full-disclosure - [FD] APPLE-SA-2023-06-21-1 Safari 16.5.1

Open Source and information security mailing list archives

Date: Wed, 21 Jun 2023 16:42:41 -0700
From: Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>
To: security-announce@...ts.apple.com
Subject: [FD] APPLE-SA-2023-06-21-1 Safari 16.5.1

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-2023-06-21-1 Safari 16.5.1

Safari 16.5.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/kb/HT213816.

Apple maintains a Security Updates page at
https://support.apple.com/HT201222 which lists recent
software updates with security advisories.

WebKit
Available for: macOS Monterey
Impact: Processing maliciously crafted web content may lead to arbitrary
code execution. Apple is aware of a report that this issue may have been
actively exploited.
Description: A type confusion issue was addressed with improved checks.
WebKit Bugzilla: 256567
CVE-2023-32439: an anonymous researcher

Safari 16.5.1 may be obtained from the Mac App Store.
All information is also posted on the Apple Security Updates
web site: https://support.apple.com/en-us/HT201222.

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----
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=FbRw
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives