full-disclosure - [FD] APPLE-SA-2020-05-26-6 watchOS 5.3.7

Open Source and information security mailing list archives

Message-id: <62BF1E49-2B6B-4AB0-9176-921988B2B819@lists.apple.com>
Date: Tue, 26 May 2020 17:24:08 -0700
From: Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>
To: Apple Product Security via Security-announce
 <security-announce@...ts.apple.com>
Subject: [FD] APPLE-SA-2020-05-26-6 watchOS 5.3.7

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-2020-05-26-6 watchOS 5.3.7

watchOS 5.3.7 addresses the following:

Mail
Available for: Apple Watch Series 1, Apple Watch Series 2, Apple
Watch Series 3, and Apple Watch Series 4 when paired to an iPhone
with iOS 12 installed
Impact: Processing a maliciously crafted mail message may lead to
heap corruption
Description: A memory consumption issue was addressed with improved
memory handling.
CVE-2020-9819: ZecOps.com

Wi-Fi
Available for: Apple Watch Series 1, Apple Watch Series 2, Apple
Watch Series 3, and Apple Watch Series 4 when paired to an iPhone
with iOS 12 installed
Impact: A remote attacker may be able to cause unexpected system
termination or corrupt kernel memory
Description: A memory corruption issue was addressed with improved
input validation.
CVE-2020-3843: Ian Beer of Google Project Zero

Installation note:

Instructions on how to update your Apple Watch software are
available at https://support.apple.com/kb/HT204641

To check the version on your Apple Watch, open the Apple Watch app
on your iPhone and select "My Watch > General > About".

Alternatively, on your watch, select "My Watch > General > About".
-----BEGIN PGP SIGNATURE-----
Version: BCPG v1.64
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=E9UW
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives