—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA512
APPLE-SA-2018-04-24-2 Security Update 2018-001
Security Update 2018-001 is now available and addresses the
following:
Crash Reporter
Available for: macOS High Sierra 10.13.4
Impact: An application may be able to gain elevated privileges
Description: A memory corruption issue was addressed with improved
error handling.
CVE-2018-4206: Ian Beer of Google Project Zero
LinkPresentation
Available for: macOS High Sierra 10.13.4
Impact: Processing a maliciously crafted text message may lead to UI
spoofing
Description: A spoofing issue existed in the handling of URLs. This
issue was addressed with improved input validation.
CVE-2018-4187: Zhiyang Zeng (@Wester) of Tencent Security
Platform Department, Roman Mueller (@faker_)
Installation note:
Security Update 2018-001 may be obtained from the Mac App Store or
Apple’s Software Downloads web site:
https://support.apple.com/downloads/
Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222
This message is signed with Apple’s Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
—–BEGIN PGP SIGNATURE—–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=715E
—–END PGP SIGNATURE—–
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Security-announce mailing list (Security-announce@lists.apple.com)
