{"id":56551,"date":"2016-09-02T08:54:26","date_gmt":"2016-09-02T15:54:26","guid":{"rendered":"https:\/\/www.intego.com\/mac-security-blog\/?p=56551"},"modified":"2016-09-12T11:01:32","modified_gmt":"2016-09-12T18:01:32","slug":"os-x-el-capitan-yosemite-security-updates-patch-trident-flaws-2","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/os-x-el-capitan-yosemite-security-updates-patch-trident-flaws-2\/","title":{"rendered":"OS X El Capitan, Yosemite Security Updates Patch Trident Flaws"},"content":{"rendered":"

\"Apple<\/p>\n

Apple has released Security Update 2016-001 El Capitan and Security Update 2016-005 Yosemite, as well as updates to its web browser\u00a0with\u00a0Safari 9.1.3. Apple\u2019s software updates fix two of the three \u201cTrident\u201d vulnerabilities previously patched with iOS 9.3.5<\/a>.<\/p>\n

These security updates are available for\u00a0OS X Yosemite 10.10.5 and OS X El Capitan 10.11.6.\u00a0Unfortunately, it appears that Mavericks users may be left vulnerable to at least two of the three Trident flaws. (The standalone Safari 9.1.3 update includes Mavericks, which patches one\u00a0out of three\u00a0vulnerabilities.)<\/p>\n

OS X and iOS share a codebase so it makes sense they patched OS X as well. What’s a bit surprising is\u00a0that a company as skilled as the one that made Pegasus to exploit the iOS vulnerabilities would not realize that the Mac shares those same flaws and not try to exploit them. No exploits for the Trident vulnerabilities have been discovered on the Mac, though that doesn’t mean an exploit isn’t out there\u2014just that one hasn’t been found yet.<\/p>\n

As Apple detailed in its OS X<\/a> and iOS 9.1.3<\/a> security bulletins, following are the bugs addressed in these updates:<\/p>\n