#SECURE ERASE EL CAPITAN MAC OS X#
#SECURE ERASE EL CAPITAN UPDATE#
#SECURE ERASE EL CAPITAN PATCH#

Impact: An attacker with a privileged network position may be able to intercept network trafficДescription: An issue existed in the handling of HSTS preload list entries in Safari private browsing mode. This issue was addressed through improved URL parsing.Д¬VE-2015-5858 : Xiaofeng Zheng of Blue Lotus Team, Tsinghua University Impact: A maliciously crafted URL may be able to bypass HSTS and leak sensitive dataДescription: A URL parsing vulnerability existed in HSTS handling. This issue was resolved through improved validation. Impact: Malicious FTP servers may be able to cause the client to perform reconnaissance on other hostsДescription: An issue existed in the handling of FTP packets when using the PASV command. The issue was address through improved restrictions of cookie creation.Д¬VE-2015-5885 : Xiaofeng Zheng of Blue Lotus Team, Tsinghua University Impact: An attacker in a privileged network position can track a user's activityДescription: A cross-domain cookie issue existed in the handling of top level domains. The complete list of certificates may be viewed at.

#SECURE ERASE EL CAPITAN UPDATE#

Impact: Update to the certificate trust policyДescription: The certificate trust policy was updated.

#SECURE ERASE EL CAPITAN PATCH#

These issues were addressed by updating bash version 3.2 to patch level 57.

Taekyoung Kwon), Yonsei University, Seoul, KoreaДescription: Multiple vulnerabilities existed in bash versions prior to 3.2 patch level 57. This issue issue was addressed through improved memory handling.Д¬VE-2015-5862 : YoungJin Yoon of Information Security Lab.

Impact: Playing a malicious audio file may lead to an unexpected application terminationДescription: A memory corruption issue existed in the handling of audio files.

#SECURE ERASE EL CAPITAN MAC OS X#

This was addressed by improved Apple Event handling.Д¬VE-2015-5849 : Jack Lawrence for: Mac OS X v10.6.8 and later Impact: A user connected through screen sharing can send Apple Events to a local user's sessionДescription: An issue existed with Apple Event filtering that allowed some users to send events to other users. This issue was addressed through improved access control list checks.Д¬VE-2015-5836 : XiaoFeng Wang of Indiana University, Luyi Xing of Indiana University, Tongxin Li of Peking University, Tongxin Li of Peking University, Xiaolong Bai of Tsinghua University Impact: A malicious application may gain access to a user's keychain itemsДescription: An issue existed in validation of access control lists for iCloud keychain items. This issue was addressed by updating PHP to version 5.5.27. This issue was addressed through improved validation checks.Дescription: Multiple vulnerabilities existed in PHP versions prior to 5.5.27, including one which may have led to remote code execution. Impact: An attacker with a privileged network position may be able to extract payload from eSCL packets sent over a secure connectionДescription: An issue existed in the processing of eSCL packets. This issue was addressed through improved environment variable handling.Д¬VE-2015-5897 : Dan Bastone of Gotham Digital Science Impact: A local attacker may be able to inject arbitrary code to processes loading the Address Book frameworkДescription: An issue existed in Address Book framework's handling of an environment variable. Available for: Mac OS X v10.6.8 and later

Secure erase el capitan