This article originally appeared in TidBITS on 2015-03-20 at 2:24 p.m.
The permanent URL for this article is:
Include images: Off

Security Update 2015-003 (Yosemite)

by Agen G. N. Schmitz

Apple has issued Security Update 2015-003 [1] for OS X 10.10 Yosemite, the second security update released this month (see “Security Update 2015-002 (Mountain Lion, Mavericks, and Yosemite) [2],” 10 March 2015). Available solely for 10.10.2 Yosemite, this release takes another swing at fixing two vulnerabilities that were originally part of Security Update 2015-002 — improving iCloud Keychain’s bounds checking and IOSurface’s handling of serialized objects (both to prevent execution of arbitrary code). Once again, there are two updates available: one for Early 2015 Macs (see “New 12-inch MacBook Joins Updated MacBook Air and MacBook Pro,” 9 March 2015) and another for older Macs. (Free. For 10.10.2 Yosemite [4], 5.3 MB; and for Yosemite on Early 2015 Macs [5], 4.9 MB)