full-disclosure - [FD] APPLE-SA-2021-09-20-4 Xcode 13

Open Source and information security mailing list archives

Message-id: <1EA34831-25DA-4817-AABB-83189AC6D7B7@lists.apple.com>
Date: Mon, 20 Sep 2021 14:44:23 -0700
From: product-security-noreply--- via Fulldisclosure
 <fulldisclosure@...lists.org>
To: security-announce@...ts.apple.com
Subject: [FD] APPLE-SA-2021-09-20-4 Xcode 13

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-2021-09-20-4 Xcode 13

Xcode 13 addresses the following issues. Information about the
security content is also available at
https://support.apple.com/HT212818.

IDE Xcode Server
Available for: macOS Big Sur 11.3 and later
Impact: Multiple issues in nginx
Description: Multiple issues were addressed by updating nginx to
version 1.21.0.
CVE-2016-0742
CVE-2016-0746
CVE-2016-0747
CVE-2017-7529
CVE-2018-16843
CVE-2018-16844
CVE-2018-16845
CVE-2019-20372

Installation note:

Xcode 13 may be obtained from:

https://developer.apple.com/xcode/downloads/

To check that the Xcode has been updated:

* Select Xcode in the menu bar
* Select About Xcode
* The version after applying this update will be "Xcode 13".

Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

-----BEGIN PGP SIGNATURE-----
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=4uM6
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives