[prev in list] [next in list] [prev in thread] [next in thread] 

List:       full-disclosure
Subject:    [FD] APPLE-SA-2018-02-19-4 watchOS 4.2.3
From:       Apple Product Security <product-security-noreply () lists ! apple ! com>
Date:       2018-02-19 21:54:32
Message-ID: 41790AAB-7D97-4B9B-A2FB-86C0B43244B4 () lists ! apple ! com
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

APPLE-SA-2018-02-19-4 watchOS 4.2.3

watchOS 4.2.3 is now available and addresses the following:

CoreText
Available for: All Apple Watch models
Impact: Processing a maliciously crafted string may lead to heap
corruption
Description: A memory corruption issue was addressed through improved
input validation.
CVE-2018-4124: an anonymous researcher

Installation note:

Instructions on how to update your Apple Watch software are
available at https://support.apple.com/kb/HT204641

To check the version on your Apple Watch, open the Apple Watch app
on your iPhone and select "My Watch > General > About".

Alternatively, on your watch, select "My Watch > General > About".

Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org

iQIcBAEBCgAGBQJaizCFAAoJEIOj74w0bLRGHOQQAI/8+maAAaJ4FVj4c4jpHx2l
8h6Jp1u4fa/buEeOaNKbTegSm1HEbBbvaD8J9s238dXyoiiyut4R0x3iwiimsZ8R
QUJn9CoysNzCKlblsudmxSsODLLodx+k+KN/CkrT9ujTgf4UgQUFRsQzzZ8i3CiO
bgfc63k94vPpRrYVQXz5nvZR5bBFqw/DOhJRFQy3d6+pg1h9yKZwM8hn+Ywd9imN
e0Pd+a8LwUZiUotQiB799UErsSt2KoU23Wjq24ETIGgg2e4L76bpq6Tguzc37ea6
xMUVlZvh0ZIC8h+QnUPShnr4F2wHNcdLujQRnl5r/ufQRh6e+XRuaDqg5qNDmUwd
juEMJcJLUfcGKBmQCVyBnJFLi885ZAWaWzvthuOkuJY4eNqfwwodxB3YZnH55Qhy
bN+GVjpJCyzM9v8IhXumpVe7x4cI0I14mhJKCQJOK0jKsm3QgYpvsp4Yu/JTHjrV
WQMFngCfy5Vx+20RTH9tT6wLqtMoyA8cwxViR5xU82uq+jY7qY1yWuCZRVRfRs69
o11PmA3kXm2JqXF6xLTZER9lCis3E8se149myw1Qe2XimrkIHRYkkyZwMxBckLty
epbtXiM6zs+i9wTcdM4rGTHcw3fAPYcas4OpnLC9f1yve1SfCyMFhSvEZ7LzjG5q
eAB9cTArNP6m8zaLmNV+
=4LGh
-----END PGP SIGNATURE-----


_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/
[prev in list] [next in list] [prev in thread] [next in thread]