site_archiver@lists.apple.com Delivered-To: security-announce@lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2018-04-24-3 Safari 11.1 (v. 11605.1.33.1.4, 12605.1.33.1.4, and 13605.1.33.1.4) Safari 11.1 (v. 11605.1.33.1.4, 12605.1.33.1.4, and 13605.1.33.1.4) is now available and addresses the following: WebKit Available for: OS X El Capitan 10.11.6, macOS Sierra 10.12.6, and macOS High Sierra 10.13.4 Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved state management. CVE-2018-4200: Ivan Fratric of Google Project Zero WebKit Available for: OS X El Capitan 10.11.6, macOS Sierra 10.12.6, and macOS High Sierra 10.13.4 Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved memory handling. CVE-2018-4204: Richard Zhu (fluorescence) working with Trend Micro's Zero Day Initiative, found by OSS-Fuzz Installation note: Safari 11.1 (v. 11605.1.33.1.4, 12605.1.33.1.4, and 13605.1.33.1.4) may be obtained from the Mac App Store. Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQJdBAEBCgBHFiEEcuX4rtoRe4X62yWlg6PvjDRstEYFAlrezFspHHByb2R1Y3Qt c2VjdXJpdHktbm9yZXBseUBsaXN0cy5hcHBsZS5jb20ACgkQg6PvjDRstEaLRg/+ IZkxD8Eks+HLd7JzBWYoLnDffepNXVU9+u7fLOvz++OXmn3DQnxHQ15SF8NKcCNo ZP0hXNPCnnNeYJ4PrOSGYYn83dQsLaaZVA4tsOH9C28q8RbVHDZDP46JsrtIVSR0 RBC7Z0REwfLLVpaWkosmbb90lRmsPbEfa4O65eOctKUbvSNYimZKl0+Teg3REbfk jBs2OI1MjtWTJP1qYyPGh0tIyGTniaru28QgOKNMKzMoyvryXyqKVAr8fXqQ8J6N 0rfu8bbQ3bbd7ZBNCG2sV2zqckHZCNXfmfnTiEO3WN23Qw8TwaOTNNVW6vjVwgyW ePMWT70qYUwp7djYvHKhxSsdjn4DRgNaGsGDZMGWw5xSEm7c7/rk1VRYJE5oWRG8 pXKbtAUhuz8IUJ9hWqnun/1LZsUMNWrex4mVQOuqyNJg5qH40ozW+cHW24/L7Ucj SN7kcKst9qLWnTHbBbI59Yqq4VdqI63r3ubDmEFN8CDzu4ZUz4r9ymsTNM4I9iix fhwFmqnQMWsl8ujBCvyE5qFT3zabDumViWVrrO6JAc10skQrbXNxE6HwXa2tc2bG tcEoaG2ShPtSx/n/0c8YBq2w3ZnvIwhOUvHcYF3r7YJvuiaTofvJ+wm1he30Kj97 kpc7okfrTH10A5xISL8uS5C0qBcSxmYrEyD+y3wiBRk= =44cl -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/security-announce/site_archiver%40li... This email sent to site_archiver@lists.apple.com