Security Update 2004-12-02

MacRumors

macrumors bot
Original poster
Apr 12, 2001
7,446
8,510
Now available via Software Update:
Security Update 2004-12-02 delivers a number of security enhancements and is recommended for all Macintosh users. This update includes the following components:

Apache
AppKit
HIToolbox
Kerberos
Postfix
PSNormalizer
Safari
Terminal

For detailed information on this Update, please visit this website: http://www.info.apple.com/kbnum/n61798
 

PlaceofDis

macrumors Core
Jan 6, 2004
19,232
4
heres hoping nothing gets messed up....

Edit: nope everything is okay here, still no problems with safari either yay!
 

j_maddison

macrumors 6502a
Mar 31, 2003
687
3
Nelson, Wales
realityisterror said:
too many security updates as of late... and 12MB... pah..
uh not sure what your logic is when you say there are too many security updates of late. I think its excellent! It lets me know apple take security very seriously, and unlike windoze their security updates seem to work and only cause minimul disruptions to a small amount of users.

So more updates Apple, so we can stay on top and know we have a secure system from a company whos dedicated to continual development.

jay
 

sord

macrumors 6502
Jun 16, 2004
352
0
StarbucksSam said:
I'm very glad Apple is staying on the ball- but we have had a LOT of these lately. Is something unusual going on?
Maybe fixing security risks (and finding them) has just become a bigger priority with all of this spyware crap floating around for windows.
 

StarbucksSam

macrumors 65816
Nov 21, 2004
1,414
0
Washington, D.C.
sord said:
Maybe fixing security risks (and finding them) has just become a bigger priority with all of this spyware crap floating around for windows.
Thanks for the information. Is there any known spyware for Mac? I hope not... because I go to online banking and card information all the time... would i know if I had it?
 

blackpeter

macrumors 6502a
Aug 14, 2001
919
0
Safari timeout issue still unresolved. Everyday I meet more and more people sufferning though this bug. Very JV, if you ask me.
 

Noiseboy

macrumors regular
Dec 25, 2002
213
18
Lurking nearby.
Not for 10.3.5?

The KB article says that this is for OS 10.2.8 and 10.3.6 I am running 10.3.5 and it doesn't show up in my software update. I am (sadly) still nervous about installing 10.3.6.
 

Lancetx

macrumors 68000
Aug 11, 2003
1,977
585
Texas
realityisterror said:
too many security updates as of late... and 12MB... pah..
Too many as opposed to what? Too few security updates? I don't see any problem at all. It's nice to see that Apple stays on the ball.
 

Stampyhead

macrumors 68020
Sep 3, 2004
2,294
30
London, UK
No known spyware or anything like that that affects Macs. I guess low market share has its advantages!
Just installed on my 15" Powerbook 1.25, no problems.
 

Toe

macrumors 65816
Mar 25, 2002
1,101
2
StarbucksSam said:
I'm very glad Apple is staying on the ball- but we have had a LOT of these lately. Is something unusual going on?
Most of these updates (especially the ones in this latest patch) seem to originate in the Unix world. Apache, kerberos, Postfix, etc..

There are hundreds if not thousands of little apps and bits of code that collectively make up OS X. Each one (or many) of those is an open-source project, with a team of programmers, testers, and high-end users.

Every time one of those folks comes across a problem in the code, they document it and work on a patch.

Apple is just passing all that collected wisdom on to us in chunks. If they were mean, they'd patch each one individually, and we'd be running security updates every other day.
 

macridah

macrumors 6502a
Feb 18, 2004
868
0
Nor-Cal
The Red Wolf said:
Love updates. If the blood has dried on the bleeding edge of technology, you're no longer current. More Open Source!
i like updates too, but I always end up holding my breath after the first reboot. Then I hold my breath again the first time I use my favorite apps.
 

asif786

macrumors 65816
Jun 17, 2004
1,027
0
London, UK.
hmm..this isnt showing up for me in software update..?

The only outstanding updates on my imac are the bluetooth one (didnt wanna install in case it screws up my mouse/kb) and iSight update.

It's odd that this security update isnt showing. Maybe I'll have to run the BT update first. :rolleyes:
 

msconvert

macrumors member
Feb 27, 2004
58
0
Code:
2004-01-07 17:26:14 -0500: Installed "AirPort Software" (3.2)
2004-01-07 17:26:21 -0500: Installed "Apple Remote Desktop Client" (1.2.4)
2004-01-07 17:26:40 -0500: Installed "iPod Software" (1.3.1)
2004-01-07 17:27:19 -0500: Installed "iSync" (1.3)
2004-01-07 17:28:52 -0500: Installed "Mac OS X Update" (10.3.2)
2004-01-08 17:36:18 -0500: Installed "QuickTime" (6.5)
2004-01-08 17:36:30 -0500: Installed "Security Update 2003-12-19" (1.0)
2004-01-19 13:46:32 -0500: Installed "iCal" (1.5.2)
2004-01-26 16:34:04 -0500: Installed "Security Update 2004-01-26" (1.0)
2004-02-02 16:49:52 -0500: Installed "Java 1.4.2" (1.4.2)
2004-02-02 16:50:40 -0500: Installed "Safari" (1.2)
2004-02-05 11:22:01 -0500: Installed "Bluetooth Software" (1.5)
2004-02-17 15:07:32 -0500: Installed "iSync" (1.4)
2004-02-23 19:18:58 -0500: Installed "Security Update 2004-02-23" (1.0)
2004-03-02 11:01:14 -0500: Installed "iSight Update" (1.0.2)
2004-03-15 19:23:31 -0500: Installed "Mac OS X Update" (10.3.3)
2004-03-27 19:52:09 -0500: Installed "iChat Update" (2.1)
2004-04-05 19:36:34 -0400: Installed "Security Update 2004-04-05" (1.0)
2004-04-19 13:53:37 -0400: Installed "AirPort Software" (3.4)
2004-04-27 01:06:09 -0400: Installed "AirPort Software" (3.4.1)
2004-04-29 09:35:08 -0400: Installed "iPod Update 2004-04-28" (3.0)
2004-05-04 18:03:06 -0400: Installed "Security Update 2004-05-03" (1.0)
2004-05-11 19:03:52 -0400: Installed "Backup" (2.0.2)
2004-05-21 20:01:10 -0400: Installed "Security Update 2004-05-24" (1.0)
2004-05-29 05:07:53 -0400: Installed "Mac OS X Update" (10.3.4)
2004-06-05 14:30:42 -0400: Installed "AirPort Extreme Driver" (3.4.2)
2004-06-07 20:17:36 -0400: Installed "Security Update 2004-06-07" (1.0)
2004-06-09 21:01:46 -0400: Installed "iTunes" (4.6)
2004-08-10 10:55:22 -0400: Installed "iPhoto Update" (2.0.1)
2004-08-10 10:55:36 -0400: Installed "Security Update 2004-08-09" (1.0)
2004-08-10 10:59:16 -0400: Installed "Mac OS X Update" (10.3.5)
2004-08-11 11:26:12 -0400: Installed "Java 1.4.2 Update 1" (1.4.2 Update 1)
2004-08-11 11:29:46 -0400: Installed "iSync" (1.5)
2004-09-02 12:20:07 -0400: Installed "Keynote Update" (1.1.1)
2004-09-06 11:03:01 -0400: Installed "AirPort Card Update 2004-08-31" (3.4.3)
2004-09-08 09:28:25 -0400: Installed "Security Update 2004-09-07" (1.0)
2004-09-14 09:33:22 -0400: Installed "Security Update 2004-09-07" (1.1)
2004-09-19 11:07:57 -0400: Installed "Security Update 2004-09-16" (1.0)
2004-09-26 12:23:20 -0400: Installed "Java 1.4.2 Update 2" (1.4.2 Update 2)
2004-10-05 10:40:16 -0400: Installed "Security Update 2004-09-30" (1.0)
2004-10-28 10:21:18 -0400: Installed "iTunes" (4.7)
2004-10-28 10:22:13 -0400: Installed "QuickTime" (6.5.2)
2004-10-28 10:22:22 -0400: Installed "Security Update 2004-10-27" (1.0)
2004-11-05 17:02:44 -0500: Installed "Mac OS X Update" (10.3.6)
2004-11-16 11:19:55 -0500: Installed "AirPort Software" (4.1)
2004-11-20 11:18:39 -0500: Installed "iPod Updater 2004-11-15" ((null))
2004-11-23 12:12:04 -0500: Installed "iCal" (1.5.4)
I've usually installed within 1 or two days of release. Security Updates don't seem to be out of order to me... And yes. Alot of these explicit Security Updates are for Open Source code like apache, CUPS... that need to be patched and not explictly the OSX kernel or Aqua....
 

mrzippy

macrumors 6502
Apr 24, 2003
250
0
Kent, UK
Apache update question.

I have built and installed Apache 1.3.29 and PHP 5.0.2 myself with the help of http://phpmac.com/articles.php?view=203

One of the install instructions was to comment the following lines in /etc/httpd/httpd.conf

LoadModule hfs_apple_module libexec/httpd/mod_hfs_apple.so
AddModule mod_hfs_apple.c

LoadModule mod_rendezvous_apple libexec/httpd/mod_rendezvous_apple.so
AddModule mod_rendezvous_apple

I have now installed the security update and Apache is now the Apple build 1.3.33, should I now uncomment the above lines as the security update references a hfs bug.

Thanks

Neil