full-disclosure - [FD] APPLE-SA-2019-9-26-4 Safari 13

Open Source and information security mailing list archives

Message-id: <FD23BA15-4A8B-45BF-B5CF-90F2A296CE77@lists.apple.com>
Date: Thu, 26 Sep 2019 13:19:09 -0700
From: Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>
To: security-announce@...ts.apple.com
Subject: [FD] APPLE-SA-2019-9-26-4 Safari 13

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-2019-9-26-4 Safari 13

Safari 13 addresses the following:

WebKit Page Loading
Available for: macOS Mojave 10.14.6 and macOS High Sierra 10.13.6
Impact: Processing maliciously crafted web content may lead to
universal cross site scripting
Description: A logic issue was addressed with improved state
management.
CVE-2019-8674

Installation note:

Safari 13 may be obtained from the Mac App Store.

Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----
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=Inji
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives