Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2019.3665
iOS 13.1.1 and iPadOS 13.1.1
30 September 2019
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: iOS
iPadOS
Publisher: Apple
Operating System: Apple iOS
Impact/Access: Increased Privileges -- Remote/Unauthenticated
Resolution: Patch/Upgrade
CVE Names: CVE-2019-8779
Original Bulletin:
https://support.apple.com/en-au/HT210624
- --------------------------BEGIN INCLUDED TEXT--------------------
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
APPLE-SA-2019-9-27-1 iOS 13.1.1 and iPadOS 13.1.1
iOS 13.1.1 and iPadOS 13.1.1 are now available and address the
following:
Sandbox
Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4
and later, and iPod touch 7th generation
Impact: Third party app extensions may not receive the correct
sandbox restrictions
Description: A logic issue applied the incorrect restrictions. This
issue was addressed by updating the logic to apply the correct
restrictions.
CVE-2019-8779: Apple
Installation note:
This update is available through iTunes and Software Update on your
iOS device, and will not appear in your computer's Software Update
application, or in the Apple Downloads site. Make sure you have an
Internet connection and have installed the latest version of iTunes
from https://www.apple.com/itunes/
iTunes and Software Update on the device will automatically check
Apple's update server on its weekly schedule. When an update is
detected, it is downloaded and the option to be installed is
presented to the user when the iOS device is docked. We recommend
applying the update immediately if possible. Selecting Don't Install
will present the option the next time you connect your iOS device.
The automatic update process may take up to a week depending on the
day that iTunes or the device checks for updates. You may manually
obtain the update via the Check for Updates button within iTunes, or
the Software Update on your device.
To check that the iPhone, iPod touch, or iPad has been updated:
* Navigate to Settings
* Select General
* Select About. The version after applying this update
will be "iOS 13.1.1 and iPadOS 13.1.1".
Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222
This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
- -----BEGIN PGP SIGNATURE-----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=12Lw
- -----END PGP SIGNATURE-----
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
iQIVAwUBXZGC4maOgq3Tt24GAQiW9A/+L6fWvCshKokZr3GYGmzatJBwVFmxGKwa
1tcz0mhJpl4+49ZXj65Lrtd9mrUl4HPKZkzynNYkBmcoeE2PHp0wW9UtehXP45eY
ys2Dn7MonOWbyp7VXef3ryeYAkJLY0htpDFv4rOg7tGbFEL6cFVju/QfEszz7KhJ
EAhLdkaX2GCFJMe8R0l5Y0bxeatIU35sBEP1mGfxxl+mjZyv1giwyk1g13DOr/nU
Do2gnz9nQ2tIdV7O+6P1EcE9rSK6SGzqAoivHbTEYIKaW0sOrp13tde9q/vs0u7s
m/6g9J2XO7gw05zh6X9IAvDQlLFb4l/TEHnTfgB181BcmkXX5Pb3kfP78Lf+F7G4
Rt8HFp/NUsO5GtE4o4OqZHpGmkGjBGTSSJPs737mwHjtBQPZX/0dVcQJtx15PEth
7wblgES556iN5qpQKPaAD4tpbLxJ+y5c9reWCYiMoB8RtY4rRvNjYnd4B9jBCja7
Q1Y9m7IykPXs8nGlry51r6RjpayxXANqp/JjTEN0bLiHunp0XkSCPCW2pc86lgYG
Rz4XEYY6gGnTeSSDmShL5hKqNdyWq0axveBgMXPsHa1xVJXbwcfGuv88IOmS5P5H
BXYEXph6ligxSR3iAiQVwG9spePCE+Ebd2VNXbSYZXtOxTBI10k0nGWu9qs4H7Mz
JHHdzkTEkds=
=FmCx
-----END PGP SIGNATURE-----