Samuel Axon
Today, Apple began rolling out iOS 14.4.2, iPadOS 14.4.2, and watchOS 7.3.3, advising users to upgrade as soon as possible. Like iOS/iPadOS 14.4.1 before it, this update fixes a security flaw.
In addition, Apple has released a similar security update – 12.5.2 – for older devices such as the iPhone 5S or 6 that cannot run iOS 14.
The release notes for iOS 14.4.2 and iPadOS 14.4.2 are minimal, simply stating:
This update provides important security updates and is recommended for all users.
For information about the security content of Apple software updates, visit the website: https://support.apple.com/kb/HT201222
It’s that security link that holds the real information. Here’s what Apple’s security support page says:
WebKit
Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)
Impact: Processing maliciously crafted web content may lead to universal cross-site scripting. Apple is aware of a report that this issue may have been actively exploited.
Description: This issue was addressed through improved object lifetime management.
CVE-2021-1879: Clement Lecigne of Google Threat Analysis Group and Billy Leonard of Google Threat Analysis Group
The same goes for the watchOS update. All four software updates (iOS 14.4.2, iPadOs 14.4.2, iOS 12.5.2, and watchOS 7.3.3) should already be available to all users of supported devices. This is the second update since the release of iOS/iPadOS 14.4 and watchOS 7.3 in late January.
The update immediately preceding this was also an urgent fix for a security issue.
iOS 14.4 was a feature update, not just a security update or a bug fix, but the added features were relatively modest. They include the ability for the camera to read smaller QR codes than before, an option to manually classify Bluetooth devices to ensure desired behavior, and notifications to let users know if the camera “cannot be verified as a new one.” , real Apple camera.”