Why are core iOS libraries susceptible to integer overflow vulnerabilities?
This seems like a more important issue to address than simply fixing this one instance where it was found.
iOS 16.1.1 includes fixes for two libxml vulnerabilities
11–20 of 32 posts
Re: iOS 16.1.1 includes fixes for two libxml vulnerabilities
#12Why are core iOS libraries susceptible to integer overflow vulnerabilities? This seems like a more important issue to address than simply fixing this one instance where it was found.
Because it's just like any other open-source library written in an unsafe language.
Re: iOS 16.1.1 includes fixes for two libxml vulnerabilities
#13Why are core iOS libraries susceptible to integer overflow vulnerabilities? This seems like a more important issue to address than simply fixing this one instance where it was found.
Because it's just like any other open-source library written in an unsafe language.
With how much money Apple has and how much they promote security. It's quite shocking how we see a major preventable vulnerability come out pretty much every single month.
Some credit to them for fixing these things and rolling out the fixes quickly, but at some point we have to question why iOS needs urgent security patches constantly. And you know that all the large governments have troves of these iOS bugs sitting unreported.
Re: iOS 16.1.1 includes fixes for two libxml vulnerabilities
#14Question:
- Anyone having any issues with charging their iPad Pro 11/12 > after upgrading to 16.1?
Re: iOS 16.1.1 includes fixes for two libxml vulnerabilities
#15Question: - Anyone having any issues with charging their iPad Pro 11/12 > after upgrading to 16.1?
My ipad pro 2021 is charging fine after update.
Re: iOS 16.1.1 includes fixes for two libxml vulnerabilities
#16Earlier quoted context omitted.
Should still be supported for security updates, maybe it'll be released in a couple of days.
Apple doesn’t patch older versions: https://arstechnica.com/gadgets/2022/10/apple-clarifies-secu...
That’s not what that says. Apple does not commit to updating older versions for EVERYTHING. That does not mean they don’t patch them at all - here’s the official verbiage:
“Upgrades are released much less frequently than updates, and can take a while to install because of their large size. Also, older devices may not be eligible for upgrades because they don’t have the space or power to support the new software.
Note: Because of dependency on architecture and system changes to any current version of macOS (for example, macOS 13), not all known security issues are addressed in previous versions (for example, macOS 12).”
This matches what we’ve seen before where many updates come out for older versions but they’re not making Red Hat-style efforts to back port patches for ages rather then pushing people to make major upgrades.
Re: iOS 16.1.1 includes fixes for two libxml vulnerabilities
#17Why are core iOS libraries susceptible to integer overflow vulnerabilities? This seems like a more important issue to address than simply fixing this one instance where it was found.
Because it's just like any other open-source library written in an unsafe language.
Correction: Because it's just like any other library written in an unsafe language.
Re: iOS 16.1.1 includes fixes for two libxml vulnerabilities
#18No post body was provided.
Re: iOS 16.1.1 includes fixes for two libxml vulnerabilities
#19Re: iOS 16.1.1 includes fixes for two libxml vulnerabilities
#20Earlier quoted context omitted.
Should still be supported for security updates, maybe it'll be released in a couple of days.
Apple doesn’t patch older versions: https://arstechnica.com/gadgets/2022/10/apple-clarifies-secu...
They are still maintaining iOS 12...
https://support.apple.com/en-us/HT213428
Published Date: August 31, 2022