lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-id: <49CF38D7-540D-4186-A284-EBA3FA95A64B@lists.apple.com> Date: Tue, 24 Apr 2018 10:23:16 -0700 From: Apple Product Security <product-security-noreply@...ts.apple.com> To: security-announce@...ts.apple.com Subject: [FD] APPLE-SA-2018-04-24-2 Security Update 2018-001 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2018-04-24-2 Security Update 2018-001 Security Update 2018-001 is now available and addresses the following: Crash Reporter Available for: macOS High Sierra 10.13.4 Impact: An application may be able to gain elevated privileges Description: A memory corruption issue was addressed with improved error handling. CVE-2018-4206: Ian Beer of Google Project Zero LinkPresentation Available for: macOS High Sierra 10.13.4 Impact: Processing a maliciously crafted text message may lead to UI spoofing Description: A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. CVE-2018-4187: Zhiyang Zeng (@Wester) of Tencent Security Platform Department, Roman Mueller (@faker_) Installation note: Security Update 2018-001 may be obtained from the Mac App Store or Apple's Software Downloads web site: https://support.apple.com/downloads/ Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQJdBAEBCgBHFiEEcuX4rtoRe4X62yWlg6PvjDRstEYFAlrezFopHHByb2R1Y3Qt c2VjdXJpdHktbm9yZXBseUBsaXN0cy5hcHBsZS5jb20ACgkQg6PvjDRstEZ+Yg// dMgwOpNNc7/jIt85juE14c+Nu+Tqu9TUsixT35ILk1xjF6QO7wSHAWcxeYlxLH7T IBvOj56ozmcka/Qx+7d0DvNcgbrJPwFzk/DlyJHGyItUZsIpFf2Zyoo5PZ+qg8II JUfVrey1hMvqih5ElI68rnf+r8DlUfic64Xucxg9Afd5LFdtDQQOGnnw/s2emnyp Gy34d2lYCtPwDFEGkFiDyHNWZYtZBxSuLLWqCmE5RZr5JgRb1z76GLna07vkW77t 3lkSTmE8+DnSzoPWQnyWN74tbrGEGb9bRQQTc2RYaIxWHWrufzyGPyLKXev4fx/S oVGzWwc+H77NKLYDEMCxjipw6FSTnUK1g65phs8NqcWzsRuG0kLy0+L55xlvHkw8 CCunpcMxvr9oaBMkaSfl+YnhkaB1/YCPYm9+LOtWGqcsKB1shi7Ld2Jm+5LBKL50 Vttqrwg1wqgdxExmJu5cX+4hVfAH+ee0ZWt7zwcUAoDetMOXAYzn8F8YMpnA1Ms3 umlrFv3QiynT609HfBGy3A3OoftL0VQJGms0FMUlkmu14F8UX9iww+KQpZxqZZOZ O7wFdarx5gfbmgJSquB1mx8XFYggAXFN/0/ZEYnBZ4KmUJRVnldMFp3YFXbm6zqI ds946HzuvheS9sCe7k2DcllqHVFbVsf7rblEKBof89Q= =715E -----END PGP SIGNATURE----- _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
Powered by blists - more mailing lists