iOS 10.3.2 is officially available

trparky

Well-known member
Feb 20, 2015
402
0
0
Visit site
iOS 10.2.1
Released January 23, 2017

Auto Unlock
Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later
Impact: Auto Unlock may unlock when Apple Watch is off the user's wrist
Description: A logic issue was addressed through improved state management.
CVE-2017-2352: Ashley Fernandez of raptAware Pty Ltd​

Contacts
Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later
Impact: Processing a maliciously crafted contact card may lead to unexpected application termination
Description: An input validation issue existed in the parsing of contact cards. This issue was addressed through improved input validation.
CVE-2017-2368: Vincent Desmurs (vincedes3)​

Kernel
Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later
Impact: An application may be able to execute arbitrary code with kernel privileges
Description: A buffer overflow issue was addressed through improved memory handling.
CVE-2017-2370: Ian Beer of Google Project Zero​

Kernel
Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later
Impact: An application may be able to execute arbitrary code with kernel privileges
Description: A use after free issue was addressed through improved memory management.
CVE-2017-2360: Ian Beer of Google Project Zero​

libarchive
Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later
Impact: Unpacking a maliciously crafted archive may lead to arbitrary code execution
Description: A buffer overflow issue was addressed through improved memory handling.
CVE-2016-8687: Agostino Sarubbo of Gentoo​

WebKit
Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later
Impact: Processing maliciously crafted web content may exfiltrate data cross-origin
Description: A prototype access issue was addressed through improved exception handling.
CVE-2017-2350: Gareth Heyes of Portswigger Web Security​

WebKit
Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed through improved memory handling.
CVE-2017-2354: Neymar of Tencent's Xuanwu Lab (tencent.com) working with Trend Micro's Zero Day Initiative
CVE-2017-2362: Ivan Fratric of Google Project Zero
CVE-2017-2373: Ivan Fratric of Google Project Zero​

WebKit
Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: A memory initialization issue was addressed through improved memory handling.
CVE-2017-2355: Team Pangu and lokihardt at PwnFest 2016​

WebKit
Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed through improved input validation.
CVE-2017-2356: Team Pangu and lokihardt at PwnFest 2016
CVE-2017-2369: Ivan Fratric of Google Project Zero
CVE-2017-2366: Kai Kang of Tencent's Xuanwu Lab (tencent.com)​

WebKit
Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later
Impact: Processing maliciously crafted web content may exfiltrate data cross-origin
Description: A validation issue existed in the handling of page loading. This issue was addressed through improved logic.
CVE-2017-2363: lokihardt of Google Project Zero
CVE-2017-2364: lokihardt of Google Project Zero​

WebKit
Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later
Impact: A malicious website can open popups
Description: An issue existed in the handling of blocking popups. This was addressed through improved input validation.
CVE-2017-2371: lokihardt of Google Project Zero​

WebKit
Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later
Impact: Processing maliciously crafted web content may exfiltrate data cross-origin
Description: A validation issue existed in the handling of variable handling. This issue was addressed through improved validation.
CVE-2017-2365: lokihardt of Google Project Zero​

WiFi
Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later
Impact: An activation-locked device can be manipulated to briefly present the home screen
Description: An issue existed with handling user input that caused a device to present the home screen even when activation locked. This was addressed through improved input validation.
CVE-2017-2351: Sriram (@Sri_Hxor) of Primefort Pvt. Ltd., Hemanth Joseph​

Additional recognition

WebKit hardening
We would like to acknowledge Ben Gras, Kaveh Razavi, Erik Bosman, Herbert Bos, and Cristiano Giuffrida of the vusec group at Vrije Universiteit Amsterdam for their assistance.​

This thing is chock full of security fixes!
 

njlx2016

Well-known member
Jun 2, 2015
366
0
0
Visit site
All the little various UI/UX niggles from 10.x are still there in 10.2.1.

1) Text formatting issues for some movies in the TV app
2) Maps Destinations widget - large gap between items and the widget tends to "freak out" (it will rapidly cycle through various destinations)
3) Widget page on home screen occasionally turns into the notification page
4) The Watch app is still an absolute mess - I'm talking about the buttons on the bottom. Sometimes the search button is there, sometimes not.
 

njlx2016

Well-known member
Jun 2, 2015
366
0
0
Visit site
Dark Sky just crashed hard on my 7 Plus. The screen went black, the Apple logo appeared and I had to unlock my phone again. I don't think it did a full reboot as the Apple logo only appeared for a second or two. Is there a term for what just happened?

I tried sifting through the diagnostic and usage data but didn't see an entry for what happened.
 

doogald

Trusted Member
Oct 23, 2012
2,755
89
48
Visit site
The screen went black, the Apple logo appeared and I had to unlock my phone again. I don't think it did a full reboot as the Apple logo only appeared for a second or two. Is there a term for what just happened?

SpringBoard crash I believe?

When this happened to my phone with Dark Sky installed (twice, shortly after iOS 10 was released last fall, when I had installed the app after updating) I think it was a full reboot, because it asked for a passcode, would not accept TouchID (despite the fact that it hadn't been 48 hours since the last unlock) and WiFi would not connect until after I entered the passcode.
 

njlx2016

Well-known member
Jun 2, 2015
366
0
0
Visit site
That was unexpected kinda. macOS Sierra 10.12.4 out too. Doing both updates right now on my MacBook Air and iPhone. Wish me luck!
 

vegas33139

Well-known member
Dec 2, 2013
144
0
16
Visit site
OoooooooooooooooooooK,

I'm on the Beta program currently running Beta 7. Is the official 10.3 any different other than in name? or should I be able to upgrade to official 10.3? Bit confused! :tongue:
 

BreakingKayfabe

Well-known member
Sep 12, 2008
8,442
53
48
Visit site
OoooooooooooooooooooK,

I'm on the Beta program currently running Beta 7. Is the official 10.3 any different other than in name? or should I be able to upgrade to official 10.3? Bit confused! :tongue:
Deleted my beta profile, rebooted phone, got prompt to update software when I checked manually. Same build number without the "a" at the end.