Emergency code execution patch from Apple – but not an 0-day  # #CyberSecurity #NobodyIsPerfect | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
From nakedsecurity.sophos.com - November 11, 2022 11:37 AM

 

To summarise what are already super-short security reports:

HT21304: Ventura gets updated from 13.0 to 13.0.1.
HT21305: iOS and iPadOS get updated from 16.1 to 16.1.1
The two security bulletins list exactly the same two flaws, found by Google’s Project Zero team, in a library called libxml2, and officially designated CVE-2022-40303 and CVE-2022-40304.

Both bugs were written up with notes that “a remote user may be able to cause unexpected app termination or arbitrary code execution”.

 

 

 

Learn more / En savoir plus / Mehr erfahren:

 

https://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security