Where to download the Safari 6.2.5 Update?

Question

freevito Author

Level 2

311 points

Where to download the Safari 6.2.5 Update?

Apple just sent the following security update email:

APPLE-SA-2015-04-08-1 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5

Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5 are now available and

address the following:

Safari

Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5,

and OS X Yosemite v10.10.2

Impact: Users may be tracked by malicious websites using client

certificates

Description: An issue existed in Safari's client certificate

matching for SSL authentication. This issue was addressed by improved

matching of valid client certificates.

CVE-ID

CVE-2015-1129 : Stefan Kraus of fluid Operations AG, Sylvain Munaut

of Whatever s.a.

Safari

Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5,

and OS X Yosemite v10.10.2

Impact: Notifications preferences may reveal users' browsing history

in private browsing mode

Description: Responding to push notification requests in private

browsing mode revealed users' browsing history. This issue was

addressed by disabling push notification prompts in private browsing

mode.

CVE-ID

CVE-2015-1128 : Joseph Winn of Credit Union Geek

Safari

Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5,

and OS X Yosemite v10.10.2

Impact: Users' browsing history may not be completely purged

Description: A state management issue existed in Safari that

resulted in users' browsing history not being purged from

history.plist. This issue was addressed by improved state management.

CVE-ID

CVE-2015-1112 : William Breuer, The Netherlands

WebKit

Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5,

and OS X Yosemite v10.10.2

Impact: Visiting a maliciously crafted website may lead to an

unexpected application termination or arbitrary code execution

Description: Multiple memory corruption issues existed in WebKit.

These issues were addressed through improved memory handling.

CVE-ID

CVE-2015-1119 : Renata Hodovan of University of Szeged / Samsung

Electronics

CVE-2015-1120 : Apple

CVE-2015-1121 : Apple

CVE-2015-1122 : Apple

CVE-2015-1124 : Apple

WebKit

Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5,

and OS X Yosemite v10.10.2

Impact: Users' browsing history in private mode may be indexed

Description: A state management issue existed in Safari that

inadvertently indexed users' browsing history when in private

browsing mode. This issue was addressed by improved state management.

CVE-ID

CVE-2015-1127 : Tyler C

WebKit

Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5,

and OS X Yosemite v10.10.2

Impact: Visiting a maliciously crafted website may lead to resources

of another origin being accessed

Description: An issue existed in WebKit's credential handling for

FTP URLs. This issue was addressed by improved URL decoding.

CVE-ID

CVE-2015-1126 : Jouko Pynnonen of Klikki Oy

Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5 may be obtained from

the Mac App Store.

Well, I don't use the Mac App Store (it requires the user to enable Spotlight indexing, which I don't want or need). But I can't find any way to download the new version of Safari directly from Apple's Support website. I would appreciate any help pointing me to a direct download link.

Thanks!

Mac Pro, OS X Mountain Lion (10.8.5), MacBook Pro 17"; 10.6.8

Posted on Apr 8, 2015 1:21 PM

Reply

Answer 1

Kappy

Level 10

361,741 points

Apr 8, 2015 1:28 PM in response to freevito

support.apple.com/downloads/. If it isn't there today wait a few days for it to show up. Otherwise, you will need to use the App Store.

Reply

Answer 2

freevito Author

Level 2

311 points

Apr 8, 2015 1:50 PM in response to Kappy

Thanks for your reply, Kappy. I'll wait a few days as you've recommended. I guess Apple just hasn't posted the update yet.

For the record, the information about the update is contained in Security-announce Digest, Vol 12, Issue 7, stamped with today's date. It seems odd that they would announce the update before it's available, but I infer from your comment that it's not unusual.

Thanks again!

Reply

Answer 3

Kappy

Level 10

361,741 points

Apr 8, 2015 1:52 PM in response to freevito

The update is available from the App Store which you won't use, remember?

Reply

Answer 4

freevito Author

Level 2

311 points

Apr 8, 2015 2:10 PM in response to Kappy

No, no...I remember perfectly. I was referring to the availability of the direct download updater. (Yes, I'm aware of the common belief "there is no standalone updater for Safari", but Apple does post it. It's just that they don't make it easy to find it. My original post was addressed to those folks who know where it is.)

Evidently, the vast majority of folks use the App Store. I won't rant here about why I'd prefer not to use the App Store, but obviously I'll do so if that's the only way to get a security update.

Reply

Answer 5

Kappy

Level 10

361,741 points

Apr 8, 2015 2:20 PM in response to freevito

Apple does not post the update on the support site until a short time after the release data - usually a day or two at most. You will find it through the link I posted. They always go there. It's not a secret site, but it's not openly public unless you use Apple's Support site. It's a permanent tab in my Safari window.

There no longer are standalone upgraders for Safari. There are only security updates that are standalone now.

Reply

Answer 6

freevito Author

Level 2

311 points

Apr 8, 2015 5:37 PM in response to Kappy

You wrote:

There no longer are standalone upgraders for Safari.

I beg to differ, amigo...

...but you're correct in saying that they're not generally available. You have to know where to find them. Evidently, you don't...and obviously I didn't either, or I wouldn't have asked. But I think I know how to find out where they are now.

Thanks again for your prompt replies. 🙂

Reply

Answer 7

Kappy

Level 10

361,741 points

Apr 8, 2015 7:28 PM in response to freevito

I would be curious to know where you found it. I looked on Apple's download site, and could not find it. I was able to find some illegal downloads, but nothing straight from Apple. I pretty much know where things may be found including developer sites if you have access.

Reply