support.apple.com - 9/16/2008
—
Summary This document describes the security content of Mac OS X v10.5.5 and Security Update 2008-006, which can be downloaded and installed via Software Update preferences, or from Apple Downloads . For the protection of our customers, Apple does not disclose, discuss, or confirm security ...
support.apple.com - 9/9/2008
—
support.apple.com —
Summary This document outlines security updates for Apple
products. For the protection of our customers, Apple does...
not disclose, discuss or confirm security issues until a full investigation has occurred and any necessary patches or releases are ...
(more)
Apple security updates
Comments
Blog Reactions
Apple releases Security Update 2008-006
Macworld —
Apple released Security Update 2008-006 fixing a number of issues in the underlying components of the Mac operating system. This update was included in Mac OS X 10.5.5 released last night, so there is no need to download the update if you installed 10.5.5. Among the changes are two fixes for DNS cache poisoning. One of the components susceptible to this problem is libresolv, which provides translation between host names and IP addresses. The other component, mDNSResponder, was also susceptible to cache poisoning. Both of these have been updated implementing source port and ...
10.5.5 update fixes DNS vulnerability
The Unofficial Apple Weblog (TUAW) —
... Although Apple's release notes say BIND was updated "to address performance issues," the update also delivers the promised address port randomization that protects users from such cache poisoning attacks. The original patch offered protection for Apple's servers but did not completely protect client systems. ...
Related Content
Security Update 2009-006 Client
support.apple.com 23 days ago — Download icon About Security Update 2009-006 Client Security Update 2009-006 is recommended for all users and improves the security of Mac OS X. Previous security updates have been incorporated into this security update. SHA 1 digest ...
Support - Downloads - Security Update 2008-006 Server (PPC)
apple.com 9/15/2008 — About Security Update 2008-006 Server (PPC) Security Update 2008-006 is recommended for all users and improves the security of Mac OS X. Previous security updates have been incorporated into this security update. SHA 1 digest ...
Support - Downloads - Security Update 2008-006 Client (PPC)
apple.com 9/15/2008 — About Security Update 2008-006 Client (PPC) Security Update 2008-006 is recommended for all users and improves the security of Mac OS X. Previous security updates have been incorporated into this security update. SHA 1 digest ...
Support - Product Security
apple.com 8/1/2008 — Please see the Mac OS X Security web page for an overview of Mac OS X security features. Be sure that you are running the latest version of system software. Apple will release security updates from time to time, and having the latest available ...
About the security content of Apple TV 2.2
support.apple.com 10/3/2008 — Summary This document describes the security content of Apple TV 2.2. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are ...