Security Update 2015-004 (Mountain Lion and Mavericks)
Apple has issued Security Update 2015-004 for OS X 10.8 Mountain Lion and 10.9 Mavericks, mirroring many of the security fixes that are included with the concurrently released 10.10.3 Yosemite (see “Apple Releases OS X 10.10.3 with Photos,” 8 April 2015). The wide-ranging security update patches multiple vulnerabilities in Apache, a use-after-free issue in CoreAnimation, multiple memory corruption issues in the processing of font files, a memory corruption issue that existed in the handling of .sgi
files, several issues related to IOHIDFamily, and multiple vulnerabilities in OpenSSL. Security
Update 2015-004 is available via Software Update or via direct download from Apple’s Support Downloads Web site. (Free. For 10.8.5 Mountain Lion, 176 MB; for 10.9.5 Mavericks, 112 MB)