Apple Security 2004-2-23 v1.0 is Out for Mac OS X Client and Server

and available via the Software Update preference panel. According to Apple, it addresses the following issues:

CoreFoundation: Fixes CAN-2004-0168 to improve notification
logging. Credit to aaron@vtty.com for reporting this issue.

DiskArbitration: Fixes CAN-2004-0167 to more securely handle the
initialization of writeable removable media. Credit to
aaron@vtty.com for reporting this issue.

IPSec: Fixes CAN-2004-0164 to improve checking in key exchange

Point-to-Point-Protocol: Fixes CAN-2004-0165 to improve the
handling of error messages. Credit to Dave G. of @stake and
Justin Tibbs of Secure Network Operations (SRT) for reporting
this issue.

QuickTime Streaming Server: Fixes CAN-2004-0169 to improve
checking of request data. Credit to iDEFENSE Labs for
reporting this issue. Streaming Server updates for other
platforms are available from
http://developer.apple.com/darwin/

Safari: Fixes CAN-2004-0166 to improve the display of URLs
in the status bar

tcpdump: Fixes CAN-2003-0989, CAN-2004-0055, and CAN-2004-0057
by updating tcpdump to version 3.8.1 and libpcap to version 0.8.1

We downloaded and installed it with no problems on several Macs. [Dana Baggett]

Saw something? Send a tip

The archive ran on reader tips. What did you see, where, and do you want the credit?

Read by the editor. Never published without your say.

More in Mac OS · This month in the archive