Reprinted from TidBITS by permission; reuse governed by Creative Commons
license BY-NC-ND 3.0. TidBITS has offered years of thoughtful commentary
on Apple and Internet topics. For free email subscriptions and access to the
entire TidBITS archive, visit http://www.tidbits.com/


   Security Update 2015-007 for Mavericks and Yosemite

   Agen G. N. Schmitz

   Apple has issued [1]Security Update 2015-007 for OS X 10.9.5 Mavericks
   and 10.10.5 Yosemite, bringing along many of the security fixes that
   appeared in the concurrently released OS X 10.11.1 El Capitan (see
   '[2]Apple Releases OS X 10.11.1 to Fix Microsoft Office 2016 Crashes,'
   21 October 2015). However, the Security update for Yosemite users is
   confusingly titled 2015-004 (both on the direct download page and in
   Software Update), though the Apple Support page that documents the
   security changes makes no mention of this name change. The Security
   Update patches a wide swath of memory corruption issues, including
   vulnerabilities with the Accelerate Framework in multi-threading mode,
   handling of audio files, CoreGraphics, handling of font files, and
   parsing of disk images ' all of which could lead to arbitrary code
   execution. Security Update 2015-007 (or 2015-004 for Yosemite users) is
   available via Software Update or via direct download from Apple's
   Support Downloads Web site. (Free. For [3]10.9.5 Mavericks, 266.2 MB;
   for [4]10.10.5 Yosemite, 334.7 MB)

References

   1. https://support.apple.com/en-us/HT205375
   2. http://tidbits.com/article/16031
   3. https://support.apple.com/kb/DL1846
   4. https://support.apple.com/kb/DL1847

.