troubleshooting/tutorials/security

03/16/2006, 2:35pm, EST

Thursday, March 16th

Apple updates security patch (again)

Apple today released a third security update--presumably to fix issues found in the second security update released earlier this week. Ironically, the previous update was also released to address inadequate security fixes and bugs introduced in the first update released earlier this month. Available for Mac OS X 10.4.5 Tiger on both Intel client and PPC Server/Client systems, Security Update 2006-002 v1.1 outlines the same updated components: apache_mod_php, CoreTypes, LaunchServices, Mail, rsync, and Safari, but is now labeled as v1.1. Further information is not yet available. The updates are not yet available via the Software Update. The update comes on the heels of important Mac security updates for Microsoft Excel and Adobe Flash and a new QuickTime/iTunes flaw that has yet to be addressed by Apple.


Filed under: troubleshooting

, , 14comments, del.icio.us, slashdot, digg, buzz


14 comments
Reader Reactions (Please use <i></i> for italic text)

subscribe to comments
for this article




Expand All   Global Settings
Who cares?
0
03/16, 3:00pm, EST
First off, there's no known exploit to this so-called security hole, so who really cares.

Second, I really doubt there is a problem since we know Apple really cares about security and OS X is the most secure OS ever built.

Third, I'm sure given enough time, Apple will get this right. So stop using the sarcastic tone!
Fresh-Faced Recruit
Joined Aug 2001
User is offline
Correction
0
03/16, 3:06pm, EST
This update *is* available via Software Update. I see it in the Software Update service on my OS X server right now. It's likely that if you already have the original update installed, there is no reason to install this revision, so the Software Update application doesn't list it.

The only changes between the two seem to be a change to the prebinding paths included with the update, and a utxt resource added to the Localizable.strings and Description.plist files in the package. There doesn't appear to be any substantive change to the fixes this update installs.
Junior Member
Joined Nov 1999
User is offline
I care
0
03/16, 3:13pm, EST
If a giant like Apple releases 3 updates in 2 days, it is big news.

I have versiontracker pro AND I run software update daily: They don't appear.

I am downloading that 2 mp3 file size thing to make sure nothing broken on my system since IT IS. E.g. Realplayer links won't open automatically.
Registered User
Joined Nov 2004
User is offline
Can I undo the original?
0
03/16, 3:46pm, EST
Is there some way to undo the original update?

I installed it and my Mac mini is now sad. My firewire drives won't mount and Disk Utility crashes every time I launch it.

Help, please.
Fresh-Faced Recruit
Joined Aug 2005
User is offline
Re: can I undo the origin
0
03/16, 4:07pm, EST
That doesn't sound like the update did that. You probably had disk or other errors before and the restart triggered it, not the update itself.

Are you launching Disk Utility from the install DVD? Boot from the Install DVD and run Disk utility. If it crashes there, it is likely a hardware issue, not a software one.
Professional Poster
Joined Sep 1999
User is offline
It's not a third update.
0
03/16, 4:29pm, EST
This is not a third update. It is the same as the second one, only it fixes bugs introduced by it, hence the name Security Update 2006-002 v1.1.

If it were a third update, it would have been called 2006-003.
Professional Poster
Joined Jun 2001
User is offline
ain't there
0
03/16, 4:44pm, EST
It ain't there, dudes.

""wookie roar""
Baninated
Joined Jan 2006
User is offline
Re: Can I undo the origin
0
03/16, 4:46pm, EST
I guess installing THIS build will "undo" the problems introduced by the earlier one.

Or why they should release?
Registered User
Joined Nov 2004
User is offline
ligaz
0
03/16, 5:25pm, EST
The v1.1 of the 2006-002 security update is only to correct a very minor packaging issue with the update itself. One that has no real affect on an end-user so if you already have 2006-002 v1.0 you don't need to do anything.
Fresh-Faced Recruit
Joined Nov 2000
User is offline
Speed
0
03/16, 8:10pm, EST
And that, my friends, is why companies - including Microsoft - try not to rush out software updates, but obviously the yellow journalism of ZDNet needed to be met with some PR to show how quick Apple are responding to 'emerging threats'.



Fresh-Faced Recruit
Joined Jul 2005
User is offline
additional comments:..1..2..Next
Your Comments

In order to post comments: If you are a registered member, please login with your MacNN Forums username and password otherwise please uncheck the checkbox below.


Registered Member?
macnn forums login:

macnn forums password:

Not a member of the MacNN forums? Register now for free.

RSS Feeds

Have the latest content delivered to your desktop via RSS. Use the links below to get access to a specific blog, news, or reviews feed.



  MacNN -all

  MacNN Reviews

  MacNN Podcasts

  iPodNN

  Electronista

  Left Lane News
Want To Sell Your Laptop? Any Condition - receive Top Cash. Get an instant quote. Free shipping www.CashForLaptops.com
Buy from The Apple Store, iTunes.com, Amazon.com, TechDepot, OfficeDepot, Computers4Sure, or donate.