full-disclosure - [FD] APPLE-SA-2021-03-08-4 watchOS 7.3.2

Open Source and information security mailing list archives

Message-id: <17136D01-02EF-45AA-A5AE-E8D52D418C7A@lists.apple.com>
Date: Mon, 08 Mar 2021 15:01:52 -0600
From: Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>
To: security-announce@...ts.apple.com
Subject: [FD] APPLE-SA-2021-03-08-4 watchOS 7.3.2

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-2021-03-08-4 watchOS 7.3.2

watchOS 7.3.2 addresses the following issue.

Information about the security content is also available
at https://support.apple.com/HT212223.

WebKit
Available for: Apple Watch Series 3 and later
Impact: Processing maliciously crafted web content may lead
to arbitrary code execution
Description: A memory corruption issue was addressed with
improved validation.
CVE-2021-1844: Clément Lecigne of Googleʼs Threat Analysis Group,
Alison Huffman of Microsoft Browser Vulnerability Research

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

-----BEGIN PGP SIGNATURE-----
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=ijxM
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives