Samuel Axon
Today, Apple started rolling out iOS 14.4.2, iPadOS 14.4.2, and watchOS 7.3.3, and the corporate issued an advisory to customers to improve as quickly as attainable. Like iOS/iPadOS 14.4.1 earlier than it, this replace addresses a safety flaw.
Additionally, Apple launched the same safety replace—12.5.2—for older devices just like the iPhone 5S or 6 that can’t run iOS 14.
The launch notes for iOS 14.4.2 and iPadOS 14.4.2 are minimal, merely stating:
This replace offers necessary safety updates and is beneficial for all customers.
For data on the safety content material of Apple software program updates, please go to the web site: https://support.apple.com/kb/HT201222
It’s that safety hyperlink that incorporates the real information. Here’s what Apple’s safety help web page says:
WebKit
Available for: iPhone 6s and later, iPad Pro (all fashions), iPad Air 2 and later, iPad fifth technology and later, iPad mini 4 and later, and iPod contact (seventh technology)
Impact: Processing maliciously crafted internet content material could lead to common cross web site scripting. Apple is conscious of a report that this difficulty could have been actively exploited.
Description: This difficulty was addressed by improved administration of object lifetimes.
CVE-2021-1879: Clement Lecigne of Google Threat Analysis Group and Billy Leonard of Google Threat Analysis Group
The similar goes for the watchOS replace. All 4 software program updates (iOS 14.4.2, iPadOs 14.4.2, iOS 12.5.2, and watchOS 7.3.3) ought to already be accessible to all customers of supported devices proper now. This is the second replace because the launch of iOS/iPadOS 14.4 and watchOS 7.three in late January.
The replace instantly previous this one was additionally an pressing repair for a safety vulnerability.
iOS 14.4 was a function replace, not only a safety replace or bug repair one, however the options added had been comparatively modest. They included the flexibility for the digicam to learn smaller QR codes than earlier than, an choice to manually classify Bluetooth devices to guarantee desired habits, and notifications to let customers know if the digicam is “unable to be verified as a brand new, real Apple digicam.”