Apple releases iOS 12.5.4 security update for older devices

Posted:
in iOS edited June 18
Apple has released an iOS 12.5.4 security update for older devices that patches three vulnerabilities -- two of which may have been exploited in the wild.

iOS 12.5.4 security update released
iOS 12.5.4 security update released


Apple releases security-focused updates for older devices to fix any number of problems found in the software. Older devices may be incapable of receiving new features associated with recent releases, but these updates keep users of those devices safe.

The company's security website says that there are two WebKit vulnerabilities and a certificate vulnerability that have been patched. Apple says that the WebKit vulnerabilities may have been actively exploited in the wild.

Release notes read as follows:

Security

  • Impact: Processing a maliciously crafted certificate may lead to arbitrary code execution
  • Description: A memory corruption issue in the ASN.1 decoder was addressed by removing the vulnerable code.
  • CVE-2021-30737: xerub

WebKit

  • Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
  • Description: A memory corruption issue was addressed with improved state management.
  • CVE-2021-30761: an anonymous researcher

WebKit

  • Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
  • Description: A use after free issue was addressed with improved memory management.
  • CVE-2021-30762: an anonymous researcher
The update is available for iPhone 5s, iPhone 6, iPhone 6s Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch (6th generation).

Users can install these updates by navigating to Settings, General, then Software Update. Connect the iPhone or iPad to power then tap install to complete the update.

Keep up with everything Apple in the weekly AppleInsider Podcast -- and get a fast news update from AppleInsider Daily. Just say, "Hey, Siri," to your HomePod mini and ask for these podcasts, and our latest HomeKit Insider episode too.If you want an ad-free main AppleInsider Podcast experience, you can support the AppleInsider podcast by subscribing for $5 per month through Apple's Podcasts app, or via Patreon if you prefer any other podcast player.AppleInsider is also bringing you the best Apple-related deals for Amazon Prime Day 2021. There are bargains before, during, and even after Prime Day on June 21 and 22 -- with every deal at your fingertips throughout the event.

Comments

  • Reply 1 of 3
    p-dogp-dog Posts: 84member
    It’s amazing that Apple still provides 8 year old devices with security updates! Android users are lucky to get 1, maybe 2 years of sporadic updates, and that is only guaranteed for flagship devices, not commodity devices, which are 90+% of all Android devices sold.
    edited June 14 mike1lkruppdewme
  • Reply 2 of 3
    mike1mike1 Posts: 2,670member
    Next time somebody complains that Apple bakes in planned obsolescence, show them this.
    dewmeFidonet127
  • Reply 3 of 3
    lkrupplkrupp Posts: 9,270member
    mike1 said:
    Next time somebody complains that Apple bakes in planned obsolescence, show them this.
    Not going to stop anything. People with an axe to grind are gonna grind it no matter the facts.
    dewmeFidonet127
Sign In or Register to comment.