Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Apple Releases Security Update 2009-004 for Leopard and Tiger

Yep. I can confirm it is there and am downloading now. That's like 1000 updates in like two weeks Apple. Thanks, but slow down. Looks like they want to make Leopard as perfect as possible before Snow Leopard.
 
According to the Apple bulletin, this appears to resolve the BIND DNS vulnerability noted in CVE-2009-0696.
 
Got the notification, but not seeing it in SUS, which is a pain. Scheduled my servers to go down for 2009-003 today from 4PM to 5PM. All patched, and now I get a notification that 2009-004 is out. Bitches! :eek:

NOTE: This is really a non-patch unless you're running Mac OS X Server and providing DNS.

I'd be more interested in Apple fixing the **** they broke on 10.5.8 Server patch that made the SN daemon freak out and lock the server if you have 2 NICs.
 
Apple Releases Security Update 2009-004 for Leopard and Tiger




164128-security_update_2009_004.png


Apple today released Security Update 2009-004 for both Mac OS X Leopard and Tiger via Software Update and Apple's downloads page. The release comes just one week after the release of Mac OS X 10.5.8 and Tiger Security Update 2009-003.

- Security Update 2009-004 (Leopard) (166 MB)

- Security Update 2009-004 (Tiger Intel) (166 MB)
- Security Update 2009-004 (Tiger PPC) (130 MB)
- Security Update 2009-004 (Server Tiger Universal) (204 MB)
- Security Update 2009-004 (Server Tiger PPC) (130.97 MB)

According to the associated security support document, the update addresses a vulnerability in the BIND suite of Unix utilities that works with the Domain Name System (DNS). There is reportedly a public exploit of the vulnerability in "wide circulation" at this time.

Article Link: Apple Releases Security Update 2009-004 for Leopard and Tiger
 
Everything downloaded and installed fine and fast. Looks good. Apple needs to slow down a bit with the updates. But they are just trying to make Leopard as good as possible before Snow Leopard.
 
From the description of the exploit, it appears to only affect DNS Servers, and causes a server crash. Most people won't be affected by this. Still nice to see problems getting fixed.

jW
 
flottenheimer said:
With all these security updates I wonder when we will all suffer under a grand mac worm/virus/exploit/whatever-attack.
Click to expand...

The point of security updates is to make sure we don't suffer from any such thing. I expect the first virus/worm will appear on Mac OS X in, oh, 30+ years? Seriously, I don't anticipate ever seeing one. Exploits are different, and they exist, but it's a direct contact approach. Someone would have to actively be trying to gain access to your machine or cause problems, so the effect is minimal. Still good to patch to try and eliminate those, but you won't see widespread effects of something like that.

jW
 
I wonder whether there will be a similar update for the Time Capsule and other Apple routers? Unlike most users' computers, they *do* use the DNS server, don't they?
 
All this chatter for a security update to BIND which is off by default and likely very few have enabled it (really only visible under Mac OS X server UI wise).
 
Mal said:
From the description of the exploit, it appears to only affect DNS Servers, and causes a server crash. Most people won't be affected by this. Still nice to see problems getting fixed.

jW
Click to expand...

If the fix is to one of BIND's libraries then it's possible that other code dependant upon this library could also be at fault.
 
Komiksulo said:
I wonder whether there will be a similar update for the Time Capsule and other Apple routers? Unlike most users' computers, they *do* use the DNS server, don't they?
Click to expand...

While they use DNS they don't run their own DNS servers (BIND). They do publish their existence using mDNS (aka Bonjour) but that is unrelated to BIND.
 
is anybody having a problem with this update?

I installed it and shortly afterwards found myself unable to drag anything (not just in the Finder, but throughout the whole OS)
 
You all missed the most important change made in this update: The iDisk icon is no longer pink! :(

I miss it already.
 

Attachments

  • Picture 1.png
    Picture 1.png
    16.7 KB · Views: 1,794
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back