iOS 16.4.1, iPadOS 16.4.1, and macOS 13.3.1 Fix Actively Exploited Vulnerabilities

[MacRumors]

Apple today released iOS 16.4.1, iPadOS 16.4.1, and macOS 13.3.1 for the iPhone, iPad, and Mac, respectively, and it's a good idea to install them as soon as you can because all three updates include important security fixes.

According to Apple's security support documents for iOS and macOS, the new software includes fixes for two separate vulnerabilities, both of which were known by Apple to have been actively exploited in the wild.

The IOSurfaceAccelerator vulnerability could allow an app to execute arbitrary code with kernel privileges. Apple addressed the out-of-bounds write issue with improved input validation. The WebKit vulnerability could allow maliciously crafted web content to execute code. Apple fixed this issue with improved memory management.

Google's Threat Analysis Group and Amnesty International's Security Lab are credited with finding and reporting both issues to Apple.

Apple has also released a new Safari 16.4.1 update for macOS Monterey and macOS Big Sur, which likely addresses the WebKit vulnerability.

Article Link: iOS 16.4.1, iPadOS 16.4.1, and macOS 13.3.1 Fix Actively Exploited Vulnerabilities

 

[I7guy]

Not gonna lie, gonna press that update button after this post.

 

[vegetassj4]

My i7 iMac can see the update, but my M1 Mini can't 🤷‍♂️

Do they roll out by serial/product id and not IP range?

Edit: finally came through on the Mini about 5 minutes later (wow 2.3 and 2.8 GB for a x.x.1 release)

 

[MacinMan]

I'm in the process of updating. For security issues, glad I updated, as far as any bugs mentioned, not really having any issues in that department.

 

[snow755]

nothing for my Mac mini M2 yet but got the IOS 16.4.1 for my iPhone SE 2022

 

[MacinMan]

I'm updating a 12 Pro Max, updated safari to 16.4.1 on an iMac running Monterey as Ventura isn't supported.

 

[adamw]

My M2 Mac mini can see, and is downloading the update for Ventura 13.3.1.

 

[snow755]

My M2 Mac mini can see, and is downloading the update for Ventura 13.3.1.

just got it my self lol

 

[doboy]

god, irritating as hell. They couldn't hold off on the 16.4 release to incorporate this security update into it?

edit: yeah yeah yeah, I get it. Not easy writing updates and catching all the security updates in time. But remember, these iOS/iPadOS/Mac updates all have fixes that were introduced with the recent updates so it's more than just security update.

 

[snow755]

god, irritating as hell. They couldn't hold off on the 16.4 release to incorporate this security update into it?

just be happy they even updated at all lol remember back in the old days you where lucky that you got a IOS update once every 3 to 6 months

 

[doboy]

just be happy they even updated at all lol remember back in the old days you where lucky that you got a IOS update once every 3 to 6 months

Don't know how much time is wasted updating 7-8 devices then update them again a week later due to incompetency. Plus wasting time to make sure that the update didn't screw up my privacy and security settings.

 

[LV426]

It beats me why, in this day and age, out-of-bounds memory access is still a thing. Do. their developers not use code analysis tools to flag such potential problems?

 

[Lounge vibes 05]

god, irritating as hell. They couldn't hold off on the 16.4 release to incorporate this security update into it?

Clearly not, or else they would’ve.
16.4 already included something like 2 1/2 dozen security fixes over 16.3.1, i’m sure if it was possible for them to include one more they would have.

 

[CharlesShaw]

Good grief, nothing but actively exploited vulnerabilities these days. I’m ready to thin the herd of update-needy devices.

 

[ouruniverse06131986]

I’m so glad Apple decided to let us update using LTE I remember when iOS 7 came out at 12 I started work at 12 and had to wait till 7 P.M. when I got home to get on wifi to update.

All that wait was killing me.
Now when iOS 17 comes out I don’t care if it’s 10GB. I could download and install while I’m at work using LTE.

But now
The thing is: I have a new job WITH fast wifi so now I don’t even need LTE 🤣🤣🤣

 

[xxray]

Isn't this the whole purpose of that rapid security release feature that was new to iOS 16? Why aren't they using that instead?

 

[satchmo]

How does one update to MacOS 13.3.1 if it doesn't show up as in the App Store updates?

I only see Keynote, Numbers, etc...
I'm currently on 13.1

 

[CarAnalogy]

god, irritating as hell. They couldn't hold off on the 16.4 release to incorporate this security update into it?

This would have been a great time to use the new Rapid Security Response system.

But then again the release notes says it also fixes skin tone issues with an emoji, and "Siri does not respond in some cases" which is rich but we'll see if it's actually any better.

 

[BootsWalking]

Good thing Apple doesn't allow us to side-load apps, otherwise these iOS exploits might interfere with the exploits in the side-loaded apps.

 

[eldho]

How does one update to MacOS 13.3.1 if it doesn't show up as in the App Store updates?

I only see Keynote, Numbers, etc...
I'm currently on 13.1

By going to system settings (under the apple symbol in the menu bar), clicking on General and then Software Update

 

[nickelro]

Does it also fix the new incoming SMS messages which started new threads since 16.4? Or the albums artwork not being refreshed for Apple live radio stations?

 

[Jerry Fritschle]

Safari updates have also dropped for Monterey and Big Sur.

 

[contacos]

The US is working today?

 

[Bawstun]

The US is working today?

Yes Good Friday isn’t really a big deal here.

 

[Jerry Fritschle]

Good grief, nothing but actively exploited vulnerabilities these days. I’m ready to thin the herd of update-needy devices.

Enjoy your Etch-a-Sketch, then.