Security-announce

Download

security-announce@lists.apple.com

February 2025

1 participants
2 discussions

APPLE-SA-02-10-2025-2 iPadOS 17.7.5
by Apple Product Security via Security-announce 10 Feb '25

10 Feb '25

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-02-10-2025-2 iPadOS 17.7.5 iPadOS 17.7.5 addresses the following issues. Information about the security content is also available at https://support.apple.com/122173. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Accessibility Available for: iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, and iPad 6th generation Impact: A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals. Description: An authorization issue was addressed with improved state management. CVE-2025-24200: Bill Marczak of The Citizen Lab at The University of Toronto’s Munk School This update is available through iTunes and Software Update on your iOS device, and will not appear in your computer's Software Update application, or in the Apple Downloads site. Make sure you have an Internet connection and have installed the latest version of iTunes from https://www.apple.com/itunes/ iTunes and Software Update on the device will automatically check Apple's update server on its weekly schedule. When an update is detected, it is downloaded and the option to be installed is presented to the user when the iOS device is docked. We recommend applying the update immediately if possible. Selecting Don't Install will present the option the next time you connect your iOS device. The automatic update process may take up to a week depending on the day that iTunes or the device checks for updates. You may manually obtain the update via the Check for Updates button within iTunes, or the Software Update on your device. To check that the iPhone, iPod touch, or iPad has been updated: * Navigate to Settings * Select General * Select About. The version after applying this update will be "iPadOS 17.7.5". All information is also posted on the Apple Security Releases web site: https://support.apple.com/100100. This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEsz9altA7uTI+rE/qX+5d1TXaIvoFAmeqUiYACgkQX+5d1TXa IvqfEA/8DoS66yTtq8Lru3W31H1+oS6ua6CN54MsJESukWb2ZumpuxA2dZLZ+W+a /vDOvhIw/1g0VrYEJpVLn9Mz1LjdRaaS2PGZ8aeguaV65JmFnmBZYYw2xIThhXGR Qo9j7c8TV2YgqAkRGD7nsRIm5ll53iqMjRLZGcy91lx5YCvA9SIIVVZmMMwsSwa0 aeC07wYFFohr7yx86lbVLEt8Qs/sI7zEuXCZJAXhi5BC+aDD9cl2wNGEgE3Urdzs iDLc0E47rUXb9zwEoVH+tHWPSjEsfr8awI4WVmhRdXF5pFuQ6iRbe3AA39rrP2vK c1bWvGFW0NBtU8qZwYMXy9N5pdGu4Yt+2ns6oFlxRneWTggkk0tPVW+YWRd9LAga /Q7PYTOU4TDCcgqIX713cKqHfZV/19s5tW23OHz/Klf+GNgNSGz9P1qSRuSvEEyZ kANDwf0XhazpnYlwciQDEepG2SrQgnMwnyM69oWovaxGbJs01+8WON2moSR+DLcx 1c6UmXuYNIabBHON4q7Q43rpOLmUbbFmXgtxXA14fgzCNcV5VGJrGqdH1PNVRrB/ 6zUq8FX6sRkb6LGwVcwTROhlQsEEX1qCiVcPSFZ4asLHBPQgfcVeMZq/BZ709Rim laee1lJovzttghEVhjKp4gfyGSSeKjnEfr/Mzy9/dmHjSbEOgts= =It2e -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-02-10-2025-1 iOS 18.3.1 and iPadOS 18.3.1
by Apple Product Security via Security-announce 10 Feb '25

10 Feb '25

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-02-10-2025-1 iOS 18.3.1 and iPadOS 18.3.1 iOS 18.3.1 and iPadOS 18.3.1 addresses the following issues. Information about the security content is also available at https://support.apple.com/122174. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Accessibility Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later Impact: A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals. Description: An authorization issue was addressed with improved state management. CVE-2025-24200: Bill Marczak of The Citizen Lab at The University of Toronto’s Munk School This update is available through iTunes and Software Update on your iOS device, and will not appear in your computer's Software Update application, or in the Apple Downloads site. Make sure you have an Internet connection and have installed the latest version of iTunes from https://www.apple.com/itunes/ iTunes and Software Update on the device will automatically check Apple's update server on its weekly schedule. When an update is detected, it is downloaded and the option to be installed is presented to the user when the iOS device is docked. We recommend applying the update immediately if possible. Selecting Don't Install will present the option the next time you connect your iOS device. The automatic update process may take up to a week depending on the day that iTunes or the device checks for updates. You may manually obtain the update via the Check for Updates button within iTunes, or the Software Update on your device. To check that the iPhone, iPod touch, or iPad has been updated: * Navigate to Settings * Select General * Select About. The version after applying this update will be "iOS 18.3.1 and iPadOS 18.3.1". All information is also posted on the Apple Security Releases web site: https://support.apple.com/100100. This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEsz9altA7uTI+rE/qX+5d1TXaIvoFAmeqUWAACgkQX+5d1TXa IvqJkg//dLOdgkald0H5lWnqEVatX4q+7i2MpCsRvxwVVqg1zPW4eKlqeyl+LrwR BdTcdh7FOWnxrSyoTfnXHZrzdDPwFjBJpT2cqXn8A/aT25gOGULJ0TAXLqxv98zQ SoK499aUs8EDoFDos2lFt1gWtDh4zt4SkrPU5bar6Zu/ZEvJ0BCAxwgK8rWmb6a2 q1PO8lhKh8/BH8kub/ZWv+YrebkjRzEX8k7a9Ar06Ky8wBpS9/Hw/tkJKeOK9I/O 01aTBhrzlctRSG3N4clZ7TkS8txw0/lavwTUXa1lgd13iPGr5aqW5UULmnur/R3E PUzK0HoUfcpmPK//6GyXC40pdoOjq1lom1S7Go3MIXtpzJsUL1Wdpdn8QxwtBDB6 BAQ36jskvRGhQm+mWlB3yOzNXSfhUqf/fk9sUyKjcHWqbiCiSBPnI818nMdlxmUs bpl5Bd247uTItuWd+GsMn5JoUMrS7LCEviYGRhF60lqJxX7VqdUIcv0RkqrAtyzN cOyL1x44MG3F5mZ3j9n+Kfz9v01SMsOXYapyAZ1r7jUlAqaqVt5YTcg91mxcAb2b dt+5SRkt15D+HTVEXtPbtjBdAQnUxK3dYa0zopFUaLdzx7jDf5uyGAaih9vfc+qI OcxSfRmLx6LPNtGxi7ixcoKwqH5rx6SjqKYoeEw1Pr+61yqcEag= =ZvxF -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40l… This email sent to site_archiver(a)lists.apple.com

1 0