Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
patches released today
iOS 18.1.1 (Build 22B91) - November 19, 2024
iPadOS 18.1.1 (Build 22B91) - November 19, 2024
iPadOS 17.7.2 (Build 21H22) November 19, 2024
macOS 15.1.1 (Build 24B91 | 24B2091) - November 19, 2024
visionOS 2.1.1 (Build 22N591) - November 19, 2024
 
Will a flare be enough, Bro?

Some fireworks might be needed to wake Tim up before it’s too late.

IMG_1404.jpeg
 
I did notice I recently got an email from the Apple Developer Program about upcoming developer events and such. I’ve noticed a correlation between emails and beta releases before, though betas don’t typically drop this late in the day.
 
  • Like
Reactions: UpsideDownEclair
It looks like 18.1.1 patches some vulnerabilities. Maybe they are delaying iOS/iPadOS 18.2 B4 and Sequoia 15.2 beta 4 to include these fixes?
 
  • Like
Reactions: Kal Madda
I’d say likely, especially given the two week gap we’re looking at with Thanksgiving next week.

This smells like a zero day.
I would think they get the beta 4 out with security changes this week, why wait until some time in December?

details of security patch

iOS 18.1.1 and iPadOS 18.1.1​

Released November 19, 2024

JavaScriptCore​

Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later

Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

Description: The issue was addressed with improved checks.

WebKit Bugzilla: 283063
CVE-2024-44308: Clément Lecigne and Benoît Sevens of Google's Threat Analysis Group

WebKit​

Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later

Impact: Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

Description: A cookie management issue was addressed with improved state management.

WebKit Bugzilla: 283095
CVE-2024-44309: Clément Lecigne and Benoît Sevens of Google's Threat Analysis Group
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.