full-disclosure - [FD] APPLE-SA-2022-02-10-2 macOS Monterey 12.2.1

Open Source and information security mailing list archives

Message-id: <6E5B7FDF-303B-4A26-92D6-566247FCC242@lists.apple.com>
Date: Thu, 10 Feb 2022 13:26:45 -0800
From: Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>
To: security-announce@...ts.apple.com
Subject: [FD] APPLE-SA-2022-02-10-2 macOS Monterey 12.2.1

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-2022-02-10-2 macOS Monterey 12.2.1

macOS Monterey 12.2.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/HT213092.

WebKit
Available for: macOS Monterey
Impact: Processing maliciously crafted web content may lead to
arbitrary code execution. Apple is aware of a report that this issue
may have been actively exploited.
Description: A use after free issue was addressed with improved
memory management.
CVE-2022-22620: an anonymous researcher

Installation note:
This update may be obtained from the Mac App Store

Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEePiLW1MrMjw19XzoeC9qKD1prhgFAmIFeLEACgkQeC9qKD1p
rhjX+A/9H0iEZjUo5oJR7Tv1bQlsZua1hdrkRG85CF3CgA7S9Rr/f2H08Yu8CDgr
KG9LEmSTmFGGzaU3srFi8yUmSU1HMhApuLtyiPVxs4IIgM4/x+/voaMsuMUNBAPl
0ziJQZHwfxPQi8TuNqV6H9kxD/dBlV6JMAwuaJ4dDXsn2AEkxH5XrzA+foL0RdaV
mo6N1G3r7YDB4J1w38AIa2jcmQauXLUMrP+nQkrXPZPqSeDMarVyTS+znj0vfIyQ
7TQQA5INYv1w9o47M1sQo604QHYA0Y83ZfGyGWhrCxnAM7eoGGB9icC2srjFpmxT
603U+u2RuMztqblEpMTO95jke8yliT6UksloMRs2VQEqouTTlbXkXfRHJVwgrRuB
CtOS9k5onqmBi5L7V8WKKZCCHRa02QuN8v60Ly9+2P3jaaFezKAmT+LGA4wtOZ85
8JK+rWdYYbEyek1GgN8/AC8oFRF0RRvrXlO9Ux5+aweILIEaSJ9WjnEpk6MyUsIy
xchqId31uwU58V9MA9fp9yCvgrJsoeuSD9ynq2CWKDIuV4mVZFKqW6ur2Qf3Fi/0
gT/TGD6dcU8eYSvYxA2iw3hasTIUN6TVRbqsdFmKgq47IPSOxIaMdYmeIWwXdSiL
uaWTrz+W2iiM1gDIP0WWxC4P4wgfZtUZgqSFaAFvwtKLYM8Ywg0=
=wrdJ
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives