Apple has released an update fixing the SSL encryption issue for both Mavericks and Mountain Lion. In addition, OS X Mavericks 10.9.2 also:
- Adds the ability to make and receive FaceTime audio calls
- Adds call waiting support for FaceTime audio and video calls
- Adds the ability to block incoming iMessages from individual senders
- Improves the accuracy of unread counts in Mail
- Resolves an issue that prevented Mail from receiving new messages from certain providers
- Improves AutoFill compatibility in Safari
- Fixes an issue that may cause audio distortion on certain Macs
- Improves reliability when connecting to a file server using SMB2
- Fixes an issue that may cause VPN connections to disconnect
- Improves VoiceOver navigation in Mail and Finder
You can download the updates using Software Update on your Mac. More information on Mavericks 10.9.2 and Security Update 2014-001 for Mountain Lion can be found on Apple’s Web site.
I think that second link is incorrect, Jim. But the real article isn’t posted yet.
Finally.
Mountain Lion is affected? Hmm… is Lion affected?
Apple needs to patch all the ML security issues …
No, THIS bug was new in 10.9.
Also, other fixes for Lion: http://support.apple.com/kb/DL1727
And Mountain Lion: http://support.apple.com/kb/DL1729
It’s been 30 minutes since I applied the update and Mail hasn’t stalled out on me. FINALLY.
But still no fix for my iPhone 4S running iOS 6.1.3.
A year ago my Apple customer satisfaction was 99%. A couple of weeks ago, it was 1%. Now, it is falling into negative numbers.
“Resolves an issue that prevented Mail from receiving new messages from certain providers”
I’m pretty sure I was seeing that one. Glad it’s fixed.
There is a fix.
That fix is “install iOS 7”.
About time!
“Certain [mail] providers” (which may or may not include the largest email provider in the world.) 🙂
Unfortunately, that is not an option for me, because I work in a music studio where the top 100 features we look for in any technology is reliability.
When I went to an Apple Store in late 2013 to replace both my iPad and iPhone with new models, the iPad Air crashed on me during the demo.
I don’t have a single friend who uses iOS 7 and gets fewer than 2 crashes a week.
MG Siegler, famous Apple enthusiast, praised iOS 7 for 3 months straight and then admitted his iPhone crashes at least once a day.
My iOS 6 iPad and iPhone have never crashed during a work day. Not once in over a year of use. And that is while connected to pro audio gear and recording streams of audio and MIDI data.
So, no, iOS 7 is not a “fix.”
And the fact that Apple left a giant bug in all of its operating systems that exposed me and every other user to all kinds of liability is also not an excuse to force iOS 7 down my throat when I have already given it good faith testing and found it to be too unstable to use in my work.
To be fair, the largest email provider in the world deliberately uses non-standard email protocols.
Do I miss something? I thought 6.1.6 is the fix, why can’t you install it?
Improves AutoFill compatibility in Safari – now the “Allow AutoFill even for websites that request passwords not be saved” option is gone…
I never had Gmail issues, but Exchange was atrocious.
I’ve had two crashes on my iPhone 5 since iOS 7 came out, which is much better than iOS 6. If you read only negative opinions, expect to form one yourself.
I was also reluctant to move to iOS 7 on my iPhone 5 and iPad 3rd gen. The iPad is still on iOS 6, but my phone is on iOS 7 and so far – it is crash free (knock on wood) after about 3 days of use.
The main issue i found with iOS 7 was the quick battery drain – which I fixed (mostly) due to those “3D” settings in 7, that the newer more powerful 5S handles easily – the older phones/hardware can run it, but the battery is no bueano.
While I do think Apple needs to give everyone the option of keeping their current iOS and getting security patches for this OS, they do provide an option, which is more than most mobile companies give… including BlackBerry (sometimes you get updates – sometimes not), Windows (Windows Phone 7 OS is – in theory abandoned – and it is not much newer than your iPhone 4) and of course Android phones rarely get updates – though some Nexus models do … or maybe they don’t. I know the general way they update Android phones is to get new ones – which is probably not the best option, but then maybe that is why they like “cheap” phones?
Yes – Apple can and should do 100% better … or more so. I have even Emailed Apple on occasion. When 10.9 came out (not an option for me to upgrade to that OS yet – since they killed some good features – for no apparent reason) – they fixed a lot of security issues in 10.9, but nothing for 10.8.5 – until a few days ago (they rolled them all into one update).
Yes, Apple needs to take some of their $160B and train, promote, hire more engineers to update/fix code in a timely manner… but all software companies are guilty of letting bad code site while they figure out a cheap way to patch things… I could rant some more, but I think you guys get the point – if you have kept reading this long 😉
In my experience iOS 6 was very stable – I may have had 3 crashes in the year or so it was on the phone … I think that was the base OS that shipped with my iPhone 5 – purchased around 12/10/12 …
iOS (3 days in) so far, is working fine. The main issue was turning off all the “extras” that would suck power. I honestly think Apple’s installer should have had these (or most of them) off to begin with – or maybe an option to “optimized” power use or something – since the older phones simply do not have the “POWER” to handle all these options.
Apple always liked to push batter life – one of the neglected features on Android and other phones – over other (often dumb) features … I understand the new phone is miles ahead of everything else – hardware wise and iOS 7 pushes this (64bit dual core SoC) but when they force users to update to the new OS to get a security patch – they need to also accommodate those users – ideally they would give us the option to simply run the security patch on the older OS – it is a shame Apple has such low standards and resources (and vision).
I never had Gmail or Exchange issues… but then I often forget my Gmail pwd. Maybe I should just google that info? j/k!
They shipped an OS that’s better in every way than their previous version, and you’re complaining they have low standards and low VISION?
I found battery life improved on my iPhone 5 (not 5S). The main reason is that the screens were so much more clear and so much brighter, I not only could lower the brightness and have the screen remain clear… it was actually HELPFUL to do so. And lowering the brightness had a huge impact on my battery life, more than offsetting any additional drain from iOS 7.
The problem with Apple is they often want to push people to new things. Push people to ‘better’ things could be considered OK, yet in a work/enterprise environment, pushing anything is bad news.
Just look at Windows Vista and 8 – they have very, very, very low penetration because the “upgrade” is not nearly worth the cost, time and headache … And Microsoft (in theory) knows enterprise. I doubt there will be any real competition to AD/Exchange – though Outlook is fairly bad, there is not much that can replace it.
Apple is pretty good with consumer tech, but they often drop the ball … or change course, when maybe they don’t need to (or take two courses).
If you look at OS X 10.6.8 – this was probably Apple’s best OS. It had some cool, yet undercooked features – such as FrontRow, 10.6 is and was stable … fast and powerful. 10.7 was bad because Apple went “too iCloud” or maybe “full retard” (or maybe this was MS with Windows 8?) … some of the problems were fixed in 10.7, yet multi monitor support is still a bit hosed in 10.8, though 10.8 is an improvement over 10.7 and it it has some nice integration (still a bit too much) in the cloud, it has some features that 10.9 is missing … WHY?
OS X and Darwin are based on Unix/BSD, in part – and even with FrontRow – it appeared Apple started to depreciate that feature (which was nice/killer yet imperfect), yet sync services are gone from 10.9, WTF?
OS X server is almost gone … sort of and ALL the enterprise hardware is gone … and I’m not even going to bring up the Final Cut Pro fisasco – ops! too late.
So yes – in certain areas Apple has oddly “low” standards – or maybe overly simplistic standards – and that is what many people see. I often like Apple’s lack of choice in some areas – like when their computers – you typically get 3 main options – which is plenty for 99% of everybody … and you can customize these options a bit … I go to Dell and they way too many stupid options and the OEM equipment list is a jumble of greek/geek crap that means nothing – unless maybe you work for Dell – so Apple does have some upsides – which people don’t always seem to nice either.
I guess i wish Apple could be the best of both worlds – power, elegant, variable solutions for a variety of tasks … from personal mobile to enterprise systems and services, but I digress.
In summary, OS X/BSD/Darwin is certainly capable (of just about anything) and we know they can build the hardware – consumer mobile to enterprise VM systems – the answer appears to be that Apple simply wants to focus on their core (iOS) mostly… and that neglects just about everything else.
Apparently the real article is that the GnuTLS is pretty bad too …
http://arstechnica.com/security/2014/03/critical-crypto-bug-leaves-linux-hundreds-of-apps-open-to-eavesdropping/
Critical crypto bug leaves Linux, hundreds of apps open to eavesdropping. This GnuTLS bug is worse than the big Apple “goto fail” bug patched last week.
… and it has been around since 2005 – weird – to odd errors in code for Open Source – neither patched for months (or a decade!) and available for anyone or any group to check.
Was that ever an option? I used to use a Safari Extension for that.