Reprinted from TidBITS by permission; reuse governed by Creative Commons
license BY-NC-ND 3.0. TidBITS has offered years of thoughtful commentary
on Apple and Internet topics. For free email subscriptions and access to the
entire TidBITS archive, visit http://www.tidbits.com/


   Security Update 2014-005 (Mountain Lion and Mavericks)

   Agen G. N. Schmitz

   Apple has released Security Update 2014-005 with a Secure
   Transport-related fix for OS X 10.8 Mountain Lion and 10.9 Mavericks.
   The Security Update patches the so-called [1]POODLE vulnerability that
   could enable an attacker to decrypt data protected by SSL. Plus, the
   security update includes the contents of OS X Bash Update 1.0, bringing
   the Bash patches to everyone (see '[2]Apple Updates Bash for the
   Shellshock Vulnerability,' 29 September 2014). It's available via
   Software Update or via direct download from Apple's Support Downloads
   Web site. (All updates are free. For [3]10.8 Mountain Lion, 152 MB; for
   [4]10.9 Mavericks, 6.8 MB.)

References

   1. http://poodlebleed.com/
   2. http://tidbits.com/article/15115
   3. http://support.apple.com/kb/DL1771
   4. http://support.apple.com/kb/DL1772

.