October 4, 2004 4:08 PM PDT
Apple issues Mac OS X security update
Apple has released a security update that fixes several flaws in its Mac OS X operating system. The update, named Security Update 2004-09-30 but released Monday, addresses potential denial-of-service vulnerabilities in the AFP server and CUPS printing module as well as a flaw in QuickTime that could allow malicious code to be executed via a buffer overrun. The patch also fixes a CUPS flaw that could allow user passwords to be displayed in a printer log. The company credits an employee in the IT department of Glasgow Caledonian University for reporting the flaw.
The computer maker issued fixes for both Mac OS X 10.2 Jaguar and Mac OS X 10.3 Panther. Some of the flaws affect both versions of Mac OS X, while others occur only in Panther.
back, I've been reluctant to install subsequent ones. Is anyone
aware of a site that's tracking these things and advising re:
"reliability" as they are issued? (Perhaps such a site might do
beta testing before the official releases/s?) ta!
- Mac??? Say It Isn't So
- by dalydose October 4, 2004 8:08 PM PDT
- How can the 'perfection in security' have a problem that needs to be patched. I guess all of the advertising is starting to work. There are enough Macs out there to warrant being a taget. No OS is perfect,
- Like this Reply to this comment
-
-
- Unlike MS
- by iKenny October 4, 2004 8:40 PM PDT
- At least Apple patches the problems before anyone is affected,
- Like this
-
- the virtues of open source
- by October 5, 2004 6:31 AM PDT
- As an IT manager, I have had no problems with the Apple OS X
- Like this
-
(4 Comments)not after. And the patches don't cause more security problems.
updates.
That they are coming with some frequency does not bother me;
rather it comforts me. Given the openness of Unix & its
derivatives, I reassured that there are folks out there
reexamining the installed code base for potential problems,
before they become widespread problems.
Have you ever read the explanation of the features of the update
that are listed in each update, at the link on Apple's web site?
And then followed up from there to some of the non-Apple
security sites for even more info? Pretty comprhensive stuff.
As a former software engineer, I know firsthand how software is
never perfect. But the open source process beats the pants off
the closed source process of the market leader.