Apple Releases OS X 10.9.2 With Fix for Major SSL Vulnerability, FaceTime AudioApple today released OS X 10.9.2, which includes a fix for a major SSL security flaw that first came to light on Friday, after the release of iOS 7.0.6.
<img class="aligncenter size-full wp-image-403415" alt="1092" src="
http://cdn.macrumors.com/article-new/2014/02/1092.jpg" width="773" height="308" />
The bug, which was introduced in the form of a single line of errant code that allowed an attacker to bypass SSL/TLS verification routines, left OS X users vulnerable to a man-in-the-middle attack. Shared wired or wireless networks could allow an attacker to intercept communications on affected machines, acquiring sensitive information like login credentials and passwords, or injecting harmful malware.
<img class="aligncenter size-full wp-image-403427" alt="10_9_2_goto" src="
http://cdn.macrumors.com/article-new/2014/02/10_9_2_goto.jpg" width="696" height="342" /><center>
Test on gotofail.com after updating to OS X 10.9.2</center>
While the SSL vulnerability was first introduced to iOS in 2012, it only affects Macs running OS X 10.9. Lion and Mountain Lion users are not affected.
OS X 10.9.2 was first seeded to developers in
December and has seen
seven beta iterations since that time. Along with an emergency fix for the SSL bug, OS X 10.9.2 also includes
FaceTime Audio, new blocking controls for iMessage and FaceTime, call waiting support for FaceTime, Mail fixes for bugs with fetching messages, AutoFill improvements, and several other bug fixes and general improvements.
It is recommended that all users running OS X 10.9 Mavericks upgrade to OS X 10.9.2 as soon as possible to disable the vulnerability.
-
OS X Mavericks Update v10.9.2 (859.70 MB)
-
OS X Mavericks Update v10.9.2 (Combo) (859.70 MB)
Alongside OS X 10.9.2, Apple has also released security updates for OS X Mountain Lion and Lion:
-
Security Update 2014–001 (Mountain Lion) (115.8 MB)
-
Security Update 2014–001 (Lion) (123.40 MB)
-
Security Update 2014–001 Server (Lion) (173.60 MB)
Recent Mac and iOS Blog Stories •
Apple Adds Streaming Television Channel 'TV4 Play' to Apple TV in Sweden •
Apple Asks EU to Limit Injunctions in Patent Infringement Cases •
Grovemade Introduces Walnut and Maple iPhone Cases and Docks •
'SunSprite' Solar-Powered Bluetooth Device Measures Optimal Sun Exposure •
Disney Launches 'Disney Movies Anywhere' App With iTunes Integration •
'Rogue' Series6XT Graphics for Future iOS Devices Detailed •
Apple Sues Chinese Government Agency and Shanghai Company Over Siri-Related Patents •
WhatsApp to Add Voice Calling in Q2 2014<img width='1' height='1' src='
http://rss.feedsportal.com/c/35070/f/648327/s/37866f63/sc/5/mf.gif' border='0'/><br clear='all'/><div class='mf-viral'><table border='0'><tr><td valign='middle'><a href="
http://share.feedsportal.com/share/twitter/?u=http%3A%2F%2Fwww.macrumors.com%2F2014%2F02%2F25%2Fosx-update-ssl-facetime-audio%2F&t=Apple+Releases+OS+X+10.9.2+With+Fix+for+Major+SSL+Vulnerability%2C+FaceTime+Audio" target="_blank"><img src="
http://res3.feedsportal.com/social/twitter.png" border="0" />[/url] <a href="
http://share.feedsportal.com/share/facebook/?u=http%3A%2F%2Fwww.macrumors.com%2F2014%2F02%2F25%2Fosx-update-ssl-facetime-audio%2F&t=Apple+Releases+OS+X+10.9.2+With+Fix+for+Major+SSL+Vulnerability%2C+FaceTime+Audio" target="_blank"><img src="
http://res3.feedsportal.com/social/facebook.png" border="0" />[/url] <a href="
http://share.feedsportal.com/share/linkedin/?u=http%3A%2F%2Fwww.macrumors.com%2F2014%2F02%2F25%2Fosx-update-ssl-facetime-audio%2F&t=Apple+Releases+OS+X+10.9.2+With+Fix+for+Major+SSL+Vulnerability%2C+FaceTime+Audio" target="_blank"><img src="
http://res3.feedsportal.com/social/linkedin.png" border="0" />[/url] <a href="
http://share.feedsportal.com/share/gplus/?u=http%3A%2F%2Fwww.macrumors.com%2F2014%2F02%2F25%2Fosx-update-ssl-facetime-audio%2F&t=Apple+Releases+OS+X+10.9.2+With+Fix+for+Major+SSL+Vulnerability%2C+FaceTime+Audio" target="_blank"><img src="
http://res3.feedsportal.com/social/googleplus.png" border="0" />[/url] <a href="
http://share.feedsportal.com/share/email/?u=http%3A%2F%2Fwww.macrumors.com%2F2014%2F02%2F25%2Fosx-update-ssl-facetime-audio%2F&t=Apple+Releases+OS+X+10.9.2+With+Fix+for+Major+SSL+Vulnerability%2C+FaceTime+Audio" target="_blank"><img src="
http://res3.feedsportal.com/social/email.png" border="0" />[/url]</td><td valign='middle'></td></tr></table></div>
<img src="[url]http://da.feedsportal.com/r/186531084085/u/49/f/648327/c/35070/s/37866f63/sc/5/rc/1/rc.img" border="0"/>[/url]
<img src="[url]http://da.feedsportal.com/r/186531084085/u/49/f/648327/c/35070/s/37866f63/sc/5/rc/2/rc.img" border="0"/>[/url]
<img src="[url]http://da.feedsportal.com/r/186531084085/u/49/f/648327/c/35070/s/37866f63/sc/5/rc/3/rc.img" border="0"/>[/url]
<img src="[url]http://da.feedsportal.com/r/186531084085/u/49/f/648327/c/35070/s/37866f63/a2.img" border="0"/>[/url]<img width="1" height="1" src="
http://pi.feedsportal.com/r/186531084085/u/49/f/648327/c/35070/s/37866f63/a2t.img" border="0"/><div class="feedflare">
<img src="[url]http://feeds.feedburner.com/~ff/MacRumors-Front?d=yIl2AUoC8zA" border="0"></img>[/url]
<img src="[url]http://feeds.feedburner.com/~ff/MacRumors-Front?d=6W8y8wAjSf4" border="0"></img>[/url]
<img src="[url]http://feeds.feedburner.com/~ff/MacRumors-Front?d=qj6IDK7rITs" border="0"></img>[/url]
</div><img src="
http://feeds.feedburner.com/~r/MacRumors-Front/~4/VGbW-NVEWdw" height="1" width="1"/>
Source:
Apple Releases OS X 10.9.2 With Fix for Major SSL Vulnerability, FaceTime Audio
