Apple Releases Security Updates for OS X El Capitan and OS X Yosemite [Updated]

[MacRumors]

Apple today released Security Update 2016-001 for OS X El Capitan users, introducing important security fixes to the operating system. Apple has also also introduced Security Update 2016-005 for OS X Yosemite users.

The Security Updates are available to all OS X Yosemite and El Capitan users and can be downloaded from the Mac App Store. Apple recommends all users install the update, and a full list of what's fixed can be found in the accompanying support document.

Most security updates are generally built into OS X updates as they are released, with separate security-only updates only being introduced when standard updates to the operating system are not expected. The release of a Security Update for OS X El Capitan suggests we may not see any new versions of the operating system ahead of the launch of macOS Sierra.

Update: Today's security update fixes a series of critical kernel vulnerabilities that were recently patched in iOS with the release of iOS 9.3.5. On iOS devices, the vulnerabilities were part of a sophisticated jailbreak and malware attack that gave access to all of the functionality of an iPhone or iPad.

Citizen Lab and Lookout, who discovered the vulnerabilities on OS X and iOS, are credited with the fix.

Update 2: There's also a Safari 9.1.3 update to fix vulnerabilities in the Safari browser.

Article Link: Apple Releases Security Updates for OS X El Capitan and OS X Yosemite [Updated]

 

[Tuci]

400 MB. Serious ****.

 

[S.B.G]

introducing important security fixes to the operating system

I wish Apple would give more details on the "important security fixes" they deploy.

 

[idark77]

I would know what they fixed...

 

[KALLT]

I wish Apple would give more details on the "important security fixes" they deploy.

They do in a separate note, always. It will appear here: https://support.apple.com/HT201222.

 

[Quu]

I wish Apple would give more details on the "important security fixes" they deploy.

Here are the release notes for this specific update. https://support.apple.com/en-gb/HT205731

EDIT:// It would appear these are actually not the correct release notes, why Apple reuses the same name for different security updates is beyond me.

 

[tywebb13]

400 MB. Serious ****.

There are three parts to it. If you want to install the El Capitan one manually do it in this order:

Full Bundle Update:
http://swcdn.apple.com/content/down...1r0p30oz6tx3ygo689whk1f4/FullBundleUpdate.pkg (18.8MB)

Firmware Update:
http://swcdn.apple.com/content/down...vm1r0p30oz6tx3ygo689whk1f4/FirmwareUpdate.pkg (130.1MB)

Security Update 2016-001 10.11.6: http://swcdn.apple.com/content/down...z6tx3ygo689whk1f4/SecUpd2016-001ElCapitan.pkg (265.2MB)

Last one requires a restart.

Here are the Yosemite ones:

Firmware Update http://swcdn.apple.com/content/down...hx9tfvsavc7i4vk1ay6q15hvmt/FirmwareUpdate.pkg (115.5MB)

Security Update 2016-005 10.10.5 http://swcdn.apple.com/content/down...vc7i4vk1ay6q15hvmt/SecUpd2016-005Yosemite.pkg (352.1MB)

(no Full Bundle Update)

The Yosemite one is actually bigger than the El Capitan one.

Alternative links:

Security Update 2016-001 10.11.6: https://support.apple.com/kb/DL1891?locale=en_US

Security Update 2016-005 10.10.5 https://support.apple.com/kb/DL1890?locale=en_US

Notice that there ISN'T one for mavericks. So that's the end of mavericks as far as security is concerned. But they DID release a new safari for mavericks (and yosemite). Here they are respectively:

http://swcdn.apple.com/content/down...ycbq8uuciu5td7co45am/Safari9.1.3Mavericks.pkg

http://swcdn.apple.com/content/down...k1jczzzvxm9ih4fupo0wz/Safari9.1.3Yosemite.pkg

 

[thisisnotmyname]

I wish Apple would give more details on the "important security fixes" they deploy.

The separate the message purposely so as not to provide those who might exploit the problems being addressed with time to do harm before people have a chance to apply the fix.

 

[chrfr]

Here are the release notes for this specific update. https://support.apple.com/en-gb/HT205731

Those are the release notes for OS X 10.11.3 and Security update 2016-001 for Yosemite from January 2016; these are not relevant to this update. Apple hasn't yet published the release notes for these updates.

 

[Fall Under Cerulean Kites]

400 MB. Serious ****.

You’re not on dial-up, are you? :-D

I wish Apple would give more details on the "important security fixes" they deploy.

I’m not too concerned with what has been fixed at this point in time. Details will emerge later. I trust the developer, however.

 

[mikeboss]

new Build# after applying the update: 15G1004

 

[ferretex]

Obviously they've also deployed Safari 9.1.3 for OS X El Capitán, and yes, there's a different Build# as mikeboss points out...I wonder what they found...

 

[chrfr]

The actual release notes for this update are here: https://support.apple.com/HT207130
This patches the vulnerabilities just patched in iOS 9.3.5.

 

[Kaibelf]

As long as these fixes are baked into Sierra I'm happy.

 

[photoj2754]

There are three parts to it. If you want to install the El Capitan one manually do it in this order:

Full Bundle Update:
http://swcdn.apple.com/content/down...1r0p30oz6tx3ygo689whk1f4/FullBundleUpdate.pkg (18.8MB)

Firmware Update:
http://swcdn.apple.com/content/down...vm1r0p30oz6tx3ygo689whk1f4/FirmwareUpdate.pkg (130.1MB)

Security Update 2016-001 10.11.6: http://swcdn.apple.com/content/down...z6tx3ygo689whk1f4/SecUpd2016-001ElCapitan.pkg (265.2MB)

Last one requires a restart.

Here are the Yosemite ones:

Firmware Update http://swcdn.apple.com/content/down...hx9tfvsavc7i4vk1ay6q15hvmt/FirmwareUpdate.pkg (115.5MB)

Security Update 2016-005 10.10.5 http://swcdn.apple.com/content/down...vc7i4vk1ay6q15hvmt/SecUpd2016-005Yosemite.pkg (352.1MB)

(no Full Bundle Update)

The Yosemite one is actually bigger than the El Capitan one.

Alternative links:

Security Update 2016-001 10.11.6: https://support.apple.com/kb/DL1891?locale=en_US

Security Update 2016-005 10.10.5 https://support.apple.com/kb/DL1890?locale=en_US

Notice that there ISN'T one for mavericks. So that's the end of mavericks as far as security is concerned. But they DID release a new safari for mavericks (and yosemite). Here they are respectively:

http://swcdn.apple.com/content/down...ycbq8uuciu5td7co45am/Safari9.1.3Mavericks.pkg

http://swcdn.apple.com/content/down...k1jczzzvxm9ih4fupo0wz/Safari9.1.3Yosemite.pkg

So going to the App store and installing the update includes everything for El Capitan? Or do we need to do something else?

 

[/\/\]

So we are currently beta tester for the new update?

After the update, my Mac Pro 2008 doesn't work anymore.

- Mac Pro has no start up sound anymore
- I can login, but it takes forever to load my desktop and the files on the desktop
- when I want to start some application, it says "Sie können das Programm <app-name>.app nicht öffnen, da Es möglicherweise beschädigt oder unvollständig ist." Something like: you can not open this application, because it's damaged or incomplete.

Seriously apple???

Any help appreciated.

 

[Weaselboy]

So going to the App store and installing the update includes everything for El Capitan? Or do we need to do something else?

Just do all in one download from the App Store and it includes everything. There is no reason whatsoever to download and install these separately.

 

[MacsRgr8]

So, not for Mavericks?
I thought it was stil supported in these security updates.

 

[Avenged110]

The lack of Mavericks support for this update (as 10.9.5 did receive the Safari 9.1.3 update today) is interesting. Considering Mavericks receives fewer patches per security update as we near the end of support, I'm curious if Mavericks is actually not susceptible to the vulnerabilities, or if Apple is just unwilling to put in the work to effectively fix what they deem to be an old OS.

 

[macsba]

400 MB. Serious ****.

414 MB here.

Must be some serious business here. As usual, Apple is being very cryptic for the reason.

 

[photoj2754]

Just do all in one download from the App Store and it includes everything. There is no reason whatsoever to download and install these separately.

Thank you. That's what I did.

 

[Samford]

Thank you. That's what I did.

This update takes 20 minutes to complete, be patient with 2 blank screens, do not interrupt process.

 

[LogicalVue]

Be wary if you're using a Mac Pro with the Nvidia web drivers. This broke the current Nvidia driver (346.03.15f02) so no more nice 4K retina display until the Nvidia update is posted.

 

[tywebb13]

Just do all in one download from the App Store and it includes everything. There is no reason whatsoever to download and install these separately.

Of course you could try to do it via the mac app store. And that would be OK if it works.

The trouble is that it doesn't always work properly this way.

So there IS a reason to have standalone installers. Apple know this. Otherwise why would they have made them available too?

There are other reasons for standalone installers too. You can install onto several macs without having to redownload each time. And you can also install them without the internet - whereas the mac app store requires internet.

 

[haddy]

new Build# after applying the update: 15G1004

Ummm mine's 10.10.5 14F1912