full-disclosure - [FD] APPLE-SA-2020-06-01-3 tvOS 13.4.6

Open Source and information security mailing list archives

Message-id: <A7B221A9-2F33-4365-B8F0-4A961EF5C567@lists.apple.com>
Date: Mon, 01 Jun 2020 11:00:27 -0700
From: Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>
To: security-announce@...ts.apple.com
Subject: [FD] APPLE-SA-2020-06-01-3 tvOS 13.4.6

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-2020-06-01-3 tvOS 13.4.6

tvOS 13.4.6 is now available and addresses the following:

Kernel
Available for: Apple TV 4K and Apple TV HD
Impact: An application may be able to execute arbitrary code with
kernel privileges
Description: A memory consumption issue was addressed with improved
memory handling.
CVE-2020-9859: unc0ver

Installation note:

Apple TV will periodically check for software updates. Alternatively,
you may manually check for software updates by selecting
"Settings -> System -> Software Update -> Update Software."

To check the current version of software, select
"Settings -> General -> About."
-----BEGIN PGP SIGNATURE-----
Version: BCPG v1.64

iQIcBAEDCAAGBQJe1Sz4AAoJEAc+Lhnt8tDNKlYP/270b8GFu9VuvLZxC7GtXZ9g
oLQZcmbaMLrhT+wt1ROMg6P9wZS/pSgmvSg90NHpieIr03YRCTcSeNY2ayIkSZza
P8xQ3AChQZjmx8cS19XXXY//ieR5cI3rLZ0fL8LQn1sPhpWP2hQFlXsnYf3FIbps
OU2hBeiZzpZUKKR3pdHTkGna5hQHZJyNCzHL1StQzafjb3yDDXRgl/F01Dz/Go/j
fbWsogHDrznVGj7Ea5mTWHJFRvruuc/rRclFiwGMBuBX2emmgomuLmx1p/mp1zP6
Tie8FmX7pAAslNzq++0XgXBgOikMK18rs03cuOxO/I8I4icAoNeWxi7dx85iJ1w3
zwcnZiYiR5LHHb9CHvO/4NUgV/jFTPwHlnHQHC/3hQ9LxaZG9xpZKHS0w+esZKRo
RFL/t4ObaPkjTmwriLYAr36EVqmirFUMH6SOph2D817nJY8XjhQTYNk1Q578/jrf
6qNsLtDpaFkHBAkDnH6uyv1iZi5nx0i1y6fFn/kfEIuMZ3rczVztMW78FYbcf2nE
0hdHrAx66mvCKdlzFVECvMR8fmkVR7JqsiCqXmAySBETTrs+0lskutbp9rdujt3j
PczWRB2A0vmYd3GNYBpgN0VeopuNyoeTLnzyifvyRCAWx9+SG34/qY2iv81lXUsD
3PVGATuXF+YhXTRtBYLL
=mWBD
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives