lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Tue, 26 May 2020 17:24:08 -0700
From: Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>
To: Apple Product Security via Security-announce
 <security-announce@...ts.apple.com>
Subject: [FD] APPLE-SA-2020-05-26-6 watchOS 5.3.7

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-2020-05-26-6 watchOS 5.3.7

watchOS 5.3.7 addresses the following:

Mail
Available for: Apple Watch Series 1, Apple Watch Series 2, Apple
Watch Series 3, and Apple Watch Series 4 when paired to an iPhone
with iOS 12 installed
Impact: Processing a maliciously crafted mail message may lead to
heap corruption
Description: A memory consumption issue was addressed with improved
memory handling.
CVE-2020-9819: ZecOps.com

Wi-Fi
Available for: Apple Watch Series 1, Apple Watch Series 2, Apple
Watch Series 3, and Apple Watch Series 4 when paired to an iPhone
with iOS 12 installed
Impact: A remote attacker may be able to cause unexpected system
termination or corrupt kernel memory
Description: A memory corruption issue was addressed with improved
input validation.
CVE-2020-3843: Ian Beer of Google Project Zero

Installation note:

Instructions on how to update your Apple Watch software are
available at https://support.apple.com/kb/HT204641

To check the version on your Apple Watch, open the Apple Watch app
on your iPhone and select "My Watch > General > About".

Alternatively, on your watch, select "My Watch > General > About".
-----BEGIN PGP SIGNATURE-----
Version: BCPG v1.64
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=E9UW
-----END PGP SIGNATURE-----


_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

Powered by blists - more mailing lists