Apple security updates and Rapid Security Responses

ronjor · Jun 13, 2018

This document describes the security content of Xcode 9.4.1.

Xcode 9.4.1
Released June 13, 2018
Git
Available for: macOS High Sierra 10.13.2 or later
Impact: Multiple issues in git, the most significant of which may lead to arbitrary code execution
Description: Multiple issues existed in git. These issues were addressed by updating git to version 2.15.2.

CVE-2018-11235: Etienne Stalmans
CVE-2018-11233
Click to expand...

Minimalist · Jun 19, 2018

Apple Fined For ‘Bricking’ Third Party Repaired iPhones

Apple has been handed a rebuke by an Australian court after it imposed a modest fine against the company for “bricking” iPhones.

The Australian Federal Court on Tuesday fined Apple AUS$9m (£5.05m) because of a software update that disabled iPhones that had cracked screens repaired by third parties.
Click to expand...

https://www.silicon.co.uk/mobility/tablets/apple-fined-bricking-iphones-233777

ronjor · Jun 28, 2018

SwiftNIO 1.8.0

Released June 27, 2018
SwiftNIO
Available for: macOS Sierra 10.12 and later, Ubuntu 14.04 and later
Impact: A remote attacker may be able to overwrite arbitrary memory
Description: A buffer overflow was addressed with improved size validation.
CVE-2018-4281: Apple
Click to expand...

ronjor · Jul 6, 2018

Wi-Fi Update for Boot Camp 6.4.0

Released July 5, 2018

Wi-Fi

Available for the following machines while running Boot Camp: MacBook (Late 2009 and later), MacBook Pro (Mid 2010 and later), MacBook Air (Late 2010 and later), Mac mini (Mid 2010 and later), iMac (Late 2009 and later), and Mac Pro (Mid 2010 and later)
Click to expand...

ronjor · Jul 9, 2018

Apple security updates 09 Jul 2018

iTunes 12.8 for Windows Windows 7 and later 09 Jul 2018

iCloud for Windows 7.6 Windows 7 and later 09 Jul 2018

Safari 11.1.2 OS X El Capitan 10.11.6, macOS Sierra 10.12.6, and macOS High Sierra 10.13.6 09 Jul 2018

macOS High Sierra 10.13.6, Security Update 2018-004 Sierra, Security Update 2018-004 El Capitan OS X El Capitan 10.11.6, macOS Sierra 10.12.6, macOS High Sierra 10.13.5 09 Jul 2018

watchOS 4.3.2 All Apple Watch models 09 Jul 2018

tvOS 11.4.1 Apple TV 4K and Apple TV (4th generation) 09 Jul 2018
iOS 11.4.1
Click to expand...

guest · Jul 11, 2018

iPhone crashing bug likely caused by code added to appease Chinese gov’t
Apple fixed the denial-of-service flaw in update released Monday.
July 10, 2018
https://arstechnica.com/information...caused-by-code-added-to-appease-chinese-govt/

The iOS 11.4.1 update Apple released Monday was most notable for making it harder for law enforcement to access locked iPhones. On Tuesday, security researcher Patrick Wardle illuminated another fix. He said his fix addressed code Apple added likely to appease the Chinese government; this is the code that caused crashes on certain iDevices when users typed the word Taiwan or received messages containing a Taiwanese flag emoji.

“Though its impact was limited to a denial of service (NULL-pointer dereference), it made for an interesting case study of analyzing iOS code,” Wardle, a former hacker for the National Security Agency, wrote in a blog post. “And if Apple hadn’t tried to appease the Chinese government in the first place, there would be no bug!”
Click to expand...

ronjor · Aug 28, 2018

macOS High Sierra 10.13.6 Supplemental Update 2 for MacBook Pro (2018 )

Released August 28, 2018
macOS High Sierra 10.13.6 Supplemental Update 2 for MacBook Pro (2018 ) includes the security content of macOS High Sierra 10.13.6.
Click to expand...

ronjor · Sep 13, 2018

12 Sep 2018

iTunes 12.9 for Windows (details available soon) Windows 7 and later
Click to expand...

ronjor · Sep 17, 2018

Security updates 17 sep 18

iCloud for Windows 7.9 Windows 7 and later 05 Dec 2018

Safari 12.0.2 macOS Sierra 10.12.6, macOS High Sierra 10.13.6, and macOS Mojave 10.14.1 05 Dec 2018

iTunes 12.9.2 for Windows Windows 7 and later 05 Dec 2018

macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006 Sierra macOS Sierra 10.12.6, macOS High Sierra 10.13.6, and macOS Mojave 10.14.1 05 Dec 2018

Shortcuts 2.1.2 for iOS iOS 12.0 and later 05 Dec 2018

tvOS 12.1.1 Apple TV 4K and Apple TV (4th generation) 05 Dec 2018

iOS 12.1.1 iPhone 5s and later, iPad Air and later, and iPod touch 6th generation 05 Dec 2018
Click to expand...

ronjor · Sep 24, 2018

iCloud for Windows 7.9 Windows 7 and later 05 Dec 2018

Safari 12.0.2 macOS Sierra 10.12.6, macOS High Sierra 10.13.6, and macOS Mojave 10.14.1 05 Dec 2018

iTunes 12.9.2 for Windows Windows 7 and later 05 Dec 2018

macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006 Sierra macOS Sierra 10.12.6, macOS High Sierra 10.13.6, and macOS Mojave 10.14.1 05 Dec 2018

Shortcuts 2.1.2 for iOS iOS 12.0 and later 05 Dec 2018

tvOS 12.1.1 Apple TV 4K and Apple TV (4th generation) 05 Dec 2018

iOS 12.1.1 iPhone 5s and later, iPad Air and later, and iPod touch 6th generation 05 Dec 2018
Click to expand...

guest · Oct 2, 2018

Some Apple laptops shipped with Intel chips in "manufacturing mode"
Apple fixed issue with an update released in June but other OEMs may also be affected
October 2, 2018
https://www.zdnet.com/article/some-apple-laptops-shipped-with-intel-chips-in-manufacturing-mode/

Apple has secretly fixed a security issue affecting some laptops that shipped with Intel chips that were mistakenly left configured into "manufacturing mode."

The OS maker fixed the issue in June, with the release of macOS High Sierra 10.13.5, and Security Update 2018-003 for macOS Sierra and El Capitan.

Maxim Goryachy and Mark Ermolov, two researchers from Positive Technologies, spotted the Intel chip misconfiguration --which also received a vulnerability ID of CVE-2018-4251.

"By exploiting CVE-2018-4251, an attacker could write old versions of Intel ME (such as versions containing vulnerability INTEL-SA-00086) to memory without needing an SPI programmer or access to the HDA_SDO bridge--in other words, without physical access to the computer," [...]
Click to expand...

ronjor · Oct 8, 2018

Security updates. 08 oct 18

iCloud for Windows 7.7 Windows 7 and later 08 Oct 2018

iOS 12.0.1 iPhone 5s and later, iPad Air and later, and iPod touch 6th generation 08 Oct 2018
Click to expand...

ronjor · Oct 30, 2018

About the security content of macOS Mojave 10.14.1, Security Update 2018-001 High Sierra, Security Update 2018-005 Sierra
Click to expand...

https://support.apple.com/en-us/HT209193

ronjor · Oct 30, 2018

About the security content of Safari 12.0.1

Safari 12.0.1
Released October 30, 2018
Click to expand...

ronjor · Oct 30, 2018

iCloud for Windows 7.8 Windows 7 and later 30 Oct 2018

iTunes 12.9.1 Windows 7 and later 30 Oct 2018

watchOS 5.1 Apple Watch Series 1 and later 30 Oct 2018

iOS 12.1 iPhone 5s and later, iPad Air and later, and iPod touch 6th generation 30 Oct 2018

tvOS 12.1 Apple TV 4K and Apple TV (4th generation) 30 Oct 2018
Click to expand...

https://support.apple.com/en-us/HT201222

Minimalist · Nov 1, 2018

Welcome back, 'ping of death', it's been... a few months. Now it's Apple's turn to do the patching

When Apple took to the stage for its latest slew of product announcements, there were a bunch of security fixes disclosed at the same time with far less fanfare.

At least one of these, discovered by Semmle security research engineer Kevin Backhouse, is a treat: your iThings can be crashed with what amounts to a "ping of death", and there's little you can do beyond installing this week's updates.
Click to expand...

https://www.theregister.co.uk/2018/...seen_you_in_span_classstrikeyearsspan_months/

ronjor · Nov 7, 2018

watchOS 5.1.1 05 Nov 2018

This update has no published CVE entries.
Click to expand...

ronjor · Nov 22, 2018

macOS Mojave 10.14.1 Supplemental Update for MacBook Air (2018 ) 07 Nov 2018

This update has no published CVE entries.
The macOS Mojave 10.14.1 Supplemental Update improves the stability and reliability of MacBook Air (2018 ) computers and is recommended for all users.
Click to expand...

ronjor · Nov 28, 2018

iCloud for Windows 7.8.1

Windows 7 and later 27 Nov 2018
This update has no published CVE entries.
Click to expand...

ronjor · Dec 5, 2018

Apple security updates 05 Dec 2018

Code:

Safari 12.0.2    macOS Sierra 10.12.6, macOS High Sierra 10.13.6, and macOS Mojave 10.14.1    05 Dec 2018

iTunes 12.9.2 for Windows    Windows 7 and later    05 Dec 2018

macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006 Sierra    macOS Sierra 10.12.6, macOS High Sierra 10.13.6, and macOS Mojave 10.14.1    05 Dec 2018

Shortcuts 2.1.2 for iOS    iOS 12.0 and later    05 Dec 2018

tvOS 12.1.1    Apple TV 4K and Apple TV (4th generation)    05 Dec 2018

iOS 12.1.1    iPhone 5s and later, iPad Air and later, and iPod touch 6th generation    05 Dec 2018

ronjor · Dec 7, 2018

watchOS 5.1.2

Released December 6, 2018
Click to expand...

ronjor · Dec 18, 2018

iOS 12.1.2 17 Dec 2018

This update has no published CVE entries. iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Click to expand...

ronjor · Jan 22, 2019

Code:

iCloud for Windows 7.10    Windows 7 and later    22 Jan 2019

Safari 12.0.3    macOS Sierra 10.12.6, macOS High Sierra 10.13.6, and macOS Mojave 10.14.3    22 Jan 2019

watchOS 5.1.3    All Apple Watch models    22 Jan 2019

tvOS 12.1.2    Apple TV 4K and Apple TV (4th generation)    22 Jan 2019

macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra  macOS Sierra 10.12.6, macOS High Sierra 10.13.6, and macOS Mojave 10.14.2    22 Jan 2019

iOS 12.1.3 iPhone 5s and later, iPad Air and later, and iPod touch 6th generation  22 Jan 2019

https://support.apple.com/en-us/HT201222

ronjor · Jan 28, 2019

iTunes 12.9.3 for Windows

Released January 24, 2019
Click to expand...

ronjor · Feb 7, 2019

Code:

Shortcuts 2.1.3 for iOS    Shortcuts 2.1.2 for iOS    07 Feb 2019

macOS Mojave 10.14.3 Supplemental Update    macOS Mojave 10.14.3    07 Feb 2019

iOS 12.1.4    iPhone 5s and later, iPad Air and later, and iPod touch 6th generation    07 Feb 2019

macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra    macOS High Sierra 10.13.6, macOS Mojave 10.14.2    05 Feb 2019

https://support.apple.com/en-us/HT201222

Log in or Sign up

Apple security updates and Rapid Security Responses

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

Apple security updates and Rapid Security Responses

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches