Apple issues Mac OS X security update

Apple has released a security update that fixes several flaws in its Mac OS X operating system. The update, named Security Update 2004-09-30 but released Monday, addresses potential denial-of-service vulnerabilities in the AFP server and CUPS printing module as well as a flaw in QuickTime that could allow malicious code to be executed via a buffer overrun. The patch also fixes a CUPS flaw that could allow user passwords to be displayed in a printer log. The company credits an employee in the IT department of Glasgow Caledonian University for reporting the flaw.

The computer maker issued fixes for both Mac OS X 10.2 Jaguar and Mac OS X 10.3 Panther. Some of the flaws affect both versions of Mac OS X, while others occur only in Panther.

[airmancoleman]

OS X - another update - SAFE?

Ever since the ultra-problematic OS X update/s of a few weeks
back, I've been reluctant to install subsequent ones. Is anyone
aware of a site that's tracking these things and advising re:
"reliability" as they are issued? (Perhaps such a site might do
beta testing before the official releases/s?) ta!

[dalydose]

Mac??? Say It Isn't So

How can the 'perfection in security' have a problem that needs to be patched. I guess all of the advertising is starting to work. There are enough Macs out there to warrant being a taget. No OS is perfect,

[iKenny]

Unlike MS

At least Apple patches the problems before anyone is affected,
not after. And the patches don't cause more security problems.

the virtues of open source

As an IT manager, I have had no problems with the Apple OS X
updates.

That they are coming with some frequency does not bother me;
rather it comforts me. Given the openness of Unix & its
derivatives, I reassured that there are folks out there
reexamining the installed code base for potential problems,
before they become widespread problems.

Have you ever read the explanation of the features of the update
that are listed in each update, at the link on Apple's web site?
And then followed up from there to some of the non-Apple
security sites for even more info? Pretty comprhensive stuff.

As a former software engineer, I know firsthand how software is
never perfect. But the open source process beats the pants off
the closed source process of the market leader.