![\"\"](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2019\/03\/ios-software-update-available-icon-600x300-e1558142227486.png\"){kind=icon}
<\/p>\n<\/p>\n
This week, Apple released released updates to all of its operating systems. We’ll have a look at what these updates have to offer in terms of security patches, while briefly covering new features.<\/p>\n
The latest Mac operating system update is available for all supported Macs currently running macOS Monterey.<\/p>\n
macOS Monterey 12.1 adds SharePlay, an entirely new way to have shared experiences with family and friends in FaceTime. This update also includes the Apple Music Voice Plan, new safety features for children and parents in Messages, redesigned Memories in Photos, and other features and bug fixes for your Mac.<\/p>\n
At least 46 security-related patches are included in this update, including but not limited to:<\/p>\n
AirPort
\n<\/strong>Impact: A device may be passively tracked via BSSIDs
\nDescription: An access issue was addressed with improved access restrictions.<\/p>\nBluetooth
\n<\/strong>Impact: A device may be passively tracked by its Bluetooth MAC address
\nDescription: A device configuration issue was addressed with an updated configuration.<\/p>\nLaunchServices
\n<\/strong>Impact: A malicious application may bypass Gatekeeper checks
\nDescription: A logic issue was addressed with improved state management.<\/p>\nPreferences
\n<\/strong>Impact: A malicious application may be able to elevate privileges
\nDescription: A race condition was addressed with improved state handling.<\/p>\nWi-Fi
\n<\/strong>Impact: A local user may be able to cause unexpected system termination or read kernel memory
\nDescription: This issue was addressed with improved checks.<\/p>\nIOUSBHostFamily
\n<\/strong>Impact: A remote attacker may be able to cause unexpected application termination or heap corruption
\nDescription: A race condition was addressed with improved locking.<\/p><\/blockquote>\nSome of the vulnerabilities were attributed to Csaba Fitzl (@theevilbit), who said on Twitter<\/a> that one patch in particular is easy to bypass. In other words, Apple could have done a better job of mitigating it. Fitzl did not publicly disclose which patch he was referring to or what the better fix would be.<\/p>\n
Two of the three patches attributed to Fitzl were implemented in the Big Sur and Catalina updates as well. We currently do not know if the patch he is referring to affects the other macOS versions.<\/p>\n
For the full list of security patches included in Monterey 12.1 have a look here<\/a>.<\/p>\n
You can get this update by going to System Preferences<\/strong> > Software Update<\/strong> where compatible Macs running macOS Mojave or newer will see the Monterey update. If your Mac is running High Sierra or older, look for macOS Monterey in the App Store and download it from there.<\/p>\n
macOS Big Sur 11.6.2<\/h3>\n
Last time around<\/a> I said, “This is the last ‘dot update’ we\u2019re likely to see for macOS Big Sur. With macOS Monterey now available, Big Sur will likely continue to receive limited security updates for at least a year or two.” It turns out I was wrong, and Apple has released macOS Big Sur 11.6.2. This update is listed as being “recommended for all users and improves the security of macOS.” It includes 35 security patches, most of them the same as those seen in Monterey 12.1.<\/p>\n
It is unclear why this update was a dot-release and not a Security Update, as it appears that no new features were introduced.<\/p>\n
The full list of changes can be seen here<\/a> and the update is available in System Preferences<\/strong> > Software Update<\/strong> on your Mac.<\/p>\n
Security Update 2021-008 Catalina<\/h3>\n
This update includes at least 32 security patches that you can read about here<\/a>. They are the same patches that were made in the 11.6.2 Big Sur update, minus a few. The update is available in System Preferences<\/strong> > Software Update<\/strong> on your Mac.<\/p>\n
iOS 15.2 and iPadOS 15.2<\/h3>\n
Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation).<\/p>\n
The latest iOS and iPadOS versions, 15.2, allow access to the Apple Music Voice Plan, a new subscription tier that provides access to music using Siri. This update also includes the App Privacy Report, new safety features for children and parents in Messages, and other features and bug fixes for your iPhone.<\/p>\n
It also adds at least 42 security patches, some of which include:<\/p>\n
FaceTime
\n<\/strong>Impact: A user in a FaceTime call may unexpectedly leak sensitive user information through Live Photos metadata
\nDescription: This issue was addressed with improved handling of file metadata.<\/p>\nNotes
\n<\/strong>Impact: A person with physical access to an iOS device may be able to access contacts from the lock screen
\nDescription: The issue was addressed with improved permissions logic.<\/p>\nPassword Manager
\n<\/strong>Impact: A person with physical access to an iOS device may be able to access stored passwords without authentication
\nDescription: An inconsistent user interface issue was addressed with improved state management.<\/p>\nNetworkExtension
\n<\/strong>Impact: A local attacker may be able to read sensitive information
\nDescription: A permissions issue was addressed with improved validation.<\/p><\/blockquote>\nThe full list of security issues addressed can be found here<\/a>.<\/p>\n
To install the latest iOS updates, go to Settings<\/strong> > General<\/strong> > Software Update<\/strong> on your device.<\/p>\n
watchOS 8.3<\/h3>\n
What happened to the watchOS 8.2 update? Nobody knows. Strangely, Apple’s version numbers skipped directly from 8.1.1 to 8.3.<\/p>\n
Available for: Apple Watch Series 3 and later<\/p>\n
watchOS 8.3 includes new features, improvements, and bug fixes, including:<\/p>\n
\n
- Apple Music Voice Plan gives you access to all songs, playlists, and stations in Apple Music using Siri<\/li>\n
- Support for App Privacy Report to record data and sensor access<\/li>\n
- Fixes an issue where notifications may interrupt Mindfulness sessions unexpectedly for some users<\/li>\n<\/ul>\n
At least 28 security patches are also included, most of them the same as those seen in the iOS and iPadOS updates. The full list can be found here<\/a>.<\/p>\n
To install this update, make sure your iPhone is up to date first, both your phone and watch are connected to the same Wi-Fi network, and the watch has at least a 50% charge. Then open the Watch app on your phone and tap General<\/strong> > Software Update<\/strong>.<\/p>\n
tvOS 15.2<\/h3>\n
Apple’s new tvOS 15.2 update introduces a new Memories experience for Photos, includes a new Store tab in the Apple TV app, brings support for the Apple Music Voice Plan, a new subscription tier designed to access music using Siri, supports additional Siri languages, and adds beautiful new screen savers. This update also includes performance and stability improvements. This update also includes 25 security patches that are the same as those seen in the iOS, iPadOS and watchOS updates.<\/p>\n
The full list of security issues addressed can be found here<\/a>. The tvOS update can be downloaded directly from the Apple TV by going to Settings<\/strong> > System<\/strong> > Update Software<\/strong>.<\/p>\n
Whether you’re using iOS, iPadOS, or macOS, always back up your data prior to installing any updates. This gives you a restore point in case something does not go as planned.<\/p>\n
See also our related article on checking your macOS backups:<\/p>\n
How to Verify Your Backups are Working Properly<\/a><\/p><\/blockquote>\n