Apple Issues Security Updates Fixing 'FREAK' Security Flaw

[iBungie]

I can't find MR thread at the moment but apparently this update breaks Nvidia drivers for certain graphics cards.

I can confirm that. Applied the Yosemite update (on 10.10.1) and on reboot screen is jumbled. Clicking the mouse in vicinity of usual icons activates something so this suggests OS & applications are ok just the video drivers. I've no idea how to undo - any suggestions? If I can't find an easy way then its backup restore time.

Booting in safe mode shows everything else is working fine except video drivers. Curiously OS X now reporting as 10.10.2 even though I have not applied that update - just the security update.

 

[merlinmage]

On 10.9.5, mach_kernel is visible after the update.

 

[tywebb13]

.

 

[chrfr]

Because they weren't there before. They are up there now though...
Note that system requirement for the yosemite one is os x 10.10.2 not 10.10.3.

Thanks.
Apparently, this update will install on 10.10.3 even though it shouldn't, thereby breaking the OS and causing programs to not work.

 

[Lokkiser]

I can't find MR thread at the moment but apparently this update breaks Nvidia drivers for certain graphics cards.

Indeed it does. My 2010 Mbp goes all stripey when starting to boot,then gets stuck to white screen and is totally unresponsive.

 

[Trinite]

I can't find MR thread at the moment but apparently this update breaks Nvidia drivers for certain graphics cards.

Hm. I can't find that thread now either (though I saw it this morning). Does anyone know more? Or, for example, WHICH cards?

 

[manu chao]

Well, this sucks. I have been deliberately not updating past iOS 7 so I don't lose performance on my iPad 2 and iPhone 4s. Now I have to do the darn update so I can continue to buy stuff or do banking on those devices.

Do you really think that was the first security fix in iOS 8? Or that iOS 8 itself did not fix any security holes that were in iOS 7?

There are security holes fixed constantly, but you only hear about them if have been published before the fix went out.

----------

Indeed it does. My 2010 Mbp goes all stripey when starting to boot,then gets stuck to white screen and is totally unresponsive.

Boot into verbose mode (press cmd-V during booting) and see what is the last message before it hangs (and then google that message).

 

[Lokkiser]

----------

[/COLOR]

Boot into verbose mode (press cmd-V during booting) and see what is the last message before it hangs (and then google that message).[/QUOTE]

Thanks for the advice. Tried that. The messages are pretty much illegible because of the sripes on the screen. Also,the report didn't even get to the end before screen went black and the machine shut itself down. Tried again,same thing, except now the screen went white again.

 

[chrfr]

Thanks for the advice. Tried that. The messages are pretty much illegible because of the sripes on the screen. Also,the report didn't even get to the end before screen went black and the machine shut itself down. Tried again,same thing, except now the screen went white again.

This isn't the Nvidia drivers, it's the GPU in your laptop failing- the 2010 Macbook Pro has major issues with it. There's no video drivers in this update. The reason people with the Nvidia drivers and aftermarket video cards are having problems is because Nvidia prevents the separate drivers from loading when the build number of the operating system changes.

 

[ernieH]

Security update 2015-002

Just a quick observation….downloaded the 2015-002 security update through the app store notification; on restart, 2012 Macbook pro was hanging….linen background and darker grey apple on screen for at least 10 min. Did a hard shut down and re-started. The update did not re-appear in the app store updates. Re-booted one more time, update did not re-appear. Everything seems OK so far; will check more when I get back from work (sorry, I'm not a Mac OS expert or else I could probably provide more useful information).

[MacBook Pro, 15-inch, mid 2012, OS X 10.8.5; 8 GB; HD Graphics 4000 and NVidia GeForce GT 650M]


EDIT: It does appear the update was installed [thanks tywebb for your post below re: Installations]

 

[Lokkiser]

This isn't the Nvidia drivers, it's the GPU in your laptop failing- the 2010 Macbook Pro has major issues with it. There's no video drivers in this update. The reason people with the Nvidia drivers and aftermarket video cards are having problems is because Nvidia prevents the separate drivers from loading when the build number of the operating system changes.

Ok. Not good news. Have to investigate this more. Thanks for the info.

 

[Sasparilla]

Since when does apple offer updates three os's back? If so what about 10.7, 10,6, 10.5, 10.4, 10.3?

Since they went to yearly desktop release schedules…not a big fan of yearly desktop releases, but its how things are being done.

It's time for Apple to provide security updates for 2 releases back in iOS as well (as well as allow prior version roll back if users wish).

There's also a little lesson in all this - the world is changing and using older non security updated OS's isn't something that was as viable as it once was if you're using the device to connect to the internet with any security.

 

[haddy]

Downloading the fix and installing it on your 10.10.3 Beta will result in your OS being downgraded to 10.10.2 Photos and Photos won't be working.

Appstore wont give you the option to update to the 10.10.3 beta again.

At this moment my MBP is reinstalling 10.10 and im forced to writ this on my good old iBook G4.

For me on 10.10.3 beta it wouldn't let me install the security update.....I guess it's already there.

 

[Tallgntlmn]

Do you really think that was the first security fix in iOS 8? Or that iOS 8 itself did not fix any security holes that were in iOS 7?

Of course not. I imagine there have been quite a few other fixes. I just hate that I have to upgrade and degrade performance to get security fixes that one would think would be backward compatible.

If performance would not take a big hit, I would have upgraded back when it came out. The stories of iPad 2's being so slow you can't use them anymore or the phone being so slow it is inconvenient have scared me away from iOS 8 so far.

 

[subsonix]

Since when does apple offer updates three os's back? If so what about 10.7, 10,6, 10.5, 10.4, 10.3?

Since they now do yearly OS updates one would hope that they do at least that.

----------

Apple's fix addresses the issue by removing support for those weak "export grade" products

That's the fix I was hoping for, I can't understand why these were in there to begin with. It always was a fact that a server could "downgrade" you to 512bit RSA, 40 bit DES with this in place.

 

[tywebb13]

.

 

[tywebb13]

.

 

[Morod]

Yes. You are quite correct.

You may fix this by running this in Terminal:

sudo chflags hidden /mach_kernel

Okay, I'm an idiot. Now that that's been cleared up, a question:
Is the mach_kernel being visible a bad thing? I ask because I don't even know what it is, let alone if it should be visible or not. I am running 10.9.5. And Terminal makes me nervous.
Thanks for any help!

 

[tywebb13]

.

 

[2010mini]

The 3rd generation is the 2012 model.

The "later" model is the 2013 model called 3rd generation (Revision A).

They both got the update, but generation 1 and 2 models didn't.

Apart from the different a5 chip, I was told there really isn't any difference between the two. They are both classified as 3rd gen. If rev a had more features then I would understand

 

[manu chao]

If performance would not take a big hit, I would have upgraded back when it came out. The stories of iPad 2's being so slow you can't use them anymore or the phone being so slow it is inconvenient have scared me away from iOS 8 so far.

I run iOS 8 on an iPad 3rd gen (which has the same processor as the iPad 2, just faster graphics to compensate for larger number of pixels on its retina screen). And it is slow but one gets used to it.

 

[tywebb13]

.

 

[C DM]

The Question should more be: why is iOS 7 not updated.

There are many users still on the (actively being sold) iPhone 3S and 4. They can't upgrade and are vulnerable now. Check?

Where are those phones being actively sold by Apple?

 

[sonamo]

How can we check from the Terminal if this update has been installed on a machine?

 

[tywebb13]

.