====================================================================

                                CERT-Renater

                      Note d'Information No. 2024/VULN412
_____________________________________________________________________

DATE                : 08/10/2024

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): iOS, iPadOS running versions prior to 18.0.1.

=====================================================================
https://typo3.org/security/advisory/typo3-core-sa-2024-011
https://typo3.org/security/advisory/typo3-core-sa-2024-012
_____________________________________________________________________

APPLE-SA-10-03-2024-1 iOS 18.0.1 and iPadOS 18.0.1

iOS 18.0.1 and iPadOS 18.0.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121373.

Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.

Media Session
Available for: iPhone 16 (all models)
Impact: Audio messages in Messages may be able to capture a few
seconds of audio before the microphone indicator is activated
Description: This issue was addressed with improved checks.
CVE-2024-44207: Michael Jimenez and an anonymous researcher

Passwords
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch
3rd generation and later, iPad Pro 11-inch 1st generation and
later, iPad Air 3rd generation and later, iPad 7th generation
and later, and iPad mini 5th generation and later
Impact: A user's saved passwords may be read aloud by VoiceOver
Description: A logic issue was addressed with improved
validation. CVE-2024-44204: Bistrit Dahal

This update is available through iTunes and Software Update on
your iOS device, and will not appear in your computer's Software
Update application, or in the Apple Downloads site. Make sure
you have an Internet connection and have installed the latest
version of iTunes from https://www.apple.com/itunes/

iTunes and Software Update on the device will automatically
check Apple's update server on its weekly schedule. When an
update is detected, it is downloaded and the option to be
installed is presented to the user when the iOS device is docked.
We recommend applying the update immediately if possible. Selecting
Don't Install will present the option the next time you connect
your iOS device.

The automatic update process may take up to a week depending on
the day that iTunes or the device checks for updates. You may
manually obtain the update via the Check for Updates button
within iTunes, or the Software Update on your device.

To check that the iPhone, iPod touch, or iPad has been updated:

* Navigate to Settings
* Select General
* Select About. The version after applying this update will be
"iOS 18.0.1 and iPadOS 18.0.1".

All information is also posted on the Apple Security Releases
web site: https://support.apple.com/100100.

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/


=========================================================
+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=========================================================