About the security content of Security Update 2017-001
"Description: A logic error existed in the validation of credentials. This was addressed with improved credential validation."I hope they won't stop to this brief summary, because a "logic error in the validation of credentials" shouldn't be able to allow the creation of a root super user with empty password.I'm hope they'll go deep in the gory details, to show us how it's in fact much more complicated than a "if !password { createEmptySuper()}" line written by mistake.