Yosemite users - update your OS

[chubbyfatazn]

Didn't see this posted here...

A serious vulnerability present in every iteration of Apple's desktop operating system since OS X 10.7 — one which allows any user process to gain root privileges — was disclosed to the public on Thursday following the release of OS X 10.10.3, which addresses the issue, and users are urged to update as older OS X versions will remain susceptible to attack.

The problem revolves around an unpublished OS X API used by system processes, like System Preferences, for privilege escalation. TrueSec's Emil Kvarnhammar discovered that any OS X user, whether or not their account possesses administrative rights, could gain root access by exploiting this API.

...

As a result, OS X users are urged to upgrade to Yosemite version 10.10.3 as soon as possible. Apple will not patch versions older than 10.10, reportedly due to the complexity of the fix.

For users running OS X 10.10, 10.10.1, or 10.10.2, a patch for this bug is included in Security Update 2015-004.

...

http://appleinsider.com/articles/15...ut-wont-patch-lion-mountain-lion-or-mavericks

 

[RampantAndroid]

Won't patch Mavericks? My fiance's old macbook pro (2009 model) can't get Yosemite, so her laptop remains vulnerable...that's so nice.

 

[mmntech]

Well, I guess Windows can't have all the fun. Flash and Java see to that.

Won't patch Mavericks? My fiance's old macbook pro (2009 model) can't get Yosemite, so her laptop remains vulnerable...that's so nice.

It's not supported? Yosemite runs on my Late 2008 MacBook. Should work on her MBP.

 

[RampantAndroid]

Well, I guess Windows can't have all the fun. Flash and Java see to that.



It's not supported? Yosemite runs on my Late 2008 MacBook. Should work on her MBP.

Never showed up in the store...

 

[Rakehellion]

Won't patch Mavericks? My fiance's old macbook pro (2009 model) can't get Yosemite, so her laptop remains vulnerable...that's so nice.

It's compatible with Yosemite.

 

[chubbyfatazn]

Won't patch Mavericks? My fiance's old macbook pro (2009 model) can't get Yosemite, so her laptop remains vulnerable...that's so nice.

Mid/late-2007 and newer MBPs are supported. I've got Yosemite running on an old mid-2009 15" MBP right now actually.

https://support.apple.com/en-us/HT201475

 

[lucia]

I'll download it later today after work. Thx for your info.

 

[ControlD]

Hmm. I still have one running Mavericks and one running Mountain Lion. Guess it's time to update those things.

 

[mmntech]

Never showed up in the store...

That's odd.

Punch this link into a browser on her Mac. Should open up the link in the store.
https://itunes.apple.com/us/app/os-x-yosemite/id915041082?mt=12

 

[Compman55]

is 10.6.8 an issue, or they just assumed it is no longer used much.