This article originally appeared in TidBITS on 2015-04-08 at 4:51 p.m.
The permanent URL for this article is:
Include images: Off

Security Update 2015-004 (Mountain Lion and Mavericks)

by Agen G. N. Schmitz

Apple has issued Security Update 2015-004 [1] for OS X 10.8 Mountain Lion and 10.9 Mavericks, mirroring many of the security fixes that are included with the concurrently released 10.10.3 Yosemite (see “Apple Releases OS X 10.10.3 with Photos [2],” 8 April 2015). The wide-ranging security update patches multiple vulnerabilities in Apache, a use-after-free issue in CoreAnimation, multiple memory corruption issues in the processing of font files, a memory corruption issue that existed in the handling of .sgi files, several issues related to IOHIDFamily, and multiple vulnerabilities in OpenSSL. Security Update 2015-004 is available via Software Update or via direct download from Apple’s Support Downloads Web site. (Free. For 10.8.5 Mountain Lion [3], 176 MB; for 10.9.5 Mavericks [4], 112 MB)