full-disclosure - [FD] APPLE-SA-2020-1-28-6 iTunes for Windows 12.10.4

Open Source and information security mailing list archives

Message-id: <E32FC395-74BD-4C6D-A31F-F781FE754E2D@lists.apple.com>
Date: Tue, 28 Jan 2020 14:37:01 -0800
From: Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>
To: Apple Product Security via Security-announce
 <security-announce@...ts.apple.com>
Subject: [FD] APPLE-SA-2020-1-28-6 iTunes for Windows 12.10.4

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-2020-1-28-6 iTunes for Windows 12.10.4

iTunes for Windows 12.10.4 is now available and addresses the
following:

Mobile Device Service
Available for: Windows 7 and later
Impact: A user may gain access to protected parts of the file system
Description: The issue was addressed with improved permissions logic.
CVE-2020-3861: Andrea Pierini (@decoder_it), Christian Danieli
(@padovah4ck)

Installation note:

iTunes for Windows 12.10.4 may be obtained from:
https://www.apple.com/itunes/download/

Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----

iQIyBAEBCAAdFiEEM5FaaFRjww9EJgvRBz4uGe3y0M0FAl4whoIACgkQBz4uGe3y
0M3k2g/45YzA61HKOP/ut8SmbuPtnvZP4JQuoKH6hDGPSZkB/QTiFwpfZkKsF1Yo
xasFGiJzbKcCCZseAj++KwzarMnE9NdIr/Im5RSoL0welYOAudyXMy+3hnU+dFgQ
W/wi+mjw8V1pPtqRhr+pWQWB2VPrpYvTT0FvPlp8C/EdRmt2e8KjJwJvVDt3oeo+
0HsRV8KLf/QnJwdc8ga8ELpnTx3FDlgDDmotNLPXiNW/8FG1EZCeVT0cH5NDGMrd
RkKHK3mTk8sSfMZ6MKVOzY8hBTyPgK+wmSMKwKqsbhEVAWfy2mlZoLZ4lOUXa3z1
22j7sy7LpjiSQCEZV+s0td1FojwQU9Q/d1HPd8b0JUX4L5BwcLcEka76nW6Uz1Dq
QVJaWWoMQPj9JHar9HiuOGtP7v15NQg6GzBRDt/z4m8k1Mx5FJI2KfeG68u1aogP
5EEl+VaH71d2/+NwqRzXLozuYJ8xZhiMWo4bI9RYJgACfuHHM1S2DNyp6FBYuQXH
t4ZEbApU4l1n2SO3tBttO240mTd2dGqqRqLENX8Q7yoS0nLSXdras4QCBarg75x5
+2n7lk8Z0AAI+VaOYdXiNDc1SQ3sDK/K+sFAlOg7YkT3jSzCWALv35SGoirFE0Ey
VXGEPoyPq5aUXY+3TpVtdx21BnNNOWP9uI/yGd0qt0WtNyzdcA==
=YKVn
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives