Apple pushes iOS 14.4.2, iPadOS 14.4.2, and watchOS 7.3.3 to supported devices - Ars Technica

Enlarge / Apple's 2020 iPad Air.

Samuel Axon

Today, Apple began rolling out iOS 14.4.2, iPadOS 14.4.2, and watchOS 7.3.3, and the company issued an advisory to users to upgrade as soon as possible. Like iOS/iPadOS 14.4.1 before it, this update addresses a security flaw.

Additionally, Apple released a similar security update—12.5.2—for older devices like the iPhone 5S or 6 that cannot run iOS 14.

The release notes for iOS 14.4.2 and iPadOS 14.4.2 are minimal, simply stating:

This update provides important security updates and is recommended for all users.

For information on the security content of Apple software updates, please visit the website: https://ift.tt/1UO9Pxs

It's that security link that contains the real information. Here's what Apple's security support page says:

WebKit

Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)

Impact: Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been actively exploited.

Description: This issue was addressed by improved management of object lifetimes.

CVE-2021-1879: Clement Lecigne of Google Threat Analysis Group and Billy Leonard of Google Threat Analysis Group

The same goes for the watchOS update. All four software updates (iOS 14.4.2, iPadOs 14.4.2, iOS 12.5.2, and watchOS 7.3.3) should already be available to all users of supported devices right now. This is the second update since the release of iOS/iPadOS 14.4 and watchOS 7.3 in late January.

The update immediately preceding this one was also an urgent fix for a security vulnerability.

iOS 14.4 was a feature update, not just a security update or bug fix one, but the features added were relatively modest. They included the ability for the camera to read smaller QR codes than before, an option to manually classify Bluetooth devices to ensure desired behavior, and notifications to let users know if the camera is "unable to be verified as a new, genuine Apple camera."

Let's block ads! (Why?)

Article From & Read More ( Apple pushes iOS 14.4.2, iPadOS 14.4.2, and watchOS 7.3.3 to supported devices - Ars Technica )
https://ift.tt/3rA4Bdf
Technology