Apple releases Security Update 2008-007 for Mac OS X

[AppleInsider]

Apple on Thursday afternoon released its seventh distinct security fix of the year for Mac OS X to tackle a number flaws, including one introduced with its 10.5.5 update.

Available for both Mac OS X Leopard (Client, Server) and Tiger (Intel Client, PowerPC Client, PowerPC Server), Security Update 2008-007 addresses a mixture of UNIX foundation and Mac-specific flaws.

Among the fixes is one for the launchd daemon that only affects Mac OS X 10.5.5. The particular implementation may sometimes fail to sandbox apps that want to be isolated from the system, potentially exposing them to attacks.

Other Mac-related problems mended in the were first discovered by outside security teams, including a remote CUPS printing exploit found by TippingPoint's Zero Day Initiative as well as holes in ColorSync, Finder, general Mac OS X networking, PSNormalizer, QuickLook, root certificates, Script Editor and Weblog.

A pair of additional, special patches close vulnerabilities in the third-party ClamAV utility and allow a single sign-on with a password in a file, allowing scripts to use the sign-on feature without dropping security.

Solutions for UNIX flaws include updated versions of Apache, libxslt, MySQL Server, PHP, Postfix, rlogin, Tomcat and vim.

[ View this article at AppleInsider.com ]

[zigzaglens]

All of it looks good and important, but wow, it'd be super nice if they'd fix Time Machine.

[lkrupp]

Originally Posted by zigzaglens

All of it looks good and important, but wow, it'd be super nice if they'd fix Time Machine.

What a crock of nonsense.

[OldMacGuy]

I'd like them to fix the amount of time it takes to run "repair permissions" in 10.5.5. Maybe they did -- I haven't tried to run it yet. Between Tiger and Leopard (on my G5 iMac with max ram), it went from 5 minutes or so to 30 or more!

[webhead]

Originally Posted by zigzaglens

All of it looks good and important, but wow, it'd be super nice if they'd fix Time Machine.

What's wrong with Time Machine? It works beautifully for me. I used it just yesterday to restore a file that had been accidentally deleted. I love Time Machine and have had no problems with using it, in fact I think it's one of the best software applications ever!

[solipsism]

Originally Posted by webhead

What's wrong with Time Machine? It works beautifully for me. I used it just yesterday to restore a file that had been accidentally deleted. I love Time Machine and have had no problems with using it, in fact I think it's one of the best software applications ever!

I've had some issues with it when using FW and restarting the newest iMac. It prevents the iMac from starting up to the login screen. It could be the drivers of the external 2.5" HDD used, but I'd think that OS X could work its way around an external drive.

[zigzaglens]

TM is great conceptually, and if/when it works, but the program has serious known issues I won't hijack this thread with.

If you're interested, however, a search of Apple's Discussions site will show that the company is aware of the issues but is for whatever reason keeping them on the back burner. I'm not saying it ought to take precedence over security issues; I am just saying it would be nice to have TM fixed (because I like the program, too.) There are a lot of people who are unable, for all practical purposes, to rely on TM for backup.

[MartiNZ]

Exactly. Searching Apple's forums would be a much more sensible reaction than the first response your post got.

There are plenty of bugs that I would like fixed with Leopard, that have already survived almost a year since release, some 3.5 years or more since the release of Tiger, which is not bad for bugs!

Assuming it is working for everyone because it is working for you is not a good reaction.

Good luck with TM. I use it sometimes but, while I haven't had problems thus far (have only gone back in time once or twice), I am much more comfortable relying on a solid directory structure that I have created on an external drive, and so that sits alongside TM's work.

[lkrupp]

Originally Posted by solipsism

I've had some issues with it when using FW and restarting the newest iMac. It prevents the iMac from starting up to the login screen. It could be the drivers of the external 2.5" HDD used, but I'd think that OS X could work its way around an external drive.

No problems here with Time Machine, 1TB MyBook/fw800 and the latest iMac 24" (Penryn). I just installed this security update and restarted without issues. The 1TB MyBook and Time Machine came up just peachy keen.

[solipsism]

Originally Posted by lkrupp

No problems here with Time Machine, 1TB MyBook/fw800 and the latest iMac 24" (Penryn). I just installed this security update and restarted without issues. The 1TB MyBook and Time Machine came up just peachy keen.

I never did troubleshoot the issue thotoughly, which is something I usually would have done had it been my Mac and not the one that I bought for my parents while visiting. Switching to USB worked so I took the lazy route.

[MarkAllan]

Originally Posted by zigzaglens

All of it looks good and important, but wow, it'd be super nice if they'd fix Time Machine.

Yes, I'm with you on that one. There's nothing major wrong with it (I hope), but every so often I get a message saying that the TM backup failed. No reason, no log, no clues, it just "failed". If I immediately set it going again manually, it works fine. The warning started showing up in 10.5.4 and is still there in 10.5.5.

I've recovered some files successfully - it's the ones I haven't tried to recover yet which concerns me.

[lkrupp]

Originally Posted by zigzaglens

TM is great conceptually, and if/when it works, but the program has serious known issues I won't hijack this thread with.

If you're interested, however, a search of Apple's Discussions site will show that the company is aware of the issues but is for whatever reason keeping them on the back burner. I'm not saying it ought to take precedence over security issues; I am just saying it would be nice to have TM fixed (because I like the program, too.) There are a lot of people who are unable, for all practical purposes, to rely on TM for backup.

Well why should i be interested when I'm not experiencing any "serious known issues". Wouldn't you think that "serious known issues" would be affecting me too? And the standard "well, you're just one of the lucky ones" response doesn't cut it.

Just a crock of nonsense by people who can't figure out how to use their machine OR the whining of someone obsessed with the lack of some feature of little importance OR how some feature works that are blown into "serious known issues".

And to get back on topic I'm betting there are already posts on various forums that state...

"This security update killed my Mac!"

"Does Apple even test this stuff?!"

"We need a fix NOW Apple! This update is defective!"

"I have posted a ten page copy-paste of my frozen Mac's kernel panic and I want someone to analyze it for me."

"How do I remove this security update? It broke my Mac!"

"When we can expect a fix for this defective update? Way to go Apple!"

Of course these posts are out in force after every single update ever released by Apple, Inc. Every time an update is released I swear I will ignore the ignorant rants of the terminally clueless but I just can't. I need professional help. Help me Obi-Wan Kenobi!

All your kernel panics are belong to us

Oh and these too..."I'm not seeing this update in Software Update. What's up Apple?" "I can't download this update" WTF?" "Can someone give the link to this update? I can't find it on Apple's website" and finally "What's a backup?"

[zigzaglens]

Originally Posted by lkrupp

Well why should i be interested when I'm not experiencing any "serious known issues". Wouldn't you think that "serious known issues" would be affecting me too? And the standard "well, you're just one of the lucky ones" response doesn't cut it.

Just a crock of nonsense by people who can't figure out how to use their machine OR the whining of someone obsessed with the lack of some feature of little importance OR how some feature works that are blown into "serious known issues".

I not-so-humbly suggest you at least invest a minute to figure out who you're attacking before you launch into your dismissive bullshit. I started four technology companies, was CEO of one of them, served as CTO of a state, created millions of dollars in shareholder, client, and employee wealth, and co-authored four technology patents.

I don't share this to be immodest; I share it in rebuke of your dismissal of my comments as a "crock of nonsense" by "people who can't figure out how to use their machine." In this context, your drivel rings completely hollow, illustrates the fact that you are probably struggling with a serious inferiority complex, and adds zero to the discussion here.

I suspect my post won't help what is likely your permanent disposition, but I simply couldn't let your bitterness go unchecked.

So anyway - yeah, the TM issues are probably just because I'm stupid. Eff yourself.

[gdog]

anybody actually do this security update and can tell me if there are any issues and/or improvements?

[lkrupp]

Originally Posted by gdog

anybody actually do this security update and can tell me if there are any issues and/or improvements?

Yeah, me and a few million other users by now.

[lkrupp]

Originally Posted by zigzaglens

I not-so-humbly suggest you at least invest a minute to figure out who you're attacking before you launch into your dismissive bullshit. I started four technology companies, was CEO of one of them, served as CTO of a state, created millions of dollars in shareholder, client, and employee wealth, and co-authored four technology patents.

And now you're a fashion photographer. Wow!

[OptionTrader]

Originally Posted by zigzaglens

So anyway - yeah, the TM issues are probably just because I'm stupid.

If the shoe fits ...

[ktappe]

Originally Posted by lkrupp

Just a crock of nonsense by people who can't figure out how to use their machine OR the whining of someone obsessed with the lack of some feature of little importance OR how some feature works that are blown into "serious known issues".

How do you fit that ego of yours inside your head?

Odds are very high that when YOU have a problem with Leopard, it's very important. But everyone else's problems are "nonsense".

For example, we could not deploy Leopard until 10.5.5 because of bugs in all previous versions THAT APPLE ADMITTED that prevented them from being bound to large Active Directory implementations of mixed Microsoft Windows versions. I'm sure you call this "nonsense" or somehow "of little importance" but it kept 125 users in my company from getting their new Macs for months.

Please pipe down and stop telling others that their problems are insignificant because they're not your problems.

[zigzaglens]

Originally Posted by lkrupp

And now you're a fashion photographer. Wow!

Yes, that's right. Among many other things. And your point??

I'm sorry I took your bait. Onward.

[And to everyone else: sorry you had to deal with my outburst.]

[Hiro]

Originally Posted by zigzaglens

I not-so-humbly suggest you at least invest a minute to figure out who you're attacking before you launch into your dismissive bullshit. I started four technology companies, was CEO of one of them, served as CTO of a state, created millions of dollars in shareholder, client, and employee wealth, and co-authored four technology patents.

I don't share this to be immodest; I share it in rebuke of your dismissal of my comments as a "crock of nonsense" by "people who can't figure out how to use their machine." In this context, your drivel rings completely hollow, illustrates the fact that you are probably struggling with a serious inferiority complex, and adds zero to the discussion here.

I suspect my post won't help what is likely your permanent disposition, but I simply couldn't let your bitterness go unchecked.

So anyway - yeah, the TM issues are probably just because I'm stupid. Eff yourself.

I vote it wasn't the stupidity, but the arrogance.

Oh and don't just say ... problems, or fix ... If you have a beef be specific or it appears to the world you are just a whiner. But I would have thought someone with your supposed tech chops would know that already.

[digitalclips]

Originally Posted by solipsism

I've had some issues with it when using FW and restarting the newest iMac. It prevents the iMac from starting up to the login screen. It could be the drivers of the external 2.5" HDD used, but I'd think that OS X could work its way around an external drive.

After a few issues with externals I bit the bullet and popped a 1 TB internal in my Mac Pro and dedicated it to TM using it for backing up the 500 MB boot drive. I have to say it has been great and the speed increase over an external is significant, no more sensing the slow down.

[internetworld7]

Wow, Apple releases a security update and the best we can do is talk about TM, a non-security issue. Sorry it's not working out for everybody but there are plenty of threads already dedicated to this like Apple's forums and Macrumors.com

Anyway the security update worked just fine on my Intel MacBook running Leopard. I'm just glad Apple is hard at work keeping it's Mac users safe.

[Lafe]

Originally Posted by AppleInsider

Apple on Thursday afternoon released its seventh distinct security fix of the year for Mac OS X to tackle a number flaws, including one introduced with its 10.5.5 update.

Security updates tend to be boring . . . that's why we post about Time Machine!

Mine works fine, by the way. If I do get a random backup failure, I chalk it up
to alien transmissions interfering with the WiFi signal to/from my Time Capsule, and
sure enough, when the transmissions calm down, the next backup works fine.

Of course, I firmly believe in keeping eggs in multiple baskets, so there's a USB
drive in the safe that gets a complete, bootable, SuperDuper! backup from time to
time.

Wait a second, what was this thread about . . . ?

[digitalclips]

Originally Posted by Lafe

Security updates tend to be boring . . . that's why we post about Time Machine!

Mine works fine, by the way. If I do get a random backup failure, I chalk it up
to alien transmissions interfering with the WiFi signal to/from my Time Capsule, and
sure enough, when the transmissions calm down, the next backup works fine.

Of course, I firmly believe in keeping eggs in multiple baskets, so there's a USB
drive in the safe that gets a complete, bootable, SuperDuper! backup from time to
time.

Wait a second, what was this thread about . . . ?

I thought it was TM lol

I am with you on TM + another, although I prefer CCC to Super Duper but that's just personal.

[StuBeck]

Good job by Apple for actually explaining what the updates fix! I've been getting annoyed with them for just saying "it fixes stuff" for the previous two years I've owned Macs. Nice to see them finally explain some defects.

[solipsism]

Originally Posted by digitalclips

After a few issues with externals I bit the bullet and popped a 1 TB internal in my Mac Pro and dedicated it to TM using it for backing up the 500 MB boot drive. I have to say it has been great and the speed increase over an external is significant, no more sensing the slow down.

I'd love to have a Mac Pro, but I'm way too peripatetic to warrant the purchase, so I'm stuck with external drives. Having a secondary HDD in a MBP would be ideal for me, but I am sure the market is too small or that.

[Williammarkclarke]

Did this update effect printers?

[principe]

Hi to all Amazing Mac Users.

Is anyone experiencing problems after this security update?

I have a MB Pro Dec 07 running Leopard - never had a glitch, since this update this morning however, Spaces and Expose behaves strangely and not quite right...

I wonder if anyone got this problem? How can I report it to Apple?

Thanks

Principe

[Mr Squid]

Originally Posted by lkrupp

Well why should i be interested when I'm not experiencing any "serious known issues". Wouldn't you think that "serious known issues" would be affecting me too? And the standard "well, you're just one of the lucky ones" response doesn't cut it.

I wish that I could killfile fools like you.

[sandau]

since this update my boot time has gone from around 1 minute to almost 5 minutes. Very piss poor performance update, imho. I get a blue screen for about 4 minutes and nothing in the logs. I hate to reboot now, its such a crappy long time. Reminds me of a Redmond product now.

[solipsism]

Originally Posted by sandau

since this update my boot time has gone from around 1 minute to almost 5 minutes. Very piss poor performance update, imho. I get a blue screen for about 4 minutes and nothing in the logs. I hate to reboot now, its such a crappy long time. Reminds me of a Redmond product now.

Repair the disc.
Reinstall the update.
Revert from earlier TM backup.

[kaiwai]

Originally Posted by sandau

since this update my boot time has gone from around 1 minute to almost 5 minutes. Very piss poor performance update, imho. I get a blue screen for about 4 minutes and nothing in the logs. I hate to reboot now, its such a crappy long time. Reminds me of a Redmond product now.

Hey mate, stop installing crapware and hackware - and you won't have that problem.

[sandau]

Originally Posted by kaiwai

Hey mate, stop installing crapware and hackware - and you won't have that problem.

why would you call Apple's update crapware? Anyway, my system is pretty close to pristine and there is very little crapware or hackware for OS X. It just boots like crapware after Apple's update.