3

iOS 12.5.6

 2 years ago
source link: https://blog.gslin.org/archives/2022/09/18/10882/ios-12-5-6/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

iOS 12.5.6

早上發現 iPhone 6 Plus 被自動更新到 iOS 12.5.6,查了一下發現是八月底的時候 Apple 推了一版 WebKitACECVE-2022-32893:「About the security content of iOS 12.5.6」。

Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Description: An out-of-bounds write issue was addressed with improved bounds checking.

上個更新的版本 12.5.5 是 2021/09/23 出的,本來大家都以為已經沒有任何更新了,沒想到居然回過頭來發了一包,照蘋果的敘述看起來是因為這個洞被廣泛使用的關係?

iPhone 5S (目前 iOS 12 支援列表裡最早出的手機) 是 2013 下半年出的,到現在也九年了...

Related

回到 Android 世界熟悉...

最早的時候是用 Android 系統,HTC Desire 還在 2.1 的年代 (2010 年)。 後來切到蘋果的環境裡,第一隻 iPhone 4S 在 2011 年出的時候買 (英國機),後來台灣上了 iPhone 5S 就用到現在 (中華電信機)。 前陣子台哥大的 3G data 合約到期了,就順手升級到 4G 吃到飽再續了 iPhone 6 Plus,想起幾個月前老爹在問有沒有機會換 iPhone,想了想就把這隻超大螢幕的 iPhone 拿給老人家用。 於是他本來的 LG G2 就到我手上了: 拿到除了 reset 以外,把 4.2 一路先升級到 4.4.2。順便查了一下維基百科上的資料,了解一下這隻手機的背景。(雖然當初也是我幫老人家辦的,不過當時是 Ptt 上面找找資料看起來這隻不會是地雷就選下去了...) 之前幫 iPad 2 拿來上網辦了張台哥大的 SIM 卡…

August 18, 2015

In "Computer"

在 iOS 上不使用 Facebook App 時要完全砍掉 process

在「The Background Data and Battery Usage of Facebook’s iOS App」這邊提到 Facebook App 在 iOS 上使用了非常吃電的技巧來強制背景更新。 作者猜測,如果你把 Facebook App 設定成不允許背景更新,那麼 Facebook App 會利用 iOS 在「播放音樂」可以在背景執行來進行更新:(所以只是打開播放的 channel,但是沒有聲音) My guess is that Facebook is hijacking audio sessions on iOS by keeping silent audio in the background whenever a video plays in the app.…

October 15, 2015

In "Computer"

a611ee8db44c8d03a20edf0bf5a71d80?s=49&d=identicon&r=gAuthor Gea-Suan LinPosted on September 18, 2022September 18, 2022Categories Computer, Murmuring, Network, Security, Software, WWWTags ace, apple, arbitrary, code, execution, ios, iphone, security, webkit

Leave a Reply

Your email address will not be published. Required fields are marked *

Comment *

Name *

Email *

Website

Notify me of follow-up comments by email.

Notify me of new posts by email.

To respond on your own website, enter the URL of your response which should contain a link to this post's permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post's URL again. (Learn More)

Post navigation


About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK