site_archiver@lists.apple.com Delivered-To: security-announce@lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2018-1-23-6 iTunes 12.7.3 for Windows iTunes 12.7.3 for Windows is now available and addresses the following: WebKit Available for: Windows 7 and later Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2018-4088: Jeonghoon Shin of Theori CVE-2018-4096: found by OSS-Fuzz Installation note: iTunes 12.7.3 for Windows may be obtained from: https://www.apple.com/itunes/download/ Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQJdBAEBCgBHFiEEcuX4rtoRe4X62yWlg6PvjDRstEYFAlpng7kpHHByb2R1Y3Qt c2VjdXJpdHktbm9yZXBseUBsaXN0cy5hcHBsZS5jb20ACgkQg6PvjDRstEZjcg/9 FBs93gm4kmoOu0AFgWURNhXr4437i/mMI2w+MKQJcMdJgg3jEcCLRUarKQGxESUM 3n1zLeK6tymCrl0UMvkulZ0ExSCjwjgtzOygHdmkaVIeorYld1mtK2Faozp/J1YV +n9A4DKYdiQCyEP0Kl/7Tp/qYrb7b448tI0dwbw9neZTJ7E9e442co2fZHIWdmY+ gRUmzkeXxk2pj+FLAmlWfzmHEBUHw9Hk04poU7V78IMvLNjUnwt5ORmj78Q0q8I/ 2Y4j1HmHnYVQ0G3oi1VtRr1rdmiTXUJlWBJuzbNxCVZZjjQe/gjUY2aGkxCKwMS2 ntDDezGLYVKO34UODqpw5VlXC9NGD8awUuoCZ532oPmdvVUTwvlu2Ips7IH8bBOz Y5TND7RmEpj52HX0smspf94phrxIaZMA6wsS1YROxbHKZt0gA5RK4iTuUkg/QQyv U++gxXJ1FPZeTq79MT1TaqWHir7Gi5ry3cY+W3pj21Tb6Q6m4sX5mh9IjGZ9u4Wn NW0nkGzhN6ULT5chjCtf9B8UKgBv0PhkGbGUwehUcT7zjG92NuJR6klTQwplOlPF Rqp9j8JFXYtgWvAmz8g6HthHMsim+nvSVfs+v84KF7u5XQQujadBtxEljseN0DId ZPch9wMZGYCujlOIdh1FZ5MZ8gij7gJhlXZCgbJiXTo= =e2O8 -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40li... This email sent to site_archiver@lists.apple.com