-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

APPLE-SA-2004-02-23 Security Update 2004-02-23

Security Update 2004-02-23 is now available.  It addresses the
following issues:

    CoreFoundation: Fixes CAN-2004-0168 to improve notification
        logging. Credit to aaron@vtty.com for reporting this issue.

    DiskArbitration: Fixes CAN-2004-0167 to more securely handle the
        initialization of writeable removable media.  Credit to
        aaron@vtty.com for reporting this issue.

    IPSec: Fixes CAN-2004-0164 to improve checking in key exchange

    Point-to-Point-Protocol: Fixes CAN-2004-0165 to improve the
        handling of error messages.  Credit to Dave G. of @stake and
        Justin Tibbs of Secure Network Operations (SRT) for reporting
        this issue.

    QuickTime Streaming Server: Fixes CAN-2004-0169 to improve
        checking of request data. Credit to iDEFENSE Labs for
        reporting this issue. Streaming Server updates for other
        platforms are available from
        http://developer.apple.com/darwin/

    Safari: Fixes CAN-2004-0166 to improve the display of URLs in the
        status bar

    tcpdump: Fixes CAN-2003-0989, CAN-2004-0055, and CAN-2004-0057 by
        updating tcpdump to version 3.8.1 and libpcap to version 0.8.1

================================================

Security Update 2004-02-23 may be obtained from:

  * Software Update pane in System Preferences (Mac OS X 10.3.2
    and Mac OS X 10.2.8)

  * Apple's Software Downloads web site:

    Mac OS X 10.3.2 Client
    ======================
    http://www.info.apple.com/kbnum/n120323
    The download file is named: "SecUpd2004-02-23Pan.dmg"
    Its SHA-1 digest is: dfe48ca16839e693674cf55995986f11d8282777

    Mac OS X 10.3.2 Server
    ======================
    http://www.info.apple.com/kbnum/n120324
    The download file is named: "SecUpdSrvr2004-02-23Pan.dmg"
    Its SHA-1 digest is: cde0a40abe3c1451458b15c01b73910b18bc4530

    Mac OS X 10.2.8 Client
    ======================
    http://www.info.apple.com/kbnum/n120277
    The download file is named: "SecUpd2004-02-23Jag.dmg"
    Its SHA-1 digest is: 4ec49f05f206649353ae20edd9b87ddb0b42a84b

    Mac OS X 10.2.8 Server
    ======================
    http://www.info.apple.com/kbnum/n120322
    The download file is named: "SecUpdSrvr2004-02-23Jag.dmg"
    Its SHA-1 digest is: 79617234d288d45208531622a38f307a978f82d7

  * QuickTime Streaming Server updates for platforms other than
    Mac OS X Server are available from:
    http://developer.apple.com/darwin/projects/streaming/

Information will also be posted to the Apple Product Security web
site:
http://www.apple.com/support/security/security_updates.html

This message is signed with Apple's Product Security PGP key, and
details are available at:
http://www.apple.com/support/security/security_pgp.html

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2

iQEVAwUBQDq4GXeI0z6bzFr0AQIokgf7B0qbznnDSz9kse26CWXjw2dpkC0iOR3D
Jtw9wtQbCT8MWSWoaqHvp2BRQ4951cdIZEbOt/Gvv2eEuK7h5y4HvyLFwH9y5ajg
uuSC8XSK8Ccl5OTFYGP7w+xn4snE8Wo1Sx4L4H8QszrG0jYmKffOL0PNZl/mcF9o
Atl/kBV168R9jK/oww5bjFd99AIB3RDMR0w9fl7DNS1ZS5LHuAps1tsEfHDs2mKm
9lPWlhlUI6CEp2JHS3GhYNht2J0enKX9ESrWV9DVMx5gydb6bQTD1X9vvn9ba0Ld
xF7IZacZXGlYbqQ5jxq68x9c88oZv9BPSAQg7+9Grdtyk/iOXmskOw==
=siCh
-----END PGP SIGNATURE-----
_______________________________________________
security-announce mailing list | security-announce@lists.apple.com
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/security-announce
Do not post admin requests to the list. They will be ignored.