Ads by TechWords

See your link here
Receive the latest technology news and information.
Security
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
Cloud Computing
View all newsletters




Privacy Policy
 

Update: Apple releases first Leopard update

Also fixes flaws that made researchers call the firewall 'a mess'

November 15, 2007 12:00 PM ET

Computerworld - Apple Inc. today issued the first update for Leopard, its three-week-old operating system. The update fixes a wide range of out-the-gate bugs and patches three security-related design flaws in the revamped firewall.

The update to Mac OS X 10.5.1 includes changes to a host of Leopard features, including some that have given early adopters fits, such as a gaffe that cripples some software, including Skype, when the firewall is set to the most flexible option. It also tackles problems formatting drives before they can be used with Time Machine, the integrated backup and restore software.

Other non-security fixes address a file copy bug that deleted data if the destination drive suddenly went offline during the job, boost the reliability of iCal in delivering alarms via e-mail, improve Mail's synchronizing with .Mac, makes Windows shared folders both read- and write-enabled when connected via SMB, and resolves an issue with saved passwords on wireless networks.

Some reported Leopard troubles, however, did not make the list, including a fix for an intermittent keyboard failure on some MacBook Pro notebooks.

Apple also released the first security patches for Leopard as part of 10.5.1, quashing what the company classified as vulnerabilities but were more akin to design flaws.

Leopard's firewall, Apple acknowledged, misleads users with the label "Block all incoming connections" of one option. As several researchers had pointed out earlier this month, setting the firewall to the "Block all..." option did nothing of the kind, and left the Mac visible to port scanners. "This update addresses the issue by more accurately describing the option as 'Allow only essential services,' and by limiting the processes permitted to receive incoming connections under this setting to a small fixed set of system services," said Apple.

Two other corrections to the firewall make sure that any application marked not to accept incoming data actually complies, and immediately applies changes to the firewall's settings.

Mac OS X 10.5.1 can be downloaded from the Apple Web site or retrieved using Leopard's built-in Software Update feature. The update is approximately 40MB in size, while the stand-alone installer version weighs in at 110MB.

Read more about security in Computerworld's Security Knowledge Center.



Jump to comments

Apple

Additional Resources

EFD vs. HDD - What You Need to Know
WHITE PAPER
Enterprise flash drives provide a new Tier 0 storage layer capable of delivering high I/O performance at a very low latency. Proper use of EFDs in an Oracle environment can deliver increased performance compared to fibre channel drives. Read the recommendations for identification of the best DB components for EFDs.
Gartner Research Report: Magic Quadrant for Application Delivery Controllers, 2009
WHITE PAPER
The market for products to improve the delivery of application software over networks remains dynamic and innovative. Vendors focused on solving enterprises' most-pressing application problems have become the top players.
Eight Criteria for Server Load Balancing
WHITE PAPER
Server load balancers are a simple yet highly effective means to scale an application environment while ensuring its availability. Today's solutions should also address application performance and security. Read about the top eight criteria you should consider when choosing a server load balancer and how Citrix NetScaler meets those requirements.

What People Are Saying

White Papers & Webcasts

Death to PST Files
Download Now  

Web 2.0, Social Media and the Dark Web - A Web Criminals Paradise?
In this discussion, learn about the challenges of protecting your users from the potentially unsafe content hidden in the "Dark Web".

eGuide: Enterprise Security
Smart Security Strategies for 2010. Read now!  

Disaster Recovery 2008: Reduced Costs and Improved Performance
How long can your Enterprise afford to be without your data? With an accelerated disaster recovery program, you never have to answer this...


IT Jobs