OS X 10.11.2, Safari 9.0.2, and related updates

The barrage of updates from Apple, released over the last few hours, includes OS X 10.11.2, iOS 9.2, watchOS 2.1, tvOS 9.1, OS X El Capitan Recovery Update 1.0, and Xcode 7.2.

OS X 10.11.2 contains many important security fixes, in addition to addressing numerous bugs. Fixes include: PHP is updated to 5.5.30, sandboxing of Contacts, Bluetooth, zlib vulnerability, installation of configuration profiles, parsing of disk images, parsing of iBooks, several IO-family vulnerabilities, several kernel vulnerabilities, masquerade as a keychain server and other keychain exploits, parsing of XML files, LibreSSL is updated to version 2.1.8, SSL handshakes, and SIP.

Those which also apply to Mavericks 10.9.5 or Yosemite 10.10.5 are included in Security Update 2015-008 for those versions of OS X.

Included with the 10.11.2 update, and available separately, is Safari 9.0.2, which fixes two WebKit vulnerabilities which could have been exploited by crafted websites.

Xcode 7.2 includes updates for these newly released versions of Apple’s operating systems, and fixes security vulnerabilities in Git, which is updated to version 2.5.4, and two other issues.

These are quite major and large updates. The OS X update in particular is not an easy or simple install. Apart from the usual long process involving at least two restarts, I experienced a very long pause – with intense and prolonged disk activity – after I had entered my password, and before the Finder started to appear, on the first login after the update. Loading the Finder was then extremely slow. This does not seem to be abnormal.

El Capitan Recovery Update 1.0 is small and installs simply, without any restarts.

I wish you ample bandwidth, fair winds, and trouble-free updates.