Apple Issues Security Updates Fixing 'FREAK' Security Flaw

[MacRumors]

Just under a week after researchers uncovered a security flaw referred to as "FREAK" (Factoring Attack on RSA-EXPORT Keys) that left many devices vulnerable to hacking attempts, Apple has issued fixes for all of its platforms.

The fix is available in Apple TV 7.1 for Apple TV 3rd generation and later, iOS 8.2 for iPhone 4s and later, iPod touch 5th generation and later and iPad 2 and later. It's also available for Macs with OS X Mountain Lion 10.8.5, Mavericks 10.9.5 and Yosemite 10.10.2.

The vulnerability had stemmed from a former U.S. government policy that prevented companies from exporting strong encryption, instead requiring them to create weak "export-grade" products to ship to its customers outside of the United States. Though the policy was lifted more than a decade ago, the weaker encryption continued to be used by software companies.

Apple's fix addresses the issue by removing support for those weak "export grade" products, also known as RSA keys.

The updates for iOS 8.2, Apple TV 7.1 and Mac OS X Mountain Lion, Mavericks and Yosemite are available now.

Article Link: Apple Issues Security Updates Fixing 'FREAK' Security Flaw

 

[tywebb13]

.

 

[NY Guitarist]

Definitely DON'T want to get my FREAK on when it comes to my Macs.

 

[JosephAW]

Since when does apple offer updates three os's back? If so what about 10.7, 10,6, 10.5, 10.4, 10.3?

 

[mr.steevo]

So does this mean we HAVE to upgrade our iPhone 5 to iOS 8 to get the security patch?

 

[Yuniverse]

Am I safe to assume that 10.10.3 beta is patched, then?

 

[ghostface147]

Am I safe to assume that 10.10.3 beta is patched, then?

No. I am on the latest beta and it fails the test.

----------

So does this mean we HAVE to upgrade our iPhone 5 to iOS 8 to get the security patch?

Unfortunately the answer is yes.

 

[ilovemyibook]

So does this mean we HAVE to upgrade our iPhone 5 to iOS 8 to get the security patch?

You don't HAVE to upgrade. This security flaw is so minor that I wouldn't worry about it.

 

[Morod]

Thank you for the links, tywebb!

Here are the links for the OS X ones:

New Security Updates:

http://swcdn.apple.com/content/down...70a6qhmw68ektytdre/SecUpd2015-002Yosemite.pkg

http://swcdn.apple.com/content/down...wfdgrbnv0stjp97a7/SecUpd2015-002Mavericks.pkg

http://swcdn.apple.com/content/down...a1swg417fxwj9d9jmw8w/SecUpd2015-002MtLion.pkg

One special one for the Early 2015 macs:

http://swcdn.apple.com/content/down...d42rew/SecUpd2015-002YosemiteEarly2015Mac.pkg

 

[7thson]

Since when does apple offer updates three os's back? If so what about 10.7, 10,6, 10.5, 10.4, 10.3?

Since the CEO told a major shareholder to put up or shut up regarding Apples ROI policy towards sustainability.
Since Joni Ive has been more available to the press and allowed himself to be interviewed, at length.
Since Apple finally "figured out" how to make a larger iPhone correctly, even though everyone else did so years ago.
Since that time when Apple released an open source sdk to benefit medical research towards endemic diseases.
In short, because times change. Apple is changing. So put on your seatbelt, because Apple is in four wheel drive, baby!

 

[C DM]

Since when does apple offer updates three os's back? If so what about 10.7, 10,6, 10.5, 10.4, 10.3?

Perhaps not affected by it. Or they have to draw the line somewhere somehow.

 

[willybNL]

The Question should more be: why is iOS 7 not updated.

There are many users still on the (actively being sold) iPhone 3S and 4. They can't upgrade and are vulnerable now. Check?

 

[Ultracyclist]

Dont use fix for 10.10.3 Beta!!!

Downloading the fix and installing it on your 10.10.3 Beta will result in your OS being downgraded to 10.10.2 Photos and Photos won't be working.

Appstore wont give you the option to update to the 10.10.3 beta again.

At this moment my MBP is reinstalling 10.10 and im forced to writ this on my good old iBook G4.

 

[Menel]

So does this mean we HAVE to upgrade our iPhone 5 to iOS 8 to get the security patch?

No, 8 is old. Came out last year.

The new 8.2 they just released has the security update, you must update to 8.2

 

[2010mini]

Apple TV 3rd generation and later?!??


Is there a later generation model I don't know about????

 

[mr.steevo]

Apple TV 3rd generation and later?!??


Is there a later generation model I don't know about????

Yes. The Apple TV (F)uture

----------

No, 8 is old. Came out last year.

The new 8.2 they just released has the security update, you must update to 8.2

That's too bad. My wife's 5 running on iOS 7.x is faster than my 5s on iOS 8.x.

 

[chrfr]

Here are the links for the OS X ones:

New Security Updates:

http://swcdn.apple.com/content/down...70a6qhmw68ektytdre/SecUpd2015-002Yosemite.pkg

http://swcdn.apple.com/content/down...wfdgrbnv0stjp97a7/SecUpd2015-002Mavericks.pkg

http://swcdn.apple.com/content/down...a1swg417fxwj9d9jmw8w/SecUpd2015-002MtLion.pkg

One special one for the Early 2015 macs:

http://swcdn.apple.com/content/down...d42rew/SecUpd2015-002YosemiteEarly2015Mac.pkg

I'm curious. Why do you feel it's a benefit to post these links rather than direct people to the downloads from Apple's support site that are designed for standalone Installer use?

----------

Since when does apple offer updates three os's back? If so what about 10.7, 10,6, 10.5, 10.4, 10.3?

This has been normal procedure for years, since at least 10.6 was released. Apple provides security updates for the current version of OS X, and the previous two.

 

[TMRJIJ]

Downloading the fix and installing it on your 10.10.3 Beta will result in your OS being downgraded to 10.10.2 Photos and Photos won't be working.

Appstore wont give you the option to update to the 10.10.3 beta again.

At this moment my MBP is reinstalling 10.10 and im forced to writ this on my good old iBook G4.

You could have just changed the systemversion.plist back to 10.10.3. This fix didn't downgrade the OS.

 

[Belmont31R]

Downloading the fix and installing it on your 10.10.3 Beta will result in your OS being downgraded to 10.10.2 Photos and Photos won't be working.

Appstore wont give you the option to update to the 10.10.3 beta again.

At this moment my MBP is reinstalling 10.10 and im forced to writ this on my good old iBook G4.

Same here. Downgraded me to 10.10.2 and my Photos app is blocked. Needs a warning post in the OP

 

[chrfr]

You could have just changed the systemversion.plist back to 10.10.3. This fix didn't downgrade the OS.

It pretty much does downgrade it- the update installs a different kernel. I'm very surprised the update even runs in 10.10.3; clearly it should not.

 

[toke lahti]

Since when does apple offer updates three os's back? If so what about 10.7, 10,6, 10.5, 10.4, 10.3?

You counted 7 OS's back there, but isn't iOS7 only ONE(1) os back?

 

[Tallgntlmn]

Well, this sucks. I have been deliberately not updating past iOS 7 so I don't lose performance on my iPad 2 and iPhone 4s. Now I have to do the darn update so I can continue to buy stuff or do banking on those devices. Thanks Apple for forcing me into making my devices suck performance wise. Gotta love it. I wish they would get their software side of the house in order.

 

[NY Guitarist]

I can't find MR thread at the moment but apparently this update breaks Nvidia drivers for certain graphics cards.

 

[TMRJIJ]

Same here. Downgraded me to 10.10.2 and my Photos app is blocked. Needs a warning post in the OP

Edit the systemversion.plist and restart. It will work again. You should still have the added features of 10.10.3 including Photos, the diverse emoji, and bug fixes (mostly).
The kernel however is changed unless you get it from a TM backup (probably removing the fix?) or Beta 3.

 

[redheeler]

You counted 7 OS's back there, but isn't iOS7 only ONE(1) os back?

You realize that poster is referring to OS X 10.7 not iOS 7, right?