[prev in list] [next in list] [prev in thread] [next in thread] 

List:       full-disclosure
Subject:    [FD] APPLE-SA-2020-05-26-6 watchOS 5.3.7
From:       Apple Product Security via Fulldisclosure <fulldisclosure () seclists ! org>
Date:       2020-05-27 0:24:08
Message-ID: 62BF1E49-2B6B-4AB0-9176-921988B2B819 () lists ! apple ! com
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-2020-05-26-6 watchOS 5.3.7

watchOS 5.3.7 addresses the following:

Mail
Available for: Apple Watch Series 1, Apple Watch Series 2, Apple
Watch Series 3, and Apple Watch Series 4 when paired to an iPhone
with iOS 12 installed
Impact: Processing a maliciously crafted mail message may lead to
heap corruption
Description: A memory consumption issue was addressed with improved
memory handling.
CVE-2020-9819: ZecOps.com

Wi-Fi
Available for: Apple Watch Series 1, Apple Watch Series 2, Apple
Watch Series 3, and Apple Watch Series 4 when paired to an iPhone
with iOS 12 installed
Impact: A remote attacker may be able to cause unexpected system
termination or corrupt kernel memory
Description: A memory corruption issue was addressed with improved
input validation.
CVE-2020-3843: Ian Beer of Google Project Zero

Installation note:

Instructions on how to update your Apple Watch software are
available at https://support.apple.com/kb/HT204641

To check the version on your Apple Watch, open the Apple Watch app
on your iPhone and select "My Watch > General > About".

Alternatively, on your watch, select "My Watch > General > About".
-----BEGIN PGP SIGNATURE-----
Version: BCPG v1.64
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=E9UW
-----END PGP SIGNATURE-----


_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/
[prev in list] [next in list] [prev in thread] [next in thread]