Apple this week issued its third security update of the year, this one correcting a flaw in firmware that could allow some Mac OS X user passwords to be bypassed.