Skip to content
Thoughtful, detailed coverage of everything Apple for 31 years
and the TidBITS Content Network for Apple professionals
3 comments

Security Update 2015-008 (Mavericks) and 2015-006 (Yosemite)

Apple has issued Security Update 2015-008 for OS X 10.9 Mavericks and Security Update 2015-006 for 10.10 Yosemite with some patches specific to these older releases sprinkled in amongst the security fixes that appear in the concurrently released OS X 10.11.2 El Capitan (see “OS X 10.11.2 Focuses on Improving Reliability and Security,” 8 December 2015). Initially, Apple had released Security Update 2015-005 for Yosemite, but it replaced that download with the new Security Update 2015-006 without comment, other than to note that the new update includes all the security patches
from the previous one. Make sure to get the latest version, regardless.

In particular, the two security updates address multiple memory corruption issues in ImageIO, OpenGL, CoreGraphics, and CoreMedia Playback, as well as a memory corruption issue related to the handling of iWork files — all of which could lead to arbitrary code execution. Additionally, the updates fix an issue that existed in the validation of access control lists for keychain items, which could grant a malicious application access to a user’s keychain items. The security updates are available via Software Update or via direct download from Apple’s Support Downloads Web site. (Free. For 10.9.5 Mavericks, 288.3 MB; for 10.10.5
Yosemite
, 369 MB)

Subscribe today so you don’t miss any TidBITS articles!

Every week you’ll get tech tips, in-depth reviews, and insightful news analysis for discerning Apple users. For over 31 years, we’ve published professional, member-supported tech journalism that makes you smarter.

Registration confirmation will be emailed to you.

Comments About Security Update 2015-008 (Mavericks) and 2015-006 (Yosemite)