Message-ID:

Q: Why don't lawyers go to the beach? A: The cats keep trying to bury them.

comp / comp.mobile.ipad / iOS 17.6 comes with a rather hefty 35 security fixes for serious holes in Apple’s iPhone operating system.

Subject: iOS 17.6 comes with a rather hefty 35 security fixes for serious holes in Apple’s iPhone operating system.
From: Andrew
Newsgroups: misc.phone.mobile.iphone, comp.mobile.ipad, alt.privacy
Organization: BWH Usenet Archive (https://usenet.blueworldhosting.com)
Date: Wed, 31 Jul 2024 03:13 UTC

Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!nnrp.usenet.blueworldhosting.com!.POSTED!not-for-mail
From: andrew@spam.net (Andrew)
Newsgroups: misc.phone.mobile.iphone,comp.mobile.ipad,alt.privacy
Subject: iOS 17.6_comes_with_a_rather_hefty_35_security
_fixes_for_serious_holes_in_Apple’s_iPhone
_operating_system.
Date: Wed, 31 Jul 2024 03:13:35 -0000 (UTC)
Organization: BWH Usenet Archive (https://usenet.blueworldhosting.com)
Message-ID: <v8ca4u$11ns$1@nnrp.usenet.blueworldhosting.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Wed, 31 Jul 2024 03:13:35 -0000 (UTC)
Injection-Info: nnrp.usenet.blueworldhosting.com;
logging-data="34556"; mail-complaints-to="usenet@blueworldhosting.com"
User-Agent: NewsTap/5.5 (iPad)
Cancel-Lock: sha1:qWJGca9Z9cmhEN1+xVpp04vBx7U= sha256:uULh//7vniJnHSVgLwX3GzJO2EyRQ204cqkFh2I9wpI=
sha1:QePqV480MvNPFssRMt7r1AXZf+Y= sha256:ZGxf5Rx6CcQ5zswhL6keTTDbZSGnX/Fj/S0defcOLlM=
X-Face: VQ}*Ueh[4uTOa]Md([|$jb%rw~ksq}bzqA;z-.*8JM`4+zL[`N\ORHCI80}]}$]$e5]/i#v qdYsE`yh@ZL3L{H:So{yN)b=AZJtpaP98ch_4W}

View all headers

"iOS 17.6 comes with a rather hefty 35 security fixes for serious holes in
Apple's iPhone operating system"
https://www.forbes.com/sites/kateoflahertyuk/2024/07/30/ios-176-update-now-warning-issued-to-all-iphone-users/

As always, the iOS kernel & Apple's webkit caused the zero day holes.

"The list on Apple's support page shows iOS 17.6 squashes bugs
in the Kernel at the heart of the iPhone operating system
as well as several flaws in WebKit, the engine that underpins
the Safari browser."

"Among the notable fixes, iOS 17.6 patches two flaws in the
Kernel tracked as CVE-2024-27863 and CVE-2024-40788.

The first issue allows an adversary to determine Kernel memory
layout while the second could enable an attacker to cause unexpected
system shutdown, according to Apple's support page.

The iOS 17.6 upgrade also patches a whopping eight issues in WebKit,
including CVE-2024-40785, which could result in a cross site scripting
attack if you fell for maliciously crafted web content."

If you own an iPhone X or older, this is likely your last iOS
security update before you have to throw it over the next bridge.

The iPhone X is that toxic once Apple stops full support in iOS 18.

Subject	Author
iOS 17.6 comes with a rather hefty 35 security fixes for serious holes in Apple’	Andrew