{"id":1773911,"date":"2022-12-14T16:11:34","date_gmt":"2022-12-14T21:11:34","guid":{"rendered":"https:\/\/nakedsecurity.sophos.com\/?p=823047"},"modified":"2022-12-14T16:11:34","modified_gmt":"2022-12-14T21:11:34","slug":"apple-patches-everything-finally-reveals-mystery-of-ios-16-1-2","status":"publish","type":"station","link":"https:\/\/platodata.io\/plato-data\/apple-patches-everything-finally-reveals-mystery-of-ios-16-1-2\/","title":{"rendered":"Apple patches everything, finally reveals mystery of iOS 16.1.2"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/wordpress-1016567-4521551.cloudwaysapps.com\/wp-content\/uploads\/2022\/12\/apple-patches-everything-finally-reveals-mystery-of-ios-16-1-2.png\" class=\"ff-og-image-inserted\"><\/div>\n<div class=\"entry-prefix\">\n<div class=\"entry-author\"> <span class=\"by\">by<\/span> <a href=\"https:\/\/nakedsecurity.sophos.com\/author\/paul-ducklin\/\" title=\"Posts by Paul Ducklin\" class=\"author url fn\" rel=\"author\">Paul Ducklin<\/a> <\/div><\/div>\n<p>Apple has just published a <a href=\"https:\/\/support.apple.com\/en-us\/HT201222\" rel=\"nofollow\">wide range of security fixes<\/a> for all its supported platforms, from the smallest watch to the biggest laptop.<\/p>\n<p>In other words, if you\u2019ve got an Apple product, and it\u2019s still officially supported, we urge you to do an update check now.<\/p>\n<p>Remember that even if you\u2019ve set your iDevices to update entirely automatically, doing a manual check is still well worth it, because:<\/p>\n<ul>\n<li><strong>It ensures that you catch up<\/strong> if something went wrong with your last automatic update.\n<\/li>\n<li><strong>It jumps you to the head of the queue<\/strong> so that even if you haven\u2019t yet been alerted to the update by Apple, you\u2019ll be able to get it at once anyway.\n<\/li>\n<\/ul>\n<h2>What you need<\/h2>\n<p>To summarise, the versions you want to see after you\u2019ve upgraded are as follows:<\/p>\n<ul>\n<li><strong>macOS Ventura&nbsp;13.1<\/strong>\n<\/li>\n<li><strong>macOS Monterey 12.6.2<\/strong>\n<\/li>\n<li><strong>macOS Big Sur 11.7.2<\/strong>\n<\/li>\n<li><strong>tvOS 16.2<\/strong>\n<\/li>\n<li><strong>watchOS 9.2<\/strong>\n<\/li>\n<li><strong>iOS 16.2<\/strong> (recent devices only)\n<\/li>\n<li><strong>iPadOS 16.2<\/strong> (recent devices only)\n<\/li>\n<li><strong>iOS 15.7.2<\/strong> (earlier devices, back to iPhone 6s)\n<\/li>\n<li><strong>iPadOS 15.7.2<\/strong> (earlier devices, including iPod touch 7th gen)\n<\/li>\n<\/ul>\n<p>If you\u2019ve got Big Sur or Monterey, you\u2019ll also need a separate update to take you to <strong>Safari 16.2<\/strong> to fix a number of browser and web-rendering bugs. (Other platform updates get their Safari fixes bundled in.)<\/p>\n<aside id=\"sophos_ad-3\" class=\"widget sophos-inline-ad sophos_widget_ad\"> .s-button+.s-button { margin-left: .3125rem; } .s-button { transition: all .15s linear; font-size: .875rem; line-height: 1.5; color: #f2f2f2; font-family: SophosSansMedium, Helvetica Neue, Helvetica, Arial, sans-serif; font-weight: 400; font-style: normal; display: inline-block; padding: .3125rem 1.25rem; cursor: pointer; text-align: center; text-decoration: none; border: 1px solid #005bc8; border-radius: 3px; background-color: #005bc8; text-shadow: none; } .s-button:hover { text-decoration: none; color: #fff; border-color: #002d62; background-color: #002d62; } .s-button&#8211;white, .s-button&#8211;white:hover { color: #005bc8 !important; border-color: #fff; background-color: #fff; } .s-ad-sophos-mdr { font-size: 1rem; line-height: 1.5; color: #242629; font-family: SophosSansRegular, Helvetica Neue, Helvetica, Arial, sans-serif; font-weight: 400; font-style: normal; position: relative; max-width: 769px; margin: 15px auto; padding: 30px 30px 25px; transition: box-shadow .25s cubic-bezier( .645, .045, .355, 1 ); text-align: center; background-color: #0d141d; background-repeat: no-repeat; background-position: 50%; background-size: cover; box-shadow: 0 0 0 0 0 transparent; background-color: #005bc8; background-image: none; background-position: 0 0; } .s-ad-sophos-mdr__title { font-size: 2rem; line-height: 1.125; margin-bottom: 4px; color: #fff; } .s-ad-sophos-mdr__text { font-family: SophosSansLight, Helvetica Neue, Helvetica, Arial, sans-serif; font-weight: 400; font-style: normal; font-size: 17px; color: #fff; } .s-ad-sophos-mdr__action { margin-top: 15px; } .s-ad-sophos-mdr__action .s-button { color: #fff; } .s-ad-sophos-mdr__link-wrapper { text-decoration: none; } .s-ad-sophos-mdr__link-wrapper:hover .s-ad-sophos-mdr { box-shadow: 0 5px 10px 0 rgba( 0, 0, 0, .15 ); } .s-ad-sophos-mdr__sophos-logo { position: absolute; top: 15px; right: 15px; } .s-ad-sophos-mdr__sophos-logo-svg { display: inline-block; width: 64px; height: 11px; vertical-align: top; background-repeat: no-repeat; background-size: 64px 11px; } .s-ad-sophos-mdr__title { font-family: SophosSansSemibold, Helvetica Neue, Helvetica, Arial, sans-serif; font-weight: 400; font-style: normal; font-size: 28px; font-weight: 700; line-height: 1; margin-bottom: 10px; text-align: left; } .s-ad-sophos-mdr__title svg { max-width: 100%; } .s-ad-sophos-mdr__text { font-size: 16px; line-height: 1.25; text-align: left; } .s-ad-sophos-mdr__action { text-align: right; } .s-ad-sophos-mdr .s-button { border-radius: 20px; } @media (min-width:769px) { .s-ad-sophos-mdr__text { margin-right: 140px; } .s-ad-sophos-mdr__action { position: absolute; right: 30px; bottom: 30px; } } @media (max-width:768px) { .s-ad-sophos-mdr { padding-top: 50px; } .s-ad-sophos-mdr__title { font-size: 1.625rem; } .s-ad-sophos-mdr__text { font-size: 16px; } .s-ad-sophos-mdr { padding-top: 30px; } } <\/aside>\n<h2>Mystery explained<\/h2>\n<p>Amusingly, if that\u2019s the right word, some of the the mystery surrounding Apple\u2019s recent <a href=\"https:\/\/nakedsecurity.sophos.com\/2022\/12\/02\/apple-pushes-out-ios-security-update-thats-more-tight-lipped-than-ever\/\">iOS 16.1.2 update<\/a>, which came out all on its own, with no supporting documentation at all, has belatedly been <a href=\"https:\/\/support.apple.com\/en-us\/HT213516\" rel=\"nofollow\">revealed<\/a>:<\/p>\n<p>A bug in WebKit, Apple\u2019s web rendering engine, known as <strong>CVE-2022-42856<\/strong>, apparently showed up in an exploit being used in the wild, and although that bug has now been patched in all the abovementioned updates (except watchOS)\u2026<\/p>\n<p>\u2026it seems that the known exploit only worked on iOS.<\/p>\n<p>Of course, given that the update advisories now explicitly state that the exploit actually only worked <em>\u201cagainst versions of iOS released before iOS 15.1\u201d<\/em>, we still don\u2019t know why iOS 16 users got an update while iOS 15 users didn\u2019t.<\/p>\n<p>Perhaps Apple was hoping that some users who were still back on iOS 15, and thus potentially vulnerable, would jump to iOS 16 and get themselves as up-to-date as possible?<\/p>\n<p>Or perhaps the iOS 16.1.2 update was merely a precaution that took less time to push out than it did for Apple to ensure that iOS 16 was not, in fact, at risk?<\/p>\n<h2>What to do?<\/h2>\n<ul>\n<li><strong>On your iPhone or iPad:<\/strong> <em>Settings<\/em> &gt; <em>General<\/em> &gt; <em>Software Update<\/em>\n<\/li>\n<li><strong>On your Mac:<\/strong> <em>Apple menu<\/em> &gt; <em>About this Mac<\/em> &gt; <em>Software Update\u2026<\/em>\n<\/li>\n<\/ul>\n<hr>\n<ul class=\"plato-post-bottom-links\">\n<li class=\"plato-post-bottom-link-amplifi\">SEO Powered Content &amp; PR Distribution. <a href=\"https:\/\/www.amplifipr.com\" target=\"_blank\" rel=\"noopener\">Get Amplified Today.<\/a><\/li>\n<li class=\"plato-post-bottom-link-platoblockchain\">Platoblockchain. Web3 Metaverse Intelligence. Knowledge Amplified. <a href=\"https:\/\/platoblockchain.com\" target=\"_blank\" rel=\"noopener\">Access Here.<\/a><\/li>\n<li class=\"plato-post-bottom-link-source\"><span>Source:<\/span> <a href=\"https:\/\/nakedsecurity.sophos.com\/2022\/12\/14\/apple-patches-everything-finally-reveals-mystery-of-ios-16-1-2\/\" target=\"_blank\" rel=\"noopener\">https:\/\/nakedsecurity.sophos.com\/2022\/12\/14\/apple-patches-everything-finally-reveals-mystery-of-ios-16-1-2\/<\/a><\/li>\n<\/ul>\n","protected":false},"author":1,"featured_media":1773912,"template":"Default","meta":{"_eb_attr":"","type":"","auto_type":false,"post":"","stream":"","stream_url":"","waveform_data":[],"duration":0,"start":0,"end":0,"bpm":0,"downloadable":false,"download_url":"","purchase_title":"","purchase_url":"","post-count-all":0,"like_count":0,"download_count":0,"editor_note":"","copyright":"","captions":[],"sources":[]},"genre":[41879],"station_tag":[21579,3759,3629,4262,13775,31352,5591,40086,39830,3761,9161,18340,5105,40046,5128,12204,13342,39877,15917,13212,12619,9224,16785,3684,4294,24385,5064,5458,5339,4267,20308,39832,31485,39952,12464,5069,3834,8665,40585,39854,22089,40053,11107,39835,40496,40055,39858,9606,9893,3728,4490,3730,12646,13776,17702,40035,40168,3952,10511,5956,22250,3650,19265,3953,4729,13895,4277,39659,3653,5689,28749,13648,9569,5025,27164,6984,9377,18338,34144,40449,11202,39917,11060,10785,24494,3663,11453,7428,41139,9230,3861,3862,7457,8453,9642,11805,9876,5115,40134,3939,14213,23484,4216,13774,11815,40871,13166,4113,6456,4220,40178,3976,3779,12072,11458,9174,4285,13751,4034,10959,24241,16360,39844,13215,39845,39871,3671,19267,3750,4286,11806,10035,39979,5101,4235,39872,21855,3755,5499,4631,4590,26529,36520,11454,3941,35325,22410,4757,9249,3784,11461,32785,13217,14555],"artist":[15727],"mood":[],"activity":[],"_links":{"self":[{"href":"https:\/\/platodata.io\/wp-json\/wp\/v2\/station\/1773911"}],"collection":[{"href":"https:\/\/platodata.io\/wp-json\/wp\/v2\/station"}],"about":[{"href":"https:\/\/platodata.io\/wp-json\/wp\/v2\/types\/station"}],"author":[{"embeddable":true,"href":"https:\/\/platodata.io\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/platodata.io\/wp-json\/wp\/v2\/media\/1773912"}],"wp:attachment":[{"href":"https:\/\/platodata.io\/wp-json\/wp\/v2\/media?parent=1773911"}],"wp:term":[{"taxonomy":"genre","embeddable":true,"href":"https:\/\/platodata.io\/wp-json\/wp\/v2\/genre?post=1773911"},{"taxonomy":"station_tag","embeddable":true,"href":"https:\/\/platodata.io\/wp-json\/wp\/v2\/station_tag?post=1773911"},{"taxonomy":"artist","embeddable":true,"href":"https:\/\/platodata.io\/wp-json\/wp\/v2\/artist?post=1773911"},{"taxonomy":"mood","embeddable":true,"href":"https:\/\/platodata.io\/wp-json\/wp\/v2\/mood?post=1773911"},{"taxonomy":"activity","embeddable":true,"href":"https:\/\/platodata.io\/wp-json\/wp\/v2\/activity?post=1773911"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}