For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website.

For information about the Apple Product Security PGP Key, see How to use the Apple Product Security PGP Key.

Where possible, CVE IDs are used to reference the vulnerabilities for further information.

Jan 23, 2017 About the security content of OS X Server v5.0.3. Learn about the security content of OS X Server v5.0.3. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. Apple’s OS X Server market share is relatively non-existent, to put it mildly. Their approach to computers as tools used to develop and create is vastly different from other servers, which tend. These server packages can be used to turn an OS X client into a rudimentary server of sorts, but by default both the types of included server options and your ability to configure them are limited. Buy OS X Server. Just like that, your Mac is a powerful server. MacOS Server brings even more power to your business, home office, or school. Designed to work with macOS and iOS, macOS Server makes it easy to configure Mac and iOS devices. It’s also remarkably simple to install, set up, and manage. OS X Server is a server operating system designed specifically to be installed and used on Apple-based server machines. It is an Apple proprietary server OS. Apple has released several versions of the OS X server, including Cheetah Server (version 10.0), Puma Server (version 10.1) and Mavericks Server (version 10.9, released Oct 2013).

To learn about other Security Updates, see Apple Security Updates.

OS X Server v5.0.3

Os X Server 10.6

apache
Available for: OS X Yosemite v10.10.5 or later
Impact: Multiple vulnerabilities in Apache, the most serious of which may allow a remote attacker to cause a denial of service
Description: Multiple vulnerabilities existed in Apache versions prior to 2.4.16. These issues were addressed by updating Apache to version 2.4.16.
CVE-ID
CVE-2013-5704
CVE-2014-3581
CVE-2014-3583
CVE-2014-8109
CVE-2015-0228
CVE-2015-0253
CVE-2015-3183
CVE-2015-3185

BIND
Available for: OS X Yosemite v10.10.5 or later
Impact: Multiple vulnerabilities in BIND, the most severe of which may allow a remote attacker to cause a denial of service
Description: Multiple vulnerabilities existed in BIND versions prior to 9.9.7. These issues were addressed by updating BIND to version 9.9.7.
CVE-ID
CVE-2014-8500
CVE-2015-1349

PostgreSQL
Available for: OS X Yosemite v10.10.5 or later
Impact: Multiple vulnerabilities in PostgreSQL, the most serious of which may lead to arbitrary code execution
Description: Multiple vulnerabilities existed in PostgreSQL versions prior to 9.3.9. These issues were addressed by updating PostgreSQL to version 9.3.9.
CVE-ID
CVE-2014-0067
CVE-2014-8161
CVE-2015-0241
CVE-2015-0242
CVE-2015-0243
CVE-2015-0244
CVE-2015-3165
CVE-2015-3166
CVE-2015-3167

Os X Server 3.2.2

Wiki Server
Available for: OS X Yosemite v10.10.5 or later
Impact: Multiple XML security issues in Wiki Server
Description: Multiple XML vulnerabilities existed in Wiki Server based on Twisted. This issue was addressed by removing Twisted.
CVE-ID
CVE-2015-5911 : Zachary Jones of WhiteHat Security Threat Research Center