lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Tue, 14 Sep 2021 12:56:03 -0700
From: Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>
To: security-announce@...ts.apple.com
Subject: [FD] APPLE-SA-2021-09-13-2 watchOS 7.6.2

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-2021-09-13-2 watchOS 7.6.2

watchOS 7.6.2 addresses the following issues. Information about
the security content is also available at
https://support.apple.com/HT212806.

CoreGraphics
Available for: Apple Watch Series 3 and later
Impact: Processing a maliciously crafted PDF may lead to arbitrary
code execution. Apple is aware of a report that this issue may have
been actively exploited.
Description: An integer overflow was addressed with improved input
validation.
CVE-2021-30860: The Citizen Lab


Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

-----BEGIN PGP SIGNATURE-----
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=9NdW
-----END PGP SIGNATURE-----


_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

Powered by blists - more mailing lists