APPLE-SA-2015-10-21-6 Mac EFI Security Update 2015-002
APPLE-SA-2015-10-21-6 Mac EFI Security Update 2015-002
- Subject: APPLE-SA-2015-10-21-6 Mac EFI Security Update 2015-002
- From: Apple Product Security <email@hidden>
- Date: Wed, 21 Oct 2015 11:36:38 -0700
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
APPLE-SA-2015-10-21-6 Mac EFI Security Update 2015-002
Mac EFI Security Update 2015-002 is now available and addresses the
following:
EFI
Available for: OS X Mavericks v10.9.5
Impact: An attacker can exercise unused EFI functions
Description: An issue existed with EFI argument handling. This was
addressed by removing the affected functions.
CVE-ID
CVE-2015-7035 : Corey Kallenberg, Xeno Kovah, John Butterworth, and
Sam Cornwell of The MITRE Corporation, coordinated via CERT
Installation note:
Mac EFI Security Update 2015-002 may be obtained from
the Mac App Store.
Information will also be posted to the Apple Security Updates
web site: http://support.apple.com/kb/HT1222
This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org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=Hb9X
-----END PGP SIGNATURE-----
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Security-announce mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden