple Support Website."

small download

[billbaird]

only 1.6 megs, yippee!!

Re:small download

[edalytical]

Software Update reports it's 5.1 MB, but I'm still running Jag. I'm sure it makes a differences.

Re:small download

[nocturbulous]

There are separate Jag and Panther updates

Re:Why didn't you post today's updates

[IAmATuringMachine!]

Slashdot isn't quite the place to come for Windows news, but occasionally makes with the scoop. BSD has its own section. Linux typically makes the front page most of the day. Any other questions?

Why do people come to the Mac section to bitch that there is Mac news in it?

Re:Why didn't you post today's updates

[NanoGator]

"Slashdot isn't quite the place to come for Windows news"

Windows news appears on Slashdot ad nauseum. The problem is getting anything out of it besides "Microsoft is evil/incompetent/arrogant."

Re:Why didn't you post today's updates

[Lars T.]

Windows news appears on Slashdot ad nauseum. The problem is getting anything out of it besides "Microsoft is evil/incompetent/arrogant."

IOW there is no news about Microsoft on Slashdot.

too manny acronyms

[fredmosby]

what does IOW mean?

Re:too manny acronyms

[Phroggy]

what does IOW mean?

In Other Words

Re:Why didn't you post today's updates

[justMichael]

You do relaize that you are reading apple.slashdot.org, right?

You can find *BSD info here [slashdot.org], the linux stuff is pretty much everywhere and Windows has moved to a monthly cycle, so you need to wait a couple more weeks and check here [windowsupdate.com] ;)

Re:Why didn't you post today's updates

[justMichael]

Doesn't matter what section it is, it's on the first page anyone sees.

Yeah, as long as you are looking at http://apple.slashdot.org/

Maybe I'm missing something, but the content I get at http://slashdot.org/ is:

US Army Scraps Comanche Helicopter
Posted by simoniker on 2004-02-23 17:35

Developers: Firebird Relational Database 1.5 Final Out
Posted by simoniker on 2004-02-23 16:46

Science: Defending Earth From Asteroids With MADMEN
Posted by simoniker on 2004-02-23 16:01

Book Reviews: Learning Unix for Mac OS

Re:Why didn't you post today's updates

[narftrek]

Oh MY BAD. Sorry I surf /. with ALL articles shown. I wouldn't want to leave out anybody. Not even the Mac fans :)

Re:Why didn't you post today's updates

[Anonymous Coward]

Or you could go into your prefs and turn OFF the apple stuff...

Re:Why didn't you post today's updates

[brasten]

As already noted, Linux, *BSD, etc are already well covered on Slashdot. As far as Windows, have YOU ever tried keeping up with their updates/patches? Dear God...

IPSec working..

[-tji]

I am not sure what they changed in IPSec, but I installed the updates and my VPN connections are still working fine to a Check Point VPN-1 device.

I looked through the man page for racoon.conf, and didn't see any functionality updates mentioned there. I was hoping they had added patches for NAT Traversal or xauth.

Re:IPSec working..

[Anonymous Coward]

It's probably the fix for unauthorized deletion of IPsec (and ISAKMP) SAs in racoon [securityfocus.com] as racoon now contains the string "ignore information because the message has no hash payload" which is from the patch.

NAT-T is supported by Mac OS X, however it's not interoperable with anything apart from Mac OS X as Apple chose to use their own NAT-T Vendor ID (which is used for NAT-T detection) and also they have implemented the latest versions of the NAT-T and udp-encaps drafts only, which nobody else uses.

Re:Typical

[Anonymous Coward]

Congratulations, you've figured out that when you post flamebait it will be moderated as such.

For a novel experiment, try posting something insightful or informative and see what happens!

Re:Typical

[TheRaven64]

For a novel experiment, try posting something insightful or informative and see what happens!

I tried it. You get moderated as troll...

Re:Typical

[Anonymous Coward]

This isn't about bashing a story, this is about you deciding it isn't news suitable for posting on apple.slashdot.org.

It interests Macintosh users, so it's on topic.

Likewise, any Microsoft story would be relevent on microsoft.slashdot.org if there was one.

The conclusion remains inescapable: If you're not interested in Apple/Macintosh news, do not pay attention to apple.slashdot.org.

It isn't as if this was a front page story. Then, you might have reason to complain -- but it would still be offtopic f

It still feels weird...

[readpunk]

It still feels weird wondering if these MAC issues also mean there are changes/upgrades to be made on *nix systems.

Re:It still feels weird...

[Mr. Darl McBride]

Most of those have already been patched in other Unices. I've never seen it stated as policy, but Apple seems to bundle local exploit fixes for scheduled updates, saving remote exploits for the surprise updates.

Re:It still feels weird...

[Anonymous Coward]

Who the fuck modded this interesting?

Re:It still feels weird...

[hexghost]

Uh, is this a troll or do you have any evidence? Apple's had an average turnaround on security fixes of about a week, if not shorter.

Re:It still feels weird...

[Mr. Darl McBride]

Apple's turn-around has been much shorter than a week for remote exploits.

Mac OS X is quite secure. Please stop trolling.

Re:It still feels weird...

[beegle]

By MAC, are you referring to the privilege separation of Mandatory Access Control [freebsd.org], Ethernet's Medium Access Control [abdn.ac.uk] (aka "hardware address"), or something else?

The article was referring to Macintosh (or Mac) issues, and I'm wondering why you're capitalizing the word.

Re:It still feels weird...

[JDWTopGuy]

MAC: Recursive acronym for the mental disorder "MAC Always Capitalized". Annoying, but not dangerous.

Re:It still feels weird...

[readpunk]

Although incorrect, I felt like making the word stand out. If it confused you, I would reference the context of the post. It makes it pretty clear which mac mAc maC MAc mAC MAC I am talking about.

Re:It still feels weird...

[geoffspear]

It's too bad there aren't other ways to make words stand out besides incorrectly capitalizing tHeM.

Re:It still feels weird...

[capmilk]

Yep, that is _really_ very *sad*.

Apple Support changes list... Tuesday

[Gogo Dodo]

The Security Updates page [apple.com] trails by about a day so the list of changes should be up on Tuesday.

All of Apple Support things seems to trail by about a day. Things must be published at a set schedule.

Re:Apple Support changes list... Tuesday

[ptolemu]

Does the OS X automatic updater pick up these updates? You'd think if anything they'd ensure this feature would at least do its job for those who don't visit the Apple site on a regular basis, not to mention check for updates.

Re:Apple Support changes list... Tuesday

[Demolition]

Yes, these updates automatically appear in Software Update. In fact, Security Updates usually appear in Software Update before they appear on Apple's website. The following day, a standalone downloadable updater is made available.

D.

Re:Apple Support changes list... Tuesday

[oneishy]

But the actual articles are there Update 2004-02-23 for Panther Client (120323) [apple.com] and Update 2004-02-23 for Jaguar Server (120322) [apple.com] and Update 2004-02-23 for Panther Server (120324) [apple.com]

Works fine so far...

[Anm]

PowerBook 800Mhz DVI

Re:Works fine so far...

[skinfitz]

I'll see your Powerbook and raise you 200Mhz.

Re:Works fine so far...

[batobin]

I'll see your GHz and raise you a quarter.

I fold.

[krray]

Powerbook 667Mhz, crap hand again. I fold.
No issues otherwise... :)

Re:I fold.

[dcocos]

Actually your pair of 6's beats the pair of 0's and if I remember the rules corrrectly cards (or Mhz) talk.

Re:Works fine so far...

[burns210]

I'll see your 1ghz, and'll raise you 512meg of RAM!

Re:Works fine so far...

[bcjanes]

You loose Powerbook 1Ghz here :)

Re:changes to.....

[hard-mac]

and so far detecting some changes to: sshd sendmail slogin passwd cron top

More info here

[kaan]

From this support page [apple.com] at apple.com:

Security Update 2004-02-23 delivers a number of security enhancements and is recommended for all Macintosh users. This update includes the following components:

DiskArbitration
IPSec
Point-to-Point-Protocol
Safari

Additionally, Security Update 2003-11-19 has been incorporated into this security update. Those components are:

gm4
groff
Mail w/CRAM-MD5 authentication
OpenSSL
Personal File Sharing
QuickTime for Java
zlib "gzprintf()" function

Re:More info here

[kaan]

oops, posted the wrong link before... at a glance, it looks like it contains the same information.

here is the correct page for 10.3.x [apple.com] at apple.com

Re:Problem with security update don't install.

[steeviant]

This sounds like one of those trolls where you change the problem and computer model to reflect the story you're posting about. Like the 'freelance gig' one.

Re:Problem with security update don't install.

[baryon351]

It is. Part of it's taken from old slashdot apple trolls, and part from a post on Amiga.org [amiga.org].

Personally I found the cat vs dog version of the "freelance gig" mac vs PC troll absolutely hilarious. Wish I could find a link to that one.

Re:Problem with security update don't install.

[Anonymous Coward]

Cats

I don't want to start a holy war here, but what is the deal with you cat fanatics? I've been sitting here on my sofa in front of a cat (a sealpoint siamese) for about 20 minutes now while attempting to get it's attention away from a bug on the floor. 20 minutes. At home, with my labrador cross, which by all standards should be a lot dumber than this cat, the same operation would take about 2 minutes. If that.

In addition, during this attention seeking attempt, my children's attention is also held by th

Re:Problem with security update don't install.

[davids-world.com]

Don't know what your problem is. I never had problems installing an update, I never crashed my machine completely with an official Apple OS X system, or with third-party applications. I never had a virus, and no security breaches either. Now, from my (too) many years of Windows computing (95, NT, 2000), I do know what a crash, a virus or the common 'system slowdown'/DLL hell looks like.

Maybe your friend was messing around with system files, deleting things from /System or /Library??

Re:Problem with security update don't install.

[Ohreally_factor]

You took the bait, and now you look like a schmuck. This is the 20th time I've seen this troll on slashdot, and I'm not an everyday vistor/poster.

Re:Problem with security update don't install.

[fredmosby]

After using Mac OS X for four years I couldn't help but laugh at this troll. Only a windows user would think the problems listed are even remotely plausible.

Re:Problem with security update don't install.

[xKlintx]

You must be smoking rock. The update took under 5 minutes to download, install, and reboot. I love my G5 more than any Dell I've ever had. If you want to talk about a laundry list of problems, I'll start talking about my 450mhz inspiron laptop. Worst piece of computational garbage I've ever owned.

I'm not the kind of person who likes to (nor can I afford to!) drop money on a new computer every few months. I like to buy things, and have them last. Apple products last. Of the 4 years I used that Dell,

Your Dell

[Doc Squidly]

Just out of curiosity? What OS was on your 450 Mhz Dell? Windows 95 or 98?

Not trolling but, doesn't it seem unfair to compare any modern Computer to something that is 5 to 7 years old.

I could compare my 2.0 Ghz HP Laptop running XP Pro to an iMac I had in '98.

I love my HP more than that iMac (slow & and what's up with that hockey puck mouse?).

Not really a fair comparison, is it?

Files in distribution

[Anonymous Coward]

./System/Library/Frameworks/CoreFoundation.framewo rk/Versions/A/CoreFoundation ./System/Library/Frameworks/CoreFoundation.framewo rk/Versions/A/Resources/Info.plist ./System/Library/Frameworks/CoreFoundation.framewo rk/Versions/A/Resources/version.plist ./System/Library/PrivateFrameworks/DiskArbitration .framework/Versions/A/Resources/Info.plist ./System/Library/PrivateFrameworks/DiskArbitration .framework/Versions/A/Resources/version.plist ./usr/lib/libpcap.A.dylib ./usr/sbin/diskarbitrationd ./usr/sbin/pppd ./usr/sbin/racoon ./usr/sbin/tcpdump

Update just screwed me

[strazi]

My powerbook 12in 1ghz is booting into a command prompt. Last thing it says is "Root device is mounted read-only" and "Filesystem checks skipped." I cant get it to boot off of any cd, Panther, Jaguar,or Diskwarrior. Was fine until I rebooted after this security update. Umm, HELP!

Re:Update just screwed me

[strazi]

Okay, got it fixed. Good thing I had another computer to look up things about Open Firmware and how to reset stuff.

Re:Update just screwed me

[Phroggy]

Last thing it says is "Root device is mounted read-only"

This is normal; it must be remounted read-write before you can do anything with it. Normally this is done automatically by a script, but if you're in single-user maintenance mode, the system assumes there could be a problem (e.g. maybe the hard drive is fried) and you might want to read some data off the disk before writing anything to it.

and "Filesystem checks skipped."

OSX 10.3 uses journaling, so checking the filesystem for errors isn't needed

Re:Update just screwed me

[strazi]

"reset-nvram" and then "reset-all" in open firmware, no idea what caused it though

kbase articles

[blb]

The kbase articles are online, but not mentioned anywhere yet:
update for 10.2 server [apple.com]
update for 10.3 client [apple.com]
update for 10.3 server [apple.com]
Not sure where 10.2 client is yet...

Re:kbase articles

[blb]

Ah, there it is [apple.com]

Safari Update

[Anonymous Coward]

The "Safari" update is actually an update to WebCore and JavaScriptCore, the frameworks that Safari is built on top of that are part of Panther.

Yes, but does it..

[dave1212]

fix the iTunes Pepsi hack? [slashdot.org]

DiskArbitration

[stoffel]

What does that mean??? or should I RTFM :-D

Re:

[account_deleted]

Comment removed based on user account deletion

Airport dysfunction

[1010011010]

After installing this update, Airport fails to connect reliably, and when it does connect, it's very slow and unpredictable (ping times to the local access point, 6 feet away, vary from 30ms - 200ms).

Works for me.

[Raven42rac]

Works fine on my Powerbook 12" 1ghz 768MB RAM.

Update works fine

[PurdueGraphicsMan]

I'm running a 1Ghz G4 ("Wind Tunnel") :-D

READ ME--really!

[catdevnull]

Be sure to repair permissions or do any other disk maintenance voodoo that makes you feel best BEFORE applying this (or any other patches) from Apple. I'm pretty sure that's the official line from Apple regarding updates. If it isn't, it should be.

Immediately after applying the updates, I, and several other at MacFixit.com, reported kernel panics when changing locations on powerbooks. This was fixed by repairing permissions with Disk Utility. The problem was only with 10.3.2 not under 10.2.x. Your mileag