Apple has issued Security Update 2015-007 for OS X 10.9.5 Mavericks and Security Update 2015-004 for 10.10.5 Yosemite, bringing along many of the security fixes that appeared in the concurrently released OS X 10.11.1 El Capitan (see “Apple Releases OS X 10.11.1 to Fix Microsoft Office 2016 Crashes,” 21 October 2015). Regardless of the somewhat confusing naming (Apple doesn’t normally re-use security update numbers within the same year, but 004 was used back in April), these security updates patch a wide swath of memory corruption issues, including vulnerabilities with the Accelerate Framework in multi-threading mode, handling of audio files, CoreGraphics, handling of font files, and parsing of disk images — all of which could lead to arbitrary code execution. The security updates are available via Software Update or via direct download from Apple’s Support Downloads Web site. (Free. For 10.9.5 Mavericks, 266.2 MB; for 10.10.5 Yosemite, 334.7 MB)
Subscribe today so you don’t miss any TidBITS articles!
Every week you’ll get tech tips, in-depth reviews, and insightful news analysis for discerning Apple users. For 29 years, we’ve published professional, member-supported tech journalism that makes you smarter.
Registration confirmation will be emailed to you.