January 2018 - Security-announce

Re: APPLE-SA-2018-1-23-4 tvOS 11.2.5
by Apple Product Security 24 Jan '18

24 Jan '18

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com All, The reply to our APPLE-SA-2018-1-23-4 tvOS 11.2.5 Security Announcement was published to the entire list in error. We apologize for this error. Please don’t email the purported sender - the issue was on our end alone. Thank you, — Apple Product Security _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2018-1-23-7 iCloud for Windows 7.3
by Apple Product Security 24 Jan '18

24 Jan '18

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2018-1-23-7 iCloud for Windows 7.3 iCloud for Windows 7.3 is now available and addresses the following: WebKit Available for: Windows 7 and later Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2018-4088: Jeonghoon Shin of Theori CVE-2018-4096: found by OSS-Fuzz Installation note: iCloud for Windows 7.3 may be obtained from: https://support.apple.com/HT204283 Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQJdBAEBCgBHFiEEcuX4rtoRe4X62yWlg6PvjDRstEYFAlpnnmwpHHByb2R1Y3Qt c2VjdXJpdHktbm9yZXBseUBsaXN0cy5hcHBsZS5jb20ACgkQg6PvjDRstEZDfBAA w9dkaTLeeQanOYecz+uGxbwi/v7xx/W5azZ0I7VuSKGGlSedevNOoy7/3HY8hoa9 jp5vonQ0vNT058i87xdgD0nljWzF7mc5G6WfwCm2pIlruv+gUyqpoDaCepNTv58z Dw7yMISqas5HSLVg3cjrEI3SRaA5iID/cbCQk6JN5q+tEeIQeqDFfyfeTH6TPJR0 xnxCDTxM0gNllkZZwBRcF36+jah+R1b+QCCnfxXTCfCYlrO569TY7ciT/ET2thny g7WXQSFt5sMSlgDcds7O7XM9bd4jxM60dmu1az+mRWeLy5ok4dFZtOwX8EaypIZl IcuIPx7/6L51OLi2ea181c6j418fCQ1vUO8LfY9OV2+Kl7N+nRAqTAwr9Eeox3kx 6ioJQrlddewW6MivktLOguAOsNjI5FQrsXrceqgLypfVxV2ERuduoMy1jrqMa8Ck gm32jnsHiHNVSm2egSyDo+yDkQQH5zhtD2V5Bvh5GhH1AMbV39ZOyIRRwVF3q9jD vqN9Lhuo4dp0cYLJcYut5oCQbFwg8l29l97HMIeRRHvuG50gseS3N9gM17JQ29K/ KQDUeyvCl01OBxw3afJ4pS29zsvgnd3cM7I9y7KNKrCTSE21yg4ENxFItRHsk4H4 TJ83QFmDij7fGiH9KJM/5UKfJGmXwYMsrpVlGwqExbk= =UXIo -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2018-1-23-6 iTunes 12.7.3 for Windows
by Apple Product Security 24 Jan '18

24 Jan '18

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2018-1-23-6 iTunes 12.7.3 for Windows iTunes 12.7.3 for Windows is now available and addresses the following: WebKit Available for: Windows 7 and later Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2018-4088: Jeonghoon Shin of Theori CVE-2018-4096: found by OSS-Fuzz Installation note: iTunes 12.7.3 for Windows may be obtained from: https://www.apple.com/itunes/download/ Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQJdBAEBCgBHFiEEcuX4rtoRe4X62yWlg6PvjDRstEYFAlpng7kpHHByb2R1Y3Qt c2VjdXJpdHktbm9yZXBseUBsaXN0cy5hcHBsZS5jb20ACgkQg6PvjDRstEZjcg/9 FBs93gm4kmoOu0AFgWURNhXr4437i/mMI2w+MKQJcMdJgg3jEcCLRUarKQGxESUM 3n1zLeK6tymCrl0UMvkulZ0ExSCjwjgtzOygHdmkaVIeorYld1mtK2Faozp/J1YV +n9A4DKYdiQCyEP0Kl/7Tp/qYrb7b448tI0dwbw9neZTJ7E9e442co2fZHIWdmY+ gRUmzkeXxk2pj+FLAmlWfzmHEBUHw9Hk04poU7V78IMvLNjUnwt5ORmj78Q0q8I/ 2Y4j1HmHnYVQ0G3oi1VtRr1rdmiTXUJlWBJuzbNxCVZZjjQe/gjUY2aGkxCKwMS2 ntDDezGLYVKO34UODqpw5VlXC9NGD8awUuoCZ532oPmdvVUTwvlu2Ips7IH8bBOz Y5TND7RmEpj52HX0smspf94phrxIaZMA6wsS1YROxbHKZt0gA5RK4iTuUkg/QQyv U++gxXJ1FPZeTq79MT1TaqWHir7Gi5ry3cY+W3pj21Tb6Q6m4sX5mh9IjGZ9u4Wn NW0nkGzhN6ULT5chjCtf9B8UKgBv0PhkGbGUwehUcT7zjG92NuJR6klTQwplOlPF Rqp9j8JFXYtgWvAmz8g6HthHMsim+nvSVfs+v84KF7u5XQQujadBtxEljseN0DId ZPch9wMZGYCujlOIdh1FZ5MZ8gij7gJhlXZCgbJiXTo= =e2O8 -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0

Re: APPLE-SA-2018-1-23-4 tvOS 11.2.5
by Justin Franks 23 Jan '18

23 Jan '18

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=screenrights-org.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc:message-id:references :to; bh=jxn0fAVkge/7HjDEcrvpiiz79RDU9jTKTw8selv4IRU=; b=cD/1ZPGk5ah93zIAq9Bcc2F+IIVg9L4M9incJFVYL4f5Ww+DUNjy2xR6lFev2FyWRa 2otXWQEBWpdfN1slwUDOYTI2y27eXVDUlZM9jWNolHVuijxX0ove+hNq5bM/Fs1lg+82 gcBBqetRJFxeQ3tRYXZWe1ixAHz3wgr9xtCo0BIyEAhoSoY6yGGXUnhOhvTqi8Rh94Ml YZ5iC2NM4DK9WYqgmPZX0E8hndzL8bGxkoN8mnHf4X6DDKnriFx0p3ezeRKzl4gZLVOg RbhAQ69pzoSJvZm+Q4UY/eR4UcgxETbXveK/HIbJ3q+l+l+PhKggohRFIdC45lxv+72C Oamg== > On 24 Jan 2018, at 7:46 am, Apple Product Security > <product-security-noreply(a)lists.apple.com> wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 > > APPLE-SA-2018-1-23-4 tvOS 11.2.5 > > tvOS 11.2.5 is now available and addresses the following: > > Audio > Available for: Apple TV 4K and Apple TV (4th generation) > Impact: Processing a maliciously crafted audio file may lead to > arbitrary code execution > Description: A memory corruption issue was addressed through improved > input validation. > CVE-2018-4094: Mingi Cho, MinSik Shin, Seoyoung Kim, Yeongho Lee and > Taekyoung Kwon of the Information Security Lab, Yonsei University > > Core Bluetooth > Available for: Apple TV 4K and Apple TV (4th generation) > Impact: An application may be able to execute arbitrary code with > system privileges > Description: A memory corruption issue was addressed with improved > memory handling. > CVE-2018-4087: Rani Idan (@raniXCH) of Zimperium zLabs Team > CVE-2018-4095: Rani Idan (@raniXCH) of Zimperium zLabs Team > > Kernel > Available for: Apple TV 4K and Apple TV (4th generation) > Impact: An application may be able to read restricted memory > Description: A memory initialization issue was addressed through > improved memory handling. > CVE-2018-4090: Jann Horn of Google Project Zero > > Kernel > Available for: Apple TV 4K and Apple TV (4th generation) > Impact: An application may be able to read restricted memory > Description: A race condition was addressed through improved locking. > CVE-2018-4092: an anonymous researcher > > Kernel > Available for: Apple TV 4K and Apple TV (4th generation) > Impact: A malicious application may be able to execute arbitrary code > with kernel privileges > Description: A memory corruption issue was addressed through improved > input validation. > CVE-2018-4082: Russ Cox of Google > > Kernel > Available for: Apple TV 4K and Apple TV (4th generation) > Impact: An application may be able to read restricted memory > Description: A validation issue was addressed with improved input > sanitization. > CVE-2018-4093: Jann Horn of Google Project Zero > > QuartzCore > Available for: Apple TV 4K and Apple TV (4th generation) > Impact: Processing maliciously crafted web content may lead to > arbitrary code execution > Description: A memory corruption issue existed in the processing of > web content. This issue was addressed through improved input > validation. > CVE-2018-4085: Ret2 Systems Inc. working with Trend Micro's Zero Day > Initiative > > Security > Available for: Apple TV 4K and Apple TV (4th generation) > Impact: A certificate may have name constraints applied incorrectly > Description: A certificate evaluation issue existed in the handling > of name constraints. This issue was addressed through improved trust > evaluation of certificates. > CVE-2018-4086: Ian Haken of Netflix > > WebKit > Available for: Apple TV 4K and Apple TV (4th generation) > Impact: Processing maliciously crafted web content may lead to > arbitrary code execution > Description: Multiple memory corruption issues were addressed with > improved memory handling. > CVE-2018-4088: Jeonghoon Shin of Theori > CVE-2018-4089: Ivan Fratric of Google Project Zero > CVE-2018-4096: found by OSS-Fuzz > > Installation note: > > Apple TV will periodically check for software updates. Alternatively, > you may manually check for software updates by selecting > "Settings -> System -> Software Update -> Update Software." > > To check the current version of software, select > "Settings -> General -> About." > > Information will also be posted to the Apple Security Updates > web site: https://support.apple.com/kb/HT201222 > > This message is signed with Apple's Product Security PGP key, > and details are available at: > https://www.apple.com/support/security/pgp/ > -----BEGIN PGP SIGNATURE----- > > iQJdBAEBCgBHFiEEcuX4rtoRe4X62yWlg6PvjDRstEYFAlpng7kpHHByb2R1Y3Qt > c2VjdXJpdHktbm9yZXBseUBsaXN0cy5hcHBsZS5jb20ACgkQg6PvjDRstEZBpxAA > prOFNgYdkVj5Qho+Ppw6U/d4xQZKS614VPoD5cfOXR4SxOeDL00LxUkAwMLtIgJm > uZI54DR7zaixBoR8Yms4GN2//TgBjG50wvfpuMQiSDP8LZ4WPcHYI/faDFH43yf7 > rLDYYSXv8olAZU6w+sM858zuPjx/C5lqykDIOCPiFIZMY1XpLNhcaEyw0jhUYlYm > t+KLLNyeXAmBRus/rB2WJk8vRYYwBm3Fz2VyKjUVpvc56ZfezmJTT9sfO/2Hbzaw > stduwdsvhGUUpiK/D866xHniJMngTQjOChIjNiP8RG/BaYG/iKejgaVjdOb7ZUsJ > vLbu6ctvg1UOMUHrfIotWOMI3LdJbTbTpjS9kCkLBj+ZO7jE+CKibflph7BDt0ND > Cafdg34DGu2K3bcCL+CMzscWocw0hPkyYWsxuHatJVuXBEfXfFuzioGzU4FHEeDC > tyRH6Fs+divJ23KEssbcieBP2JeA43j/ORjmigZYnAXb4Myge/NT/3eLzrJ9rfbP > J6QyVU6Zv7jzXdxKdzTMPqNH3RFRhK4ukeHUq9S57Oh6oICAXA6mWCJnlLEB0kST > qSunhULsrufCNVJ4KcfOWz5A0wYijbrylmsCSctaHrJs1nkdaZzNTwUZ/IYHP5Le > qApCYj3ugwMg/wpWdqtOYaMYiwglfIxv9xcwpqetH5o= > =7nmT > -----END PGP SIGNATURE----- > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Security-announce mailing list (Security-announce(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > https://lists.apple.com/mailman/options/security-announce/justin%40screenri… > > This email sent to justin(a)screenrights.org -- **************************************************************************************************************************** Important: this email (including any attachments) is intended only for the addressee(s) and is confidential. It may also contain legally privileged information. If you are not the intended recipient, you are notified that any use, disclosure or dissemination is strictly prohibited. If you have received this email in error, please notify Screenrights immediately by telephone or email and delete all copies of this email. **************************************************************************************************************************** _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2018-1-23-5 Safari 11.0.3
by Apple Product Security 23 Jan '18

23 Jan '18

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2018-1-23-5 Safari 11.0.3 Safari 11.0.3 is now available and addresses the following: WebKit Available for: OS X El Capitan 10.11.6, macOS Sierra 10.12.6, and macOS High Sierra 10.13.3 Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2018-4088: Jeonghoon Shin of Theori CVE-2018-4089: Ivan Fratric of Google Project Zero CVE-2018-4096: found by OSS-Fuzz Installation note: Safari 11.0.3 may be obtained from the Mac App Store. Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQJdBAEBCgBHFiEEcuX4rtoRe4X62yWlg6PvjDRstEYFAlpng7kpHHByb2R1Y3Qt c2VjdXJpdHktbm9yZXBseUBsaXN0cy5hcHBsZS5jb20ACgkQg6PvjDRstEa4ShAA zWqMSo7gFJoVlaGXoqp03g2F9Rn7RtiZf4RN8hf4U83dsoaKoRDcOJRdifqExzg0 7xl+j6tmD9XB8PUr5F7FCKOMrOd8IEmxOa/lYQW/HBkc55TPfLw7oZlOFNsKeLYs +r0HCPml8pGlRe9OS0otd6EsxsGaKv5KqJK0NASwGaiuw+p6cECeUIC4bqTnQg0z 6XDBS4m/wrVUKBiwjV3ypj9HmBJeP6ETGitMS51YyWkR40+ilPD9GwNUwiraxSlB iScMpJ9+tvg1z0+eGmyg0DaDIrszk1ZqqNK3as7Zg0g2nMA7vBCAjlyUph7W+RTF ChHTqbeVE4GrJnz6EJWBOmBeT8+WYZLadnJqvhKAqF+x9tjud1jvyfIK1HgXdsSk /cAxwk6Qzs1qIXLEqqx3yDF9JITFP88RvaK0ARKoNhlb/d23gbLFZ1UI5wxy7yaa gTh1Udd2cJ3WFgpBmesvz9QDJtC4jccLGA4Aye5qxdBAwH0mvQ6abxRUn1c2p9YO tqxGv76/qiSUQO1KHCp9RrP/ky/Dz6NSo2zRRcWivjykO0Yy/D3XAIt67rY2y7hu 65jFUnb39ylAqr9WgyfpR0p3zh2Ou/l0ID3LmJ6aUXikgVKwFBd/EG9Q0wDT6CIj 1sOWr8KlWLbUolyfdjKZdfwZt2DcISO/0dJ5xgZVvV8= =aOVD -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2018-1-23-4 tvOS 11.2.5
by Apple Product Security 23 Jan '18

23 Jan '18

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2018-1-23-4 tvOS 11.2.5 tvOS 11.2.5 is now available and addresses the following: Audio Available for: Apple TV 4K and Apple TV (4th generation) Impact: Processing a maliciously crafted audio file may lead to arbitrary code execution Description: A memory corruption issue was addressed through improved input validation. CVE-2018-4094: Mingi Cho, MinSik Shin, Seoyoung Kim, Yeongho Lee and Taekyoung Kwon of the Information Security Lab, Yonsei University Core Bluetooth Available for: Apple TV 4K and Apple TV (4th generation) Impact: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2018-4087: Rani Idan (@raniXCH) of Zimperium zLabs Team CVE-2018-4095: Rani Idan (@raniXCH) of Zimperium zLabs Team Kernel Available for: Apple TV 4K and Apple TV (4th generation) Impact: An application may be able to read restricted memory Description: A memory initialization issue was addressed through improved memory handling. CVE-2018-4090: Jann Horn of Google Project Zero Kernel Available for: Apple TV 4K and Apple TV (4th generation) Impact: An application may be able to read restricted memory Description: A race condition was addressed through improved locking. CVE-2018-4092: an anonymous researcher Kernel Available for: Apple TV 4K and Apple TV (4th generation) Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed through improved input validation. CVE-2018-4082: Russ Cox of Google Kernel Available for: Apple TV 4K and Apple TV (4th generation) Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization. CVE-2018-4093: Jann Horn of Google Project Zero QuartzCore Available for: Apple TV 4K and Apple TV (4th generation) Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory corruption issue existed in the processing of web content. This issue was addressed through improved input validation. CVE-2018-4085: Ret2 Systems Inc. working with Trend Micro's Zero Day Initiative Security Available for: Apple TV 4K and Apple TV (4th generation) Impact: A certificate may have name constraints applied incorrectly Description: A certificate evaluation issue existed in the handling of name constraints. This issue was addressed through improved trust evaluation of certificates. CVE-2018-4086: Ian Haken of Netflix WebKit Available for: Apple TV 4K and Apple TV (4th generation) Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2018-4088: Jeonghoon Shin of Theori CVE-2018-4089: Ivan Fratric of Google Project Zero CVE-2018-4096: found by OSS-Fuzz Installation note: Apple TV will periodically check for software updates. Alternatively, you may manually check for software updates by selecting "Settings -> System -> Software Update -> Update Software." To check the current version of software, select "Settings -> General -> About." Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQJdBAEBCgBHFiEEcuX4rtoRe4X62yWlg6PvjDRstEYFAlpng7kpHHByb2R1Y3Qt c2VjdXJpdHktbm9yZXBseUBsaXN0cy5hcHBsZS5jb20ACgkQg6PvjDRstEZBpxAA prOFNgYdkVj5Qho+Ppw6U/d4xQZKS614VPoD5cfOXR4SxOeDL00LxUkAwMLtIgJm uZI54DR7zaixBoR8Yms4GN2//TgBjG50wvfpuMQiSDP8LZ4WPcHYI/faDFH43yf7 rLDYYSXv8olAZU6w+sM858zuPjx/C5lqykDIOCPiFIZMY1XpLNhcaEyw0jhUYlYm t+KLLNyeXAmBRus/rB2WJk8vRYYwBm3Fz2VyKjUVpvc56ZfezmJTT9sfO/2Hbzaw stduwdsvhGUUpiK/D866xHniJMngTQjOChIjNiP8RG/BaYG/iKejgaVjdOb7ZUsJ vLbu6ctvg1UOMUHrfIotWOMI3LdJbTbTpjS9kCkLBj+ZO7jE+CKibflph7BDt0ND Cafdg34DGu2K3bcCL+CMzscWocw0hPkyYWsxuHatJVuXBEfXfFuzioGzU4FHEeDC tyRH6Fs+divJ23KEssbcieBP2JeA43j/ORjmigZYnAXb4Myge/NT/3eLzrJ9rfbP J6QyVU6Zv7jzXdxKdzTMPqNH3RFRhK4ukeHUq9S57Oh6oICAXA6mWCJnlLEB0kST qSunhULsrufCNVJ4KcfOWz5A0wYijbrylmsCSctaHrJs1nkdaZzNTwUZ/IYHP5Le qApCYj3ugwMg/wpWdqtOYaMYiwglfIxv9xcwpqetH5o= =7nmT -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2018-1-23-3 watchOS 4.2.2
by Apple Product Security 23 Jan '18

23 Jan '18

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2018-1-23-3 watchOS 4.2.2 watchOS 4.2.2 is now available and addresses the following: Audio Available for: All Apple Watch models Impact: Processing a maliciously crafted audio file may lead to arbitrary code execution Description: A memory corruption issue was addressed through improved input validation. CVE-2018-4094: Mingi Cho, MinSik Shin, Seoyoung Kim, Yeongho Lee and Taekyoung Kwon of the Information Security Lab, Yonsei University Core Bluetooth Available for: All Apple Watch models Impact: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2018-4087: Rani Idan (@raniXCH) of Zimperium zLabs Team CVE-2018-4095: Rani Idan (@raniXCH) of Zimperium zLabs Team Kernel Available for: All Apple Watch models Impact: An application may be able to read restricted memory Description: A memory initialization issue was addressed through improved memory handling. CVE-2018-4090: Jann Horn of Google Project Zero Kernel Available for: All Apple Watch models Impact: An application may be able to read restricted memory Description: A race condition was addressed through improved locking. CVE-2018-4092: an anonymous researcher Kernel Available for: All Apple Watch models Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed through improved input validation. CVE-2018-4082: Russ Cox of Google Kernel Available for: All Apple Watch models Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization. CVE-2018-4093: Jann Horn of Google Project Zero LinkPresentation Available for: All Apple Watch models Impact: Processing a maliciously crafted text message may lead to application denial of service Description: A resource exhaustion issue was addressed through improved input validation. CVE-2018-4100: Abraham Masri (@cheesecakeufo) QuartzCore Available for: All Apple Watch models Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory corruption issue existed in the processing of web content. This issue was addressed through improved input validation. CVE-2018-4085: Ret2 Systems Inc. working with Trend Micro's Zero Day Initiative Security Available for: All Apple Watch models Impact: A certificate may have name constraints applied incorrectly Description: A certificate evaluation issue existed in the handling of name constraints. This issue was addressed through improved trust evaluation of certificates. CVE-2018-4086: Ian Haken of Netflix WebKit Available for: All Apple Watch models Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2018-4088: Jeonghoon Shin of Theori CVE-2018-4096: found by OSS-Fuzz Installation note: Instructions on how to update your Apple Watch software are available at https://support.apple.com/kb/HT204641 To check the version on your Apple Watch, open the Apple Watch app on your iPhone and select "My Watch > General > About". Alternatively, on your watch, select "My Watch > General > About". Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQJdBAEBCgBHFiEEcuX4rtoRe4X62yWlg6PvjDRstEYFAlpng7kpHHByb2R1Y3Qt c2VjdXJpdHktbm9yZXBseUBsaXN0cy5hcHBsZS5jb20ACgkQg6PvjDRstEaXoQ/7 BjxNf3VDcmJJo5kOl/HK1W/pjwEGpoE/UN/PiMii/IyAhnHRUFZqHtDDZpl7WU9v EKYFSuK6JPkiYfT5cx5jQzw54x2qR7g0r8E2MmsnrlDkMyF/ucj93FEiBJqAIzTn uPYa5rV+rZLBhuERjyh69u0oXciklxkjtl1z7Gf+eL/GJWmOtcwrvnmiKPwTLHld tPmxJ1YHM7360rQ11zSB0wmZzOBO187Y3FrwqD7VH1woeWmt0Wkv+k7I6Z/6E4pM kniC001tlPAuW03OwXWtgp1gNCIz7MyHLpw93mRoyHabAy6puTpDJEmAQWIpMzbP uiZDpcn7grclubTetkDy4WmbuVvSTSOuOjseZlqaJ6l9vZv2bnOfT7M9mRRHxsns Rt1X/F1EgMNqcS7FnnYFqiun1fX1fEiyJedBa7FuN1HTIIFtx5ehMnqlxyd+yy3+ tTt55pW/KWY6+fRDKWMobyHYSBR75kdSVKGLLQEahkwOZnKOjgHaaaH5XZCRUbCg u0wuHvhDahUsEEYEpgrlwDyFniLeMTfpju22FPx6DhPzbAEGszCRI5tnHLGk6Tza EQnH9hEaSqIgTgrYHyYtK6Gh/U73pAC2XVfUDPNHpnyNTx055cSL/VZxq+KHe3Xh 2ncf97zYLPAMudrPRlzNy04cwqE7aNTimcDd0WENk0o= =afZh -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2018-1-23-2 macOS High Sierra 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan
by Apple Product Security 23 Jan '18

23 Jan '18

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2018-1-23-2 macOS High Sierra 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan macOS High Sierra 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan are now available and address the following: Audio Available for: macOS High Sierra 10.13.2, macOS Sierra 10.12.6 Impact: Processing a maliciously crafted audio file may lead to arbitrary code execution Description: A memory corruption issue was addressed through improved input validation. CVE-2018-4094: Mingi Cho, MinSik Shin, Seoyoung Kim, Yeongho Lee and Taekyoung Kwon of the Information Security Lab, Yonsei University curl Available for: macOS High Sierra 10.13.2 Impact: Multiple issues in curl Description: An out-of-bounds read issue existed in the curl. This issue was addressed through improved bounds checking. CVE-2017-8817: found by OSS-Fuzz IOHIDFamily Available for: macOS High Sierra 10.13.2, macOS Sierra 10.12.6, OS X El Capitan 10.11.6 Impact: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2018-4098: Siguza Kernel Available for: macOS Sierra 10.12.6, OS X El Capitan 10.11.6 Impact: An application may be able to read kernel memory (Meltdown) Description: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache. CVE-2017-5754: Jann Horn of Google Project Zero; Moritz Lipp of Graz University of Technology; Michael Schwarz of Graz University of Technology; Daniel Gruss of Graz University of Technology; Thomas Prescher of Cyberus Technology GmbH; Werner Haas of Cyberus Technology GmbH; Stefan Mangard of Graz University of Technology; Paul Kocher; Daniel Genkin of University of Pennsylvania and University of Maryland; Yuval Yarom of University of Adelaide and Data61; and Mike Hamburg of Rambus (Cryptography Research Division) Kernel Available for: macOS High Sierra 10.13.2 Impact: An application may be able to read restricted memory Description: A memory initialization issue was addressed through improved memory handling. CVE-2018-4090: Jann Horn of Google Project Zero Kernel Available for: macOS High Sierra 10.13.2 Impact: An application may be able to read restricted memory Description: A race condition was addressed through improved locking. CVE-2018-4092: an anonymous researcher Kernel Available for: macOS High Sierra 10.13.2, macOS Sierra 10.12.6, OS X El Capitan 10.11.6 Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed through improved input validation. CVE-2018-4082: Russ Cox of Google Kernel Available for: macOS High Sierra 10.13.2, macOS Sierra 10.12.6 Impact: An application may be able to execute arbitrary code with kernel privileges Description: A logic issue was addressed with improved validation. CVE-2018-4097: Resecurity, Inc. Kernel Available for: macOS High Sierra 10.13.2 Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization. CVE-2018-4093: Jann Horn of Google Project Zero LinkPresentation Available for: macOS High Sierra 10.13.2, macOS Sierra 10.12.6.2 Impact: Processing a maliciously crafted text message may lead to application denial of service Description: A resource exhaustion issue was addressed through improved input validation. CVE-2018-4100: Abraham Masri (@cheesecakeufo) QuartzCore Available for: macOS High Sierra 10.13.2, macOS Sierra 10.12.6, OS X El Capitan 10.11.6 Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory corruption issue existed in the processing of web content. This issue was addressed through improved input validation. CVE-2018-4085: Ret2 Systems Inc. working with Trend Micro's Zero Day Initiative Sandbox Available for: macOS High Sierra 10.13.2 Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: An access issue was addressed through additional sandbox restrictions. CVE-2018-4091: Alex Gaynor of Mozilla Security Available for: macOS High Sierra 10.13.2, macOS Sierra 10.12.6 Impact: A certificate may have name constraints applied incorrectly Description: A certificate evaluation issue existed in the handling of name constraints. This issue was addressed through improved trust evaluation of certificates. CVE-2018-4086: Ian Haken of Netflix WebKit Available for: macOS High Sierra 10.13.2 Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2018-4088: Jeonghoon Shin of Theori CVE-2018-4089: Ivan Fratric of Google Project Zero CVE-2018-4096: found by OSS-Fuzz Wi-Fi Available for: macOS High Sierra 10.13.2, macOS Sierra 10.12.6, OS X El Capitan 10.11.6 Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization. CVE-2018-4084: Hyung Sup Lee of Minionz, You Chan Lee of Hanyang University Installation note: macOS High Sierra 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan may be obtained from the Mac App Store or Apple's Software Downloads web site: https://support.apple.com/downloads/ Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQJdBAEBCgBHFiEEcuX4rtoRe4X62yWlg6PvjDRstEYFAlpnnmApHHByb2R1Y3Qt c2VjdXJpdHktbm9yZXBseUBsaXN0cy5hcHBsZS5jb20ACgkQg6PvjDRstEZaqg/8 DAjzEHmWMZxkSl88DnX/Y9x39DQ1eV6O0Bsg/WQ2r6wZlRDnBOYdJtgJU0I9MjgT JjOj6M/l+YkVS3EJHcdQqAZ6RfSSMvIcRieHJ0Lfj6bfohKRLJxuloFVKar3lAsY fIdzqlFKqWvPY6Neto2iR7ZhTWDW7QiVwbgSR1fleEWEglWtTeJjL6mff73Mqexh 7VngVFIicrbjoFD7uY2dctgkP+no3dcFieyRWF/z8OAmAOIkAc/KMqFyj22DBDq5 hH1j07Eo0RLKMT+nPq3Vgir5JVVR68M4UvDnSDXGHmTRYaM2BT8osWqlehgFQ52F JhqAsJsKP1Mc9WZkly8OvBbZHJcIJryTSqytOOZRQuvg6fXHPOezajcpThTntGiI /YcmaFIt8bZ8c0GbQXTMY8YCJEHtG3zb/z+Wf0sABfzbtCt48e5CQD5HDsoZyiML J84Sbs1Lb5XFYsdZg5iUFukIJRqYwaf69BUgMmFPTOxkBL/KH7m4BmUtLeiStLYN ykdW2TQFEbM6ojPL9HrAyho0wdX2/G4jiemAk22fb/XQ6q9+57RyduE/MDiFW93a 2XcIzxlsRk37ISIPyEkQTF/L/DTMdnhgI+ZIwmaMwU8Hd48MMMg6MIWYctefvnyB a1pVFFlwHCfxBWYSVI2fkKwExlNNYXCOjGsN7TSBfNc= =pc7O -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2018-1-23-1 iOS 11.2.5
by Apple Product Security 23 Jan '18

23 Jan '18

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2018-1-23-1 iOS 11.2.5 iOS 11.2.5 is now available and addresses the following: Audio Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing a maliciously crafted audio file may lead to arbitrary code execution Description: A memory corruption issue was addressed through improved input validation. CVE-2018-4094: Mingi Cho, MinSik Shin, Seoyoung Kim, Yeongho Lee and Taekyoung Kwon of the Information Security Lab, Yonsei University Core Bluetooth Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2018-4087: Rani Idan (@raniXCH) of Zimperium zLabs Team CVE-2018-4095: Rani Idan (@raniXCH) of Zimperium zLabs Team Kernel Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: An application may be able to read restricted memory Description: A memory initialization issue was addressed through improved memory handling. CVE-2018-4090: Jann Horn of Google Project Zero Kernel Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: An application may be able to read restricted memory Description: A race condition was addressed through improved locking. CVE-2018-4092: an anonymous researcher Kernel Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed through improved input validation. CVE-2018-4082: Russ Cox of Google Kernel Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization. CVE-2018-4093: Jann Horn of Google Project Zero LinkPresentation Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing a maliciously crafted text message may lead to application denial of service Description: A resource exhaustion issue was addressed through improved input validation. CVE-2018-4100: Abraham Masri (@cheesecakeufo) QuartzCore Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory corruption issue existed in the processing of web content. This issue was addressed through improved input validation. CVE-2018-4085: Ret2 Systems Inc. working with Trend Micro's Zero Day Initiative Security Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A certificate may have name constraints applied incorrectly Description: A certificate evaluation issue existed in the handling of name constraints. This issue was addressed through improved trust evaluation of certificates. CVE-2018-4086: Ian Haken of Netflix WebKit Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2018-4088: Jeonghoon Shin of Theori CVE-2018-4089: Ivan Fratric of Google Project Zero CVE-2018-4096: found by OSS-Fuzz Installation note: This update is available through iTunes and Software Update on your iOS device, and will not appear in your computer's Software Update application, or in the Apple Downloads site. Make sure you have an Internet connection and have installed the latest version of iTunes from https://www.apple.com/itunes/ iTunes and Software Update on the device will automatically check Apple's update server on its weekly schedule. When an update is detected, it is downloaded and the option to be installed is presented to the user when the iOS device is docked. We recommend applying the update immediately if possible. Selecting Don't Install will present the option the next time you connect your iOS device. The automatic update process may take up to a week depending on the day that iTunes or the device checks for updates. You may manually obtain the update via the Check for Updates button within iTunes, or the Software Update on your device. To check that the iPhone, iPod touch, or iPad has been updated: * Navigate to Settings * Select General * Select About. The version after applying this update will be "11.2.5". Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQJdBAEBCgBHFiEEcuX4rtoRe4X62yWlg6PvjDRstEYFAlpng6cpHHByb2R1Y3Qt c2VjdXJpdHktbm9yZXBseUBsaXN0cy5hcHBsZS5jb20ACgkQg6PvjDRstEbJVxAA y2gRrvCCEzescN0fgqNk8zIGqaiFRKXYEyuaHMgXjrJIh8OlBgLb3pegU6MFfTsv SjNLDKvPIOW/2vV8ilS6ot32DB4VTANjHKCWTs3jmJrQlWh2VZKvPnzyOiQ0zK2g Btt4+1ZYipRuCyWkf0oatW9JHsCscVexzERyczywBdEzx1mCnCF4N3uOYU0T3Nx2 7Wz92GnvTAnJWjlCJEK1wq/YCntEFhssBVmsWQU1LVPFHoh8uPa87iE/+P1t0CY1 IQLloYmPoX9GIS/CB7XAsEsz3RquE8n/DigSvsApkrl6Judv/HgCYe5GJcwIIemi 1RyNXtj3/+CVZYSwC2Fo/CSyph1M+td79Klqy4gdCVt0KnlmwkKhSexhuQsKn68A /WTcOK7aidcdVuQpjUJAc3pJunl0zHg5bCJRzrb2NdFEoYT0V+kxLEKGlOWRLhXv NSn9+f7pMykSCbfo9U9HkYm68JDtN/WANMCJccF66iQYjEhg0Rgok3oKhNOhakwH HDYunzqF2dEql4WiAKiEAHwVVQ5gJtjDWest6s6UW58fiT2fxufaJav5gczv/wmy km/doFT9+BKmRXygwXdR6P3oRFhZmeLVvjtKpfjPzuIvHkwS7wlOw3aWnZ0rMijm pp7WyqEojXjOxyZjTeBM3A7ssxIuO5BoLtIHgT4GSNg= =F6+9 -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0