June 2020 - Security-announce

APPLE-SA-2020-06-01-4 watchOS 6.2.6
by Apple Product Security via Security-announce 01 Jun '20

01 Jun '20

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2020-06-01-4 watchOS 6.2.6 watchOS 6.2.6 is now available and addresses the following: Kernel Available for: Apple Watch Series 1 and later Impact: An application may be able to execute arbitrary code with kernel privileges Description: A memory consumption issue was addressed with improved memory handling. CVE-2020-9859: unc0ver Installation note: Instructions on how to update your Apple Watch software are available at https://support.apple.com/kb/HT204641 To check the version on your Apple Watch, open the Apple Watch app on your iPhone and select "My Watch > General > About". Alternatively, on your watch, select "My Watch > General > About". -----BEGIN PGP SIGNATURE----- Version: BCPG v1.64 iQIcBAEDCAAGBQJe1Sz+AAoJEAc+Lhnt8tDNY4AP/2Ax1QP6Q9yf04iBm/C3ZPyG PmbsN5HQa5dgUq84LySYzxxQtxxkhXel8fsMqQhiNOPCrLKMCLbkJfDUfFNDCHaH UPVPti50RHsuMoip47xPdr78UtPpqPxJrwlPz8HjWVhwVfro0fLgmkGK5T8d0qaf YofU1GUoe2b8DsQ3xbM16ZFcxpC6A35TN3eG5sEtDVk9KVSjh/kPyusHGwoPoXGh CMYtVb4KqEfKgCZP+jvU+4bYyNghH86CMBb9augit9AKkeO6onNQ5z4SW3unjEnw kjVc7HBSBn++KifT6kU/Twh2NPIMahlpKus6hWs6lf4kWuMPI8nhWVNWGaAZW15l noASVnotAwY1mNNIDR+VWIKPpFPBeA1rp14VXrGIuS02TAjfzt3vjB7JhxUJ2gyQ 3yuGYoGjEGjykaq1nVsYlGOXdUoEqRqU4/gxkyVO3kSuM3O98SdvsujX55DYNX// YKNy0ReDIe1mrDqaT6jA2QWxYSouyVN2IfUpcLHTS68qPSt2sFtv0bbbx1LC2h8D TblgpaCpvdLEnqNqOtZfZCbDq5ey0MmB80aRJWH647CFy0bv9pKRAOl2Y9xyC+HI XfjSrLzq7/iT0lfzJW0x39pKfC/K4kfiw31pyZmJw2UlNkaCQbX/ogwz5Ez7iHUW +JVXY8WrKACod2Tb1pFV =lfle -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2020-06-01-3 tvOS 13.4.6
by Apple Product Security via Security-announce 01 Jun '20

01 Jun '20

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2020-06-01-3 tvOS 13.4.6 tvOS 13.4.6 is now available and addresses the following: Kernel Available for: Apple TV 4K and Apple TV HD Impact: An application may be able to execute arbitrary code with kernel privileges Description: A memory consumption issue was addressed with improved memory handling. CVE-2020-9859: unc0ver Installation note: Apple TV will periodically check for software updates. Alternatively, you may manually check for software updates by selecting "Settings -> System -> Software Update -> Update Software." To check the current version of software, select "Settings -> General -> About." -----BEGIN PGP SIGNATURE----- Version: BCPG v1.64 iQIcBAEDCAAGBQJe1Sz4AAoJEAc+Lhnt8tDNKlYP/270b8GFu9VuvLZxC7GtXZ9g oLQZcmbaMLrhT+wt1ROMg6P9wZS/pSgmvSg90NHpieIr03YRCTcSeNY2ayIkSZza P8xQ3AChQZjmx8cS19XXXY//ieR5cI3rLZ0fL8LQn1sPhpWP2hQFlXsnYf3FIbps OU2hBeiZzpZUKKR3pdHTkGna5hQHZJyNCzHL1StQzafjb3yDDXRgl/F01Dz/Go/j fbWsogHDrznVGj7Ea5mTWHJFRvruuc/rRclFiwGMBuBX2emmgomuLmx1p/mp1zP6 Tie8FmX7pAAslNzq++0XgXBgOikMK18rs03cuOxO/I8I4icAoNeWxi7dx85iJ1w3 zwcnZiYiR5LHHb9CHvO/4NUgV/jFTPwHlnHQHC/3hQ9LxaZG9xpZKHS0w+esZKRo RFL/t4ObaPkjTmwriLYAr36EVqmirFUMH6SOph2D817nJY8XjhQTYNk1Q578/jrf 6qNsLtDpaFkHBAkDnH6uyv1iZi5nx0i1y6fFn/kfEIuMZ3rczVztMW78FYbcf2nE 0hdHrAx66mvCKdlzFVECvMR8fmkVR7JqsiCqXmAySBETTrs+0lskutbp9rdujt3j PczWRB2A0vmYd3GNYBpgN0VeopuNyoeTLnzyifvyRCAWx9+SG34/qY2iv81lXUsD 3PVGATuXF+YhXTRtBYLL =mWBD -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2020-06-01-2 macOS Catalina 10.15.5 Supplemental Update, Security Update 2020-003 High Sierra
by Apple Product Security via Security-announce 01 Jun '20

01 Jun '20

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2020-06-01-2 macOS Catalina 10.15.5 Supplemental Update, Security Update 2020-003 High Sierra macOS Catalina 10.15.5 Supplemental Update, Security Update 2020-003 High Sierra are now available and address the following: Kernel Available for: macOS High Sierra 10.13.6, macOS Catalina 10.15.5 Impact: An application may be able to execute arbitrary code with kernel privileges Description: A memory consumption issue was addressed with improved memory handling. CVE-2020-9859: unc0ver Installation note: macOS Catalina 10.15.5 Supplemental Update, Security Update 2020-003 High Sierra may be obtained from the Mac App Store or Apple's Software Downloads web site: https://support.apple.com/downloads/ -----BEGIN PGP SIGNATURE----- Version: BCPG v1.64 iQIcBAEDCAAGBQJe1SzzAAoJEAc+Lhnt8tDNUbkP/RWMcqf0dVk/tF+9FKU99NwR N4/S7UF2YaL/Gf/TgWPQyN71ZANeUNfXqHTxMx3LIwDzn6JCF7H95AWb/uHKIKpz HX7kcDU3CVaE/+vCVKCG3Gp6FYc6b9loHZv73nUiC+jGf58MM27HI4dFeQIhSSSU xlA1jfG1irTCW7XKKFrY6BZGw0apOq2e8tNTwCA42JNH2JYmWtYYNd1KFEEziMZ4 TUe/eyH2Z46/lWR+u/SdfL6CRON0XDdOjiq0A+ke8dIOzgNe0rPOlExxU+2VeJXV bMeFo2oYPgM6tDNOOjAiUjCeuefygBU6aTY7uXvYRqInQz4l6QMpajlfmTKXE/kB JhSZLIdhQrVUksySnvbUBMjo84WKmvlpZLulS3nxlJW5VpcZLh0vfv+f6U2ID2Ow wyWy85o2xy/mNoCvkfnwI7EY03IPMuDj0PH/6umo6KwQa5qvGhMryeqmQlRG7Kch tIvipv7PseNjn4gnM1c+6X+YcqQ07bGPKTsVCxULcic9Fxu6kTCcqjBm4yB01rnl whtqqn1lOk5hI+/XVrAH08JuCQEPU/vIgXYKA58Tp+qz9RqqcVTrnLxKu6XTN2wx kSLllWb41TfaJ9q8HhZHE/fZ5e135up4HuzSspgN/ih5pa0UgTQ+rd3IOSkgiQ/+ C6PQgzO83tXExfuqyJi1 =594r -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2020-06-01-1 iOS 13.5.1 and iPadOS 13.5.1
by Apple Product Security via Security-announce 01 Jun '20

01 Jun '20

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2020-06-01-1 iOS 13.5.1 and iPadOS 13.5.1 iOS 13.5.1 and iPadOS 13.5.1 are now available and address the following: Kernel Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation Impact: An application may be able to execute arbitrary code with kernel privileges Description: A memory consumption issue was addressed with improved memory handling. CVE-2020-9859: unc0ver Installation note: This update is available through iTunes and Software Update on your iOS device, and will not appear in your computer's Software Update application, or in the Apple Downloads site. Make sure you have an Internet connection and have installed the latest version of iTunes from https://www.apple.com/itunes/ iTunes and Software Update on the device will automatically check Apple's update server on its weekly schedule. When an update is detected, it is downloaded and the option to be installed is presented to the user when the iOS device is docked. We recommend applying the update immediately if possible. Selecting Don't Install will present the option the next time you connect your iOS device. The automatic update process may take up to a week depending on the day that iTunes or the device checks for updates. You may manually obtain the update via the Check for Updates button within iTunes, or the Software Update on your device. To check that the iPhone, iPod touch, or iPad has been updated: * Navigate to Settings * Select General * Select About. The version after applying this update will be "iOS 13.5.1 and iPadOS 13.5.1". -----BEGIN PGP SIGNATURE----- Version: BCPG v1.64 iQIcBAEDCAAGBQJe1SzuAAoJEAc+Lhnt8tDNfgUQALNdUFDUuhhF2Zj7jjnx1E1m TNmYZj4OdHcJE9aGKBF4HcUrt5oAYWuyTiBsWYh7tk0Tgfur2QqnoiOGkFW5BfNq NW68jk6JZJwvWp+XSogRLDFMdfUKbSa16JJU2OtQLuRZ7AJsmaU4VT9vXFwv/t22 mXCgb7Uo1I0Ya0z3uJGxluwCi3XNgdu//i9Gcfm5MW6Vu14uaQ3JzYoApskOXQDC aTT/9qW1zJTv18u/qIhQQBj4N1TDY/NUMY8ZJrBAJTXqrHkOuV9jNPkcSeM+68Br 9ExmGm1lBoaX+gIDOvVHb+Br70fsuecFBYN5C/W35R51puyV3mqY3WPV7pPVVA/P Yh8PynmjcmCwFS0Ly9MAHqG/48QdusPIus0G08vRXqWrLUDArHLb9out/UOk6F8q JNtKYI1N7slsRvpPi357mHJ8XIz9aUxGdab3v/oUahTFEMDTo174DsWUcMMoPRFp kcnePBv8dOzOO/YKA7mKmvd0ASA4TvSH6E3moqovzihs7ZR+eGEl1sXIG+E1oNWL tjfSlrVAoNdjBNb3O10JTnS9YepIDszPnY9boOFKKmoMp38E6qcVU9zI8QC1UDg/ stmqoq761w1naa+qQXEvWrvDTKwTFUS2IJMEtGa6CHjGKaZL46h4Y87V2Cb/ZXJM db4SzQ1YvI6gUVn20QzV =JYpD -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0