Apple releases Security Updates for El Capitan, Yosemite, and Safari

Apple releases Security Updates for El Capitan, Yosemite, and Safari

You probably remember that last week, Apple urged all iOS 9 users to update their devices to iOS 9.3.5, which contained an essential security fix. (If you haven’t done that, go do it now!)

On Thursday, Apple provided another set of security updates, this time for the Mac. Security Update 2006–001 for El Capitan, and Security Update 2006–005 for Yosemite are rolling out now, so keep an eye on the Mac App Store and update as soon as you can. Also available is Safari 9.1.3, which is for El Capitan, Yosemite, and OS X 10.9.5 Mavericks.

Glenn Fleishman explained the three separate zero-day exploits patched in iOS 9.3.5, which are very targeted but could allow full access to a compromised device. The flaws were reported by Citizen Lab and Lookout Security, and those names pop up again in today’s security updates for the Mac.

The exploits require the user to open a URL from an SMS message, which then executes remote binary files in the OS that dig into the kernel and allow unauthorized software to be installed—in iOS this effectively jailbreaks your device behind your back.

According to Apple’s release notes, the Mac security updates released today will prevent applications from disclosing kernel memory and executing arbitrary code with kernel privileges. Safari’s patch fixes a memory corruption issue that would allow a malicious website to execute arbitrary code in the first place, namely the malware that’s trying to get into your kernel.

In other words, you need these patches. So go get ’em.

IDG Insider

PREVIOUS ARTICLE

«Logitech’s new Prodigy line aims at gamers on a budget

NEXT ARTICLE

Raspberry Pi roundup: Now with additional cucumbers!»

Add Your Comment

Most Recent Comments

Our Case Studies

IDG Connect delivers full creative solutions to meet all your demand generatlon needs. These cover the full scope of options, from customized content and lead delivery through to fully integrated campaigns.

images

Our Marketing Research

Our in-house analyst and editorial team create a range of insights for the global marketing community. These look at IT buying preferences, the latest soclal media trends and other zeitgeist topics.

images

Poll

Should companies have Bitcoins on hand in preparation for a Ransomware attack?