The update patches a bug that Apple said might have been actively exploited.