[ad_1]
Apple is now rolling out iOS 12.5.5 to older iPhone and iPad models. The company says the update includes notable fixes and security improvements, and is recommended for all users.
The update is available for iPad Air, iPad mini 2, and iPad mini 3, as well as 6th generation iPod touch, iPhone 5s, iPhone 6, and iPhone 6 Plus. All of these devices were removed from support with iOS 13, but Apple has continued to update them with important security fixes since then. Apple previously rolled out iOS 12.5.4 in June with security fixes for WebKit vulnerabilities and other issues.
“This update provides important security updates and is recommended for all users,” Apple says in the release notes for iOS 12.5.5.
Apple asks users to visit its security updates website for more information on what’s new in iOS 12.5.5:
CoreGraphics
- Available for: iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3 and iPod touch (6th generation)
- Impact: Processing a maliciously crafted PDF may lead to the execution of arbitrary code. Apple is aware of a report that this issue may have been actively exploited.
- Description: An integer overflow was resolved with improved input validation.
- CVE-2021-30860: The citizen laboratory
WebKit
- Available for: iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3 and iPod touch (6th generation)
- Impact: Processing maliciously crafted web content can lead to the execution of arbitrary code. Apple is aware of a report that this issue may have been actively exploited.
- Description: A post-free usage issue was addressed with improved memory management.
- CVE-2021-30858: an anonymous researcher
XNU
- Available for: iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3 and iPod touch (6th generation)
- Impact: A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of reports that an exploit for this problem exists in the wild.
- Description: A type confusion issue was addressed with improved state handling.
- CVE-2021-30869: Erye Hernandez of Google Threat Analysis Group, Clément Lecigne of Google Threat Analysis Group and Ian Beer of Google Project Zero
We’ll be sure to update this story as we learn more about the content and changes in iOS 12.5.5. Let us know in the comments if you notice any changes on these older devices. You can update by going to Settings, then choosing General, then choosing Software Update.
FTC: We use automatic affiliate links which generate income. Following.
Check out 9to5Mac on YouTube for more Apple news:
[ad_2]
Source link