I got an update to 10.11 El Capitan yesterday, which probably fixes the vulnerability. You can see the fix in Apple's support page, have a look at the bottom of the page about "System Boot":
https://support.apple.com/en-us/HT207275
It looks like even 10.10 Yosemite got a fix. Here's a full list of security fixes Apple has made to its software: