Apple patches security hole in Mac OS X Server 10.6.5
By Dan Moren, Macworld
Apple on Monday issued a new version of Mac OS X 10.6.5 Server, superseding the update that was released last week. The new build, 10H575 contains a security patch not contained in the earlier build, 10H574, and is recommended for all users who installed the earlier version.
The security issue involves a bug in the Dovecot mail server that could end up with a user getting mail intended for other users. Apple’s implemented improved memory management to patch the hole, which only affects users on the 10H574 build.
Some users complained of other problems with the original release of Mac OS X 10.6.5 Server, including bugs with the LDAP directory service; it’s unknown whether or not the new build fixes those issues.
Those who need to update to the new version can either do so via Software Update or via Apple’s support downloads page as a 858.02MB update or a 1.12GB combo updater that incorporates previous fixes as well. The full list of changes can be found below.