Security Update 2005-007 Released

MacRumors

macrumors bot
Original poster
Apr 12, 2001
7,463
8,522


Now available via Software Update:
Security Update 2005-007 delivers a number of security enhancements and is recommended for all Macintosh users. This update includes the following components:

AppKit
BlueTooth
CoreFoundation
cups
Directory Services
HIToolBox
Kerberos
loginwindow
Mail
OpenSSL
QuartzComposerScreenSaver
Security Interface
Safari
X11
zlib

For detailed information on this Update, please visit this website: http://www.info.apple.com/kbnum/n61798
 

rinseout

macrumors regular
Jan 20, 2004
160
0
quigleybc said:
Security is good

Anyone had any issues yet?
The only thing that scared me is that upon rebooting the progress bar seems to hang about 80% of the way through when it's "Starting Mac OS X" or whatever. But eventually the login screen appears and everything seems to be working normally.
 

Freg3000

macrumors 68000
Sep 22, 2002
1,914
0
New York
For reference, since I always seem to think Apple is fixing the same things, here are the components the previous two Security Updates fixed.

2005-005
Apache
AppKit
AppleScript
Bluetooth
Finder
Foundation
Help Viewer
lukemftpd
sudo
Terminal
VPN
X11

2005-006
AFP Server
Bluetooth
CoreGraphics
Folder Permissions
launchd
LaunchServices
NFS
PHP
VPN

And the one released today...

2005-007
AppKit
BlueTooth
CoreFoundation
cups
Directory Services
HIToolBox
Kerberos
loginwindow
Mail
OpenSSL
QuartzComposerScreenSaver
Security Interface
Safari
X11
zlib

Bluetooth seems to be the most popular. :)
 

CaptainScarlet

macrumors regular
Jul 25, 2002
137
0
CheeseLand
Wow that's a lot of stuff in there...

After install, my Sony superdrive is working again!! LOL

Lets see how long it lasts this time...HEHEH




Captain Scarlet........
 

GroundLoop

macrumors 68000
Mar 21, 2003
1,561
35
Well, I don't have any problems with it on my PowerBook. All is good thus far.

Hickman
 

Nermal

Moderator
Staff member
Dec 7, 2002
18,681
1,183
New Zealand
It's not showing up in my SU, could a "hacked" Safari cause this?

Mitthrawnuruodo said:
Hmm... Apple seem to be one month behind schedule with this one, we're in the 8th month now... :p
The -007 doesn't mean 7th month, just that it's the 7th update this year.
 

TyWahn

macrumors 6502
Oct 25, 2003
376
34
Why wait?

I find it funny that people think they need to wait and see if anybody's machine explodes, or dies or whatever.. I have never had a single issue with a security update, or OS update for that matter. If you have a reasonably well maintained machine, you should have nothing to worry about. Don't you think?
 
Freg3000 said:
Bluetooth seems to be the most popular. :)
Yep, Bluetooth is extremely insecure. Just google for "bluetooth security" or "bluetooth insecurity". :(

Shame, as it's a great technology. Hats off to Apple for doing excellent security updates in a timely manner. Now only if Microsoft would do the same.

I actually got this e-mail from my University, here's a snippet:
To: All Institute Windows Computer Users
Why am I receiving this note?
Current attacks from the Internet are taking advantage of newly discovered vulnerabilities and exploits in Microsoft Windows Operating Systems. Users must patch Windows systems IMMEDIATELY to protect Institute computing resources and confidential information. NOTE! Even if you have enabled automatic updating, problems with the Auto-Update feature of Windows may cause automatic installations to fail. You must visit http://www.windowsupdate.com <http://www.windowsupdate.com/> to ensure patches are installed.

Systems which are identified as being unpatched will be removed from the network and quarantined beginning 3:30 pm, August 15, 2005.

Affected systems
All Windows systems users. Macintosh and Linux users are not affected.
Emphasis mine. :D
 

wwooden

macrumors 68000
Jul 26, 2004
1,994
140
Burlington, VT
TyWahn said:
I find it funny that people think they need to wait and see if anybody's machine explodes, or dies or whatever.. I have never had a single issue with a security update, or OS update for that matter. If you have a reasonably well maintained machine, you should have nothing to worry about. Don't you think?
I totally agree. I keep my computer very organized, photos go in iPhoto, movies go in movie section, all my apps are in applications. I don't add a lot of third party stuff so I think that helps as well. I have never had a problem with any system or security update ( except for the fact that they disabled a lot of G5's like my iMac from hosting a multi-video conference in 10.4.1 and 10.4.2).
 

JupiterTwo

macrumors 6502
Mar 29, 2003
276
3
GB
Shutdown my iMac after the update was applied. Starting it up again it seemed to get stuck in a full power fan exercise. Not sure if that was related to the update, but a power cycle and everything's back tootling along fine :)
 

Mitthrawnuruodo

Moderator emeritus
Mar 10, 2004
13,595
142
Bergen, Norway
Nermal said:
The -007 doesn't mean 7th month, just that it's the 7th update this year.
I know it's just a number and has nothing to do with the month, but they've been very consistent so far this year...

This is also why I added the: :p

;)

Also, all the good James Bond jokes had been covered in the earlier thread ;)

The thread that e just closed, btw, instead of merging the two... :confused:
 

DavidLeblond

macrumors 68020
Jan 6, 2004
2,198
286
Raleigh, NC
TyWahn said:
I find it funny that people think they need to wait and see if anybody's machine explodes, or dies or whatever.. I have never had a single issue with a security update, or OS update for that matter. If you have a reasonably well maintained machine, you should have nothing to worry about. Don't you think?

Some of us came from a Windows background where early adoption of service patches would sometimes cause lots of headache due to lack of testing.

Give us time.
 

Dokter_Mac

macrumors regular
Mar 9, 2005
133
0
TyWahn said:
I find it funny that people think they need to wait and see if anybody's machine explodes, or dies or whatever.. I have never had a single issue with a security update, or OS update for that matter. If you have a reasonably well maintained machine, you should have nothing to worry about. Don't you think?
No man!!! I maintained all my Mac's and after the 10.4.2 update i have troubles with a Powerbook and a MDD PowerMac. And i mean real troubles , such as kernel panics and the computer that's stops responding when shutting down , my printer and scanner stops responding , etc. For now i stay with version 10.4.1 after a lot of troubleshooting.
It's the first update which i have troubles with. Before 10.4.2 came out , i always downloaded and updated all my Mac's immediately. Now i'm being carefull because a downgrade is a lot off work and backing up.
I hope 10.4.3 is out soon. It should be out yesterday ;-)
Leppe
 

Stella

macrumors G3
Apr 21, 2003
8,273
4,636
Canada
Its is extremely unlikely your Mac has been hacked.

Safari has nothing to do with Software Update, either.

Nermal said:
It's not showing up in my SU, could a "hacked" Safari cause this?



The -007 doesn't mean 7th month, just that it's the 7th update this year.
 

clayj

macrumors 604
Jan 14, 2005
7,473
180
visiting from downstream
Nermal said:
It's not showing up in my SU, could a "hacked" Safari cause this?
Nermal, I've noticed before that new updates sometimes take a while to be available worldwide... it's like there's more than one SU server and, since you're in NZ, yours hasn't gotten the update yet.
 

csubear

macrumors 6502a
Aug 22, 2003
613
0
There a few that a very disturbing:

AppKit: All the App kit buffer overflow issues. Just think, open an text file and BAM virus.

servermgrd: only affects OS X server, but remote exploits are very scary.

Webkit: a pdf in safari could give you a virus.

What makes them extra scary, these are in house apple components. Every one has AppKit, and WebKit. Infact the text box I am typing in right now is a text view from appkit.