bugtraq - APPLE-SA-2014-08-13-1 Safari 6.1.6 and Safari 7.0.6

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Wed, 13 Aug 2014 13:42:46 -0700
From: Apple Product Security <product-security-noreply@...ts.apple.com>
To: security-announce@...ts.apple.com
Subject: APPLE-SA-2014-08-13-1 Safari 6.1.6 and Safari 7.0.6

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

APPLE-SA-2014-08-13-1 Safari 6.1.6 and Safari 7.0.6

Safari 6.1.6 and Safari 7.0.6 are now available and address the
following:

WebKit
Available for:  OS X Lion v10.7.5, OS X Lion Server v10.7.5,
OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.4
Impact:  Visiting a maliciously crafted website may lead to an
unexpected application termination or arbitrary code execution
Description:  Multiple memory corruption issues existed in WebKit.
These issues were addressed through improved memory handling.
CVE-ID
CVE-2014-1384 : Apple
CVE-2014-1385 : Apple
CVE-2014-1386 : an anonymous researcher
CVE-2014-1387 : Google Chrome Security Team
CVE-2014-1388 : Apple
CVE-2014-1389 : Apple
CVE-2014-1390 : Apple

For OS X Mavericks and OS X Mountain Lion systems, Safari 7.0.6
and Safari 6.1.6 may be obtained from Mac App Store.

For OS X Lion systems Safari 6.1.6 is available via the Apple
Software Update application.

Information will also be posted to the Apple Security Updates
web site: http://support.apple.com/kb/HT1222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - http://gpgtools.org
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=cfmv
-----END PGP SIGNATURE-----

Download attachment "signature.asc" of type "application/pgp-signature" (842 bytes)