Reprinted from TidBITS by permission; reuse governed by Creative Commons
license BY-NC-ND 3.0. TidBITS has offered years of thoughtful commentary
on Apple and Internet topics. For free email subscriptions and access to the
entire TidBITS archive, visit http://www.tidbits.com/


   Security Update 2015-004 (Mountain Lion, Mavericks)

   Agen G. N. Schmitz

   Apple has issued [1]Security Update 2015-004 for OS X 10.8 Mountain
   Lion and 10.9 Mavericks, mirroring many of the security fixes that are
   included with the concurrently released 10.10.3 Yosemite (see '[2]Apple
   Releases OS X 10.10.3 with Photos,' 8 April 2015). The wide-ranging
   security update patches multiple vulnerabilities in Apache, a
   use-after-free issue in CoreAnimation, multiple memory corruption
   issues in the processing of font files, a memory corruption issue that
   existed in the handling of .sgi files, several issues related to
   IOHIDFamily, and multiple vulnerabilities in OpenSSL. Security Update
   2015-004 is available via Software Update or via direct download from
   Apple's Support Downloads Web site. (Free. For [3]10.8.5 Mountain Lion,
   176 MB; for [4]10.9.5 Mavericks, 112 MB)

References

   1. https://support.apple.com/en-gb/HT204659
   2. http://tidbits.com/article/15561
   3. https://support.apple.com/kb/DL1803?locale=en_GB&1428515121
   4. https://support.apple.com/kb/DL1802?locale=en_GB&1428514212

.