Submit a Story!
topics:

About the security content of Mac OS X v10.5.5 and Security Update 2008-006
Summary This document describes the security content of Mac OS X v10.5.5 and Security Update 2008-006, which can be downloaded and installed via Software Update preferences, or from Apple Downloads . For the protection of our customers, Apple does not disclose, discuss, or confirm security ...
Apple security updates
support.apple.com — Summary This document outlines security updates for Apple products. For the protection of our customers, Apple does... not disclose, discuss or confirm security issues until a full investigation has occurred and any necessary patches or releases are ... (more) Apple security updates
Support - Downloads - Security Update 2008-006 Server (Universal)
apple.com — About Security Update 2008-006 Server (PPC) Security Update 2008-006 is recommended for all users and improves the... security of Mac OS X. Previous security updates have been incorporated into this security update. SHA 1 digest  ... (more) Support - Downloads - Security Update 2008-006 Server ...
Support - Downloads - Security Update 2008-006 Client (Intel)
apple.com — About Security Update 2008-006 Client (Intel) Security Update 2008-006 is recommended for all users and improves the... security of Mac OS X. Previous security updates have been incorporated into this security update. SHA 1 digest  ... (more) Support - Downloads - Security Update 2008-006 Client ...
Comments
Blog Reactions

Apple releases Security Update 2008-006
Macworld — Apple released Security Update 2008-006 fixing a number of issues in the underlying components of the Mac operating system. This update was included in Mac OS X 10.5.5 released last night, so there is no need to download the update if you installed 10.5.5. Among the changes are two fixes for DNS cache poisoning. One of the components susceptible to this problem is libresolv, which provides translation between host names and IP addresses. The other component, mDNSResponder, was also susceptible to cache poisoning. Both of these have been updated implementing source port and ...

10.5.5 update fixes DNS vulnerability
The Unofficial Apple Weblog (TUAW) — ... Although Apple's release notes say BIND was updated "to address performance issues," the update also delivers the promised address port randomization that protects users from such cache poisoning attacks. The original patch offered protection for Apple's servers but did not completely protect client systems. ...

Related Content
Security Update 2009-006 Client
support.apple.com 23 days ago — Download icon About Security Update 2009-006 Client Security Update 2009-006 is recommended for all users and improves the security of Mac OS X. Previous security updates have been incorporated into this security update. SHA 1 digest ...
Support - Downloads - Security Update 2008-006 Server (PPC)
apple.com 9/15/2008 — About Security Update 2008-006 Server (PPC) Security Update 2008-006 is recommended for all users and improves the security of Mac OS X. Previous security updates have been incorporated into this security update. SHA 1 digest  ...
Support - Downloads - Security Update 2008-006 Client (PPC)
apple.com 9/15/2008 — About Security Update 2008-006 Client (PPC) Security Update 2008-006 is recommended for all users and improves the security of Mac OS X. Previous security updates have been incorporated into this security update. SHA 1 digest  ...
About the security content of Security Update 2009-001
support.apple.com 2/12/2009 — Release date: Mon, 9 Feb 2009 20:34:00 GMT
Support - Product Security
apple.com 8/1/2008 — Please see the Mac OS X Security web page for an overview of Mac OS X security features. Be sure that you are running the latest version of system software. Apple will release security updates from time to time, and having the latest available ...
About the security content of Java for Mac OS X 10.5 Update 3
support.apple.com 2/12/2009 — Release date: Mon, 9 Feb 2009 20:26:00 GMT
About the security content of Security Update 2008-008 / Mac OS X v10.5.6
support.apple.com 12/15/2008 — Important: Mention of third-party websites and products is for informational purposes only and constitutes neither an endorsement nor a recommendation. Apple assumes no responsibility with regard to the selection, performance or use of information or ...
About the security content of Security Update 2008-004 and Mac OS X 10.5.4
support.apple.com 1/13/2009 — Important: Mention of third-party websites and products is for informational purposes only and constitutes neither an endorsement nor a recommendation. Apple assumes no responsibility with regard to the selection, performance or use of information or ...
About the security content of Apple TV 2.2
support.apple.com 10/3/2008 — Summary This document describes the security content of Apple TV 2.2. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are ...
About the security content of Mac OS X 10.5.2 and Security Update 2008-001
support.apple.com 1/13/2009 — Last Modified: May 14, 2008 Article: HT1457 Old Article: 307430 Summary This document describes the security content of Mac OS X 10.5.2 and Security Update 2008-001, which can be downloaded and installed via Software Update preferences, or from Apple ...