-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2016-07-18-6 iTunes 12.4.2 iTunes 12.4.2 for Windows is now available and addresses the following: libxml2 Impact: Multiple vulnerabilities in libxml2 Description: Multiple memory corruption issues were addressed through improved memory handling. CVE-2016-1836 : Wei Lei and Liu Yang of Nanyang Technological University CVE-2016-4447 : Wei Lei and Liu Yang of Nanyang Technological University CVE-2016-4448 : Apple CVE-2016-4483 : Gustavo Grieco CVE-2016-4614 : Nick Wellnhofe CVE-2016-4615 : Nick Wellnhofer CVE-2016-4616 : Michael Paddon CVE-2016-4619 : Hanno Boeck libxml2 Impact: Parsing a maliciously crafted XML document may lead to disclosure of user information Description: An access issue existed in the parsing of maliciously crafted XML files. This issue was addressed through improved input validation. CVE-2016-4449 : Kostya Serebryany libxslt Impact: Multiple vulnerabilities in libxslt Description: Multiple memory corruption issues were addressed through improved memory handling. CVE-2016-1684 : Nicolas Grégoire CVE-2016-4608 : Nicolas Grégoire CVE-2016-4609 : Nick Wellnhofer CVE-2016-4610 : Nick Wellnhofer CVE-2016-4612 : Nicolas Grégoire iTunes 12.4.2 may be obtained from: https://www.apple.com/itunes/download/ Information will also be posted to the Apple Security Updates web site: http://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXjXBGAAoJEIOj74w0bLRGW7cP/i8zSs+ajIAlGBZBMD4f7hyI joCRGfQ5KiAKAvLAcMZ+nxsbr40MSczWlAvyQRZ7sPj6vT34xaLtodRfwNoXJzdE PeOUMLLdWG7uyiuFZfnfz6tf1DiEhk3ikWCyZaiAPz2eiM2cVU+3MbDh5rKI5Hz/ ik7sUkh88WbpxZwPuXvgQ5tWOkT1x197mlNx213Y0GKFRjg6pEHXljiNYkbXFnhA mDtvS4AIRLYvpBfhg/W4k9ZTSGYmpBooma7Mi5DGPU99TlhDJjo+1eI4OG8sof5U HOM8RxTIzePYfW8CC2jkmC0M4qR0DYe9GZcL/N7gCD20q5Du7d0QYwg0hTSsLigh o+NAy5WetVKRVnnNqdfyoLi5VLoXMwNMHSSr372QIhgIjDMoXNKCpwciqS6ueB7z gIJpLTm/RWwgex0J+0oD9N5/Y26fYb5T6pObZLElGK608a+G7oyULVkmahLXRA68 te8+ruysbjS4fQwqbdhIa1YioX9xgvdewotTURg8SWfmtLHe/Oca+2jBV+jVEYyo Fisob0WozgA9OWLao1ku00AhdcRMOceMb/OZR54TkBLN+vYt/k7VSxL2y1uq3ODD KTq2cFxnG7wUgqzXOnp6pko0XpE4Eil4I6Eb3AUrL998dXdkUSAbHNYqIIowFT6Y mEQIIZf2AaJBiNPamC86 =49i5 -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40li... This email sent to site_archiver@lists.apple.com