full-disclosure - [FD] APPLE-SA-2017-12-13-2 tvOS 11.2.1

Open Source and information security mailing list archives

Message-id: <10E73053-40C0-42D5-8BD0-713649C074B5@lists.apple.com>
Date: Wed, 13 Dec 2017 10:48:26 -0800
From: Apple Product Security <product-security-noreply@...ts.apple.com>
To: security-announce@...ts.apple.com
Subject: [FD] APPLE-SA-2017-12-13-2 tvOS 11.2.1

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

APPLE-SA-2017-12-13-2 tvOS 11.2.1

tvOS 11.2.1 is now available and addresses the following:

HomeKit
Available for: Apple TV 4K and Apple TV (4th generation)
Impact: A remote attacker may be able to unexpectedly alter
application state
Description: A message handling issue was addressed with improved
input validation.
CVE-2017-13903: Tian Zhang

Installation note:

Apple TV will periodically check for software updates. Alternatively,
you may manually check for software updates by selecting
"Settings -> System -> Software Update -> Update Software."

To check the current version of software, select
"Settings -> General -> About."

Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----
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=H53J
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives