site_archiver@lists.apple.com Delivered-To: security-announce@lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2019-9-26-8 iOS 13.1 and iPadOS 13.1 iOS 13.1 and iPadOS 13.1 address the following: VoiceOver Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation Impact: A person with physical access to an iOS device may be able to access contacts from the lock screen Description: The issue was addressed by restricting options offered on a locked device. CVE-2019-8775: videosdebarraquito Additional recognition Find My iPhone We would like to acknowledge an anonymous researcher for their assistance. Notes We would like to acknowledge an anonymous researcher for their assistance. Telephony We would like to acknowledge Yiğit Can YILMAZ (@yilmazcanyigit) for their assistance. Installation note: This update is available through iTunes and Software Update on your iOS device, and will not appear in your computer's Software Update application, or in the Apple Downloads site. Make sure you have an Internet connection and have installed the latest version of iTunes from https://www.apple.com/itunes/ iTunes and Software Update on the device will automatically check Apple's update server on its weekly schedule. When an update is detected, it is downloaded and the option to be installed is presented to the user when the iOS device is docked. We recommend applying the update immediately if possible. Selecting Don't Install will present the option the next time you connect your iOS device. The automatic update process may take up to a week depending on the day that iTunes or the device checks for updates. You may manually obtain the update via the Check for Updates button within iTunes, or the Software Update on your device. To check that the iPhone, iPod touch, or iPad has been updated: * Navigate to Settings * Select General * Select About. The version after applying this update will be "iOS 13.1 and iPadOS 13.1". Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEM5FaaFRjww9EJgvRBz4uGe3y0M0FAl2NGWEACgkQBz4uGe3y 0M34Nw/+O9ZMKHYpUp4jqV413+g/bLtXpEzOSExqV7YuZEB4lyfPLXddJAlr6ofH a+OpfNSAUhh/3D5kzbPMgv5ZFyEzMj53hPHH3MkZ5WAaBf9hsMVX/NXrU1PUeQQ+ 2gEayhgCjC7tpwAJelCm7BvnLwmiEMCpSC4OGXpVFZGuXa0NpMWRENQAQtpP6NtO 9CsyHZ9ByDCeS6JsgBNJAIjXLU4a/xIpjd0ZKTXVS2H9nU1uzRxnk4htHyw9Re5Q 0KtDlR1XBRHdfvbwJqcenzIeOZ1hyXwtqJZ3AtT2yGvJnEs5u+GpYMMWkQ3/MCl2 sMDomOYEImADh7f7kHCh1TXho8vNeTSWgriFDfWcW0VILLQhLYLOXpd4YWZeta4X PFCEXBHyX3hQFBz8TUsP0JoWueHYFWTmPg6oX7uufYxWsH9WkXN4DqzfIrskp9H0 AI+esP0Rz2frUOVP4+5kxjmU2xUU+y3RPKq/3I/CvWfG/xqUkGdkHLM//QiAUXs2 qhitv8y+4rjjmZfakEs3bVCwqKb17ppdvEHXJPUs3kz+kM48KvCTDttBUM7AFRPR CW1jpdrUHyX104q1N/ycwkLziD8ItK0IVzlRaJ0FNcn9KR3wf225HV18UpXoqKQ3 ImQZoI1ww+qIhVLTSqhYwZyHcY+q3vHiL53q3UdSmhmcQup6iy8= =wlDX -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40li... This email sent to site_archiver@lists.apple.com