Mac OS X 10.2 Security Upgrade

[arn]

In your 10.2 Software update:

Security Update 2002-08-23 includes the following updated components which provide increased security to prevent unauthorized access to applications, servers, and the operating system.

OpenSSL
Security
SunRPC

[Wes]

One day after the release! Were heading towards a ms style of system updates LOL.

[greenplasticcup]

i'm installing jaguar right now on my tower, the update should pop right up if it's anything like 10.1

[greenplasticcup]

yep, it did.

[big]

right after rebooting, the thing popped up like a mofo

[greenplasticcup]

i'm installing jaguar right now on my tower, the update should pop right up if it's anything like 10.1

[Bartman]

Originally posted by W-_-W
One day after the release!

Actually, the release date is tomorrow, so it's one day BEFORE release and we get the first update.

Way to be proactive Apple! :)

[Nipsy]

Apple:
Release security update 1 day before software

M$:
Have vulnerabilty submitted privately. Do nothing for 2 months. Have irate vuln. finder disclose vuln. publicly. Issue press release about how harmless vuln. is. Do nothing for 2 months. Wait until billions have been wasted recovering systems from vuln. in homes and offices worldwide. Release 'Critical' update.

I'll vote for Apple's approach anyday...

[passwordispong]

Originally posted by W-_-W
One day after the release! Were heading towards a ms style of system updates LOL.

I haven't read the complete readme on the security update so dont flame me if i am incorrect on this, but the difference here between apple and microsoft is apple is NOT updating security for stuff they wrote, on the other hand microsoft is always patching their own code.

[kungfu]

they need to update the spinny thing in software update... the new one is much better. what is "sun rpc"?

kungfu

[bit_bucket]

sun_rpc is portmap. It is on all flavors of unix. I basically is a port that listens for various request such as NFS mount requests and other things that use remote proceedure call... If your curious portmap runs on port 111 tcp/udp check out your /etc/services. It is also known as rpcbind...

bit_bucket

[sockdoggy]

Originally posted by W-_-W
One day after the release! Were heading towards a ms style of system updates LOL.

Jaguar (6C115) was released to developers August 1st...

[King Cobra]

greenplasticcup, how many towers do you have? :rolleyes: :D

>a ms style of system updates LOL.

Wdog, remember when OS X 10.1 was released? I think Apple had a Security Update going a short while after that. Then came Installer Update sometime later, then an eventual OS update.

The same thing probably will happen here with Jaguar. Besides, it's not like if you didn't get the updates every week or so your computer would become more prone to crashes. :p

[Marc K]

why are there negative votes on this ???

[skunk]

Perhaps this "security update" is tagging us all as we speak. The spiel says

increased security to prevent unauthorized access to applications, servers, and the operating system.

Whose unauthorized access, eh?:confused: Does it detect duplicated Jaguar installations?

[peterjhill]

Without reading anything, it probably fixes some buffer overflow vulnerabilty, or some other clever hack that someone came up with.

[eric_n_dfw]

Originally posted by skunk
Perhaps this "security update" is tagging us all as we speak. The spiel says

increased security to prevent unauthorized access to applications, servers, and the operating system.

Whose unauthorized access, eh?:confused: Does it detect duplicated Jaguar installations?
Doubtfull. But maybe you need to buy as many copies of OS X as you use. ;)

[greenplasticcup]

King Cobra -- Just one tower at work. I thought it would sound wierd if I was saying "I'm installing jaguar right now." since I was typing; and unfortunately you can't goof off at macrumors while installing the OS. I just was trying to distinguish between my laptop and my tower.

[bousozoku]

It sounds as though it's the same update released for 10.1.x on the 13th, right?

[BongHits]

Originally posted by skunk
Perhaps this "security update" is tagging us all as we speak. The spiel says

increased security to prevent unauthorized access to applications, servers, and the operating system.

Whose unauthorized access, eh?:confused: Does it detect duplicated Jaguar installations?
every single security update i've had says that...i bet it has nothing to do with the MS style of watching where every copy of XP is installed (wouldn't it be counter-productive to monitor all your customers? but then again i guess they don't care...)

[Tom-Servo]

This update is the Open SSL security update that was patched into 10.1.5. They didn't get it put into Jaguar apparently before it went GM. So now this is bringing security parity to Jaguar. At least that is what my developer friend is telling me. But it makes sense since lots of websites were talking about them having to roll in a few security updates that were put into 10.1 recently.

[oeyvind]

It's not one day before... remember folks there's multiple time zone in this world of ours... it's already afternoon of the 8/24 now in the Far East and evening in the pacific.

^^

[skunk]

I wasn't actually being serious, it was just getting rather one-sided, so I thought I'd throw a bit of conspiracy theory into the mix...:p

[Falleron]

Where can I download the update from the web? I like to keep the updates so that i dont have to download them again (I only have a 56k modem) if my system ever needed a re-install (not likely).

[skunk]

Apple.com>support>downloads

[King Cobra]

plastic, I'm just pulling a pun (as supposed to other things :D) since you double-posted.

As for Jaguar possibly detecting duplicate installations, I don't see how this is possible with the installation (excpet if you link up two computers, maybe). I don't even see how this is done on Windoze.

[skunk]

I've got 10.2 installed on 3 networked machines and it's great :D

[Uragon]

Originally posted by Falleron
Where can I download the update from the web? I like to keep the updates so that i dont have to download them again (I only have a 56k modem) if my system ever needed a re-install (not likely).

if you are updating from Software Update in the System preference, highlight the item/s you want to update and just before quitting (after the update) select Save As from the update menu...

[Falleron]

Cheers people.

[big]

>As for Jaguar possibly detecting duplicate installations, I don't see how this is possible with the installation

3 machines here in house, I had bought em all within 2 years, and they released the family pack after I ordered my 10.2, their bad timing

[skunk]

I've written to Apple suggesting that they must do something for those in your position and mine. I have just got a new iBook with 10.2. We should either be able to upgrade to a Family Pack for $70, or be able to buy additional licences for $20 each. Otherwise we are being penalised yet again for early adoption.

[jelloshotsrule]

couldn't you have cancelled your 10.2 single license order and reordered family pack? or just upgraded?

[skunk]

As soon as I heard about the Family Pack, I did cancel my Single-User Licence order, but Apple UK were not offering the Family Pack until a couple of days ago, nor is there apparently any way to upgrade from the Single User to Family Pack. Meanwhile, I took delivery of a new iBook, which came with a 10.2 upgrade CD (actually 2 CDs). So now my position is that I have 10.2, which I have paid for with my iBook. Why should I have to buy a Family Licence, as I have already bought one copy? Apple MUST sort this out. People in my position, and for that matter people who have already bought standalone copies of 10.2 Single User, should have the option of adding licences at, say, $20 each (or $19.95!), or adding four for $70, to match the Family Pack price. Otherwise we are just being shafted. In the absence of any equitable deal, I have loaded 10.2 on all my Macs, and I await Apple's decision on whether they will offer me a way to be legal without paying through the nose. A fair deal is all I want, and I have written to Apple to put my point. I believe this is a thoroughly valid stance.

[Gigglebyte]

Originally posted by skunk
Meanwhile, I took delivery of a new iBook, which came with a 10.2 upgrade CD (actually 2 CDs). So now my position is that I have 10.2, which I have paid for with my iBook. Why should I have to buy a Family Licence, as I have already bought one copy?

Skunk...I know what you are thinking but it doesn't really work like that. Lets just say that you got your iBook with 10.2 already installed on it and the 10.2 CD's were your backup copy, should you still be eligalbe for the Family Pack? you didn't buy the license, that is just the license that came with your computer.

[skunk]

Sure I bought the licence. That's part of the cost of the computer.

[digitalgiant]

I am very tried but i think that I have a point. Hold on, here we go. What if you had to reinstall your system. How would apple know if you were reinstalling or adding to a new computer? Hmmm... I have 9 running on my iMac DV (hasent been on in six months) and X on my TI PB. So I dont care. Saving my pennies for 10.2. I was thinking of useing my wife's "teacher discount".;) Anyway, very tried,, wife is waking up, getting ready for work. Wants to know why I am still up? Looks mad. Gotta go.

[Gigglebyte]

Originally posted by skunk
Sure I bought the licence. That's part of the cost of the computer.

yes it is bundled into the cost of the computer but there isn't any way to 'upgrade' that to a family pack..besides you have the upgrade to 10.2 and that is a totaly different ball of wax