Read Time:1 Second
Post Content
Monthly Archives: October 2022
GLSA 202210-29: Net-SNMP: Multiple Vulnerabilities
GLSA 202210-30: X.Org X server, XWayland: Multiple Vulnerabilities
GLSA 202210-31: OpenEXR: Multiple Vulnerabilities
GLSA 202210-32: hiredis, hiredis-py: Multiple Vulnerabilities
GLSA 202210-33: Libtirpc: Denial of Service
APPLE-SA-2022-10-27-15 Additional information for APPLE-SA-2022-10-24-7 Safari 16.1
Read Time:24 Second
Posted by Apple Product Security via Fulldisclosure on Oct 30
APPLE-SA-2022-10-27-15 Additional information for APPLE-SA-2022-10-24-7 Safari 16.1
Safari 16.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/HT213495.
WebKit
Available for: macOS Big Sur and macOS Monterey
Impact: Visiting a malicious website may lead to user interface
spoofing
Description: The issue was addressed with improved UI handling.
WebKit Bugzilla: 243693…
APPLE-SA-2022-10-27-14 Additional information for APPLE-SA-2022-09-12-5 Safari 16
Read Time:24 Second
Posted by Apple Product Security via Fulldisclosure on Oct 30
APPLE-SA-2022-10-27-14 Additional information for APPLE-SA-2022-09-12-5 Safari 16
Safari 16 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/HT213442.
Safari Extensions
Available for: macOS Big Sur and macOS Monterey
Impact: A website may be able to track users through Safari web
extensions
Description: A logic issue was addressed with improved state
management.
WebKit…
APPLE-SA-2022-10-27-13 watchOS 9
Read Time:23 Second
Posted by Apple Product Security via Fulldisclosure on Oct 30
APPLE-SA-2022-10-27-13 watchOS 9
watchOS 9 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/HT213486.
Accelerate Framework
Available for: Apple Watch Series 4 and later
Impact: Processing a maliciously crafted image may lead to arbitrary
code execution
Description: A memory consumption issue was addressed with improved
memory handling.
CVE-2022-42795: ryuzaki
AppleAVD…
APPLE-SA-2022-10-27-12 Additional information for APPLE-SA-2022-10-24-5 watchOS 9.1
Read Time:24 Second
Posted by Apple Product Security via Fulldisclosure on Oct 30
APPLE-SA-2022-10-27-12 Additional information for APPLE-SA-2022-10-24-5 watchOS 9.1
watchOS 9.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/HT213491.
AppleMobileFileIntegrity
Available for: Apple Watch Series 4 and later
Impact: An app may be able to modify protected parts of the file
system
Description: This issue was addressed by removing additional
entitlements….