Reprinted from TidBITS by permission; reuse governed by Creative Commons
license BY-NC-ND 3.0. TidBITS has offered years of thoughtful commentary
on Apple and Internet topics. For free email subscriptions and access to the
entire TidBITS archive, visit http://www.tidbits.com/


   Security Update 2017-001 (Yosemite, El Capitan)

   Agen G. N. Schmitz

   Apple has released Security Update 2017-001 for OS X 10.10 Yosemite and
   10.11 El Capitan, bringing a few select patches from the macOS 10.12.4
   Sierra release to the two older operating systems (see '[1]Apple
   Releases macOS 10.12.4, watchOS 3.2, and tvOS 10.2,' 27 March 2017).
   The Security Update addresses a memory corruption issue in both systems
   that could allow a maliciously crafted JPEG file to arbitrarily execute
   code, as well as a timing side channel issue that affected El Capitan
   that could leak sensitive user information. (Free. For [2]10.10.5
   Yosemite, 495.2 MB; for [3]10.11.6 El Capitan, 700.6 MB; [4]security
   content release notes)

References

   1. http://tidbits.com/article/17135
   2. https://support.apple.com/kb/DL1915
   3. https://support.apple.com/kb/DL1914
   4. https://support.apple.com/en-us/HT207615

.