Update: Apple releases first Leopard update
Also fixes flaws that made researchers call the firewall 'a mess'
Computerworld - Apple Inc. today issued the first update for Leopard, its three-week-old operating system. The update fixes a wide range of out-the-gate bugs and patches three security-related design flaws in the revamped firewall.
The update to Mac OS X 10.5.1 includes changes to a host of Leopard features, including some that have given early adopters fits, such as a gaffe that cripples some software, including Skype, when the firewall is set to the most flexible option. It also tackles problems formatting drives before they can be used with Time Machine, the integrated backup and restore software.
Other non-security fixes address a file copy bug that deleted data if the destination drive suddenly went offline during the job, boost the reliability of iCal in delivering alarms via e-mail, improve Mail's synchronizing with .Mac, makes Windows shared folders both read- and write-enabled when connected via SMB, and resolves an issue with saved passwords on wireless networks.
Apple also released the first security patches for Leopard as part of 10.5.1, quashing what the company classified as vulnerabilities but were more akin to design flaws.
Leopard's firewall, Apple acknowledged, misleads users with the label "Block all incoming connections" of one option. As several researchers had pointed out earlier this month, setting the firewall to the "Block all..." option did nothing of the kind, and left the Mac visible to port scanners. "This update addresses the issue by more accurately describing the option as 'Allow only essential services,' and by limiting the processes permitted to receive incoming connections under this setting to a small fixed set of system services," said Apple.
Two other corrections to the firewall make sure that any application marked not to accept incoming data actually complies, and immediately applies changes to the firewall's settings.
Mac OS X 10.5.1 can be downloaded from the Apple Web site or retrieved using Leopard's built-in Software Update feature. The update is approximately 40MB in size, while the stand-alone installer version weighs in at 110MB.
Read more about Security in Computerworld's Security Topic Center.
- 15 Non-Certified IT Skills Growing in Demand
- How 19 Tech Titans Target Healthcare
- Twitter Suffering From Growing Pains (and Facebook Comparisons)
- Agile Comes to Data Integration
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- The 12 PCI DSS 3.0 requirements addressed by Peer 1 Hosting This handy quick reference outlines the 12 PCI DSS 3.0 requirements, who needs to be compliant and how Alert Logic solutions address the...
- Defense Throughout the Vulnerability Life Cycle This whitepaper provides insight into how to leverage threat and log management technologies to protect your IT assets throughout their vulnerability life cycle.
- Mobile Policy Checklist Here's what to consider when putting together a mobile policy designed to support a highly productive workforce.
- Securing BYOD Mobile computing is becoming so ubiquitous that people no longer bat an eye seeing someone working two devices simultaneously. Individuals and organizations are...
- Live Webcast On-demand webinar: "Mobility Mayhem: Balancing BYOD with Enterprise Security" Check out this on-demand webinar to hear Sophos senior security expert John Shier deep dive into how BYOD impacts your enterprise security strategy...
- Live Webcast Endpoint Backup & Restore: Protect Everyone, Everywhere Arek Sokol from the bleeding-edge IT team at Genentech/Roche explains how he leverages cross-platform enterprise endpoint backup in the public cloud as part...
- Streamline Software Asset Management, Compose a software Management Symphony Keeping track of your organization's software is easy with effective software management solutions from CDW. View the videos in our software solutions channel
- Druva inSync: Endpoint Data Protection & Governance CLICK HERE to watch this video about protecting corporate data on laptops and mobile devices, sponsored by Druva. All Security White Papers | Webcasts