APPLE-SA-2004-02-23 Security Update 2004-02-23
APPLE-SA-2004-02-23 Security Update 2004-02-23
- Subject: APPLE-SA-2004-02-23 Security Update 2004-02-23
- From: Apple Product Security <email@hidden>
- Date: Mon, 23 Feb 2004 18:42:28 -0800
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
APPLE-SA-2004-02-23 Security Update 2004-02-23
Security Update 2004-02-23 is now available. It addresses the
following issues:
CoreFoundation: Fixes CAN-2004-0168 to improve notification
logging. Credit to email@hidden for reporting this issue.
DiskArbitration: Fixes CAN-2004-0167 to more securely handle the
initialization of writeable removable media. Credit to
email@hidden for reporting this issue.
IPSec: Fixes CAN-2004-0164 to improve checking in key exchange
Point-to-Point-Protocol: Fixes CAN-2004-0165 to improve the
handling of error messages. Credit to Dave G. of @stake and
Justin Tibbs of Secure Network Operations (SRT) for reporting
this issue.
QuickTime Streaming Server: Fixes CAN-2004-0169 to improve
checking of request data. Credit to iDEFENSE Labs for
reporting this issue. Streaming Server updates for other
platforms are available from
http://developer.apple.com/darwin/
Safari: Fixes CAN-2004-0166 to improve the display of URLs in the
status bar
tcpdump: Fixes CAN-2003-0989, CAN-2004-0055, and CAN-2004-0057 by
updating tcpdump to version 3.8.1 and libpcap to version 0.8.1
================================================
Security Update 2004-02-23 may be obtained from:
* Software Update pane in System Preferences (Mac OS X 10.3.2
and Mac OS X 10.2.8)
* Apple's Software Downloads web site:
Mac OS X 10.3.2 Client
======================
http://www.info.apple.com/kbnum/n120323
The download file is named: "SecUpd2004-02-23Pan.dmg"
Its SHA-1 digest is: dfe48ca16839e693674cf55995986f11d8282777
Mac OS X 10.3.2 Server
======================
http://www.info.apple.com/kbnum/n120324
The download file is named: "SecUpdSrvr2004-02-23Pan.dmg"
Its SHA-1 digest is: cde0a40abe3c1451458b15c01b73910b18bc4530
Mac OS X 10.2.8 Client
======================
http://www.info.apple.com/kbnum/n120277
The download file is named: "SecUpd2004-02-23Jag.dmg"
Its SHA-1 digest is: 4ec49f05f206649353ae20edd9b87ddb0b42a84b
Mac OS X 10.2.8 Server
======================
http://www.info.apple.com/kbnum/n120322
The download file is named: "SecUpdSrvr2004-02-23Jag.dmg"
Its SHA-1 digest is: 79617234d288d45208531622a38f307a978f82d7
* QuickTime Streaming Server updates for platforms other than
Mac OS X Server are available from:
http://developer.apple.com/darwin/projects/streaming/
Information will also be posted to the Apple Product Security web
site:
http://www.apple.com/support/security/security_updates.html
This message is signed with Apple's Product Security PGP key, and
details are available at:
http://www.apple.com/support/security/security_pgp.html
-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2
iQEVAwUBQDq4GXeI0z6bzFr0AQIokgf7B0qbznnDSz9kse26CWXjw2dpkC0iOR3D
Jtw9wtQbCT8MWSWoaqHvp2BRQ4951cdIZEbOt/Gvv2eEuK7h5y4HvyLFwH9y5ajg
uuSC8XSK8Ccl5OTFYGP7w+xn4snE8Wo1Sx4L4H8QszrG0jYmKffOL0PNZl/mcF9o
Atl/kBV168R9jK/oww5bjFd99AIB3RDMR0w9fl7DNS1ZS5LHuAps1tsEfHDs2mKm
9lPWlhlUI6CEp2JHS3GhYNht2J0enKX9ESrWV9DVMx5gydb6bQTD1X9vvn9ba0Ld
xF7IZacZXGlYbqQ5jxq68x9c88oZv9BPSAQg7+9Grdtyk/iOXmskOw==
=siCh
-----END PGP SIGNATURE-----
_______________________________________________
security-announce mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/security-announce
Do not post admin requests to the list. They will be ignored.