full-disclosure - [FD] APPLE-SA-2017-02-21-2 Logic Pro X 10.3.1

Open Source and information security mailing list archives

Message-id: <355807EC-E343-42EE-875B-9068A81A99C9@lists.apple.com>
Date: Tue, 21 Feb 2017 10:52:51 -0800
From: Apple Product Security <product-security-noreply@...ts.apple.com>
To: security-announce@...ts.apple.com
Subject: [FD] APPLE-SA-2017-02-21-2 Logic Pro X 10.3.1

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

APPLE-SA-2017-02-21-2 Logic Pro X 10.3.1

Logic Pro X 10.3.1 is now available and addresses the following:

Projects
Available for:  OS X Yosemite v10.10 or later (64 bit)
Impact: Opening a maliciously crafted GarageBand Project file may
lead to arbitrary code execution
Description: A memory corruption issue was addressed through improved
memory handling.
CVE-2017-2374: Tyler Bohan of Cisco Talos

Installation note:

Logic Pro X may be obtained from the Mac App Store.

Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
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=hzK7
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives