About the security content of OS X El Capitan v10.11.4 and Security Update 2016-002

🗓️ 21 Mar 2016 00:00:00Reported by AppleType

Security content of OS X El Capitan v10.11.4 and Security Update 2016-002. For protection, Apple waits to disclose security issues until a full investigation and necessary patches are available. The update addresses multiple vulnerabilities in various components, such as Apache, AppleRAID, USBNetworking, Bluetooth, Carbon, dyld, FontParser, and HTTPProtocol

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Using Components with Known Vulnerabilities affects IBM Security Guardium (multiple CVEs)	16 Jun 201821:41	–	ibm
IBM Security Bulletins	Security Bulletin:Multiple Security Vulnerabilities exist in IBM Cognos Insight	24 Feb 202007:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in SSL affect IBM DataPower Gateways (CVE-2015-3193, CVE-2015-3195, CVE-2015-1794)	8 Jun 202122:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH affect IBM XIV Gen3 (CVE-2016-0777, CVE-2016-0778)	18 Jun 201800:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Security Access Manager for Web (CVE-2015-3194, CVE-2015-3195, CVE-2015-3196)	16 Jun 201821:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM i	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libxml, openssh, PAM, Firefox, affects IBM SmartCloud Provisioning for IBM Software Virtual Appliance	17 Jun 201822:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by libpng vulnerabilities (CVE-2015-7981, CVE-2015-8126)	18 Jun 201801:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Business Process Manager shipped with IBM Cloud Orchestrator and IBM SmartCloud Orchestrator	17 Jun 201822:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Open Source openSSL affect IBM Security Identity Governance Appliance (CVE-2015-3194, CVE-2015-3195,CVE-2015-3196)	16 Jun 201821:39	–	ibm

Source	Link
support	www.support.apple.com/en-us/HT201222

21 Mar 2016 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 210

CVSS 3.18.8 - 9.8

CVSS 310

EPSS0.63468

SSVC

apple security update os x el capitan cve-ids apache_mod_php appleraid appleusbnetworking bluetooth carbon dyld fontparser httpprotocol