full-disclosure - [FD] APPLE-SA-2023-06-21-6 macOS Big Sur 11.7.8

Open Source and information security mailing list archives

Date: Wed, 21 Jun 2023 16:46:58 -0700
From: Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>
To: security-announce@...ts.apple.com
Subject: [FD] APPLE-SA-2023-06-21-6 macOS Big Sur 11.7.8

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-2023-06-21-6 macOS Big Sur 11.7.8

macOS Big Sur 11.7.8 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/kb/HT213809.

Apple maintains a Security Updates page at
https://support.apple.com/HT201222 which lists recent
software updates with security advisories.

Kernel
Available for: macOS Big Sur
Impact: An app may be able to execute arbitrary code with kernel
privileges. Apple is aware of a report that this issue may have been
actively exploited against versions of iOS released before iOS 15.7.
Description: An integer overflow was addressed with improved input
validation.
CVE-2023-32434: Georgy Kucherin (@kucher1n), Leonid Bezvershenko
(@bzvr_), and Boris Larin (@oct0xor) of Kaspersky

macOS Big Sur 11.7.8 may be obtained from the Mac App Store or
Apple's Software Downloads web site:
https://support.apple.com/downloads/
All information is also posted on the Apple Security Updates
web site: https://support.apple.com/en-us/HT201222.

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----
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=2xce
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives