Safari 8.0.4, Safari 7.1.4, Safari 6.2.4 Out with Security Updates for OS X
Apple has released a group of important security updates for the Mac Safari web browser, versioned as Safari 8.0.4 for OS X Yosemite, Safari 7.1.4 for OS X Mavericks, and Safari 6.2.4 for OS X Mountain Lion.
The notes accompanying the download are brief, simply recommending the security update for all Mac users as it offers “improvements to stability and security.”
Mac users can find the download available now through the Software Update mechanism, available from Apple menu > App Store > Updates. The Safari security update is small, weighing in around 60MB, and does not require a reboot to install. You will need to relaunch Safari if the browser is open, however.
Users who are interested in learning more about the specifics of the update can find additional details on this support page from Apple. The technical details for the security issues resolved with Safari 8.0.4 and Safari 7.1.4 are as follows:
Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution
Description: Multiple memory corruption issues existed in WebKit. These issues were addressed through improved memory handling.
Impact: Inconsistent user interface may prevent users from discerning a phishing attack
Description: A user interface inconsistency existed in Safari that allowed an attacker to misrepresent the URL. This issue was addressed through improved user interface consistency checks.
There is some speculation the latter patched issue may have related to adware or junkware pop-ups and installer attempts. If you’re at all concerned about that, it would be a good idea to install the most recent Safari update available, and then proceed to run an app such as AdwareMedic to scan for any potential crud leftover.