Apple has released Safari 9.1.2 for OS X 10.9.5 Mavericks, 10.10.5 Yosemite, and 10.11 to 10.11.5 El Capitan — it’s bundled into 10.11.6 El Capitan (see “Apple Releases OS X 10.11.6, iOS 9.3.3, tvOS 9.2.2, and watchOS 2.2.2,” 18 July 2016). The update addresses vulnerabilities in WebKit, including multiple memory corruption issues, a timing issue that existed in processing SVG images, and a permissions issue related to the handling of the location variable — all of which could compromise user information if visiting a maliciously crafted Web site. Safari 9.1.2 is available only via Software Update. (Free, release notes, 10.9+)
Thoughtful, detailed coverage of the Mac, iPhone, and iPad, plus the TidBITS Content Network for Apple consultants.