lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Thu, 10 Feb 2022 13:27:09 -0800
From: Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>
To: security-announce@...ts.apple.com
Subject: [FD] APPLE-SA-2022-02-10-3 Safari 15.3

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-2022-02-10-3 Safari 15.3

Safari 15.3 addresses the following issues.
Information about the security content is alsoavailable at
https://support.apple.com/HT213091.

WebKit
Available for: macOS Big Sur and macOS Catalina
Impact: Processing maliciously crafted web content may lead to
arbitrary code execution. Apple is aware of a report that this issue
may have been actively exploited.
Description: A use after free issue was addressed with improved
memory management.
CVE-2022-22620: an anonymous researcher

Installation note:

This update may be obtained from the Mac App Store.

Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

-----BEGIN PGP SIGNATURE-----
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=VhPA
-----END PGP SIGNATURE-----


_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

Powered by blists - more mailing lists