« previous next »
Pages: [1] 2   Go Down

Author Topic: Yesterday's OS X Security Update patches DNS Flaw!  (Read 4092 times)

Offline gunug

  • TS Addict
  • *****
  • Posts: 6710
  • TS Palindrome
    • View Profile
Yesterday's OS X Security Update patches DNS Flaw!
« on: August 01, 2008, 07:51:02 AM »
The headline says it all except all the tech pundits think Apple took too long (whatever):

http://www.infoworld.com/article/08/08/01/...DNS_flaw_1.html

It's worked 2 out of 2 times on 10.4 systems for me so far!
Logged
"If there really is no beer in heaven then maybe at least the
computers will work all of the time!"

Offline Highmac

  • Administrator
  • TS Addict
  • *****
  • Posts: 5455
    • View Profile
Yesterday's OS X Security Update patches DNS Flaw!
« Reply #1 on: August 01, 2008, 08:24:13 AM »
Thanks Gunug - didn't even know about it until your post. Have now updated.

As usual on all my updates for quite a while now, the fans (G5 iMac) kick in before it loads the OS (the little daisy is still spinning) and keep running all the way through, even after it's finished loading everything. Click Restart in the Apple menu and on the second boot everything is hunky-dory.

I'm used to it now, but mention it here in case any newcomers are startled by it smile.gif
Logged
Neil
MacMini (2018) OS10.14.6 (Mojave). Monitor: LG 27in 4K Ultra HD LED.
15in MacBook Pro (Mid 2014) OS10.13.4 (High Sierra);
15in MacBook Pro (2010), (ex-Snow Leopard); now OS10.13.6 (High Sierra); 500GB Solid-State SATA drive; 4GB memory.

Offline Gregg

  • TS Addict
  • *****
  • Posts: 11748
    • View Profile
    • http://
Yesterday's OS X Security Update patches DNS Flaw!
« Reply #2 on: August 01, 2008, 12:34:55 PM »
Thanks for the heads up. I'm nabbing it via Software Update today!
Logged
Ya gotta applaud those bunnies for sacrificing their hearing just so some guy in Cupertino can have better TV reception.

Offline krissel

  • Administrator
  • TS Addict
  • *****
  • Posts: 14735
    • View Profile
Yesterday's OS X Security Update patches DNS Flaw!
« Reply #3 on: August 02, 2008, 08:15:31 AM »
The so-called 'BIND' problem regarding DNS servers being spoofed that has been in the news lately...

http://support.apple.com/kb/HT2647
Logged


A Techsurvivors founder

Offline Gregg

  • TS Addict
  • *****
  • Posts: 11748
    • View Profile
    • http://
Yesterday's OS X Security Update patches DNS Flaw!
« Reply #4 on: August 02, 2008, 10:01:12 AM »
Logged
Ya gotta applaud those bunnies for sacrificing their hearing just so some guy in Cupertino can have better TV reception.

Offline gunug

  • TS Addict
  • *****
  • Posts: 6710
  • TS Palindrome
    • View Profile
Yesterday's OS X Security Update patches DNS Flaw!
« Reply #5 on: August 02, 2008, 10:04:39 AM »
I don't care if no one else does!
Logged
"If there really is no beer in heaven then maybe at least the
computers will work all of the time!"

Offline kbeartx

  • TS Addict
  • Posts: 6772
    • View Profile
    • http://
Yesterday's OS X Security Update patches DNS Flaw!
« Reply #6 on: August 02, 2008, 10:39:47 AM »
QUOTE(gunug @ Aug 2 2008, 10:04 AM) <{POST_SNAPBACK}>
I don't care if no one else does!


And I certainly don't care if Gunug doesn't! toothgrin.gif

PS - sorry about spelling your handle backwards; I just felt silly this AM and had to do it! Devilish2.gif

 - KB coolio.gif
« Last Edit: August 03, 2008, 02:52:24 AM by kbeartx »
Logged

Offline Xairbusdriver

  • Administrator
  • TS Addict
  • *****
  • Posts: 26388
  • 27" iMac (mid-17), Big Sur, Mac mini, Catalina
    • View Profile
    • Mid-South Weather
Yesterday's OS X Security Update patches DNS Flaw!
« Reply #7 on: August 02, 2008, 12:56:03 PM »
Read a piece from the Register yesterday complaining that the fix didn't apply to 'client' machines. But some responded that extremely few 'client' machines would ever be running as DNS machines, anyway. So, Apple fixed the problem for servers but didn't see a need to send it out to "the rest of us." I'll have to take the word of those who say it's not needed by our desktop/laptops. smile.gif But it provided another chance for some 'experts' to throw dirt at Apple and its tardiness...
Logged
THERE ARE TWO TYPES OF COUNTRIES
Those that use metric = #1 Measurement system
And the United States = The Banana system
CAUTION! Childhood vaccinations cause adults! :yes:

Offline sandbox

  • TS Addict
  • *****
  • Posts: 7825
    • View Profile
    • http://
Yesterday's OS X Security Update patches DNS Flaw!
« Reply #8 on: August 02, 2008, 02:14:37 PM »
Rerun

05/24/2007, 4:35pm, EDT

QUOTE
Apple fixes Panther, Tiger vulnerabilities
Apple today issued a security update for Mac OS X 10.3.9 Panther Client and Server as well as Mac OS X 10.4.9 Tiger Client and Server, fixing numerous security holes in both systems. The update includes fixes related to Alias Manager, BIND, CoreGraphics, crontabs, fetchmail, file, iChat, mDNSResponder, PPP, ruby, screen, texinfo, and VPN. Specific vulnerabilities include the potential for attackers to mislead users into opening a substituted file, multiple holes in BIND, arbitrary code execution from opening a maliciously crafted PDF document, and more. Mac owners running these systems are encouraged to either update automatically via the "Software Update" menu item under the Apple Menu or by heading to Apple's website to download the security fix manually.

http://www.macnn.com/articles/07/05/24/app....os.x.security/
Logged

Offline Xairbusdriver

  • Administrator
  • TS Addict
  • *****
  • Posts: 26388
  • 27" iMac (mid-17), Big Sur, Mac mini, Catalina
    • View Profile
    • Mid-South Weather
Yesterday's OS X Security Update patches DNS Flaw!
« Reply #9 on: August 02, 2008, 07:07:06 PM »
Well, it's a "rerun" in the sense that it fixes some of the same vulnerabilities (including BIND), but this was SU 2008-5 as compared to the one last year ( SU 2007-5 ). I doubt that this will be the last SU to address the same problems. Hopefully each new one will be a better fix. I also doubt that there will ever be a final fix for most of these problems. At least for our client machines, they are not being used "in the wild." smile.gif
« Last Edit: August 08, 2008, 05:09:48 PM by Xairbusdriver »
Logged
THERE ARE TWO TYPES OF COUNTRIES
Those that use metric = #1 Measurement system
And the United States = The Banana system
CAUTION! Childhood vaccinations cause adults! :yes:

Offline gunug

  • TS Addict
  • *****
  • Posts: 6710
  • TS Palindrome
    • View Profile
Yesterday's OS X Security Update patches DNS Flaw!
« Reply #10 on: August 02, 2008, 07:58:37 PM »
Apparently these guys think Apple Clients are still vulnerable:

http://db.tidbits.com/article/9721

Logged
"If there really is no beer in heaven then maybe at least the
computers will work all of the time!"

Offline Xairbusdriver

  • Administrator
  • TS Addict
  • *****
  • Posts: 26388
  • 27" iMac (mid-17), Big Sur, Mac mini, Catalina
    • View Profile
    • Mid-South Weather
Yesterday's OS X Security Update patches DNS Flaw!
« Reply #11 on: August 02, 2008, 09:37:25 PM »
They probably are if they are using their Macs as Domain Name Servers. Are you doing that? I seriously doubt it. smile.gif Do you know anyone who is? Maybe at your school?dntknw.gif Of course, the SU did much more than that, anyway and most of that does affect our machines.
Logged
THERE ARE TWO TYPES OF COUNTRIES
Those that use metric = #1 Measurement system
And the United States = The Banana system
CAUTION! Childhood vaccinations cause adults! :yes:

Offline krissel

  • Administrator
  • TS Addict
  • *****
  • Posts: 14735
    • View Profile
Yesterday's OS X Security Update patches DNS Flaw!
« Reply #12 on: August 02, 2008, 11:10:26 PM »
Sorry gunug, I swear I looked for a thread on the subject but I guess I was too tired after being up all night.


Yeah, that's my excuse.  wink.gif
Logged


A Techsurvivors founder

Offline gunug

  • TS Addict
  • *****
  • Posts: 6710
  • TS Palindrome
    • View Profile
Yesterday's OS X Security Update patches DNS Flaw!
« Reply #13 on: August 03, 2008, 12:51:14 AM »
No big deal Krissel; I've done it several times now!  xABD, as to using a computer to do DNS we don't do that on MAC's; we did this in a Linux course that I went to but that was so we could learn the process.
Logged
"If there really is no beer in heaven then maybe at least the
computers will work all of the time!"

Offline sandbox

  • TS Addict
  • *****
  • Posts: 7825
    • View Profile
    • http://
Yesterday's OS X Security Update patches DNS Flaw!
« Reply #14 on: August 03, 2008, 03:28:30 AM »
QUOTE(gunug @ Aug 2 2008, 08:58 PM) <{POST_SNAPBACK}>
Apparently these guys think Apple Clients are still vulnerable:

http://db.tidbits.com/article/9721


I just ran the terminal test on Panther and it's OK.
Logged
Pages: [1] 2   Go Up
« previous next »