February 2022 - Security-announce

APPLE-SA-2022-02-10-3 Safari 15.3
by Apple Product Security via Security-announce 10 Feb '22

10 Feb '22

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2022-02-10-3 Safari 15.3 Safari 15.3 addresses the following issues. Information about the security content is alsoavailable at https://support.apple.com/HT213091. WebKit Available for: macOS Big Sur and macOS Catalina Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: A use after free issue was addressed with improved memory management. CVE-2022-22620: an anonymous researcher Installation note: This update may be obtained from the Mac App Store. Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEePiLW1MrMjw19XzoeC9qKD1prhgFAmIFeLEACgkQeC9qKD1p rhgGlw/+LyCIIvtwF6NLjlXODF0dJoZhhHob5ktVKGhU51QuuwDrfXKjh+9/dKoe X4xZwNcaj8YTe7ZUEn4NXBgHSLknqyLiNc6XI5F6n0Rvfa+0P8BZWO9kFKn2Cd0j rZDu19IZa5RmdPLj4kjk/Aul1EDHuukt/c68O0i2mAgXgtOVMAoSdPHoclzfaum6 kcur7wQYctyAdKtsyaUPQli/No9J51YXVbgz294cmKn8GofrNrILPKLzDRVQXbcU bt/O02vKwswxgIYm54d6QPRQ+33lhPdQsDep5jc6gMRS5nMlfWStOM0Oa9IMJyHE m5XFFMnRKKKMXfwhEwn3LEHG4AROG4v7xJ48AAomyHok72LRBPehp5fFJx8Fpipt 6Zs8a0EEylIr8Ru+BSkhV2mdW9fvzzmBDdOQAFfIvEOq8kWAltm6Pw9rotTYEYAd ULtQGDumSUGrBv7IvR3JHwXEZPmHdwT1E2+2vyXJdQOPuI2Ya5gmeXsG3aMXRBxo UbWnMWNpY7iU3u02BMFN3Mty4yGd21V3/Ckv7jqM8zZGW6OAD8/Hp9b87+sYDOs9 0qfz/ano3BzKCqnQgc5w8CDd46BgmQjvMbb4LExtwqivU8GV61cK2gQ/vaKHAWf4 vVt+roFm+V+N76dAYAH1QC4cit9XMhAjf9qLIC/PWdvaeLvnrA0= =VhPA -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2022-02-10-2 macOS Monterey 12.2.1
by Apple Product Security via Security-announce 10 Feb '22

10 Feb '22

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2022-02-10-2 macOS Monterey 12.2.1 macOS Monterey 12.2.1 addresses the following issues. Information about the security content is also available at https://support.apple.com/HT213092. WebKit Available for: macOS Monterey Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: A use after free issue was addressed with improved memory management. CVE-2022-22620: an anonymous researcher Installation note: This update may be obtained from the Mac App Store Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEePiLW1MrMjw19XzoeC9qKD1prhgFAmIFeLEACgkQeC9qKD1p rhjX+A/9H0iEZjUo5oJR7Tv1bQlsZua1hdrkRG85CF3CgA7S9Rr/f2H08Yu8CDgr KG9LEmSTmFGGzaU3srFi8yUmSU1HMhApuLtyiPVxs4IIgM4/x+/voaMsuMUNBAPl 0ziJQZHwfxPQi8TuNqV6H9kxD/dBlV6JMAwuaJ4dDXsn2AEkxH5XrzA+foL0RdaV mo6N1G3r7YDB4J1w38AIa2jcmQauXLUMrP+nQkrXPZPqSeDMarVyTS+znj0vfIyQ 7TQQA5INYv1w9o47M1sQo604QHYA0Y83ZfGyGWhrCxnAM7eoGGB9icC2srjFpmxT 603U+u2RuMztqblEpMTO95jke8yliT6UksloMRs2VQEqouTTlbXkXfRHJVwgrRuB CtOS9k5onqmBi5L7V8WKKZCCHRa02QuN8v60Ly9+2P3jaaFezKAmT+LGA4wtOZ85 8JK+rWdYYbEyek1GgN8/AC8oFRF0RRvrXlO9Ux5+aweILIEaSJ9WjnEpk6MyUsIy xchqId31uwU58V9MA9fp9yCvgrJsoeuSD9ynq2CWKDIuV4mVZFKqW6ur2Qf3Fi/0 gT/TGD6dcU8eYSvYxA2iw3hasTIUN6TVRbqsdFmKgq47IPSOxIaMdYmeIWwXdSiL uaWTrz+W2iiM1gDIP0WWxC4P4wgfZtUZgqSFaAFvwtKLYM8Ywg0= =wrdJ -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2022-02-10-1 iOS 15.3.1 and iPadOS 15.3.1
by Apple Product Security via Security-announce 10 Feb '22

10 Feb '22

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2022-02-10-1 iOS 15.3.1 and iPadOS 15.3.1 iOS 15.3.1 and iPadOS 15.3.1 addresses the following issues. Information about the security content is also available at https://support.apple.com/HT213093. WebKit Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: A use after free issue was addressed with improved memory management. CVE-2022-22620: an anonymous researcher Installation note: This update is available through iTunes and Software Update on your iOS device, and will not appear in your computer's Software Update application, or in the Apple Downloads site. Make sure you have an Internet connection and have installed the latest version of iTunes from https://www.apple.com/itunes/ iTunes and Software Update on the device will automatically check Apple's update server on its weekly schedule. When an update is detected, it is downloaded and the option to be installed is presented to the user when the iOS device is docked. We recommend applying the update immediately if possible. Selecting Don't Install will present the option the next time you connect your iOS device. The automatic update process may take up to a week depending on the day that iTunes or the device checks for updates. You may manually obtain the update via the Check for Updates button within iTunes, or the Software Update on your device. To check that the iPhone, iPod touch, or iPad has been updated: * Navigate to Settings * Select General * Select About * The version after applying this update will be "15.3.1" Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEePiLW1MrMjw19XzoeC9qKD1prhgFAmIFeLAACgkQeC9qKD1p rhighhAAqFMd1HZQouWTj3By1sZ8JtQm5ET4i7Moeg+UGg0kdiyRglBURzLQZW90 sH8a0ir5AxOeyQhUHsKTpx+ImZ9cx2S7kO0YYn48+7rEqBuZvIwEtCgQ+aIdw8hz aygqmrIgiaWLs77JBTd7fg/rmeuE1qznOg9Fd7dsePa2H3vofkGxYkZYMJIG8k/L 7XGx65bODEsN7qvZja2VgtyRl1XvKlDDSxHGmemYJlD4S4WkuahJ2OKQktoQgKPO kym2vatZudQUGpo0C6Rd+HE7elxAXd0E1XkqoopfkqrbAcSdSd1gan97G96dVJvR uK1Lxl5Pm+hF9+Vedwc2OGL5/6lmC3oRz/r7DndFdmLZw4zieiAUQdp2CK0z23/L jNwLwEx/OncsPttuwgRz41dZP6zFb1GJTx17eG9xKun6E5nJNgtVknjAiIvSbK/e fV12XLXfPB+DkhB9liZQYbo9Au2tLUQfp2RthN4nHMvEZ/Elr6cSzc/zwg4/kksc MrGrH41XU2H8yp51JxlfG3kgoPK7UjAmRoU5A6JpbseitFwQBu/dqLAVsZ1CD/BD qGx0vFzXiZuqd/usBOAugDIHSrS8zWN/wSt/IQUw2McKOuXKKrmdH0i9QK21U5Je aNhXejmefnlyfOUgCj+vX2qWLYcHZovroxUFutYQ383JJwR93B4= =FwNN -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0