macOS Big Sur 11.5.1 released

[Gandalf_The_Grey]

macOS Big Sur 11.5.1
macOS Big Sur 11.5.1 provides important security updates and is recommended for all users.

What's new in the updates for macOS Big Sur

Learn what has changed in the updates available for macOS Big Sur.

support.apple.com

macOS Big Sur 11.5.1
Released July 26, 2021

IOMobileFrameBuffer

Available for: macOS Big Sur

Impact: An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2021-30807: an anonymous researcher

About the security content of macOS Big Sur 11.5.1

This document describes the security content of macOS Big Sur 11.5.1.

support.apple.com

 

[upnorth]

Catalina suddenly got a system update yesterday, that I can't trace other then the exact same number and date as the previous, and it even broke the system and forced me to re-install the whole enchilada.

The CVE-2021-30807 seems to reference only to Big Sur, iOS and iPadOS.

 

[upnorth]

Older but still-supported versions of iOS and macOS (iOS 12, as well as macOS 10.15 Catalina and 10.14 Mojave), along with watchOS and tvOS, didn’t get a mention at all. Whether those not-yet-patched versions are vulnerable but are proving harder to fix, are vulnerable but simply aren’t going to be fixed, or don’t actually contain the buggy code at all, we aren’t yet sure.

Microsoft researcher found Apple 0-day in March, didn’t report it

Ut tensio, sic uis! Does twice the bug pile on twice the pressure to fix it?

nakedsecurity.sophos.com