Message-id: <C95E01A9-51DF-47C2-9C51-0AE9AF19425D@lists.apple.com>
Date: Mon, 10 Feb 2025 11:28:53 -0800
From: Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>
To: security-announce@...ts.apple.com
Subject: [FD] APPLE-SA-02-10-2025-1 iOS 18.3.1 and iPadOS 18.3.1

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-02-10-2025-1 iOS 18.3.1 and iPadOS 18.3.1

iOS 18.3.1 and iPadOS 18.3.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/122174.

Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.

Accessibility
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch
3rd generation and later, iPad Pro 11-inch 1st generation and later,
iPad Air 3rd generation and later, iPad 7th generation and later, and
iPad mini 5th generation and later
Impact: A physical attack may disable USB Restricted Mode on a locked
device. Apple is aware of a report that this issue may have been
exploited in an extremely sophisticated attack against specific targeted
individuals.
Description: An authorization issue was addressed with improved state
management.
CVE-2025-24200: Bill Marczak of The Citizen Lab at The University of
Toronto’s Munk School

This update is available through iTunes and Software Update on your
iOS device, and will not appear in your computer's Software Update
application, or in the Apple Downloads site. Make sure you have an
Internet connection and have installed the latest version of iTunes
from https://www.apple.com/itunes/

iTunes and Software Update on the device will automatically check
Apple's update server on its weekly schedule. When an update is
detected, it is downloaded and the option to be installed is
presented to the user when the iOS device is docked. We recommend
applying the update immediately if possible. Selecting
Don't Install will present the option the next time you connect
your iOS device.

The automatic update process may take up to a week depending on
the day that iTunes or the device checks for updates. You may
manually obtain the update via the Check for Updates button
within iTunes, or the Software Update on your device.

To check that the iPhone, iPod touch, or iPad has been updated:

* Navigate to Settings
* Select General
* Select About. The version after applying this update will be
"iOS 18.3.1 and iPadOS 18.3.1".

All information is also posted on the Apple Security Releases
web site: https://support.apple.com/100100.

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

-----BEGIN PGP SIGNATURE-----
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=ZvxF
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/

Powered by blists - more mailing lists