Apple Security Advisory 2016-12-13-3 – iTunes 12.5.4 is now available and addresses memory corruption, arbitrary code execution, and various other vulnerabilities.