iOS 14.8 released

[JB007]

Hello,
Just got iOS 14.8

 

[silversurfer]

iOS 14.8 and iPadOS 14.8​

Released September 13, 2021

CoreGraphics
Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)
Impact: Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Description: An integer overflow was addressed with improved input validation.
CVE-2021-30860: The Citizen Lab

WebKit
Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)
Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Description: A use after free issue was addressed with improved memory management.
CVE-2021-30858: an anonymous researcher

About the security content of iOS 14.8 and iPadOS 14.8 - Apple Support

This document describes the security content of iOS 14.8 and iPadOS 14.8.

support.apple.com

 

[CyberTech]

Apple releases emergency OS updates due to spyware flaws | MalwareTips

Apple's devices are prey to a zero-click security flaw, which could have been exploitable since February this year or earlier. This is the first time we have seen a vulnerability so severe and that has affected Apple Mac, iPhone, iPad and Watch users alike. There is a very high probability that...

malwaretips.com

 

[Vasudev]

About the security content of iOS 14.8 and iPadOS 14.8 - Apple Support

This document describes the security content of iOS 14.8 and iPadOS 14.8.

support.apple.com

Really thought iOS was secure.

 

[blackice]

Really thought iOS was secure.

No code today is 100% secure. It’s too complex. iOS is relatively secure and Apple puts a lot of resources into security.

 

[Vasudev]

No code today is 100% secure. It’s too complex. iOS is relatively secure and Apple puts a lot of resources into security.

Yes that's a fact. Anyway, which OS are you comparing against? GrapheneOS/hardened AOSP or something else?

 

[blackice]

Yes that's a fact. Anyway, which OS are you comparing against? GrapheneOS/hardened AOSP or something else?

Any OS, as I said it's 'relatively secure'. I wouldn't go comparing a large commercial OS to a specifically bespoke and esoteric OS directly. They are different use cases, and we all know it's clear which one is more secure and which one offers more ease of use combined with functionality.

 

[jetman]

I reckon my 1983 Sinclair ZX Spectrum is pretty much 100% secure.
However the OS is on read only ROM chips and there is no internet connectivity !

 

[blackice]

no internet connectivity !

That's a secure setup!

 

[SpiderWeb]

Interesting. I got the latest beta/release candidate. For some reason it tripped Cylance warning me that there was a sideloaded app that did MITM attack. So I deleted the Beta Software profile certificate, rebooted and the notification disappeared. I was always suspicious that Apple might be using that Beta certificate to funnel things out of your phone without going through your regular network channels like a VPN...