Security-announce

Download

security-announce@lists.apple.com

February 2017

1 participants
2 discussions

APPLE-SA-2017-02-21-2 Logic Pro X 10.3.1
by Apple Product Security 21 Feb '17

21 Feb '17

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2017-02-21-2 Logic Pro X 10.3.1 Logic Pro X 10.3.1 is now available and addresses the following: Projects Available for: OS X Yosemite v10.10 or later (64 bit) Impact: Opening a maliciously crafted GarageBand Project file may lead to arbitrary code execution Description: A memory corruption issue was addressed through improved memory handling. CVE-2017-2374: Tyler Bohan of Cisco Talos Installation note: Logic Pro X may be obtained from the Mac App Store. Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJYrImXAAoJEIOj74w0bLRGAvYP/0mKY/r/SaN20txhtrdESiGS h+xo11Kyg0tYPNQO4ryoPnQIymdRyZBP8kS/tejn+IwzZvugeepg0ya9EMlRuded wBh/E5hsmLitGdovB/gM9KkGC81zbbEhsavHe0m9AHoz1PpAF1sMeLgEQokxrfIe lxm1tT8Z4VmNXZ+r6Quy+eGJymUUy8MJ9qquPp7PPF05DSr2kANQB7hVSNf7qRvC 9JRnCxqCeDNK1njWlX7Zh+7cYJRwQgTmwi4QyoxekLLDEujpfd6JFE5pVx0bqHb9 NkelmTMCtyGaXAmjkKxQFBG7gw0aR91meYatRv0DdCwc8G67VwVAayeFSFEXXNdT 9IPESlj5IcMNU8iaZw87VYagWE/BVCc3B4ho1lcapviaTX8iReWGVPnG24YsrbGa arz7ur6MerIkONOok/ydp62Teb7IDRCHYQ04DZWuoKQmPNYn0Jm/BsAUlOjwarC/ EsLG8HKVYxIhcdWlpaWqR/o5jNYdOWL+JwW07VWr452Q0XDpo3Eh7VSR2wea62jc wbAuE84ugJLazuFAYSRVXTO1g/hnK2CnmPG7R7J6WARyBp6rLOrHK5GZjOJFG1dd qxcBsLu01GEdgVcedKPZpn50wOlsa4eD63SnBOQ2R+kXHnKtjSq9BKN7tIU/tpcy mtI6EqCXfWVOWqnjUPVm =hzK7 -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2017-02-21-1 GarageBand 10.1.6
by Apple Product Security 21 Feb '17

21 Feb '17

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2017-02-21-1 GarageBand 10.1.6 GarageBand 10.1.6 is now available and addresses the following: Projects Available for: OS X Yosemite v10.10 or later Impact: Opening a maliciously crafted GarageBand Project file may lead to arbitrary code execution Description: A memory corruption issue was addressed through improved memory handling. CVE-2017-2374: Tyler Bohan of Cisco Talos Installation note: GarageBand may be obtained from the Mac App Store. Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJYrImXAAoJEIOj74w0bLRGyr0QAILapV0W5UfNAcFn8FeZIXKw H10/c+doJ41Y3QQH+4qo+Y0eMVlKLc8zkQk0Ocz+e3RYtScFCELVysX037qczPuW Znr9lvycMgpuYfIosWmde+1FF7nvSiN7RvAVRMBN4OIOmFT82h+vFxZf2Zeka4JL Ali8kh6uK3W3A8kNJiO0sM/r0G8nRf6OvgtH5YL9gjBc9e6J1m4upx4KEMPRlaiY Ykn7Y03gYk11LwTlB1Q5f+b88VTMtItPLadal3ICQONXGGBu6GyvjOLQVAxVvggn K4pgPRSDh/YvRlCcXl319sJigg+0Fa6gFk/NHcMI4YzOhxWHNUWDzrG721aJCRer 6YWcD6LgHsJODi8yp4yuJ3DbESh3WFiWS4ATVJThOuW8hATGhukbPHvwcoPaM3rN 5MLhImi9QpT2rE92DpQ5X0m/KzLdhOrgk3CnyR1aKmP2L2qD4ZbKlwdMwIKByxlW ypcv+C9BP31KcPLbLhsQGOuNb4NGeTbKv/yQvHB3KeN/w750WtMamT2CE8sFkPnu +X5wQk6pZi6e4Xc5nQbLkIHEPtZNo4O8qUoPPmaTsK6lwcvB1C5/09Zcfc3pOBy7 +Cp+6dimx/nbCcK4dW8QzIZIEd88hXhk9I441lBUGE4AMXU6l5npV/DaZTZOj6Ga b9ZTShls177KyTLSw0CW =gmwM -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0