{"id":31,"date":"2003-07-24T11:43:52","date_gmt":"2003-07-24T15:43:52","guid":{"rendered":"http:\/\/blogs.law.harvard.edu\/rlucastemp\/2003\/07\/24\/apple-security-update-2003-03-24-b"},"modified":"2003-07-24T11:43:52","modified_gmt":"2003-07-24T15:43:52","slug":"apple-security-update-2003-03-24-breaks-many-things","status":"publish","type":"post","link":"https:\/\/archive.blogs.harvard.edu\/rlucastemp\/2003\/07\/24\/apple-security-update-2003-03-24-breaks-many-things\/","title":{"rendered":"Apple Security Update 2003-03-24 Breaks Many Things?"},"content":{"rendered":"

<\/a><\/p>\n

For Mac OS X users who installed the Software Update with a security component on 24 March 2003, some things might be broken if you use Apache, Sendmail, or the Perl PostgreSQL module DBD::Pg.<\/p>\n

—
\n1) Regarding Sendmail:<\/p>\n

See http:\/\/www.macosxhints.com\/article.php?story=20030306145838840<\/p>\n

(relevant error message: Sendmail might complain in \/var\/log\/mail.log of “Deferred: Connection refused by localhost “)<\/p>\n

(summary: Apple makes sendmail look at \/etc\/mail\/submit.cf instead of sendmail.cf)<\/p>\n

—
\n2) Regarding Apache:<\/p>\n

See http:\/\/ganter.dyndns.org\/misc\/apple_ssl.php and http:\/\/apple.slashdot.org\/comments.pl?sid=58276&threshold=1&commentsort=0&tid=172&mode=thread&cid=5640470<\/p>\n

(relevant error message: Apache segfaults out on some SSL requests with the crash message [try \/var\/log\/system.log]
\n
\nException: EXC_BAD_ACCESS (0x0001) Codes: KERN_INVALID_ADDRESS (0x0001)
\n<\/code>
\n… and specifically complains that the error is in ssl_var_lookup_ssl)<\/p>\n

(summary: Apple supplies a faulty libssl.so for Apache; a working version is provided)<\/p>\n

(fix: see dyndns link above or try http:\/\/cyber.law.harvard.edu\/blogs\/gems\/rlucas\/libssl.so NO WARRANTY courtesy only mirror)<\/p>\n

—
\n3) Regarding DBD::Pg
\nSee http:\/\/gborg.postgresql.org\/pipermail\/dbdpg-general\/2003-March\/000039.html<\/p>\n

(relevant error message:
\n
\ndyld: perl Undefined symbols:
\n_BIO_free
\n_BIO_new_mem_buf
\n_DH_check
\n_DH_generate_parameters
\n_DH_size
\n_ERR_get_error
\n_ERR_reason_error_string
\n_EVP_PKEY_free
\n_PEM_read_DHparams
\n_PEM_read_PrivateKey
\n_PEM_read_X509
\n_PEM_read_bio_DHparams
\n_SSL_CTX_ctrl
\n_SSL_CTX_free
\n_SSL_CTX_load_verify_locations
\n_SSL_CTX_new
\n_SSL_CTX_set_tmp_dh_callback
\n_SSL_CTX_set_verify
\n_SSL_CTX_set_verify_depth
\n_SSL_connect
\n_SSL_free
\n<\/code>
\n… and more, whenever a script uses DBD::Pg.)<\/p>\n

(summary: Perl scripts now crash out. Might be because PostgreSQL was compiled before the security update. Does anyone know otherwise?)<\/p>\n

—
\nI am going to install the July Security Update to see if it fixes things at all.<\/p>\n

—
\nUPDATE: The July security update does not fix it. However, recompiling PostgreSQL fixes most of the errors (see 25 July 2003 entry for a persistent error with utf-8 support).<\/p>\n","protected":false},"excerpt":{"rendered":"

For Mac OS X users who installed the Software Update with a security component on 24 March 2003, some things might be broken if you use Apache, Sendmail, or the Perl PostgreSQL module DBD::Pg. — 1) Regarding Sendmail: See http:\/\/www.macosxhints.com\/article.php?story=20030306145838840 (relevant error message: Sendmail might complain in \/var\/log\/mail.log of “Deferred: Connection refused by localhost “) […]<\/p>\n","protected":false},"author":1180,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1460],"tags":[],"class_list":["post-31","post","type-post","status-publish","format-standard","hentry","category-rlucasstories"],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/archive.blogs.harvard.edu\/rlucastemp\/wp-json\/wp\/v2\/posts\/31","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/archive.blogs.harvard.edu\/rlucastemp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/archive.blogs.harvard.edu\/rlucastemp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/archive.blogs.harvard.edu\/rlucastemp\/wp-json\/wp\/v2\/users\/1180"}],"replies":[{"embeddable":true,"href":"https:\/\/archive.blogs.harvard.edu\/rlucastemp\/wp-json\/wp\/v2\/comments?post=31"}],"version-history":[{"count":0,"href":"https:\/\/archive.blogs.harvard.edu\/rlucastemp\/wp-json\/wp\/v2\/posts\/31\/revisions"}],"wp:attachment":[{"href":"https:\/\/archive.blogs.harvard.edu\/rlucastemp\/wp-json\/wp\/v2\/media?parent=31"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/archive.blogs.harvard.edu\/rlucastemp\/wp-json\/wp\/v2\/categories?post=31"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/archive.blogs.harvard.edu\/rlucastemp\/wp-json\/wp\/v2\/tags?post=31"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}