OS X Mavericks 10.9.5 Update

Version 10.9.5:

  • apache_mod_php
    • Description: Multiple vulnerabilities existed in PHP 5.4.24, the most serious of which may have led to arbitrary code execution. This update addresses the issues by updating PHP to version 5.4.30
    • CVE-ID: CVE-2013-7345, CVE-2014-0185, CVE-2014-0207, CVE-2014-0237, CVE-2014-0238, CVE-2014-1943, CVE-2014-2270, CVE-2014-3478, CVE-2014-3479, CVE-2014-3480, CVE-2014-3487, CVE-2014-3515, CVE-2014-3981, CVE-2014-4049
  • Bluetooth
    • Description: A validation issue existed in the handling of a Bluetooth API call. This issue was addressed through improved bounds checking.
    • CVE-ID: CVE-2014-4390
  • CoreGraphics
    • Description: An out of bounds memory read existed in the handling of PDF files. This issue was addressed through improved bounds checking.
    • CVE-ID: CVE-2014-4378
  • CoreGraphics
    • Description: An integer overflow existed in the handling of PDF files. This issue was addressed through improved bounds checking.
    • CVE-ID: CVE-2014-4377
  • Foundation
    • Description: An XML External Entity issue existed in NSXMLParser's handling of XML. This issue was addressed by not loading external entities across origins.
    • CVE-ID: CVE-2014-4374
  • Intel Graphics Driver
    • Description: A user-space buffer overflow existed in the shader compiler. This issue was addressed through improved bounds checking.
    • CVE-ID: CVE-2014-4393
  • Intel Graphics Driver
    • Description: Multiple validation issues existed in some integrated graphics driver routines. These issues were addressed through improved bounds checking.
    • CVE-ID: CVE-2014-4394, CVE-2014-4395, CVE-2014-4396, CVE-2014-4397, CVE-2014-4398, CVE-2014-4399, CVE-2014-4400, CVE-2014-4401, CVE-2014-4416
  • IOAcceleratorFamily
    • Description: A null pointer dereference existed in the handling of IOKit API arguments. This issue was addressed through improved validation of IOKit API arguments.
    • CVE-ID: CVE-2014-4376
  • IOAcceleratorFamily
    • Description: An out-of-bounds read issue existed in the handling of an IOAcceleratorFamily function. This issue was addressed through improved bounds checking.
    • CVE-ID: CVE-2014-4402
  • IOHIDFamily
    • Description: An out-of-bounds read issue existed in the handling of an IOHIDFamily function. This issue was addressed through improved bounds checking.
    • CVE-ID: CVE-2014-4379
  • IOKit
    • Description: A validation issue existed in the handling of certain metadata fields of IODataQueue objects. This issue was addressed through improved validation of metadata.
    • CVE-ID: CVE-2014-4388
  • IOKit
    • Description: An integer overflow existed in the handling of IOKit functions. This issue was addressed through improved bounds checking.
    • CVE-ID: CVE-2014-4389
  • Kernel
    • Description: In some cases, the CPU Global Descriptor Table was allocated at a predictable address. This issue was addressed through always allocating the Global Descriptor Table at random addresses.
    • CVE-ID: CVE-2014-4403
  • Libnotify
    • Description: An out-of-bounds write issue existed in Libnotify. This issue was addressed through improved bounds checking
    • CVE-ID: CVE-2014-4381
  • OpenSSL
    • Description: Multiple vulnerabilities existed in OpenSSL 0.9.8y. This update was addressed by updating OpenSSL to version 0.9.8za.
    • CVE-ID: CVE-2014-0076, CVE-2014-0195, CVE-2014-0221, CVE-2014-0224, CVE-2014-3470
  • QT Media Foundation
    • Description: A memory corruption issue existed in the handling of RLE encoded movie files. This issue was addressed through improved bounds checking.
    • CVE-ID: CVE-2014-1391
  • QT Media Foundation
    • Description: A buffer overflow existed in the handling of MIDI files. This issue was addressed through improved bounds checking.
    • CVE-ID: CVE-2014-4350
  • QT Media Foundation
    • Description: A memory corruption issue existed in the handling of the 'mvhd' atoms. This issue was addressed through improved bounds checking.
    • CVE-ID: CVE-2014-4979
  • ruby
    • Description: A heap buffer overflow existed in LibYAML's handling of percent-encoded characters in a URI. This issue was addressed through improved bounds checking. This update addresses the issues by updating LibYAML to version 0.1.6
    • CVE-ID: CVE-2014-2525

http://support.apple.com/kb/HT6443

ダウンロードは以下から
http://support.apple.com/kb/HT6443