—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2023.3879
Rapid Security Responses for iOS 16.5.1 and iPadOS 16.5.1
11 July 2023
===========================================================================
AusCERT Security Bulletin Summary
———————————
Product: iOS 16.5.1 and iPadOS 16.5.1
Publisher: Apple
Operating System: Apple iOS
Resolution: Patch/Upgrade
CVE Names: CVE-2023-37450
Original Bulletin:
https://support.apple.com/kb/HT213823
Comment: CVSS (Max): None available when published
– ————————–BEGIN INCLUDED TEXT——————–
– —–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256
APPLE-SA-2023-07-10-2 Rapid Security Responses for iOS 16.5.1 and iPadOS 16.5.1
Rapid Security Responses for iOS 16.5.1 and iPadOS 16.5.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/kb/HT213823.
Apple maintains a Security Updates page at
https://support.apple.com/HT201222 which lists recent
software updates with security advisories.
This document describes the content of Rapid Security Responses.
About Rapid Security Responses
Rapid Security Responses deliver important security improvements between
software updates and are available only for the latest versions of iOS,
iPadOS, and macOS. Learn more about Rapid Security Responses.
Recent releases are listed on the Apple security releases page.
iOS 16.5.1 (a) and iPadOS 16.5.1 (a)
WebKit
Available for: iOS 16.5.1 and iPadOS 16.5.1
Impact: Processing web content may lead to arbitrary code execution.
Apple is aware of a report that this issue may have been actively
exploited.
Description: The issue was addressed with improved checks.
CVE-2023-37450: an anonymous researcher
All information is also posted on the Apple Security Updates
web site: https://support.apple.com/en-us/HT201222.
This message is signed with Apple’s Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
– —–BEGIN PGP SIGNATURE—–
iQIzBAEBCAAdFiEEBP+4DupqR5Sgt1DB4RjMIDkeNxkFAmSsimYACgkQ4RjMIDke
NxnHTA//VKH4wxle++di0QVUd3BJv/m3FdLHAR3d9d8QaXGnOMl5pzkMgW9rt1tx
JzQ7MRF6DHWKgI7uccBe6CDF9DDUVj5gJrDmppuUm+aFFot/L2g45grQdKtBZbuT
rqaCRxwXVa8fv97XCutgaNljwNPN+IVyHdiXTmRbJZH0yiqt4I1hatiNkUalC6Sp
H8AMx8sG5t/00bhe/VDpqDlUctyGrSDeo62SfGI8InO34WDkjTGLvyS4w8sEUCC6
lThAuAWwu64LK8WV1WdxgLLLlonowKSyirEtbInykkQJy52RBRe/QpXPNgYz5PTZ
K2fUDC7V7TIy7hZSI4qmDxI67YOqPebkuQCHwq+A7wBoIV4HBUc8Y0RQmW+/VYYR
ZCEzIir2rZqsiTOdaXOEiAv2EoQH9dUOchOKMk0qNhuBcTGAVsa4/zHD5K0UTU7Q
ui2WSf/Jlh/FzUnB/ETvh4Wx+ixfopBVEzJSc7rvrydtmHEPDNnWTYDHkivYPNPT
IOMW4/4Yj+mydcfXLmae7gD+n1NLfboZe9tLd2NgoKFvDuqFyKQ4E4IaxXtC6KX4
fHTWwpn94PuYOKW9rcVMk2JOWIrgw3yAMpM8tOdHcnOe2+XUwxHOTIvp/xWjMrRQ
kbIOLvjvjDfNfUGXYEdffdKEso86n4eVOXClwQluLVOFZ6AWYUY=
=Sn9x
– —–END PGP SIGNATURE—–
– ————————–END INCLUDED TEXT——————–
You have received this e-mail bulletin as a result of your organisation’s
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to [email protected]
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT’s members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation’s
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author’s website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: [email protected]
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
—–BEGIN PGP SIGNATURE—–
Comment: https://auscert.org.au/gpg-key/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=Ooaw
—–END PGP SIGNATURE—–
Source: Read More
Security Bulletins