site_archiver@lists.apple.com Delivered-To: security-announce@lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-03-11-2025-1 Safari 18.3.1 Safari 18.3.1 addresses the following issues. Information about the security content is also available at https://support.apple.com/122285. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. WebKit Available for: macOS Ventura and macOS Sonoma Impact: Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.) Description: An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. WebKit Bugzilla: 285858 CVE-2025-24201: Apple Safari 18.3.1 may be obtained from the Mac App Store. All information is also posted on the Apple Security Releases web site: https://support.apple.com/100100. This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEsz9altA7uTI+rE/qX+5d1TXaIvoFAmfQry4ACgkQX+5d1TXa IvoeUQ//d17m1FYNWwedfpt5j2xslU1Z2fNuk8+zQ5JreCU3GbkTRP+jUgYB/JIK YELtLPTZRjxLBbBBqbSj3IqX7giaC6DY2ujwDH7CItkwj/ET6R75Zbkr8rkgcuo1 GerIfOE2zcGT/kcy/E/UX3vWrFvwGGz3WGuOZNjSmfM3tzhOh7GPKydobfAwAUyG uI+y1HT6cS8ilqDnks8dTC6KVdCk0x9ht0rZbwQu5escBqhsc7mKls35ZGKD8kDW A1XICJM/Way568kjrDOcNA9xDUxuVjG1HDMImBWK9BEaC7VdYs9Pa7ZPvtlsZ4VQ JSlYktJCLR3ZUe23Uu6fFol7LG7iDWEPFd1jHpApKl38eVf7E7THozoJcztXgNXd iVv4M+0asx7EJd7f5wqWQpEEvAMhQbK/dc811hvA8pFaCVArHWa4xH5XI2EFQZ9M sK3O6yvXxIKUBqsX+RylqKG2xCKYvSLAPyHYK0Za44evsGV2HhrSUW46P/BmzGo1 l0e/2BUUTlgVeSMefJiUyCVffYtFAKQL5IE3Cx2QQpMB2Qf1RHj/Ih/6YMFJzKOy c/fYUrSOrrZMlQ4/9R6hRGKK4xruWllxjK2A2bIuh4lcNDyD9hAIw1SWwE1nKijp 2YJG9nUKrOvPCfxupE7V+Bjog3Mzrlrv4mm0NHwu09YG25VK/YM= =1gat -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40li... This email sent to site_archiver@lists.apple.com