bugtraq - APPLE-SA-2019-9-26-8 iOS 13.1 and iPadOS 13.1

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-id: <21B03F29-DE7A-4800-A4D4-A3DD0D6CA5C3@lists.apple.com>
Date: Thu, 26 Sep 2019 13:21:58 -0700
From: Apple Product Security <product-security-noreply@...ts.apple.com>
To: security-announce@...ts.apple.com
Subject: APPLE-SA-2019-9-26-8 iOS 13.1 and iPadOS 13.1

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-2019-9-26-8 iOS 13.1 and iPadOS 13.1

iOS 13.1 and iPadOS 13.1 address the following:

VoiceOver
Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4
and later, and iPod touch 7th generation
Impact: A person with physical access to an iOS device may be able to
access contacts from the lock screen
Description: The issue was addressed by restricting options offered
on a locked device.
CVE-2019-8775: videosdebarraquito

Additional recognition

Find My iPhone
We would like to acknowledge an anonymous researcher for their
assistance.

Notes
We would like to acknowledge an anonymous researcher for their
assistance.

Telephony
We would like to acknowledge Yiğit Can YILMAZ (@yilmazcanyigit) for
their assistance.

Installation note:

This update is available through iTunes and Software Update on your
iOS device, and will not appear in your computer's Software Update
application, or in the Apple Downloads site. Make sure you have an
Internet connection and have installed the latest version of iTunes
from https://www.apple.com/itunes/

iTunes and Software Update on the device will automatically check
Apple's update server on its weekly schedule. When an update is
detected, it is downloaded and the option to be installed is
presented to the user when the iOS device is docked. We recommend
applying the update immediately if possible. Selecting Don't Install
will present the option the next time you connect your iOS device.

The automatic update process may take up to a week depending on the
day that iTunes or the device checks for updates. You may manually
obtain the update via the Check for Updates button within iTunes, or
the Software Update on your device.

To check that the iPhone, iPod touch, or iPad has been updated:

* Navigate to Settings
* Select General
* Select About. The version after applying this update
will be "iOS 13.1 and iPadOS 13.1".

Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----
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=wlDX
-----END PGP SIGNATURE-----