Skip to content
Thoughtful, detailed coverage of everything Apple for 32 years
and the TidBITS Content Network for Apple professionals

Security Update 2014-002 (Mavericks, Mountain Lion, and Lion)

Apple has released Security Update 2014-002 with security fixes for OS X 10.9 Mavericks, as well as for those still using 10.8 Mountain Lion, 10.7 Lion, and 10.7 Lion Server. According to the release notes, the security update patches a vulnerability with HTTP headers that enabled attackers to obtain Web site credentials, which affected all three versions of OS X. It also fixes a particularly ugly vulnerability to a “triple handshake” attack that could affect both Mavericks and Mountain Lion. However, the bulk of the changes focus on Mavericks, addressing
vulnerabilities with CoreServicesUIAgent Web site validation, Heimdal Kerberos authentication, ImageIO’s handling of JPEG images, and a power management issue that could prevent the system from going to sleep and keep the screen unlocked. (All updates are free. For 10.9 Mavericks, 80.5 MB; for 10.8 Mountain Lion, 135.9 MB; for 10.7 Lion, 126.9 MB; for 10.7 Lion Server, 177.2 MB.)

Subscribe today so you don’t miss any TidBITS articles!

Every week you’ll get tech tips, in-depth reviews, and insightful news analysis for discerning Apple users. For over 31 years, we’ve published professional, member-supported tech journalism that makes you smarter.

Registration confirmation will be emailed to you.