5 ms·
iOS 16.4.1 and macOS 13.3.1 address two security vulnerabilities
- doodlesdev 4y agoThese vulnerabilities were pretty serious [0] > IOSurfaceAccelerator > Impact: An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited. > Description: An out-of-bounds write issue was addressed with improved input validation. > WebKit > Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. > Description: A use after free issue was addressed with improved memory management. Hopefully this opens place for even more jailbreaks. I absolutely hate Apple's walled gardens, every single high severity CVE for them is smile from me. [0]: https://support.apple.com/en-us/HT213720 https://support.apple.com/en-us/HT213720
- fzvqq 4y agoConsider not buying Apple products if you want to control your device.
- doodlesdev 4y agoI don't.
- 35208654 4y agoAnd yet iOS lives rent free in your head.
- type0 4y agoYou will only be as secure as Apple wants you to be.
- eyelidlessness 4y agoHuh? Edit: I don’t understand, the “huh?” is 100% sincere. Apple is releasing security updates, not withholding them. What control are they exerting here?
- hnfong 4y agoIn a sense the GP is correct since iOS/macOS is proprietary software and the end user can't just fix a security issue themselves... but this applies to all proprietary software in general.
- eyelidlessness 4y agoI still don’t understand the complaint. Apple released a security patch, they didn’t decide to withhold it for some nebulous purpose. I also release security patches for software I maintain, am I deciding what security my users get to enjoy by doing so?