site_archiver@lists.apple.com Delivered-To: security-announce@lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2022-03-14-9 GarageBand 10.4.6 GarageBand 10.4.6 addresses the following issues. Information about the security content is also available at https://support.apple.com/HT213191. MIDI Available for: macOS Big Sur 11.5 and later Impact: Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution Description: A memory initialization issue was addressed with improved memory handling. CVE-2022-22657: Brandon Perry of Atredis Partners MIDI Available for: macOS Big Sur 11.5 and later Impact: Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2022-22664: Brandon Perry of Atredis Partners GarageBand 10.4.6 may be obtained from the App Store. All information is also posted on the Apple Security Updates web site: https://support.apple.com/en-us/HT201222. This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEePiLW1MrMjw19XzoeC9qKD1prhgFAmIvyxwACgkQeC9qKD1p rhi+DRAAuaC4j8hy3LXcGIDvpeoYNVizL2og9N+QWl+c75+iMmLH9j+OJ8VRy8PV LRF+Z+FkOn1hGaqb/fSQoWPUbqK7T1NrSwTB/d3evpszUZBwP3iBASaMH5LCBQTz VTr3GJsO8O3vu0mAKWhogopl6cK0ryN1B5b+FC7l4a0SIpV12C0Q/HhNDuPGyEqG 2rcRDXHnErv5ay+Fod5fEFApw2AFCKnXaunITkMPkmuH2zrVsLvkwDGrw5rrRT0n iauANLX8+AYPXVWMmyIU9iMhMb5lUwNVWVtFl7qnak2QloaYFDwqMCL5Grl+iZoU Oa3QvRFv4+QtMQqqC9UBmu8HY6srAUAD41cfHYuKdCz8F0g7494S+6clC0DW42CO UbtpkbK/O59PAd9k7oEYzYYYQfoHfokKuzaZuar5Qs5JLaNyl+7THg3gsuezQ2Rv mMSEbDRoA/smGPsKXIoIyUSl7Cxgw03NsPoj8Csz5s1ZQQXLxzWEYpuRHwNIemwE EmxlmGTKlnE0EceUTxa/CtW6uVpOnFYIf95C/UOEtWBj6Yk4+C1+H42VB+m04H+A waF5xSFGwo5pylve6PMFleoGH525/CSNwhsra1kcTkGvBmelDkpVmrjZScqsTOOu gM+thN+eVLwOYptnTZoBni+r39PQOyf6kHR4lgnNedUCrWEo/bA= =vSfo -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40li... This email sent to site_archiver@lists.apple.com