iOS 16.1.1 includes fixes for two libxml vulnerabilities

#1

Post by nateb2022 » Wed, Nov 09, 2022, 10:43 PM UTC

iOS 16.1.1 includes fixes for two libxml vulnerabilities
support.apple.com

Re: iOS 16.1.1 includes fixes for two libxml vulnerabilities

#2

Post by Kikawala » Wed, Nov 09, 2022, 11:20 PM UTC

CVE-2022-40303: https://gitlab.gnome.org/GNOME/libxml2/-/commit/c846986356fc...

CVE-2022-40304: https://gitlab.gnome.org/GNOME/libxml2/-/commit/1b41ec4e9433...

Re: iOS 16.1.1 includes fixes for two libxml vulnerabilities

#3

Post by nwellnhof » Wed, Nov 09, 2022, 11:57 PM UTC

Kikawala wrote: post #2

CVE-2022-40303: https://gitlab.gnome.org/GNOME/libxml2/-/commit/c846986356fc... CVE-2022-40304: https://gitlab.gnome.org/GNOME/libxml2/-/commit/1b41ec4e9433...

More details in the original bug reports which I made public yesterday:

https://gitlab.gnome.org/GNOME/libxml2/-/issues/381

https://gitlab.gnome.org/GNOME/libxml2/-/issues/401

Re: iOS 16.1.1 includes fixes for two libxml vulnerabilities

#4

Post by gruez » Thu, Nov 10, 2022, 12:23 AM UTC

No love for devices stuck on ios 15? Yes, it's technically out of support, but less than two weeks ago apple released 15.7.1 which is a security patch.

Re: iOS 16.1.1 includes fixes for two libxml vulnerabilities

#5

Post by radicaldreamer » Thu, Nov 10, 2022, 12:30 AM UTC

gruez wrote: post #4

No love for devices stuck on ios 15? Yes, it's technically out of support, but less than two weeks ago apple released 15.7.1 which is a security patch.

Should still be supported for security updates, maybe it'll be released in a couple of days.

Re: iOS 16.1.1 includes fixes for two libxml vulnerabilities

#6

Post by lapcat » Thu, Nov 10, 2022, 12:41 AM UTC

gruez wrote: post #4

No love for devices stuck on ios 15? Yes, it's technically out of support, but less than two weeks ago apple released 15.7.1 which is a security patch.

Also missing are macOS Monterey and Big Sur: https://support.apple.com/en-us/HT201222

Re: iOS 16.1.1 includes fixes for two libxml vulnerabilities

#7

Post by asdfv09s9d80fu9 » Thu, Nov 10, 2022, 1:00 AM UTC

nwellnhof wrote: post #3

Kikawala wrote: post #2

CVE-2022-40303: https://gitlab.gnome.org/GNOME/libxml2/-/commit/c846986356fc... CVE-2022-40304: https://gitlab.gnome.org/GNOME/libxml2/-/commit/1b41ec4e9433...

More details in the original bug reports which I made public yesterday: https://gitlab.gnome.org/GNOME/libxml2/-/issues/381 https://gitlab.gnome.org/GNOME/libxml2/-/issues/401

slay!

really great darknet interview too!!! thanks for your amazing work

Re: iOS 16.1.1 includes fixes for two libxml vulnerabilities

#8

Post by dustyharddrive » Thu, Nov 10, 2022, 1:03 AM UTC

radicaldreamer wrote: post #5

gruez wrote: post #4

No love for devices stuck on ios 15? Yes, it's technically out of support, but less than two weeks ago apple released 15.7.1 which is a security patch.

Should still be supported for security updates, maybe it'll be released in a couple of days.

Apple doesn’t patch older versions: https://arstechnica.com/gadgets/2022/10/apple-clarifies-secu...

Re: iOS 16.1.1 includes fixes for two libxml vulnerabilities

#9

Post by parker_mountain » Thu, Nov 10, 2022, 1:05 AM UTC

gruez wrote: post #4

No love for devices stuck on ios 15? Yes, it's technically out of support, but less than two weeks ago apple released 15.7.1 which is a security patch.

Is ios 15 vulnerable? I assume it is, but I can't find a good answer.

Re: iOS 16.1.1 includes fixes for two libxml vulnerabilities

#10

Post by kobalsky » Thu, Nov 10, 2022, 1:10 AM UTC

dustyharddrive wrote: post #8

radicaldreamer wrote: post #5

Earlier quoted context omitted.

Should still be supported for security updates, maybe it'll be released in a couple of days.

Apple doesn’t patch older versions: https://arstechnica.com/gadgets/2022/10/apple-clarifies-secu...

they release some security updates for older phones and oses

they probably do it in a best effort basis and some fixes are skipped when it's too much work to backport.