Security Update 2008-005 Released

MacRumors · Jul 31, 2008, 10:55 PM

Apple has released Security Update 2008-005 via Software Update. The update patches several vulnerabilities including a much-publicized DNS/BIND server vulnerability where an attacker could cause a Mac OS X DNS server to direct clients to forged websites.

The update is available for Mac OS X Server 10.4, Mac OS X 10.4.11, Mac OS X Server 10.5, and Mac OS X 10.5.4.

Article Link

macbookairman · 11:06 PM

darn it. requires a restart.

installed, working fine.

WoFat · Jul 31, 2008, 11:01 PM

Oh the humanity! A Restart! (insert head shake here)

balwx · Jul 31, 2008, 11:04 PM

Also 65.1mb on my macbook... thanks

alphaod · Jul 31, 2008, 11:04 PM

First restart in weeks!

So this prevents the publicized IP issues?

dadoc04 · Jul 31, 2008, 11:06 PM

Got it. Thanks 4 the heads up guys.

jmadlena · Jul 31, 2008, 11:05 PM

Goodie. I love updating; always makes me feel a bit better. I don't know if my activities are susceptible to the DNS flaw, but I love knowing that it is fixed*.

*At least until someone finds a new exploit.

scotty56 · Jul 31, 2008, 11:06 PM

I feel safer already

cgtyoder · Jul 31, 2008, 11:07 PM

Better late than never, I guess.

Embarrassing that MS had this fixed a month ago.

macbookairman · Jul 31, 2008, 11:07 PM

Quote:

Originally Posted by WoFat

Oh the humanity! A Restart! (insert head shake here)

haha. i hate restarting. i'm always in the middle of something important when a software update comes that requires a restart. (and i can't resist the urge to install the update)

Shasterball · Aug 1, 2008, 09:15 AM

Quote:

Originally Posted by WoFat

Oh the humanity! A Restart! (insert head shake here)

It's annoying when my comp has been on for 20 days!

sam10685 · Jul 31, 2008, 11:37 PM

Quote:

Originally Posted by macbookairman

darn it. requires a restart.

installed, working fine.

Your mad because you had to restart your computer? What's that... 20-30 seconds? Yeah... I'd hate to see what happens if the computer ever needed to be turned COMPLETELY off.

macbookairman · Jul 31, 2008, 11:50 PM

Quote:

Originally Posted by sam10685

Your mad because you had to restart your computer? What's that... 20-30 seconds? Yeah... I'd hate to see what happens if the computer ever needed to be turned COMPLETELY off.

i was in the middle of some important stuff. shheeesh. and i wasn't mad. i just said darn it.

Stridder44 · Aug 1, 2008, 05:35 PM

Quote:

Originally Posted by macbookairman

i was in the middle of some important stuff. shheeesh. and i wasn't mad. i just said darn it.

But you were mad enough to bother posting for all of us to see.

Eric S. · Jul 31, 2008, 11:39 PM

Quote:

Originally Posted by macbookairman

darn it. requires a restart.

Wouldn't be much of a security update if it didn't.

majordude · Jul 31, 2008, 11:09 PM

That's sorta strange... an update at 8:00PM PST?

encro · Jul 31, 2008, 11:15 PM

Quote:

Originally Posted by majordude

That's sorta strange... an update at 8:00PM PST?

Security Update 2008-005 was released just hours after high profile articles such as:
http://www.macworld.com/article/1347...apple_dns.html

The Press has been all over this since all but Apple had released a critical DNS update. Not strange, it's possibly just Apple's PR trying to implement damage control regarding their security reputation. There are other security issues that were resolved also ( see http://support.apple.com/kb/HT2647 ) so it may just be a coincidence with regards to timing.

janey · Aug 1, 2008, 12:01 AM

Quote:

Originally Posted by encro

The Press has been all over this since all but Apple had released a critical DNS update. Not strange, it's possibly just Apple's PR trying to implement damage control regarding their security reputation...

Security reputation? What security reputation?

Honestly, shame on Apple. They're selling a server OS. They should have had this patch ready earlier, especially because Kaminsky let them in on the issue like he did with MS and ISC and Cisco *before* the multivendor patch release date. I was personally shocked to see absolutely no statement from Apple whatsoever that day. The response to my radar bug filed with Apple Product Security was insane.

At least it's available. As far as I know, my ISP hasn't yet even considered it, so I'm using OpenDNS for the time being.

jordo · Aug 1, 2008, 02:24 AM

This showed up at a very strange time in the evening. Also, I dig the Home Depot ads. It is nice to see this site getting more recognition and support to ensure its growth and prosperous function. I have relied heavily on the news, rumors, user comments, and buyer guides featured, for years before I became a member. And not that other advertisers featured on Macrumor are insignificant, but the Home Depot is a quality pick up. Nice work Arn!

8CoreWhore · Aug 1, 2008, 02:35 AM

My DNS feels, I don't know - snappier.

SFStateStudent · Aug 1, 2008, 02:36 AM

I thought Seinfeld did their last show? Too much drama for my taste. My Cache is safe in da' Bank...

rhett7660 · 10:24 AM

Thanks for the heads up about this.......

Whaling... I thought this was something complete different........

scotty96LSC · Aug 1, 2008, 09:27 PM

I just said "No" to restart until it was convenient to me. I am the master of my domain.

BenEndeem · Aug 2, 2008, 04:05 PM

Good to see the security update, albeit a little late, I'll make sure it gets installed.

snoopyclone · Aug 2, 2008, 04:24 PM

I'm running 10.4.11 on my Powerbook and my Mail app keeps completely shutting down while attempting to download mail. I have tried restarting a second time...I haven't noticed any other apps quitting.

I should say this only started happening after I installed the 2008-05 update. Thanks.

Jul 31, 2008, 10:55 PM	#1
MacRumors macrumors bot Join Date: Apr 2001	Security Update 2008-005 Released Apple has released Security Update 2008-005 via Software Update. The update patches several vulnerabilities including a much-publicized DNS/BIND server vulnerability where an attacker could cause a Mac OS X DNS server to direct clients to forged websites. The update is available for Mac OS X Server 10.4, Mac OS X 10.4.11, Mac OS X Server 10.5, and Mac OS X 10.5.4. Article Link

Jul 31, 2008, 10:57 PM	#2
macbookairman macrumors 6502a Join Date: Jan 2008	darn it. requires a restart. installed, working fine. Attached Thumbnails __________________ MacBook-Airman Twitter: @woodjosiah MacBook (Black) 2.2GHz, 30 GB iPod Video, iPod Touch 2G Every time someone writes “I-POD” or “Ipod”, Jonny Ive kills a kitten.--bjango Last edited by macbookairman : Jul 31, 2008 at 11:06 PM.

Jul 31, 2008, 11:04 PM	#5
alphaod Contributor Join Date: Feb 2008 Location: LIE x37	First restart in weeks! So this prevents the publicized IP issues? __________________ Search before you post: MRoogle Mac Pro E09 (2x2.66/6x2GB/4x300GB10K/GTX285) \| Dell 3007WFP-HC (30") MacBook Air M09 (2.13/2GB/128GB) \| iPhone 3GS (32GB/White/Unlocked)

Jul 31, 2008, 11:06 PM	#8
scotty56 macrumors regular Join Date: Feb 2008 Location: Oregon	I feel safer already __________________ 2.2 GHz Macbook 2GB RAM, 4GB iPhone www.nyc-mac.com

Jul 31, 2008, 11:07 PM	#9
cgtyoder macrumors newbie Join Date: Jul 2002 Location: Fresno	It's about time Better late than never, I guess. Embarrassing that MS had this fixed a month ago.

Jul 31, 2008, 11:01 PM	#3
WoFat macrumors member Join Date: May 2008	Oh the humanity! A Restart! (insert head shake here)

Jul 31, 2008, 11:04 PM	#4
balwx macrumors member Join Date: Aug 2007	Also 65.1mb on my macbook... thanks

Jul 31, 2008, 11:06 PM	#6
dadoc04 macrumors member Join Date: Jul 2008 Location: Jax & DMV	Got it. Thanks 4 the heads up guys.

Jul 31, 2008, 11:05 PM	#7
jmadlena macrumors 6502 Join Date: May 2007 Location: Washington	Goodie. I love updating; always makes me feel a bit better. I don't know if my activities are susceptible to the DNS flaw, but I love knowing that it is fixed. At least until someone finds a new exploit.

Jul 31, 2008, 11:09 PM	#16
majordude macrumors 68000 Join Date: Apr 2007 Location: Mexifornia	That's sorta strange... an update at 8:00PM PST? __________________ 17" MBP, matte, 2.33GHz Intel Core 2 Duo, 3GB RAM and 7200 320GB HD "Any major dude with half a heart surely will tell you my friend..." — Steely Dan

Aug 1, 2008, 02:24 AM	#19
jordo macrumors newbie Join Date: Nov 2006	This showed up at a very strange time in the evening. Also, I dig the Home Depot ads. It is nice to see this site getting more recognition and support to ensure its growth and prosperous function. I have relied heavily on the news, rumors, user comments, and buyer guides featured, for years before I became a member. And not that other advertisers featured on Macrumor are insignificant, but the Home Depot is a quality pick up. Nice work Arn! __________________ 12" iBook G4, 1.33 GHz, 1.5, 80gb, 10.5.4 Iomega 500gb LaCie 160gb iPod Shuffle v2 AirPort Express w/Logitech Z-680 Pro Logic II Canon 1D Mk 2

Aug 1, 2008, 02:35 AM	#20
8CoreWhore macrumors 6502 Join Date: Jan 2008 Location: Austin, TX	My DNS feels, I don't know - snappier.

Aug 1, 2008, 02:36 AM	#21
SFStateStudent macrumors Demi-God Join Date: Aug 2007 Location: San Francisco California, USA	I thought Seinfeld did their last show? Too much drama for my taste. My Cache is safe in da' Bank... __________________ MBP 2.5GHz 250GB Mac Pro 3G S⃣ iPhone 32GB Black

Aug 1, 2008, 10:18 AM	#22
rhett7660 macrumors 68020 Join Date: Jan 2008 Location: Sunny, Southern California	Thanks for the heads up about this....... Whaling... I thought this was something complete different........ __________________ Last edited by rhett7660 : Aug 1, 2008 at 10:24 AM.

Aug 1, 2008, 09:27 PM	#23
scotty96LSC macrumors 65816 Join Date: Oct 2007 Location: San Antonio, Texas	I just said "No" to restart until it was convenient to me. I am the master of my domain. __________________ Scott 15" macbook pro, 2.16 GHz Intel Core 2 Duo, 3GB Ram, 10.6.2 1st Gen 8gb iPod touch, 3.1.2 My Site

Aug 2, 2008, 04:05 PM	#24
BenEndeem macrumors Demi-God Join Date: Jul 2008 Location: England	Good to see the security update, albeit a little late, I'll make sure it gets installed. __________________ Snow Leopard: 24" iMac 2.8 GHz, 4 GB RAM; 13" MacBook 2.1 GHz, 4 GB RAM Tiger: 17" iMac G4 1.25 GHz, 768 MB RAM. Two iPods.

Aug 2, 2008, 04:24 PM	#25
snoopyclone macrumors newbie Join Date: Jul 2008 Location: Florida	I'm running 10.4.11 on my Powerbook and my Mail app keeps completely shutting down while attempting to download mail. I have tried restarting a second time...I haven't noticed any other apps quitting. I should say this only started happening after I installed the 2008-05 update. Thanks. __________________ PowerBook G4 12" ~ iPod Video Classic 30GB ~ iPhone 3G 16GB Black

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode