![\"Apple](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2013\/01\/Apple-Security-Update-Header.png\")
<\/p>\n<\/p>\n
Apple has released\u00a0iOS 11.3.1, Safari 11.1, and Security Update 2018-001 (available\u00a0for macOS High Sierra 10.13.4). These software updates fix a handful of vulnerabilities, including macOS High Sierra and iOS 11’s camera app QR code flaw.<\/p>\n
Following are the most important details about each security update, and how or where to\u00a0download the software.<\/p>\n
The primary focus of iOS 11.3.1 and Security Update 2018-001 is\u00a0on the following vulnerabilities:<\/p>\n
Crash Reporter
\n<\/strong>Impact: An application may be able to gain elevated privileges
\nDescription: A memory corruption issue was addressed with improved error handling.
\nCVE-2018-4206: Ian Beer of Google Project Zero<\/p>\nLinkPresentation
\n<\/strong>Impact: Processing a maliciously crafted text message may lead to UI spoofing
\nDescription: A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.
\nCVE-2018-4187: Zhiyang Zeng (@Wester) of Tencent Security Platform Department, Roman Mueller (@faker_)<\/p><\/blockquote>\nWe mentioned\u00a0the name\u00a0Roman Mueller a few\u00a0weeks back, in a story describing his discovery of a\u00a0QR Code vulnerability<\/a> in iOS 11’s camera app. Despite this flaw existing for nearly four\u00a0months, known as CVE-2018-4187, Apple has finally come around to patching the vulnerability in iOS and macOS High Sierra.<\/p>\n
iOS 11.3.1 also includes a few fixes for WebKit vulnerabilities and addresses a\u00a0screen replacement\u00a0issue<\/a>\u00a0in which touch input would become\u00a0unresponsive on some iPhone 8 devices, because they were serviced with non-genuine replacement displays.<\/p>\n
iOS 11.3.1 is available for iPhone 5s and later, iPad Air and later, and iPod touch 6th generation. You can download the update\u00a0over the air by going to Settings<\/strong> > General<\/strong> > Software Update<\/strong>. You can also connect your iOS device to your Mac and let iTunes do the update for you.<\/p>\n
Security Update 2018-001 is available for any Mac running macOS High Sierra 10.13.4. You can download\u00a0Security Update 2018-001\u00a0from the App Store<\/strong> under the Updates tab<\/strong>. You can also choose to download and install macOS High Sierra 10.13.4 and Security Update 2018-001 directly from Apple.com:<\/p>\n
\n
- Download macOS High Sierra 10.13.4 Update<\/a><\/li>\n
- Download macOS High Sierra 10.13.4 Combo Update<\/a><\/li>\n
- Security Update 2018-001 (10.13.4)<\/a><\/li>\n<\/ul>\n
Safari 11.1<\/h3>\n
Safari 11.1 is an update\u00a0available for OS X El Capitan 10.11.6, macOS Sierra 10.12.6, and macOS High Sierra 10.13.4. The update fixes two WebKit vulnerabilities, the same two that are part of iOS 11.3.1, namely:<\/p>\n
WebKit
\n<\/strong>Impact: Processing maliciously crafted web content may lead to arbitrary code execution
\nDescription: A memory corruption issue was addressed with improved state management.
\nCVE-2018-4200: Ivan Fratric of Google Project Zero<\/p>\nImpact: Processing maliciously crafted web content may lead to arbitrary code execution
\nDescription: A memory corruption issue was addressed with improved memory handling.
\nCVE-2018-4204: Richard Zhu (fluorescence) working with Trend Micro’s Zero Day Initiative, found by OSS-Fuzz<\/p><\/blockquote>\nSafari 11.1 is included in Security Update 2018-001 for High Sierra 10.13.4 users, and also available as a separate download for Sierra and El Capitan users from the App Store<\/strong> under the Updates tab<\/strong>.<\/p>\n
As always, make sure to backup your Mac and iOS device before installing any updates.\u00a0After backing up your data,\u00a0install these updates as soon as you can to ensure\u00a0protection from exploits that may leverage these known vulnerabilities. Backing up your Mac is a breeze with Time Machine or Intego Personal Backup<\/a>, and backing up your iOS device can be done easily<\/a> as well.<\/p>\n
In addition to the above mentioned software updates, Apple also updated its Malware Removal Tool (MRT.app) to version 1.32, adding detection for Trojan OSX\/Snake.A<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"
Apple has released\u00a0iOS 11.3.1, Safari 11.1, and Security Update 2018-001 (available\u00a0for macOS High Sierra 10.13.4). These software updates fix a handful of vulnerabilities, including macOS High Sierra and iOS 11’s camera app QR code flaw. Following are the most important details about each security update, and how or where to\u00a0download the software. iOS 11.3.1 and […]<\/p>\n","protected":false},"author":79,"featured_media":55957,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[4117,4120,4021,4015,4616,3748,4123],"class_list":["post-77815","post","type-post","status-publish","format-standard","has-post-thumbnail","category-security-news","tag-cve-2018-4187","tag-ios-11-3-1","tag-macos-high-sierra-10-13-4","tag-qr-code","tag-qr-codes","tag-safari-11-1","tag-security-update-2018-001"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t