This issue was addressed through improved handling of credentials. Impact: A local user may obtain passwords after setting up or editing profiles in Profile Managerĭescription: In certain circumstances, setting up or editing profiles in Profile Manager may have logged passwords to a file. These issues were addressed by switching from YAML to JSON as Profile Manager's internal serialization format. Impact: Multiple vulnerabilities in LibYAML, the most serious of which may lead to arbitrary code executionĭescription: Multiple vulnerabilities existed in LibYAML. This issue was addressed by resetting the cache upon changes to the SACLs. Impact: Group SACL changes for Mail may not be respected until after a restart of the Mail serviceĭescription: SACL settings for Mail were cached and changes to the SACLs were not respected until after a restart of the Mail service. These issues were addressed by updating PostgreSQL to version 9.2.7. Impact: Multiple vulnerabilities in PostgreSQL, the most serious of which may lead to arbitrary code executionĭescription: Multiple vulnerabilities existed in PostgreSQL.

This issue was addressed through improved encoding of HTML output. Impact: Visiting a maliciously crafted website may lead to a cross-site scripting attackĭescription: A cross-site scripting issue existed in Xcode Server. This issue was addressed through additional validation of SQL queries.ĬVE-2014-4424 : Sajjad Pourali of CERT of Ferdowsi University of Mashhad Impact: A remote attacker may be able to execute arbitrary SQL queriesĭescription: A SQL injection issue existed in Wiki Server. These issues were addressed by updating BIND to version 9.9.2-P2 Impact: Multiple vulnerabilities in BIND, the most serious of which may lead to a denial of serviceĭescription: Multiple vulnerabilities existed in BIND. Available for: OS X Yosemite v10.10 or later

Setting up apple os x server