Apple's OS X 10.10.2 to Fix Security Vulnerabilities Exposed by Google's Project Zero

google's security team, project zero, week disclosed public several security vulnerabilities in os x, 3 months after issue shared apple (via ars technica). while apple has not commented officially on issues, appears 1 has been patched , imore reports remaining 2 fixed in os x 10.10.2, in developer testing.

​

project zero works discover security vulnerabilities of various operating systems , software, giving owners 90 days notice patch issues before publishing findings public. in markup of apple's os x, problems involving memory corruption, kernel code execution, , sandbox escape discovered team. ars technica notes:

quote

at first glance, none of them appear highly critical, since 3 appear require attacker have access targeted machine. [...]

still, exploits combined separate attack elevate lower-level privileges , gain control on vulnerable macs. , since disclosures contain proof-of-concept exploit code, provide enough technical detail experienced hackers write malicious attacks target unknown vulnerabilities.

click expand...

as 90-day deadline hit during week, group began posting findings online. google's notes suggest 1 of vulnerabilities fixed release of os x yosemite, while other 2 remained unaddressed.

pointed out imore, apple's incoming os x 10.10.2 update indeed include fixes remaining 2 vulnerabilities exposed project zero.

quote

ased on latest build of os x 10.10.2, seeded [wednesday] developers, apple has fixed of vulnerabilities listed above. means fixes available running yosemite 10.10.2 goes general availability.

click expand...

google's project 0 has been disclosing significant security vulnerabilities number of months now, discovering few significant windows issues , sharing them online. project shines light on much-needed fixes various operating systems, undercuts point of security, in windows case that's left users' systems more vulnerable publicized knowledge before microsoft fix it. still, 90-day window before public disclosure intended give companies time fix issues while giving them incentive in timely fashion.

article link: apple's os x 10.10.2 fix security vulnerabilities exposed google's project zero

 

what fixing wifi issues? can't right?

 

Forums News and Article Discussion MacRumors.com News Discussion

• iPhone
• Mac OS & System Software
• iPad
• Apple Watch
• Notebooks
• iTunes
• Apple ID
• iCloud
• Desktop Computers
• Apple Music
• Professional Applications
• iPod
• iWork
• Apple TV
• iLife
• Wireless