Apple has released Security Update 2016-004 for OS X 10.9 Mavericks and 10.10 Yosemite, bringing a few select patches from the 10.11.5 El Capitan release (see “Apple Releases OS X 10.11.6, iOS 9.3.3, tvOS 9.2.2, and watchOS 2.2.2,” 18 July 2016) to the two older operating systems. The update resolves memory corruption issues in CoreGraphics, ImageIO, and libxml2, which could allow a remote attacker to execute arbitrary code. (Free. For 10.9.5 Mavericks, 371.2 MB; for 10.10.5 Yosemite, 456 MB)
Thoughtful, detailed coverage of the Mac, iPhone, and iPad, plus the TidBITS Content Network for Apple consultants.