{"id":32824,"date":"2014-10-21T12:37:38","date_gmt":"2014-10-21T19:37:38","guid":{"rendered":"http:\/\/www.intego.com\/mac-security-blog\/?p=32824"},"modified":"2026-07-04T02:37:06","modified_gmt":"2026-07-04T09:37:06","slug":"security-update-2014-005-mitigates-poodle-vulnerability","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/security-update-2014-005-mitigates-poodle-vulnerability\/","title":{"rendered":"Security Update 2014-005 Mitigates POODLE Vulnerability"},"content":{"rendered":"

Last week Apple released Security Update 2014-005 along with OS X Yosemite 10.10<\/a>. Security Update 2014-005 mitigates\u00a0the POODLE vulnerability (CVE-2014-3566), a design flaw in SSL (Secure Socket Layer) 3.0 that cold be exploited by hackers.<\/p>\n

Security Update 2014-005 is available for: OS X Mountain Lion 10.8.5, and OS X Mavericks 10.9.5.<\/p>\n

\"Security<\/p>\n

Apple’s support page describes the mitigated vulnerability as follows:<\/p>\n

CVE-2014-3566<\/a> : An attacker may be able to decrypt data protected by SSL. There are known attacks on the confidentiality of SSL 3.0 when a cipher suite uses a block cipher in CBC mode. An attacker could force the use of SSL 3.0, even when the server would support a better TLS version, by blocking TLS 1.0 and higher connection attempts. This issue was addressed by disabling CBC cipher suites when TLS connection attempts fail.<\/p><\/blockquote>\n

Mac users can update through Apple\u2019s Software Update tool by choosing\u00a0Apple menu<\/strong>\u00a0>\u00a0Software Update<\/strong>\u00a0when you’re ready to install, or you can go directly to Apple’s support page to download the updates from there.<\/p>\n

OS X Mountain Lion users go here to download Security Update 2014-005<\/a> (159.5 MB)<\/p>\n

OS X Mavericks users go here to download Security Update 2014-005<\/a> (7.2 MB)<\/p>\n","protected":false},"excerpt":{"rendered":"

Last week Apple released Security Update 2014-005 along with OS X Yosemite 10.10. Security Update 2014-005 mitigates\u00a0the POODLE vulnerability (CVE-2014-3566), a design flaw in SSL (Secure Socket Layer) 3.0 that cold be exploited by hackers. Security Update 2014-005 is available for: OS X Mountain Lion 10.8.5, and OS X Mavericks 10.9.5. Apple’s support page describes […]<\/p>\n","protected":false},"author":4,"featured_media":8761,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[3151,1546,1549,1552,144],"class_list":["post-32824","post","type-post","status-publish","format-standard","has-post-thumbnail","category-security-news","tag-apple","tag-cve-2014-3566","tag-poodle","tag-security-update-2014-005","tag-vulnerability"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t