Note to readers

This publication does not currently meet the Government of Canada's Web Standards. The information remains valid.

Apple security updates

Number: AV17-152
Date: 11 October 2017

Purpose

The purpose of this advisory is to bring attention to multiple Apple security updates for macOS High Sierra 10.13.

Assessment

Apple has released a support article regarding security vulnerabilities in their products and the relevant macOS High Sierra update.

  • StorageKit: A local attacker may gain access to an encrypted APFS volume
  • macOS Security : A malicious application can extract keychain passwords

CVE References: CVE-2017-7149, CVE-2017-7150

Suggested Action

CCIRC recommends that owner/operators test and deploy the vendor released updates to the affected platforms in accordance with their risk mitigation framework.

References:

Date modified: