Apple Addresses FREAK and Releases Security Updates for OS X, iOS, and Apple TV

["US-CERT" <US-CERT () ncas us-cert gov>]

NCCIC / US-CERT

National Cyber Awareness System:

Apple Addresses FREAK and Releases Security Updates for OS X, iOS, and Apple TV [ 
https://www.us-cert.gov/ncas/current-activity/2015/03/09/Apple-Releases-Security-Updates-OS-X-iOS-and-Apple-TV ] 
03/09/2015 08:52 PM EDT 
Original release date: March 09, 2015

Apple has released security updates for OS X, iOS, and Apple TV to address multiple vulnerabilities, one of which may 
allow an attacker to decrypt secure communications between vulnerable clients and servers (FREAK [ 
https://www.us-cert.gov/ncas/current-activity/2015/03/06/FREAK-SSLTLS-Vulnerability ]).

Updates available include:


  * Xcode 6.2 for OS X Mavericks v10.9.4 or later 
  * Security Update 2015-002 for OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite v10.10.2 
  * Apple TV 7.1 for Apple TV 3rd generation and later 
  * iOS 8.2 for iPhone 4s and later, iPod touch (5th generation) and later, and iPad 2 and later 

US-CERT encourages users and administrators to review Apple security updates HT204427 [ 
https://support.apple.com/en-us/HT204427 ], HT204413 [ https://support.apple.com/en-us/HT204413 ], HT204426 [ 
https://support.apple.com/en-us/HT204426 ], and HT204423 [ https://support.apple.com/en-us/HT204423 ], and apply the 
necessary updates.

________________________________________________________________________

This product is provided subject to this Notification [ http://www.us-cert.gov/privacy/notification ] and this Privacy 
& Use [ http://www.us-cert.gov/privacy/ ] policy.

________________________________________________________________________

OTHER RESOURCES: Contact Us [ http://www.us-cert.gov/contact-us/ ] | Security Publications [ 
http://www.us-cert.gov/security-publications ] | Alerts and Tips [ http://www.us-cert.gov/ncas ] | Related Resources [ 
http://www.us-cert.gov/related-resources ] 

STAY CONNECTED: Sign up for email updates [ http://public.govdelivery.com/accounts/USDHSUSCERT/subscriber/new ]