full-disclosure - Re: [FD] APPLE-SA-03-11-2025-2 iOS 18.3.2 and iPadOS 18.3.2

Open Source and information security mailing list archives

Message-ID: <CACqxkWL4t3TMXOuHuqUc-eevUJv4jkayPRZsPfL_M-m9SDBySA@mail.gmail.com>
Date: Sat, 5 Apr 2025 23:42:53 +0100
From: Nick Boyce <nick.boyce@...il.com>
To: Full Disclosure List <fulldisclosure@...lists.org>
Cc: Apple Product Security <product-security-noreply@...ts.apple.com>,
 security-announce@...ts.apple.com
Subject: Re: [FD] APPLE-SA-03-11-2025-2 iOS 18.3.2 and iPadOS 18.3.2

[Complete Apple product novice here (my devices all run a non-Apple
OS), but I'm asking for a friend]

Could someone please clarify the following part of the advisory for me:

> This update is available through iTunes and Software Update
> on your iOS device, and will not appear in your computer's
> Software Update application

Does this mean the update will be available via the "Software Update"
feature on an iPhone - or not ?

The quoted paragraph of Apple's advisory is a bit
Schroedinger's-Cat-ish - the update is both available and not
available.

Thanks,

Nick

On Thu, 20 Mar 2025 at 12:29, Apple Product Security via
Fulldisclosure <fulldisclosure@...lists.org> wrote:
>
[...]
> APPLE-SA-03-11-2025-2 iOS 18.3.2 and iPadOS 18.3.2
>
> iOS 18.3.2 and iPadOS 18.3.2 addresses the following issues.
> Information about the security content is also available at
> https://support.apple.com/122281.
[...]
> Description: An out-of-bounds write issue was addressed with improved
> checks to prevent unauthorized actions.
> WebKit Bugzilla: 285858
> CVE-2025-24201: Apple
>
> This update is available through iTunes and Software Update on your
> iOS device, and will not appear in your computer's Software Update
> application, or in the Apple Downloads site. Make sure you have an
> Internet connection and have installed the latest version of iTunes
> from https://www.apple.com/itunes/
[...]
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives