PSA: Make Sure to Update, iOS 16.6.1 and macOS 13.5.2 Address Actively Exploited Vulnerability

[organisum]

delete

 

[polyphenol]

Stay off the internet. In fact, just do that in general. Computers didn't have problems until the internet allowed backdoor access into all of them.

Not true!

First serious virus I came across was well before the internet in anything like its current form. The machine I was using was an Apple IIsi (I think) so around 1990. And it was not connected to the internet. Just floppies being passed around.

 

[Icelus]

Apple reported a bug in Google Chrome that sounds a lot like this one.

Stable Channel Update for Desktop

The Stable and Extended stable channels has been updated to 116.0.5845.187 for Mac and Linux and 116.0.5845.187/.188 for Windows, which will...

chromereleases.googleblog.com

 

[theorist9]

What happens with old versions of the OS that people may still be running? Are they vulnerable to all these sort of things? Does Apple just leave people stranded if they are using an old product? Not even providing basic security updates to an old OS.

A few have asked that already about this exploit. I checked Citizen Lab's website, and it doesn't seem an answer is available. It's possible that it does affect earlier OS's, and it's also possible updates to the two earlier OS's that still get security patches (Big Sur and Monterey) will follow. We don't know.

We have an answer: The older version are vulnerable, and they are getting patched: Apple just released fixes for Monterey and Big Sur.

 

[organisum]

delete

 

[Icelus]

The WebP 0day

Early last week, Google released a new stable update for Chrome. The update included a single security fix that was reported by Apple's Security Engineering and Architecture (SEAR) team. The issue, CVE-2023-4863, was a heap buffer overflow in the WebP image library, and it had a familiar warning...

blog.isosceles.com