On Wednesday, Apple released a series of security patches for a variety of devices, spanning iPhones, iPads, Macs, and Apple Watches. Chances are, if you have an Apple device, it supports this update—and update you should, as Apple confirmed that both security flaws patched in this update have been exploited by bad actors. You should install these patches ASAP.
What’s in these new Apple security patches?
The first patch fixes a kernel issue, which would allow bad actors to execute arbitrary code with kernel privileges. In layman’s terms, this bug lets someone run whatever code they want with zero restrictions on your device...which is obviously bad. Apple has confirmed this particular issue was exploited in versions of iOS released before iOS 15.7. While that means the company isn’t aware of any exploitation occurring with later versions of iOS, on macOS, or on watchOS, those systems are still vulnerable.
The next fix is for WebKit, the framework that allows developers to display webpages on Apple devices. This problem also allows people to execute arbitrary code on your device if you process their maliciously-crafted web content. Apple confirmed this issue has also been exploited but neglected to specific on which platforms. For the sake of security, all should update ASAP.
Which Apple devices support the new security patch?
This security update, as with other patches, impacts more devices than a standard Apple update: While Apple has dropped software support for some of these devices (meaning they won’t receive new features), the company still supports updating them with security patches.
The patches:
- iOS 16.5.1 and iPadOS 16.5.1: for iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later.
- iOS 15.7.7 and iPadOS 15.7.7: for iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation), iPad Air 2, iPad mini (4th generation), and iPod touch (7th generation).
- macOS Ventura 13.4.1: for Macs running macOS Ventura.
- macOS Monterey 12.6.7: for Macs running macOS Monterey.
- macOS Big Sur 11.7.8: for Macs running macOS Big Sur.
- Safari 16.5.1: for macOS Big Sur and macOS Monterey, as their patches don’t include the fix for WebKit.
- watchOS 9.5.2: for Apple Watch Series 4 and later.
- watchOS 8.8.1: for Apple Watch Series 3, Series 4, Series 5, Series 6, Series 7, and SE.
How to install the latest security patch on your Apple device
These security patches will appear on your device like any other software update: You’ll find them on iPhone and iPad by heading to Settings > General > Software Update, on Mac by going to System Settings > General > Software Update or System Preferences > Software Update, and on your Apple Watch from General > Software Update on the Watch app, or Settings > General > Software Update on your watch.
from Lifehacker https://ift.tt/AbsLe3a
0 comments:
Post a Comment