Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

How do I find information about a Security Update that I was just notified was installed if the App Store Update section does not does not have any record of a recent security update?

I am running OS X 10.10.1. I just got a notification: "Security Update Installed - A new security update was installed on your Mac." The only option to respond to the notification is "Close". There is nothing about a recent security update in the App Store Update section. How would I go about getting information about this security update?

MacBook Pro, OS X Yosemite (10.10.1)

Posted on Dec 22, 2014 7:13 PM

Reply
Question marked as Best reply

Posted on Dec 22, 2014 7:17 PM

Here ya go.

About OS X NTP Security Update - Apple Support

26 replies

Dec 23, 2014 7:51 PM in response to babowa

In babowa's screenshot, it looks like "Automatically check for updates" was deselected, so it seems like manual download and installation would be necessary in that case (which babowa did).


For the case where "Automatically check for updates" is selected, but none of the sub-options are selected, can someone confirm whether the App store presented this update. That is, would this update be presented to users, even if auto installation is disabled?

Dec 23, 2014 9:11 PM in response to dan.0

i obviously cannot comment on this update; however, I do know that the process you are asking about does work exactly as advertised (so to speak) - before I decided to deselect all options some time ago, I did get a little popup that offered to either install now, wait, or install in 24 hours (if I remember correctly). Since I do not appreciate anything going on without my knowledge, I immediately turned off everything.

Dec 23, 2014 9:59 PM in response to babowa

I also get those notifications when software is available. However, I'm particularly interested in whether this update triggered such a notification, since this is Apple's "first-ever automated security update" (source: Reuters article referenced earlier in this thread).


Before I disable the auto-installation, I would like to make sure that I'll still be notified of such security updates, so that I can proceed to confirm or skip the installation.

Dec 23, 2014 10:40 PM in response to dan.0

This was probably a Vendor update and not a OS update. exp: Microsoft product = Security update for a share relationship between system files and personal information permitted as share-able content. Be it, software/product registration or network ownership (ISP/Local Machine) I recommend searching the latest's local machine records by date and isolate the update record itself, which should include the licensed Vendor and version. Perform a Google search on your findings, at which time you will probably discover the who, what, why and where. My guess, You didn't get a msg alert informing you to the reasoning behind the update as it didn't meet the class type, even though it announced its self as a security update. Which would also limit the End-Users required action, why you just needed to acknowledge the process and not permit it. Hope this helps.


A Apple-A-Day will keep the Androids at bay ;-)

Gamerx65x

Dec 24, 2014 12:39 AM in response to erpilgrim

From Apple/support:

OS X NTP Security Update

  • ntpdAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10.1Impact: A remote attacker may be able to execute arbitrary codeDescription: Several issues existed in ntpd that would have allowed an attacker to trigger buffer overflows. These issues were addressed through improved error checking.To verify the ntpd version, type the following command in Terminal: what /usr/sbin/ntpd. This update includes the following versions:
    • Mountain Lion: ntp-77.1.1
    • Mavericks: ntp-88.1.1
    • Yosemite: ntp-92.5.1
  • CVE-IDCVE-2014-9295 : Stephen Roettger of the Google Security Team
  • See: About OS X NTP Security Update - Apple Support

Dec 29, 2014 5:23 PM in response to Barney-15E

Dear Barney-1SE,


The first time I tried this it did not work. I think I did not successfully sort through all of the Installations. I did find it when I just tried it again. The Precise steps that I followed to access the information about this Security Update for anyone who may be interested are.


1. In the  menu select "About This Mac"

2. In the "Overview" tab of the window that opens select "System Report..."

3. In the left column of the next window that opens, under the "Software" section, select "Installations". It may take a few moments to load the information.

4. If you are looking for something that was installed on a particular date, as I was, click on "Install Date" in the header so that you can search by date.


Thanks. Now I know where to look when something is installed that does not show up in the App Store "Updates" window.

Dec 29, 2014 7:15 PM in response to stedman1

Given the description in the Reuters article ( http://www.reuters.com/article/2014/12/23/us-apple-cybersecurity-idUSKBN0K108W20 141223 ), it sounds like it would not matter what your App Store Update settings are in relation to this particular security update, that Apple updated everyone automatically in this case. Can anyone confirm if that is true? Could that be why it did not show up in the App Store Updates window? - because it did not follow the App Store Updates preferences even though it is an Apple update? So perhaps looking at About This Mac > Overview > System Report... > Software > Installations be the only place to look to confirm that it was installed?

How do I find information about a Security Update that I was just notified was installed if the App Store Update section does not does not have any record of a recent security update?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.