This article originally appeared in TidBITS on 2015-01-27 at 12:38 p.m.
The permanent URL for this article is: http://tidbits.com/article/15368
Include images: Off

Apple Releases OS X 10.10.2, iOS 8.1.3, and Apple TV 7.0.3

by Josh Centers

Apple has updated OS X Yosemite to 10.10.2, iOS to 8.1.3, and the third-generation Apple TV to 7.0.3 to address a number of troublesome issues, as well as a large number of security concerns.

OS X Yosemite -- The OS X Yosemite 10.10.2 Update [1] is now available via Software Update, and it has appeared on Apple’s Support Downloads Web site as both a delta update [2] (554.4 MB; for use with 10.10.1) and a combo update [3] (840.3 MB; to update from any version of 10.10). OS X 10.10.2 promises the following:

In addition, 10.10.2 offers a number of security updates [5], most notably hardening a variety of 2013 Macs against the Thunderstrike attack that could use Thunderbolt to hijack a Mac (see “Thunderstrike Proof-of-Concept Attack Serious, but Limited [6],” 9 January 2015). Unfortunately, pre-Yosemite Macs remain vulnerable [7]. 10.10.2 also fixes vulnerabilities in App Store logging, Bluetooth, command-line utilities, font handling, graphics drivers, PDF handling, Spotlight, and more. Safari has also been updated to 8.0.3, which fixes multiple memory corruption issues in WebKit that could allow a malicious Web site to execute code.

If you try to install the update, but are presented with an error [9] saying, “This volume does not meet the requirements for this update,” try downloading the combo update again, since Apple replaced it late in the day of the initial release. If even that doesn’t work, Topher Kessler of MacIssues has a fix [10] that may get it to install correctly.

iOS 8 -- Apple has released iOS 8.1.3 to address a number of bugs, but most notably to reduce the amount of storage required to perform a software update. Ironically, while the over-the-air iOS 8.1.2 update weighed in at 28.2 MB (see “Apple Releases iOS 8.1.2 to Restore Vanishing Ringtones [11],” 10 December 2014), iOS 8.1.3 is a 247 MB download on an iPhone 6. The download size will vary by device. You can download the update on the device via Settings > General > Software Update or on your computer in iTunes.

Other things that iOS 8.1.3 claims to fix are an issue that prevented some users from entering the Apple ID password for Messages and FaceTime, a bug that caused Spotlight to stop displaying app results, and a glitch that prevented iPads from recognizing multitasking gestures. iOS 8.1.3 also adds new configuration options for standardized education testing.

Security issues fixed by iOS 8.1.3 [12] include PDF vulnerabilities, numerous issues that could cause arbitrary code execution, Web sites being able to bypass the sandbox, and malicious Web sites being able to spoof the UI.

Apple TV -- The third-generation Apple TV has been updated to 7.0.3. It offers no new features, but includes a number of security improvements [13], mostly identical to those in iOS 8.1.3.

Unrelated to the update, the Apple TV now offers Sports Illustrated’s 120 SPORTS channel, which streams events from MLB, the NBA, the NHL, and others.

[1]: http://support.apple.com/en-us/HT204210
[2]: http://support.apple.com/kb/DL1785
[3]: http://support.apple.com/kb/DL1786
[4]: https://discussions.apple.com/thread/6601963?start=2220&tstart=0
[5]: http://support.apple.com/en-us/HT204244
[6]: http://tidbits.com/article/15331
[7]: https://trmm.net/Thunderstrike_FAQ#Is_Thunderstrike_fixed_in_10.10.2.3F
[8]: http://support.apple.com/en-us/HT204243
[9]: https://discussions.apple.com/thread/6800304
[10]: http://www.macissues.com/2015/01/28/how-to-force-os-x-10-10-2-to-install-on-your-mac/
[11]: http://tidbits.com/article/15285
[12]: http://support.apple.com/en-us/HT204245
[13]: http://support.apple.com/en-us/HT204246