Reprinted from TidBITS by permission; reuse governed by Creative Commons
license BY-NC-ND 3.0. TidBITS has offered years of thoughtful commentary
on Apple and Internet topics. For free email subscriptions and access to the
entire TidBITS archive, visit http://www.tidbits.com/


   Security Update 2015-008 (Mavericks) and 2015-005 (Yosemite)

   Agen G. N. Schmitz

   Apple has issued [1]Security Update 2015-008 for OS X 10.9.5 Mavericks
   and Security Update 2015-005 for 10.10.5 Yosemite with some patches
   specific to these older OS releases sprinkled in amongst the security
   fixes that appear in the concurrently released OS X 10.11.2 El Capitan.
   In particular, the two Security Updates address multiple memory
   corruption issues in ImageIO, OpenGL, CoreGraphics, and CoreMedia
   Playback, as well as a memory corruption issue related to the handling
   of iWork files ' all of which could lead to arbitrary code execution.
   Additionally, the updates fix an issue that existed in the validation
   of access control lists for keychain items, which could grant a
   malicious application access to a user's Keychain items. The security
   updates are available via Software Update or via direct download from
   Apple's Support Downloads Web site. (Free. For [2]10.9.5 Mavericks,
   288.3 MB; for [3]10.10.5 Yosemite, 369 MB)

References

   1. https://support.apple.com/en-us/HT205637
   2. https://support.apple.com/kb/DL1853
   3. https://support.apple.com/kb/DL1852

.