full-disclosure - [FD] APPLE-SA-2017-05-15-6 iTunes 12.6.1

Open Source and information security mailing list archives

Date: Mon, 15 May 2017 10:51:05 -0700
From: Apple Product Security <product-security-noreply@...ts.apple.com>
To: security-announce@...ts.apple.com
Subject: [FD] APPLE-SA-2017-05-15-6 iTunes 12.6.1

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

APPLE-SA-2017-05-15-6 iTunes 12.6.1

iTunes 12.6.1 is now available and addresses the following:

WebKit
Available for:  Windows 7 and later
Impact: Processing maliciously crafted web content may lead to
arbitrary code execution
Description: Multiple memory corruption issues were addressed with
improved memory handling.
CVE-2017-6984: lokihardt of Google Project Zero

Installation note:

iTunes 12.6.1 may be obtained from:
https://www.apple.com/itunes/download/

Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org

iQIcBAEBCgAGBQJZGdmMAAoJEIOj74w0bLRGrEAQANAwX4py0E+fVjErcOSxTuqw
XeO2oIgY3Dv97o9Nq652rJuvy9RhH8ezXez85vzu4IOlYtQEfQIknn3bdcN2wz+v
SZ2TqLaCi4xteXWqg97eh83mArXnkIB6udS6qzqEzvzhMWadbRFmbDHtctjCspDW
KoAC3ycPs27oHxvqovn/LVkZQhQbUTecdpKcxHDz2SEOMoifc8byzTQrUuT3XPuu
vkMqbCJBmruj6BRWuG9SKEDiUp0T9qTATQ6O1FMu9nh+Vg8UiA4YXPoam0rXLcHk
FDowArWgM1CHs2P5xjYXs1Zw4dx9mznIPIgbp63El0Y7USw1cOyJ1nQ/3yP4Bizh
/QRzjeioFYS8hrqr8vg6B715sQ9wQDn68WFLo818Rk1qqLJsBGXlVhaeHdMAjVri
ig3Tp0zFmpgR5VRi0/rLyoBIgOpiupFtnfmpmA0PNr8xIUQRQSdVgs7OF03kvhav
N8ZUBaWw0DX1OL3FmI6hp9MjEGIqFBLvHkjXrPN7hNgXtu7Xphnat++5K/6sG1Cy
raYolhWly9ZyPbcnvin12wtHvPD5nkMs++GOVdEVXrnkRlxTfUIBuFbrEc9LRzsB
OQLIYT20MwhqiZ8WJ0YWfk62ynlL83Vb9kS2ANATCyqsduU1gVBV7a5FOtaiQMrS
a66PY5+nkqJlwci99PtG
=IupJ
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives