-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2023-06-21-6 macOS Big Sur 11.7.8
macOS Big Sur 11.7.8 addresses the following issues. Information about the security content is also available at https://support.apple.com/kb/HT213809. Apple maintains a Security Updates page at https://support.apple.com/HT201222 which lists recent software updates with security advisories. Kernel Available for: macOS Big Sur Impact: An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7. Description: An integer overflow was addressed with improved input validation. CVE-2023-32434: Georgy Kucherin (@kucher1n), Leonid Bezvershenko (@bzvr_), and Boris Larin (@oct0xor) of Kaspersky macOS Big Sur 11.7.8 may be obtained from the Mac App Store or Apple's Software Downloads web site: https://support.apple.com/downloads/ All information is also posted on the Apple Security Updates web site: https://support.apple.com/en-us/HT201222. This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEBP+4DupqR5Sgt1DB4RjMIDkeNxkFAmSTiB8ACgkQ4RjMIDke Nxn+YBAAyWBYNInnYKkuWmNlh6+4yPDp6Y31nI/YxyYBo/9NhAcbcCrwXt3kKcBp rryIUvLp2xW7TohNV+lJVCNmhqDmTbhOCRvJIT0uNFrNjZTPr8zJ9HxMzvEPuFnD YaWxXItCZPTji+Tn2iWj7rJdF9O5Zz2WmQDdXGw/0WzcfbVyFA466T8P7FsW2bJ8 2RsTITDtBWkDZ9sr63mmupcOTXxcBvCDyMTAOfq6kw8eJLpoTQv9/PFkNkTBloid yuoC3OZjZnN9/enGqp7FeX+gdyuFVT/0vczBp6fDYU5OoHhsUs/g0fcqr5caTQ5G ezqvo7jgmanrkRKKuakmS9AQsVNBTzxtq8k1i0kCKHB4tkzATHyPUuYI6jUDcM65 amkPq3WYB/i3r3UmRll8N7jZXBvOEQHg9gqmjuOL9VKXV0AdJ9vyRCZQoC7o4Eyt C9IXU5Gn9lIEisKOXfWhNGh5RiX5ma8F/WuMeJ0Pieru/WacMkCF2DWCmp9kpn/4 VzG54jyb5pq0iH8jtwYUz345ShWCDNbLkDreDvwHBO0JrgH9ch/nRvtX/wz4ISk/ 0pwyNZSyuzfwnu8I2G9fQA11a5mD5w6mlf1wVfeHGXmug32On+Zo5ZsKRe1+zc2+ Pv7lV2ae+nJm9M0eWu7QNrwGMZH8dwHTMrKHlJnNwl+gq9Pgg04= =2xce -----END PGP SIGNATURE----- _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/