site_archiver@lists.apple.com Delivered-To: security-announce@lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2021-09-13-1 iOS 14.8 and iPadOS 14.8 iOS 14.8 and iPadOS 14.8 addresses the following issues. Information about the security content is also available at https://support.apple.com/HT212807. CoreGraphics Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: An integer overflow was addressed with improved input validation. CVE-2021-30860: The Citizen Lab WebKit Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: A use after free issue was addressed with improved memory management. CVE-2021-30858: an anonymous researcher Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEePiLW1MrMjw19XzoeC9qKD1prhgFAmFA9+MACgkQeC9qKD1p rhj7ow//eOhJHTgY292vNmx6ecLV3RXqr063NRGTAdKYNBAsN76ZpA18L2SMYjdo CrDfbcmoOft+K9zjZODwVZr05BM9FKBOl4dJhv4gB3AZWb9CBXNz06AHPsOAsW4P dgFjc3BdxEGAPCfa8g/GRsnD6UxMTVyE5aH6teATznMU/r3PvOoRxr8PTanZTqgT z+5DwjNzG/7+eTYuQ37cY8xDINw/AWkiW2cVKqW0QEzyAucgvIFpw1IHayI3oLLI fRkp9+s3sZdnEMcuWSrqnibbLTaR9RMBYj4xJmmeiO1+HYoBn8aCY0cXL3JNGKz4 2vV0IcIqqc5eJoZo7rFajac80NQXUsVux0PtJOUfDmG1l93BbI+daFfieEdcRnl5 Rk5dtzARFmaBIavEais4Zt2Wx6aEKW3eF98yau+4PuLGUsEcD26+uH/YDQcXCkeg UtUmWgt2C/fcRivtUTGDXL98dluiczTSAwDl0mpGL8uOG44h8OnIOAgpmsJFsyuK XNio4NwBSAdiEmRBDsEQsJkzVQOXOonZCKoRzRIwMgO3uw4esyX5W5bXSwMSn7Xy 3CLwjClC2EMzJUTUHzWrUEfajhpwPwrgQ+EnySTNyTdZWcayoyKKdsYx0qbQU8a7 DfHRelYpu7Nwm/aFcws5CNTgIpTTpaK5HiVhWZAd2/lVel2D31g= =+Grv -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40li... This email sent to site_archiver@lists.apple.com