HT204413: About Security Update 2015-002
Learn about About Security Update 2015-002
Q: Lion 10.7(.5) : Where is the patch for Secure Transport CVE-2015-1067 (FREAK) ?
-
Mar 10, 2015 7:42 PMby arthurbny,Safari Version 6.1.6 (7537.78.2) - freak attack client test shows that my Safari browser is vulnerable:
https://freakattack.com/clienttest.html
I've talked to AppleCare support (valid until June 2015) and also submitted 'feedback' on the MacBook Pro.
Hoping they provide the Lion update soon.
-
Mar 11, 2015 1:16 PMby cjnifty,Security updates are a must. If Apple decides they are too short on engineers to continue providing security updates for Lion, I'm ok with that but only if they give advance warning and a clear statement that Lion security updates will either no longer be produced or be produced with a lag. The problem is that upgrading to a new OS to get security updates is time consuming and disruptive.
So can we get a clear answer from Apple? Is Lion EOL for security updates? And can we get advance warning of EOL for Mountain Lion?
-
Mar 15, 2015 2:38 PMby PERockwell,Agreed that Apple needs to be a bit clearer on their software EOL policy.
It looks like currently Apple is using an "N - 2" policy, that is, they are supporting the current version plus the prior 2 versions. That would match with them dropping Lion support when Yosemite was released. Yosemite made Lion the "N - 3" release.
If I were a betting man, I would expect that Mountain Lion will drop off the support window when the next release of OS X hit the streets, possibly in a year's time frame since Apple does seem to be on a 1 year OS X release cycle.
Another point to consider - Macs released before 2007 can not run Mountain Lion or later releases. (I have one of them - a late-2006 Core2 Duo iMac). All other Macs since then can be upgraded to Yosemite. That also may factor into why Apple is dropping support for Lion - the hardware that requires Lion is in the obsolete hardware list.
