Apple today released Security Update 2015–003 1.0 for users who are running the current publicly available version of Yosemite, OS X 10.10.2. The update includes fixes for iCloud Keychain and an issue that could allow malicious applications to execute code.

securityupdate003
- Security Update 2015-003 Yosemite
- Security Update 2015-003 Yosemite (Early 2015 Mac)

Apple recommends that all users download the update, which can be acquired through the Software Update tool in the Mac App Store, or through the links below. According to Apple, the update "improves the security of OS X." There are two different versions available, one for early 2015 Macs and one for earlier Macs.

iCloud Keychain
Available for: OS X Yosemite v10.10.2
Impact: An attacker with a privileged network position may be able
to execute arbitrary code
Description: Multiple buffer overflows existed in the handling of
data during iCloud Keychain recovery. These issues were addressed
through improved bounds checking.
CVE-ID
CVE-2015-1065 : Andrey Belenko of NowSecure

IOSurface
Available for: OS X Yosemite v10.10.2
Impact: A malicious application may be able to execute arbitrary
code with system privileges
Description: A type confusion issue existed in IOSurface's handling
of serialized objects. The issue was addressed through additional
type checking.
CVE-ID
CVE-2015-1061 : Ian Beer of Google Project Zero

Today's security update comes 10 days after Apple issued Security Update 2015–002 designed to fix the “FREAK” security flaw that left many devices vulnerable to hacking attempts.

Top Rated Comments

DualShock Avatar
117 months ago
Seems to me there are no Graphics extensions updated.

The nvidia drivers look for a specific compatible OS build number.

Maybe not but this is inside the Security Update:

Edit: System version of this update is 14C1514

Hmm, one of the dylib's has "coretls" in the name, could be related to the OpenSSL security flaws announced recently?

http://www.openssl.org/news/secadv_20150319.txt
Score: 1 Votes (Like | Disagree)
justperry Avatar
117 months ago
For the love of god this better not break the mac pro nvdia drivers.

Seems to me there are no Graphics extensions updated.
Score: 1 Votes (Like | Disagree)
007 Junior Avatar
117 months ago
Does anyone know if this update is already integrated in the 10.10.3 Public Beta?
Score: 1 Votes (Like | Disagree)

Popular Stories

Apple Logo Spotlight

Source: Apple to Announce New Products This Week

Sunday March 3, 2024 11:38 am PST by
Apple plans to announce new products with press releases on its website this week, a proven source familiar with the matter told MacRumors. While the products that Apple plans to announce have not been disclosed, there are rumors about new iPads, Macs, and accessories. It is unclear exactly what will be announced this week. Bloomberg's Mark Gurman today reiterated that Apple is planning new...
Apple MacBook Air 2 up hero 240304

Apple Announces New MacBook Air Models With M3 Chip

Monday March 4, 2024 5:04 am PST by
Apple today announced new 13- and 15-inch MacBook Air models with M3 chip, improved external display support, Wi-Fi 6E, and more. Apple says that the new MacBook Air is up to 60% faster than the M1 model and up to 13x faster than the fastest Intel-based MacBook Air. With a faster and more efficient Neural Engine, Apple says that the MacBook Air continues to be "the best consumer laptop for...
Apple Maps vs Google Maps Feature

Apple Maps vs. Google Maps: Which Is Better?

Friday March 1, 2024 7:10 am PST by
Apple Maps has been providing navigational guidance to Apple users for almost 13 and a half years now, and much has changed about the app in that time. However, according to data from Canalys, the overwhelming majority of iPhones in the U.S. still have Google Maps downloaded as an alternative to Apple Maps, which comes preinstalled on all iPhones. We want to hear from MacRumors readers. Which do...
iPad Air 12

Gurman: No Apple Event Planned for Upcoming iPads and Macs

Sunday March 3, 2024 5:09 am PST by
Apple does not plan to hold a traditional event to unveil new iPads and Macs, according to Bloomberg's Mark Gurman. Instead, he said Apple plans to announce the products on its website with a "series of online videos and marketing campaigns." If this plan is accurate, we can expect the new products to be announced with press releases on the Apple Newsroom website. Gurman expects Apple to...
apple tv plus banner

Apple TV+ Gains Over 50 Movies for a Limited Time

Friday March 1, 2024 6:29 am PST by
Apple TV+ today gained over 50 movies, adding to its back catalog of content for a limited time. The collection includes a large number of popular and classic titles. Subscribers can access the movies in a "Great Movies on Apple TV+" section in the Apple TV app. Some titles are also available in 3D. Movies in the collection include: 21 Jump Street 300 American Sniper Argo ...