Apple today released Security Update 2016-001 for OS X El Capitan users, introducing important security fixes to the operating system. Apple has also also introduced Security Update 2016-005 for OS X Yosemite users.
The Security Updates are available to all OS X Yosemite and El Capitan users and can be downloaded from the Mac App Store. Apple recommends all users install the update, and a full list of what's fixed can be found in the accompanying support document.
Most security updates are generally built into OS X updates as they are released, with separate security-only updates only being introduced when standard updates to the operating system are not expected. The release of a Security Update for OS X El Capitan suggests we may not see any new versions of the operating system ahead of the launch of macOS Sierra.
Update: Today’s security update fixes a series of critical kernel vulnerabilities that were recently patched in iOS with the release of iOS 9.3.5. On iOS devices, the vulnerabilities were part of a sophisticated jailbreak and malware attack that gave access to all of the functionality of an iPhone or iPad.
Citizen Lab and Lookout, who discovered the vulnerabilities on OS X and iOS, are credited with the fix.
Update 2: There's also a Safari 9.1.3 update to fix vulnerabilities in the Safari browser.
Top Rated Comments
Full Bundle Update:
http://swcdn.apple.com/content/downloads/50/35/031-75159/4vr88oyevm1r0p30oz6tx3ygo689whk1f4/FullBundleUpdate.pkg (18.8MB)
Firmware Update:
http://swcdn.apple.com/content/downloads/50/35/031-75159/4vr88oyevm1r0p30oz6tx3ygo689whk1f4/FirmwareUpdate.pkg (130.1MB)
Security Update 2016-001 10.11.6: http://swcdn.apple.com/content/downloads/50/35/031-75159/4vr88oyevm1r0p30oz6tx3ygo689whk1f4/SecUpd2016-001ElCapitan.pkg (265.2MB)
Last one requires a restart.
Here are the Yosemite ones:
Firmware Update http://swcdn.apple.com/content/downloads/31/50/031-74572/d6rg3uuihx9tfvsavc7i4vk1ay6q15hvmt/FirmwareUpdate.pkg (115.5MB)
Security Update 2016-005 10.10.5 http://swcdn.apple.com/content/downloads/31/50/031-74572/d6rg3uuihx9tfvsavc7i4vk1ay6q15hvmt/SecUpd2016-005Yosemite.pkg (352.1MB)
(no Full Bundle Update)
The Yosemite one is actually bigger than the El Capitan one.
Alternative links:
Security Update 2016-001 10.11.6: https://support.apple.com/kb/DL1891?locale=en_US
Security Update 2016-005 10.10.5 https://support.apple.com/kb/DL1890?locale=en_US
Notice that there ISN'T one for mavericks. So that's the end of mavericks as far as security is concerned. But they DID release a new safari for mavericks (and yosemite). Here they are respectively:
http://swcdn.apple.com/content/downloads/47/05/031-75479/smgdhqybff3jofycbq8uuciu5td7co45am/Safari9.1.3Mavericks.pkg
http://swcdn.apple.com/content/downloads/62/05/031-75481/c10gu5qoz8bbbk1jczzzvxm9ih4fupo0wz/Safari9.1.3Yosemite.pkg
This patches the vulnerabilities just patched in iOS 9.3.5.
EDIT:// It would appear these are actually not the correct release notes, why Apple reuses the same name for different security updates is beyond me.