lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [day] [month] [year] [list]
Message-id: <C03D6868-59CD-4273-A1C5-CCE3D0EF0EC4@lists.apple.com>
Date: Mon, 10 Feb 2025 11:32:41 -0800
From: Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>
To: security-announce@...ts.apple.com
Subject: [FD] APPLE-SA-02-10-2025-2 iPadOS 17.7.5

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-02-10-2025-2 iPadOS 17.7.5

iPadOS 17.7.5 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/122173.

Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.

Accessibility
Available for: iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch,
and iPad 6th generation
Impact: A physical attack may disable USB Restricted Mode on a locked
device. Apple is aware of a report that this issue may have been
exploited in an extremely sophisticated attack against specific targeted
individuals.
Description: An authorization issue was addressed with improved state
management.
CVE-2025-24200: Bill Marczak of The Citizen Lab at The University of
Toronto’s Munk School

This update is available through iTunes and Software Update on your
iOS device, and will not appear in your computer's Software Update
application, or in the Apple Downloads site. Make sure you have an
Internet connection and have installed the latest version of iTunes
from https://www.apple.com/itunes/

iTunes and Software Update on the device will automatically check
Apple's update server on its weekly schedule. When an update is
detected, it is downloaded and the option to be installed is
presented to the user when the iOS device is docked. We recommend
applying the update immediately if possible. Selecting
Don't Install will present the option the next time you connect
your iOS device.

The automatic update process may take up to a week depending on
the day that iTunes or the device checks for updates. You may
manually obtain the update via the Check for Updates button
within iTunes, or the Software Update on your device.

To check that the iPhone, iPod touch, or iPad has been updated:

* Navigate to Settings
* Select General
* Select About. The version after applying this update will be
"iPadOS 17.7.5".

All information is also posted on the Apple Security Releases
web site: https://support.apple.com/100100.

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

-----BEGIN PGP SIGNATURE-----
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=It2e
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ