Update: Apple has published details of security patches for iOS 17.4.1 and iPadOS 17.4. 1, VisionOS 1.1.1, and macOS 14.4.1. They all fix an integer overflow vulnerability on two separate platforms. Apple has not specified whether it is actively used. More information can be found here
Apple released iOS 17.4.1 last week with rather vague release notes claiming it included important bug fixes and security fixes. Two days later, the company has yet to add any details. This is unusual for Apple, which typically lists critical security fixes hours after release and suggests that those in iOS 17.4.1 may be significant or completely different.
9to5Mac Security Bite is exclusively brought to you by Mosyle, Apple's only unified platform. Everything we do is to ensure Apple devices are ready and secure in the enterprise. Our unique integrated approach to management and security combines Apple's most advanced security solutions to fully automate the security and safety of your data. Compliance, next-gen EDR, AI-powered zero trust, and exclusive privilege management with the most powerful and advanced Apple MDM on the market. The result is Apple's fully automated, unified platform, now trusted by more than 45,000 organizations, to provision millions of Apple devices effortlessly and affordably. Request an EXTENDED TRIALtoday and see why Mosyle is all you need for your Apple experience.
The update comes two weeks after the release of iOS 17.4, which brought major changes to iPhones in the European Union, primarily through the App Store, with support for alternative app marketplaces.
The iOS 17.4.1 release notes simply state: “This update contains important bug fixes and security updates and is recommended for all users” with a message to visit the Apple Support page for more information. However, the page notes that details about the update are “coming soon.”
iOS 17.4.1 update with important security fixes that
Apple recommends to all users
This is not an accident. And that could mean a few things.
Apple may be reluctant to reveal details about iOS 17.4.1 security patches until the company completes an investigation that could point to something. more significant. The update we received may have been a fix that prevented further exploitation.
“To protect our customers, Apple does not disclose, discuss, or confirm security issues until an investigation has been conducted and fixes are publicly available or releases,” the company said. Apple reports this on its security updates page.
Another possibility, which I think is the most likely reason, is that Apple is currently working on patching the same vulnerabilities on the Mac and Apple Watch. With this new release of iOS, we received the same security updates for iPadOS and VisionOS, but not for macOS or watchOS. Mac (and Apple Watch) users may still be at risk, and revealing details of known CVEs in other products could leave a hole in Apple's security posture.
Patches will likely be available soon. update for macOS and watchOS sometime next week. In the meantime, users should immediately update all devices listed below.
The new security update is available on the following supported devices:
- iPhone XS and later
- iPad Pro 12.9-inch 2nd generation and later
- iPad Pro 10.5-inch
- iPad Pro 11-inch 1st generation and later
- iPad Air 3rd generation and later
- iPad 6th generation and later
- iPad mini 5th generation and later
- Apple Vision Pro
I&# 8217;will update this post when we know more.
ICYMI: Security Headers
- Unpatched security vulnerability in Apple Silicon Mac breaks encryption.
- Here's what malware you can remove from your Mac
- ExpressVPN launches first portable Wi-Fi router with built-in VPN
- Hackers hacked CISA, forcing the agency to shut down some systems.
Follow Arin: Twitter/X, Threads, LinkedIn
