![\"\"](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2019\/03\/ios-software-update-available-icon-600x300-e1558142227486.png\"){kind=icon}
<\/p>\n<\/p>\n
This week Apple released updates to all of its operating systems and Safari browser. Here’s a brief rundown of new features and security-related fixes included with each update.<\/p>\n
Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation<\/p>\n
Apple describes the update’s new features as follows:<\/p>\n
Introduces Deep Fusion, an advanced image processing system that uses the A13 Bionic Neural Engine to capture images with dramatically better texture, detail, and reduced noise in lower light, on iPhone 11, iPhone 11 Pro, and iPhone 11 Pro Max. Additional features include updated and additional emoji, Announce Messages for AirPods, support for AirPods Pro, HomeKit Secure Video, HomeKit enabled routers, and new Siri privacy settings. This update also contains bug fixes and improvements.<\/p><\/blockquote>\n
Some security related issues were addressed as well: 28, to be exact. Here’s a sampling of some interesting ones:<\/p>\n
App Store<\/strong>
\nImpact: A local attacker may be able to login to the account of a previously logged in user without valid credentials.
\nDescription: An authentication issue was addressed with improved state management.<\/p><\/blockquote>\nAssociated Domains
\n<\/strong>Impact: Improper URL processing may lead to data exfiltration
\nDescription: An issue existed in the parsing of URLs. This issue was addressed with improved input validation.<\/p><\/blockquote>\nBooks
\n<\/strong>Impact: Parsing a maliciously crafted iBooks file may lead to disclosure of user information
\nDescription: A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks.<\/p><\/blockquote>\nSetup Assistant
\n<\/strong>Impact: An attacker in physical proximity may be able to force a user onto a malicious Wi-Fi network during device setup
\nDescription: An inconsistency in Wi-Fi network configuration settings was addressed.<\/p><\/blockquote>\nScreen Recording
\n<\/strong>Impact: A local user may be able to record the screen without a visible screen recording indicator
\nDescription: A consistency issue existed in deciding when to show the screen recording indicator. The issue was resolved with improved state management.<\/p><\/blockquote>\nFourteen of the fixes were for WebKit, Apple’s open-source page layout rendering engine. A relatively large number of vulnerabilities were addressed in this update, so it is recommended to install it sooner rather than later.<\/p>\n
The full list of security issues addressed can be found here<\/a>.<\/p>\n
iOS 12.4.3<\/h3>\n
Listed simply as an update that provides important security updates and is recommended for all users, Apple has yet to release details on the included security fixes.<\/p>\n
Regardless of whether your device is compatible with iOS 13 or iPadOS, or if it is limited to iOS 12, you can obtain the updates over the air (without tethering to a computer) by going to Settings<\/strong> > General<\/strong> > Software Update<\/strong>. You can also connect your device to your Mac (or Windows PC with iTunes) to install the update.<\/p>\n
tvOS 13.2<\/h3>\n
Apple simply states that tvOS 13.2 is an update that includes general performance and stability improvements. Available for the Apple TV HD and Apple TV 4K’s, a total of 22 security issues were addressed. Most of them the same as those addressed in iOS and iPadOS 13.2. The kernel, WebKit, and App Store all had some work done to make them more secure.<\/p>\n
The full list of security issues addressed can be found here<\/a>. The tvOS update can be downloaded directly from the Apple TV by going to Settings<\/strong> > System<\/strong> > Update Software<\/strong>.<\/p>\n
watchOS 6.1<\/h3>\n
Apple says that watchOS 6.1\u00a0“Introduces support for AirPods Pro and includes improvements and bug fixes. This update also brings watchOS 6 to Apple Watch Series 1 and Series 2.”<\/p>\n
A total of 20 security related issues were fixed, and as you’ve come to expect, these are mostly the same as the ones addressed in iOS, iPadOS, and tvOS.<\/p>\n
The full list of security issues addressed can be found here<\/a>.<\/p>\n
watchOS 5.3.3<\/h3>\n
Listed simply as an update that provides important security updates and is recommended for all users, Apple has yet to release details on the included security fixes.<\/p>\n
Apple evidently continues to support watchOS 5 to maintain compatibility with iPhones running iOS 12.<\/p>\n
The watchOS updates can be installed by connecting the watch to its charger, then on the iPhone open the Apple Watch app<\/strong> > My Watch tab<\/strong> > General<\/strong> > Software Update<\/strong>.<\/p>\n
Safari 13.0.3<\/h3>\n
The latest version of Safari, available for macOS High Sierra and Mojave users, brings a few bug fixes and enhancements that improve overall security. Fourteen security issues in WebKit were addressed.<\/p>\n
The full list of security issues addressed can be found here<\/a>. The new Safari 13.0.3 can be downloaded through the Updates<\/strong> tab of the App Store<\/strong> for High Sierra users and through System Preferences<\/strong> > Software Update<\/strong> for Mojave users. For macOS Catalina users, it is included in macOS 10.15.1.<\/p>\n
macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006<\/h3>\n
Last but not least, macOS received some updates: security-only updates for High Sierra and Mojave, and a features-plus-security update for Catalina.<\/p>\n
The macOS Catalina 10.15.1 update includes updated and additional emoji, support for AirPods Pro, HomeKit Secure Video, HomeKit-enabled routers, and new Siri privacy settings, as well as bug fixes and improvements.<\/p><\/blockquote>\n
There are 33 security-related fixes included for Catalina, but only 22 of these are available for macOS High Sierra and Mojave. A few of the notable fixes include:<\/p>\n
File Quarantine
\n<\/strong>Impact: A malicious application may be able to elevate privileges
\nDescription: This issue was addressed by removing the vulnerable code.<\/p>\nIntel Graphics Driver
\n<\/strong>Impact: An application may be able to execute arbitrary code with system privileges
\nDescription: A memory corruption issue was addressed with improved memory handling.<\/p>\nSystem Extensions
\n<\/strong>Impact: An application may be able to execute arbitrary code with system privileges
\nDescription: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement.<\/p>\nUIFoundation
\n<\/strong>Impact: Parsing a maliciously crafted text file may lead to disclosure of user information
\nDescription: This issue was addressed with improved checks.<\/p><\/blockquote>\nThe full list of security issues addressed can be found here<\/a>. macOS High Sierra users can find the security update in the App Store app under the Updates tab. Mojave and Catalina users should visit the Software Update pane in System Preferences (Apple menu<\/strong> > System Preferences…<\/strong> > Software Update<\/strong>) instead.<\/p>\n
Whether you’re using iOS, iPadOS, or macOS, always back up your data prior to installing any updates. This gives you a restore point in case something does not go as planned.<\/p>\n
See also our related article on checking your macOS backups:<\/p>\n
How to Verify Your Backups are Working Properly<\/a><\/p><\/blockquote>\n