site_archiver@lists.apple.com Delivered-To: security-announce@lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2020-1-28-6 iTunes for Windows 12.10.4 iTunes for Windows 12.10.4 is now available and addresses the following: Mobile Device Service Available for: Windows 7 and later Impact: A user may gain access to protected parts of the file system Description: The issue was addressed with improved permissions logic. CVE-2020-3861: Andrea Pierini (@decoder_it), Christian Danieli (@padovah4ck) Installation note: iTunes for Windows 12.10.4 may be obtained from: https://www.apple.com/itunes/download/ Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIyBAEBCAAdFiEEM5FaaFRjww9EJgvRBz4uGe3y0M0FAl4whoIACgkQBz4uGe3y 0M3k2g/45YzA61HKOP/ut8SmbuPtnvZP4JQuoKH6hDGPSZkB/QTiFwpfZkKsF1Yo xasFGiJzbKcCCZseAj++KwzarMnE9NdIr/Im5RSoL0welYOAudyXMy+3hnU+dFgQ W/wi+mjw8V1pPtqRhr+pWQWB2VPrpYvTT0FvPlp8C/EdRmt2e8KjJwJvVDt3oeo+ 0HsRV8KLf/QnJwdc8ga8ELpnTx3FDlgDDmotNLPXiNW/8FG1EZCeVT0cH5NDGMrd RkKHK3mTk8sSfMZ6MKVOzY8hBTyPgK+wmSMKwKqsbhEVAWfy2mlZoLZ4lOUXa3z1 22j7sy7LpjiSQCEZV+s0td1FojwQU9Q/d1HPd8b0JUX4L5BwcLcEka76nW6Uz1Dq QVJaWWoMQPj9JHar9HiuOGtP7v15NQg6GzBRDt/z4m8k1Mx5FJI2KfeG68u1aogP 5EEl+VaH71d2/+NwqRzXLozuYJ8xZhiMWo4bI9RYJgACfuHHM1S2DNyp6FBYuQXH t4ZEbApU4l1n2SO3tBttO240mTd2dGqqRqLENX8Q7yoS0nLSXdras4QCBarg75x5 +2n7lk8Z0AAI+VaOYdXiNDc1SQ3sDK/K+sFAlOg7YkT3jSzCWALv35SGoirFE0Ey VXGEPoyPq5aUXY+3TpVtdx21BnNNOWP9uI/yGd0qt0WtNyzdcA== =YKVn -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40li... This email sent to site_archiver@lists.apple.com