![\"\"](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2018\/02\/iOS-Settings-app-software-update-available.png\")
<\/p>\n<\/p>\n
Last week Apple was hit by a serious and embarrassing bug affecting Group FaceTime<\/a>. Shortly after the bug became public knowledge, Apple announced that a future software update would fix the issue, and that Group FaceTime would not be re-enabled on Macs and iOS devices until users installed the forthcoming update. At long last, software updates arrived on Thursday this week, and Apple has restored Group FaceTime calling.<\/p>\n Apple’s System Status<\/a> page shows that Group FaceTime is back.<\/p>\n Listed for both macOS and iOS as an update that “provides security updates and is recommended for all users,” Apple gave minimal details about how the issue was fixed behind the scenes. Here’s what Apple did say:<\/p>\n FaceTime<\/strong> <\/p>\n Foundation<\/strong> <\/p>\n IOKit<\/strong> <\/p>\n Live Photos in FaceTime<\/strong> The Foundation and IOKit fixes seems to be unrelated to the FaceTime bugs.<\/p>\n What stands out more than the expected Group FaceTime patch is the fix for FaceTime Live Photos. Apple does not go in to detail and remains rather vague about it, so this can be interpreted in a number of ways.<\/p>\n Live Photos in FaceTime<\/a> allows you to take a photo of the call and just like a Live Photo taken with your Camera app, you get a five-second moving photo. An issue with this feature may mean that even though one of the participants on a call had that feature blocked (all participants need to have this feature enabled for it to work), maybe there was a way to take such a photo anyway. Or perhaps during Apple’s “thorough security audit of the FaceTime service” (perhaps initiated after the Group FaceTime spying bug<\/a> came to light), Apple may have simply found an entirely different FaceTime bug that was unrelated to the spying bug.<\/p>\n In my testing so far, I have found that this update may cause issues with display orientation while on a call. The other participants of a Group FaceTime call will see me sideways and I have to leave the call and rejoin it for the issue to be addressed. I\u2019d rather deal with this issue until the next update comes out than leave a major security hole wide open, though!\u00a0If you experience similar issues, please l<\/em>eave a comment and let us know.<\/em><\/p>\n The full list of security fixes in iOS 12.1.4\u00a0can be found here<\/a>. iOS users can update by going to Settings<\/strong> > General<\/strong> > Software Update<\/strong> on their devices, or by connecting the device to their computer where iTunes can download and install the update.<\/p>\n The full list of security fixes in the macOS Mojave 10.14.3 Supplemental Update\u00a0can be found here<\/a>. Mojave users should visit the Software Update pane in System Preferences (Apple menu<\/strong> >\u00a0System Preferences<\/strong> > Software Update<\/strong>) to grab the latest update.<\/p>\n Whether you’re using iOS or macOS, always back up your data prior to installing any updates. This gives you a restore point in case something does not go as planned.<\/p>\n Perhaps Apple will make new features available to the public through its beta program going forward. Group FaceTime was never publicly available in any of the beta versions; it’s possible that this bug might have been discovered and patched in time if it had been.<\/p>\n If you’ve installed Apple’s Shortcuts app (which doesn’t come preinstalled with iOS 12), check the App Store and make sure your Shortcuts app has been updated to the version 2.1.3.<\/p>\n Last week Apple was hit by a serious and embarrassing bug affecting Group FaceTime. Shortly after the bug became public knowledge, Apple announced that a future software update would fix the issue, and that Group FaceTime would not be re-enabled on Macs and iOS devices until users installed the forthcoming update. At long last, software […]<\/p>\n","protected":false},"author":79,"featured_media":85426,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[7],"tags":[2995,69,4186,4387,201],"yoast_head":"\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n\t\n\n\n\t\n\t\n\t\n![\"\"](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2019\/02\/FaceTimeBackOnline.png\")
<\/p>\niOS 12.1.4 and macOS Mojave 10.14.3 Supplemental Update<\/h3>\n
\nAvailable for: iPhone 5s and later, iPad Air and later, iPod touch 6th generation and macOS Mojave 10.14.3
\nImpact: The initiator of a Group FaceTime call may be able to cause the recipient to answer
\nDescription: A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management.<\/p>\n
\nAvailable for: iPhone 5s and later, iPad Air and later, iPod touch 6th generation and macOS Mojave 10.14.3
\nImpact: An application may be able to gain elevated privileges
\nDescription: A memory corruption issue was addressed with improved input validation.<\/p>\n
\nAvailable for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
\nImpact: An application may be able to execute arbitrary code with kernel privileges
\nDescription: A memory corruption issue was addressed with improved input validation.<\/p>\n
\nAvailable for: iPhone 5s and later, iPad Air and later, iPod touch 6th generation and macOS Mojave 10.14.3
\nImpact: A thorough security audit of the FaceTime service uncovered an issue with Live Photos\u00a0\u2028Description: The issue was addressed with improved validation on the FaceTime server.<\/p><\/blockquote>\nShortcuts 2.1.3 for iOS<\/h3>\n
![\"\"](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2019\/02\/iOS-12-Shortcuts-vulnerabilities-and-risks-325x220-150x102.png\")
<\/a>Apple also updated the Shortcuts app<\/a> for iOS 12, apparently addressing the Shortcuts security issues that we detailed last week<\/a>.<\/p>\nHow can I learn more?<\/h3>\n
![\"\"](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2017\/10\/ios9-podcasts-app-tile-150x150.png\")
<\/a>Intego’s podcast hosts discussed the FaceTime bug and the safety of the Shortcuts app on the two most recent editions of the Intego Mac Podcast<\/strong>, so be sure to subscribe<\/a> to make sure you don’t miss the episodes. You’ll also want to subscribe to our e-mail newsletter<\/strong> and keep an eye here on The Mac Security Blog<\/strong> for updates.<\/p>\n","protected":false},"excerpt":{"rendered":"