WebKit was the most impacted component, with 5 vulnerabilities (CVE-2016-1723, CVE-2016-1724, CVE-2016-1725, CVE-2016-1726, CVE-2016-1727) patched in it as part of the new update, all of which were discovered by Apple’s employees. According to Apple, devices affected by these vulnerabilities include iPhone 4s and later, iPod touch (5th generation) and later, and iPad 2 and later. Of the resolved issues, 11 could result in arbitrary code execution, one would allow access to user’s cookies, while another would allow websites to know if the user has visited a given link. The security fixes were included in the iOS 9.2.1 platform release, which is now available for download for compatible devices.
Published on Tuesday, the security advisory for the iOS update reveals a set of 13 patches included in the package, meant to resolve issues in Disk Images, IOHIDFamily, IOKit, Kernel, libxslt, syslog, WebKit, WebKit CSS, and WebSheet. Apple has released a series of updates for the iOS and OS X platforms, aimed at resolving a series of security vulnerabilities in both products.
0 kommentar(er)
