Apple is out with several zero days in Feb patch bundle

Topic

New Reply

Apple is once again patching Webkit bugs in a series of updates out today for several of their platforms: macOS 13.2.1 – 3 bugs fixed iOS and iPad
[See the full post at: Apple is out with several zero days in Feb patch bundle]

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

Myst

Reply | Quote

Replies

macOS Ventura 13.2.1 and iOS 16.3.1 Address Actively Exploited Vulnerability

Safari 16.3.1 too.

..According to Apple’s security notes for the updates, The software fixes a WebKit issue that could allow maliciously crafted web content to result in arbitrary code execution. Apple says that it is “aware of a report that this issue may have been actively exploited.”

The vulnerability was a type confusion issue that Apple says has been addressed with improved checks…

1 user thanked author for this post.

Myst

Reply | Quote

See the links in the top post of AKB2000014 for other information on the updates. Updated today.

1 user thanked author for this post.

Myst

Reply | Quote

I held off on 16.3 because it is still deferred in the Master Patch List, as of Feb 8. Now, I’ve got 16.3.1 waiting in the wings and it’s to be deferred, too. And now no way to update to 16.3, when the Master Patch list might say “Install.” Does this mean that we might be waiting even longer for a Master Patch recommendation to go beyond 16.2 (with all those zero days out there)?

Reply | Quote

I’m working on the list tonight and testing the Apple updates.  I don’t know if I can finish tonight but for sure tomorrow it will be posted.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

WCHS

Reply | Quote