full-disclosure - [FD] APPLE-SA-2021-09-13-2 watchOS 7.6.2

Open Source and information security mailing list archives

Message-id: <EEFDEC61-66F7-4F31-9E1C-29EC4D59B5EE@lists.apple.com>
Date: Tue, 14 Sep 2021 12:56:03 -0700
From: Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>
To: security-announce@...ts.apple.com
Subject: [FD] APPLE-SA-2021-09-13-2 watchOS 7.6.2

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-2021-09-13-2 watchOS 7.6.2

watchOS 7.6.2 addresses the following issues. Information about
the security content is also available at
https://support.apple.com/HT212806.

CoreGraphics
Available for: Apple Watch Series 3 and later
Impact: Processing a maliciously crafted PDF may lead to arbitrary
code execution. Apple is aware of a report that this issue may have
been actively exploited.
Description: An integer overflow was addressed with improved input
validation.
CVE-2021-30860: The Citizen Lab

Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

-----BEGIN PGP SIGNATURE-----
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=9NdW
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives