Welcome to the MacNN Forums.

Macrat · May 21, 2004, 07:11 PM

Check your Software Updaters;

Looks like it fixes the Help Viewer and Terminal security exploits.

Millennium · May 21, 2004, 07:13 PM

Originally posted by Macrat:
Check your Software Updaters;

Looks like it fixes the Help Viewer and Terminal security exploits.

Are you sure about Terminal? It only mentions Help Viewer.

osxisfun · May 21, 2004, 07:14 PM

i don't see it. guess i have to wait a bit.

i am still running 10.3.2 though...

jokell82 · May 21, 2004, 07:14 PM

At least it doesn't make you restart.

Chris Grande · May 21, 2004, 07:15 PM

Not sure what it changed... The test on this page still works: http://ozwix.dk/OpnAppFixer/testit.html

Macrat · May 21, 2004, 07:25 PM

Originally posted by Millennium:
Are you sure about Terminal? It only mentions Help Viewer.

I'm running 10.2.8, and the update description says:

Security Update 2004-05-24 delivers a number of security enhancements and is recommended for all Macintosh users. This update includes the following components:

HelpViewer
Terminal

jokell82 · May 21, 2004, 07:28 PM

Originally posted by Chris Grande:
Not sure what it changed... The test on this page still works: http://ozwix.dk/OpnAppFixer/testit.html

That test has nothing to do with the help viewer. It launches a script with a known location (in this case, the volume "Test" has to be mounted)

Mediaman_12 · May 21, 2004, 08:08 PM

Is anyone else having trouble downloading this? My Software update cant seam to start the download.

CharlesS · May 21, 2004, 08:11 PM

Originally posted by Mediaman_12:
Is anyone else having trouble downloading this? My Software update cant seam to start the download.

I did at first. Just keep trying, you'll get it.

MindFad · May 21, 2004, 08:14 PM

I am now more secure.

osxisfun · May 21, 2004, 08:41 PM

requires 10.2.8 or 10.3.3

itisme · May 21, 2004, 08:44 PM

Security Update 2004-05-24 fixed help and terminal in 10.2.8
Security Update 2004-05-24 fixed help in 10.3.3

No update for 10.1.5, but hey, at least iTunes 4.5 is supported!

Mediaman_12 · May 21, 2004, 09:11 PM

Good news if you cant get the 'Software Update' version (or have to install it on a bunch of Mac's). MacUpdate has a link to the disk image. Yay!

sniffer · May 21, 2004, 09:16 PM

Originally posted by Macrat:
I'm running 10.2.8, and the update description says:

Security Update 2004-05-24 delivers a number of security enhancements and is recommended for all Macintosh users. This update includes the following components:

HelpViewer
Terminal

Well, it didn't mention anything about "Terminal" in my localized description here.

edit: never mind. I've got 10.3.3 and you Jag, that's why.

Millennium · May 21, 2004, 10:15 PM

Originally posted by sniffer:
Well, it didn't mention anything about "Terminal" in my localized description here.

edit: never mind. I've got 10.3.3 and you Jag, that's why.

That would explain it, I guess; I also have 10.3.3 and it only mentioned the Terminal.

dampeoples · May 21, 2004, 10:21 PM

Did anyone see the 3rd party fix posted about 3 items up in the VT listing

Technically - they released it first, according to the date

DavidSJ · May 21, 2004, 11:10 PM

Someone explain to me why it's dated May 24, yet it's only May 21?

CharlesS · May 21, 2004, 11:13 PM

Originally posted by DavidSJ:
Someone explain to me why it's dated May 24, yet it's only May 21?

Maybe they planned to release it on Monday, but decided to release it today given its severity.

Developer · May 21, 2004, 11:14 PM

Originally posted by DavidSJ:
Someone explain to me why it's dated May 24, yet it's only May 21?

It's dated May 24 so that sys admins can install it on the day of release without ruining their weekend.

Hugin777 · May 22, 2004, 08:49 AM

Originally posted by jokell82:
That test has nothing to do with the help viewer. It launches a script with a known location (in this case, the volume "Test" has to be mounted)

Correct. Exactly like the help viewer exploit. Just not using the help viewer.

JLL · May 22, 2004, 08:57 AM

Originally posted by Developer:
It's dated May 24 so that sys admins can install it on the day of release without ruining their weekend.

SMacTech · May 22, 2004, 09:03 AM

Originally posted by osxisfun:
requires 10.2.8 or 10.3.3

10.3.3 or higher as it patched 10.3.4 beta too, which is unusual. But I will take the update.

utidjian · May 22, 2004, 09:04 AM

I downloaded it from:
http://www.apple.com/support/

Then:

Code:
hdiutil mount /home/downloads/Mac/SecUpd2004-05-24Pan.dmg

lsbom /Volumes/Security\ Update\ 2004-05-24/SecUpd2004-05-24Pan.pkg/Contents/Archive.bom

./System
./System/Library
./System/Library/CoreServices
./System/Library/CoreServices/Help Viewer.app
./System/Library/CoreServices/Help Viewer.app/Contents
./System/Library/CoreServices/Help Viewer.app/Contents/Info.plist       
./System/Library/CoreServices/Help Viewer.app/Contents/MacOS
./System/Library/CoreServices/Help Viewer.app/Contents/MacOS/Help Viewer
./System/Library/CoreServices/Help Viewer.app/Contents/Resources        
./System/Library/CoreServices/Help Viewer.app/Contents/Resources/English.lproj
./System/Library/CoreServices/Help Viewer.app/Contents/Resources/English.lproj/InfoPlist.strings
./System/Library/CoreServices/Help Viewer.app/Contents/version.plist

(some trimmage for clarity)

So it only appears to affect Help Viewer.app.

Big Mac · May 22, 2004, 08:03 PM

Why did they limit the update to 10.2.8 and 10.3.3 only? I'm running 10.3.2 and don't wish to upgrade because of all the negative information posted about it. I guess I'll just have to wait until 10.3.4.

Brass · May 23, 2004, 07:58 PM

Originally posted by Big Mac:
Why did they limit the update to 10.2.8 and 10.3.3 only? I'm running 10.3.2 and don't wish to upgrade because of all the negative information posted about it. I guess I'll just have to wait until 10.3.4.

yeah, cause 10.3.4 won't have much negative posted about it, like 10.3.2 and 10.3.1