bugtraq - APPLE-SA-2012-03-07-3 Apple TV 5.0

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-id: <DFE8D9FB-7C92-4C36-9799-EAA4D52B9A4C@lists.apple.com>
Date: Wed, 07 Mar 2012 13:44:34 -0800
From: Apple Product Security <product-security-noreply@...ts.apple.com>
To: security-announce@...ts.apple.com
Subject: APPLE-SA-2012-03-07-3 Apple TV 5.0

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

APPLE-SA-2012-03-07-3 Apple TV 5.0

Apple TV 5.0 is now available and addresses the following:

Apple TV
Available for:  Apple TV (2nd generation)
Impact:  Applications that use the libresolv library may be
vulnerable to an unexpected application termination or arbitrary code
execution
Description:  An integer overflow existed in the handling of DNS
resource records, which may lead to heap memory corruption.
CVE-ID
CVE-2011-3453 : Ilja van Sprundel of IOActive

Installation note:

Apple TV will periodically check for software updates. Alternatively,
you may manually check for software updates by selecting
"Settings -> General -> Update Software".

To check the current version of software, select
"Settings -> General -> About".

Information will also be posted to the Apple Security Updates
web site: http://support.apple.com/kb/HT1222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.16 (Darwin)

iQEcBAEBAgAGBQJPV6OMAAoJEGnF2JsdZQeetlIH/RFQxn1BAG0kUhLhEiEQ0cAd
y+oYBHg9IOWLgEuPy6APrk7o+vJcrv7EmzzVuFy83PisRgWvb5muJEp0wHmFjDe1
j0Ex6CbppPGNa/MppCMKjHXrGSD4jnCakssojk+ADSPPXJrePUfBf5sh856IOl2k
u8HDq91ArSSlAZV96j1gvEEVTidf6ZNOn9EiSPEEPPImP8Ay2KJbEaMG5DWF5bae
z9n+byjYv3k+hhCD4XXd/42DYIH71D7uB7wddsjNP7PC+fiHB5l33hrapq0OCUTe
8ZkKHIfzOoZN7B+Q/6zy+iixRRCyeLmLsQdGWwP5IPuRVsLDJ4uESSEPgiagd6c=
=BjXf
-----END PGP SIGNATURE-----