--- begin forwarded text
Status: U Subject: Security Update 7-12-02 is available From: Apple Product Security <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Sender: [EMAIL PROTECTED] Date: Sat, 13 Jul 2002 08:22:35 -0700 Security Update 7-12-02 is now available. It contains Software Update client version 1.4.6 which fixes CVE ID CAN-2002-0676 to increase the security of the Software Update process. Affected systems: Systems with Software Update client 1.4.5 or earlier System requirements: Mac OS X 10.1 or later, or Mac OS X Server 10.1.x or later New features: Software packages that are available for download via the Software Update process are now cryptographically signed. Software Update client 1.4.6 checks for a valid signature before installing new packages. Downloaded packages which do not contain a valid signature are deleted from the system. Security Update 7-12-02 may be obtained from: Apple's Software Downloads web site (for Mac OS X 10.1 or later) http://www.info.apple.com/kbnum/n75304 Software Update pane in System Preferences (for 10.1.1 or later) To help verify the integrity of Software Update client 1.4.6 from the Software Downloads web site, the download file is titled "SecurityUpdate7-12-02.dmg" and its SHA-1 digest is: 2c039c683b7001defc35f93ba1f68db3e33e41fc Information will also be posted to the Apple Product Security web site: http://www.apple.com/support/security/security_updates.html This message is signed with Apple's Product Security PGP key, and details are available at: http://www.apple.com/support/security/security_pgp.html _______________________________________________ security-announce mailing list | [EMAIL PROTECTED] Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/security-announce Do not post admin requests to the list. They will be ignored. --- end forwarded text -- ----------------- R. A. Hettinga <mailto: [EMAIL PROTECTED]> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to [EMAIL PROTECTED]