Reprinted from TidBITS by permission; reuse governed by Creative Commons
license BY-NC-ND 3.0. TidBITS has offered years of thoughtful commentary
on Apple and Internet topics. For free email subscriptions and access to the
entire TidBITS archive, visit http://www.tidbits.com/


   Security Update 2015-003 (Yosemite)

   Agen G. N. Schmitz

   Apple has issued [1]Security Update 2015-003 for OS X 10.10 Yosemite,
   the second Security Update released this month (see '[2]Security Update
   2015-002 (Mountain Lion, Mavericks, and Yosemite),' 10 March 2015).
   Available solely for 10.10.2 Yosemite, this release addresses two
   vulnerabilities that were originally a part of Security Update 2015-002
   ' improving iCloud Keychain's bounds checking to contain multiple
   buffer overflows and IOSurface's handling of serialized objects (both
   to prevent execution of arbitrary code). Once again, there are two
   updates available for 10.10.2 Yosemite ' one for Early 2015 Macs (see
   '[3]New 12-inch MacBook Joins Updated MacBook Air and MacBook Pro,' 9
   March 2015) and one for older Macs. (Free. For [4]10.10.2 Yosemite, 5.3
   MB; and for [5]Yosemite on Early 2015 Macs, 4.9 MB)

References

   1. https://support.apple.com/en-us/HT204563
   2. http://tidbits.com/article/15478
   3. http://tidbits.com/article/15473
   4. https://support.apple.com/kb/DL1800
   5. https://support.apple.com/kb/DL1799

.