Apple releases Security Update 2008-007 for Mac OS X
Apple on Thursday afternoon released its seventh distinct security fix of the year for Mac OS X to tackle a number flaws, including one introduced with its 10.5.5 update.
Available for both Mac OS X Leopard (Client, Server) and Tiger (Intel Client, PowerPC Client, PowerPC Server), Security Update 2008-007 addresses a mixture of UNIX foundation and Mac-specific flaws.
Among the fixes is one for the launchd daemon that only affects Mac OS X 10.5.5. The particular implementation may sometimes fail to sandbox apps that want to be isolated from the system, potentially exposing them to attacks.
Other Mac-related problems mended in the were first discovered by outside security teams, including a remote CUPS printing exploit found by TippingPoint's Zero Day Initiative as well as holes in ColorSync, Finder, general Mac OS X networking, PSNormalizer, QuickLook, root certificates, Script Editor and Weblog.
A pair of additional, special patches close vulnerabilities in the third-party ClamAV utility and allow a single sign-on with a password in a file, allowing scripts to use the sign-on feature without dropping security.
Solutions for UNIX flaws include updated versions of Apache, libxslt, MySQL Server, PHP, Postfix, rlogin, Tomcat and vim.
Available for both Mac OS X Leopard (Client, Server) and Tiger (Intel Client, PowerPC Client, PowerPC Server), Security Update 2008-007 addresses a mixture of UNIX foundation and Mac-specific flaws.
Among the fixes is one for the launchd daemon that only affects Mac OS X 10.5.5. The particular implementation may sometimes fail to sandbox apps that want to be isolated from the system, potentially exposing them to attacks.
Other Mac-related problems mended in the were first discovered by outside security teams, including a remote CUPS printing exploit found by TippingPoint's Zero Day Initiative as well as holes in ColorSync, Finder, general Mac OS X networking, PSNormalizer, QuickLook, root certificates, Script Editor and Weblog.
A pair of additional, special patches close vulnerabilities in the third-party ClamAV utility and allow a single sign-on with a password in a file, allowing scripts to use the sign-on feature without dropping security.
Solutions for UNIX flaws include updated versions of Apache, libxslt, MySQL Server, PHP, Postfix, rlogin, Tomcat and vim.
Comments
All of it looks good and important, but wow, it'd be super nice if they'd fix Time Machine.
What a crock of nonsense.
All of it looks good and important, but wow, it'd be super nice if they'd fix Time Machine.
What's wrong with Time Machine? It works beautifully for me. I used it just yesterday to restore a file that had been accidentally deleted. I love Time Machine and have had no problems with using it, in fact I think it's one of the best software applications ever!
What's wrong with Time Machine? It works beautifully for me. I used it just yesterday to restore a file that had been accidentally deleted. I love Time Machine and have had no problems with using it, in fact I think it's one of the best software applications ever!
I've had some issues with it when using FW and restarting the newest iMac. It prevents the iMac from starting up to the login screen. It could be the drivers of the external 2.5" HDD used, but I'd think that OS X could work its way around an external drive.
If you're interested, however, a search of Apple's Discussions site will show that the company is aware of the issues but is for whatever reason keeping them on the back burner. I'm not saying it ought to take precedence over security issues; I am just saying it would be nice to have TM fixed (because I like the program, too.) There are a lot of people who are unable, for all practical purposes, to rely on TM for backup.
There are plenty of bugs that I would like fixed with Leopard, that have already survived almost a year since release, some 3.5 years or more since the release of Tiger, which is not bad for bugs!
Assuming it is working for everyone because it is working for you is not a good reaction.
Good luck with TM. I use it sometimes but, while I haven't had problems thus far (have only gone back in time once or twice), I am much more comfortable relying on a solid directory structure that I have created on an external drive, and so that sits alongside TM's work.
I've had some issues with it when using FW and restarting the newest iMac. It prevents the iMac from starting up to the login screen. It could be the drivers of the external 2.5" HDD used, but I'd think that OS X could work its way around an external drive.
No problems here with Time Machine, 1TB MyBook/fw800 and the latest iMac 24" (Penryn). I just installed this security update and restarted without issues. The 1TB MyBook and Time Machine came up just peachy keen.
No problems here with Time Machine, 1TB MyBook/fw800 and the latest iMac 24" (Penryn). I just installed this security update and restarted without issues. The 1TB MyBook and Time Machine came up just peachy keen.
I never did troubleshoot the issue thotoughly, which is something I usually would have done had it been my Mac and not the one that I bought for my parents while visiting. Switching to USB worked so I took the lazy route.
All of it looks good and important, but wow, it'd be super nice if they'd fix Time Machine.
Yes, I'm with you on that one. There's nothing major wrong with it (I hope), but every so often I get a message saying that the TM backup failed. No reason, no log, no clues, it just "failed". If I immediately set it going again manually, it works fine. The warning started showing up in 10.5.4 and is still there in 10.5.5.
I've recovered some files successfully - it's the ones I haven't tried to recover yet which concerns me.
TM is great conceptually, and if/when it works, but the program has serious known issues I won't hijack this thread with.
If you're interested, however, a search of Apple's Discussions site will show that the company is aware of the issues but is for whatever reason keeping them on the back burner. I'm not saying it ought to take precedence over security issues; I am just saying it would be nice to have TM fixed (because I like the program, too.) There are a lot of people who are unable, for all practical purposes, to rely on TM for backup.
Well why should i be interested when I'm not experiencing any "serious known issues". Wouldn't you think that "serious known issues" would be affecting me too? And the standard "well, you're just one of the lucky ones" response doesn't cut it.
Just a crock of nonsense by people who can't figure out how to use their machine OR the whining of someone obsessed with the lack of some feature of little importance OR how some feature works that are blown into "serious known issues".
And to get back on topic I'm betting there are already posts on various forums that state...
"This security update killed my Mac!"
"Does Apple even test this stuff?!"
"We need a fix NOW Apple! This update is defective!"
"I have posted a ten page copy-paste of my frozen Mac's kernel panic and I want someone to analyze it for me."
"How do I remove this security update? It broke my Mac!"
"When we can expect a fix for this defective update? Way to go Apple!"
Of course these posts are out in force after every single update ever released by Apple, Inc. Every time an update is released I swear I will ignore the ignorant rants of the terminally clueless but I just can't. I need professional help. Help me Obi-Wan Kenobi!
All your kernel panics are belong to us
Oh and these too..."I'm not seeing this update in Software Update. What's up Apple?" "I can't download this update" WTF?" "Can someone give the link to this update? I can't find it on Apple's website" and finally "What's a backup?"
Well why should i be interested when I'm not experiencing any "serious known issues". Wouldn't you think that "serious known issues" would be affecting me too? And the standard "well, you're just one of the lucky ones" response doesn't cut it.
Just a crock of nonsense by people who can't figure out how to use their machine OR the whining of someone obsessed with the lack of some feature of little importance OR how some feature works that are blown into "serious known issues".
I not-so-humbly suggest you at least invest a minute to figure out who you're attacking before you launch into your dismissive bullshit. I started four technology companies, was CEO of one of them, served as CTO of a state, created millions of dollars in shareholder, client, and employee wealth, and co-authored four technology patents.
I don't share this to be immodest; I share it in rebuke of your dismissal of my comments as a "crock of nonsense" by "people who can't figure out how to use their machine." In this context, your drivel rings completely hollow, illustrates the fact that you are probably struggling with a serious inferiority complex, and adds zero to the discussion here.
I suspect my post won't help what is likely your permanent disposition, but I simply couldn't let your bitterness go unchecked.
So anyway - yeah, the TM issues are probably just because I'm stupid. Eff yourself.
anybody actually do this security update and can tell me if there are any issues and/or improvements?
Yeah, me and a few million other users by now.
I not-so-humbly suggest you at least invest a minute to figure out who you're attacking before you launch into your dismissive bullshit. I started four technology companies, was CEO of one of them, served as CTO of a state, created millions of dollars in shareholder, client, and employee wealth, and co-authored four technology patents.
And now you're a fashion photographer. Wow!
So anyway - yeah, the TM issues are probably just because I'm stupid.
If the shoe fits ...
Just a crock of nonsense by people who can't figure out how to use their machine OR the whining of someone obsessed with the lack of some feature of little importance OR how some feature works that are blown into "serious known issues".
How do you fit that ego of yours inside your head?
Odds are very high that when YOU have a problem with Leopard, it's very important. But everyone else's problems are "nonsense".
For example, we could not deploy Leopard until 10.5.5 because of bugs in all previous versions THAT APPLE ADMITTED that prevented them from being bound to large Active Directory implementations of mixed Microsoft Windows versions. I'm sure you call this "nonsense" or somehow "of little importance" but it kept 125 users in my company from getting their new Macs for months.
Please pipe down and stop telling others that their problems are insignificant because they're not your problems.
And now you're a fashion photographer. Wow!
Yes, that's right. Among many other things. And your point??
I'm sorry I took your bait. Onward.
[And to everyone else: sorry you had to deal with my outburst.]
I not-so-humbly suggest you at least invest a minute to figure out who you're attacking before you launch into your dismissive bullshit. I started four technology companies, was CEO of one of them, served as CTO of a state, created millions of dollars in shareholder, client, and employee wealth, and co-authored four technology patents.
I don't share this to be immodest; I share it in rebuke of your dismissal of my comments as a "crock of nonsense" by "people who can't figure out how to use their machine." In this context, your drivel rings completely hollow, illustrates the fact that you are probably struggling with a serious inferiority complex, and adds zero to the discussion here.
I suspect my post won't help what is likely your permanent disposition, but I simply couldn't let your bitterness go unchecked.
So anyway - yeah, the TM issues are probably just because I'm stupid. Eff yourself.
I vote it wasn't the stupidity, but the arrogance.
Oh and don't just say ... problems, or fix ... If you have a beef be specific or it appears to the world you are just a whiner. But I would have thought someone with your supposed tech chops would know that already.
I've had some issues with it when using FW and restarting the newest iMac. It prevents the iMac from starting up to the login screen. It could be the drivers of the external 2.5" HDD used, but I'd think that OS X could work its way around an external drive.
After a few issues with externals I bit the bullet and popped a 1 TB internal in my Mac Pro and dedicated it to TM using it for backing up the 500 MB boot drive. I have to say it has been great and the speed increase over an external is significant, no more sensing the slow down.