Samuel Axon
Today, Apple started rolling out iOS 14.4.2, iPadOS 14.4.2 and watchOS 7.3.3, and the company issued a warning to users to update as soon as possible. Like iOS / iPadOS 14.4.1 before, this update addresses a security hole.
In addition, Apple has released a similar security update – 12.5.2 – for older devices, such as the iPhone 5S or 6, that cannot run iOS 14.
The release notes for iOS 14.4.2 and iPadOS 14.4.2 are minimal, simply stating:
This update provides important security updates and is recommended for all users.
For information about the security content of Apple software updates, visit: https://support.apple.com/kb/HT201222
It is this security link that contains the actual information. Here’s what Apple’s security support page says:
WebKit
Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later and iPod touch (7th generation)
Impact: Processing maliciously crafted web content may lead to cross-site scripting. Apple is aware of a report that this problem may have been actively exploited.
Description: This problem was solved through improvements in the management of the useful life of objects.
CVE-2021-1879: Clement Lecigne of Google Threat Analysis Group and Billy Leonard of Google Threat Analysis Group
The same goes for the watchOS update. All four software updates (iOS 14.4.2, iPadOs 14.4.2, iOS 12.5.2 and watchOS 7.3.3) should now be available to all supported device users now. This is the second update since the release of iOS / iPadOS 14.4 and watchOS 7.3 in late January.
The update immediately prior to this was also an urgent fix for a security vulnerability.
IOS 14.4 was a feature update, not just a security update or bug fix, but the features added were relatively modest. They included the camera’s ability to scan QR codes smaller than before, an option to manually classify Bluetooth devices to ensure desired behavior and notifications to let users know if the camera “cannot be verified as a genuine new camera from Apple. “