Menu
Apple update finally fixes important DNS bug

Apple update finally fixes important DNS bug

Apple has patched a flaw in the DNS software used by Mac OS X.

Apple has released a security update for its Mac OS X operating system, fixing a critical Internet security flaw that the company had failed to properly patch in late July.

The Mac OS X v. 10.5.5 security update was released Monday, fixing security bugs in Apple's software as well as several open-source components that ship with the operating system. In all, more than 25 bugs have been patched.

But the Internet flaw, which has to do with the Domain Name System (DNS), is the most widely publicized issue.

Apple, like many other operating-system vendors, was forced to patch its DNS software after security researcher Dan Kaminsky discovered a fundamental bug in the way this type of software is built.

On July 31, Apple had attempted to patch the flaw in Mac OS X, but security experts quickly discovered that while Apple's bug fix worked on the server side, it did not fix the issue on the client software.

With Monday's patch, Apple has fixed a flaw in the Mac OS X Libresolv DNS software that could have allowed attackers to trick victims into visiting malicious Web sites using what's known as a cache poisoning attack, said Andrew Storms, director of security operations with security vendor nCircle.

Libresolv is maintained by the Internet Systems Consortium (ISC). Although ISC had patched Libresolv by the time of Apple's last security update, the company did not include this bug fix in its July security update, Storms said.

After testing the 10.5.5 update Monday, he said that the Mac OS X client is now doing the required address port randomization that was added in ISC's bug fix. This is needed to make a cache poisoning attack much more difficult to pull off.

Also patched Monday were common Mac OS components such as Finder, Time Machine and the Mac OS kernel, as well as open-source components including Ruby ClamAV and OpenSSH.

At least nine of the patches fix flaws that could possibly be exploited by attackers to run unauthorized software on a victim's computer.


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags Mac OS XDNS

Featured

Slideshows

Meet the Reseller News 30 Under 30 Tech Awards 2020 winners

Meet the Reseller News 30 Under 30 Tech Awards 2020 winners

This year’s Reseller News 30 Under 30 Tech Awards were held as an integral part of the first entirely virtual Emerging Leaders​ forum, an annual event dedicated to identifying, educating and showcasing the New Zealand technology market’s rising stars. The 30 Under 30 Tech Awards 2020 recognised the outstanding achievements and business excellence of 30 talented individuals​, across both young leaders and those just starting out. In this slideshow, Reseller News honours this year's winners and captures their thoughts about how their ideas of leadership have changed over time.​

Meet the Reseller News 30 Under 30 Tech Awards 2020 winners
Reseller News Exchange Auckland: Beyond the myths — how partners can master cloud security

Reseller News Exchange Auckland: Beyond the myths — how partners can master cloud security

This exclusive Reseller News Exchange event in Auckland explored the challenges facing the partner community on the cloud security frontier, as well as market trends, customer priorities and how the channel can capitalise on the opportunities available. In association with Arrow, Bitdefender, Exclusive Networks, Fortinet and Palo Alto Networks. Photos by Gino Demeer.

Reseller News Exchange Auckland: Beyond the myths — how partners can master cloud security
Reseller News welcomes industry figures at 2020 Hall of Fame lunch

Reseller News welcomes industry figures at 2020 Hall of Fame lunch

Reseller News welcomed 2019 inductees - Leanne Buer, Ross Jenkins and Terry Dunn - to the fourth running of the Reseller News Hall of Fame lunch, held at the French Cafe in Auckland. The inductees discussed the changing face of the IT channel ecosystem in New Zealand and what it means to be a Reseller News Hall of Fame inductee. Photos by Gino Demeer.

Reseller News welcomes industry figures at 2020 Hall of Fame lunch
Show Comments