[情報] IOS 10.2.1 更新內容

看板iOS作者 (kyle)時間8年前 (2017/01/24 05:30), 8年前編輯推噓55(78推 23噓 15→)
留言116則, 102人參與, 最新討論串1/1
https://support.apple.com/en-us/HT207482 This document describes the security content of iOS 10.2.1. iOS 10.2.1 Released January 23, 2017 Auto Unlock 自動解鎖問題 Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later 影響：當Apple watch離開你的手時仍然會自動解鎖 Impact: Auto Unlock may unlock when Apple Watch is off the user's wrist Description: A logic issue was addressed through improved state management. CVE-2017-2352: Ashley Fernandez of raptAware Pty Ltd Contacts 聯絡人問題 Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later 影響：惡意的聯絡人資料卡可能造成程式中止 Impact: Processing a maliciously crafted contact card may lead to unexpected application termination Description: An input validation issue existed in the parsing of contact cards. This issue was addressed through improved input validation. CVE-2017-2368: Vincent Desmurs (vincedes3) Kernel 內核 Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later 影響：程式利用內核的特殊權限任意執行程式碼 Impact: An application may be able to execute arbitrary code with kernel privileges Description: A buffer overflow issue was addressed through improved memory handling. CVE-2017-2370: Ian Beer of Google Project Zero Kernel 內核 Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later 影響：程式利用內核的特殊權限任意執行程式碼 Impact: An application may be able to execute arbitrary code with kernel privileges Description: A use after free issue was addressed through improved memory management. CVE-2017-2360: Ian Beer of Google Project Zero libarchive 資料庫封存問題 Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later 影響：打開惡意產生的封包可能導致程式碼任意執行 Impact: Unpacking a maliciously crafted archive may lead to arbitrary code execution Description: A buffer overflow issue was addressed through improved memory handling. CVE-2016-8687: Agostino Sarubbo of Gentoo WebKit 問題 Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later 影響：處理惡意網站內容可能導致別的來源的資料流出 Impact: Processing maliciously crafted web content may exfiltrate data cross-origin Description: A prototype access issue was addressed through improved exception handling. CVE-2017-2350: Gareth Heyes of Portswigger Web Security WebKit 問題 Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later 影響：處理惡意網站內容可能導致執行任何程式碼 Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed through improved memory handling. CVE-2017-2354: Neymar of Tencent's Xuanwu Lab (tencent.com) working with Trend Micro's Zero Day Initiative CVE-2017-2362: Ivan Fratric of Google Project Zero CVE-2017-2373: Ivan Fratric of Google Project Zero WebKit 問題 Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later 影響：處理惡意網站內容可能導致執行任何程式碼 Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory initialization issue was addressed through improved memory handling. CVE-2017-2355: Team Pangu and lokihardt at PwnFest 2016 WebKit 問題 Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later 影響：處理惡意網站內容可能導致執行任何程式碼 Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed through improved input validation. CVE-2017-2356: Team Pangu and lokihardt at PwnFest 2016 CVE-2017-2369: Ivan Fratric of Google Project Zero CVE-2017-2366: Kai Kang of Tencent's Xuanwu Lab (tencent.com) WebKit 問題 Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later 影響：處理惡意網站內容可能導致別的來源的資料流出 Impact: Processing maliciously crafted web content may exfiltrate data cross-origin Description: A validation issue existed in the handling of page loading. This issue was addressed through improved logic. CVE-2017-2363: lokihardt of Google Project Zero CVE-2017-2364: lokihardt of Google Project Zero WebKit 問題 Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later 影響：惡意網站可以打開彈出式視窗 Impact: A malicious website can open popups Description: An issue existed in the handling of blocking popups. This was addressed through improved input validation. CVE-2017-2371: lokihardt of Google Project Zero WebKit 問題 Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later 影響：處理惡意網站內容可能導致別的來源的資料流出 Impact: Processing maliciously crafted web content may exfiltrate data cross-origin Description: A validation issue existed in the handling of variable handling. This issue was addressed through improved validation. CVE-2017-2365: lokihardt of Google Project Zero WiFi 問題 Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later 影響：有啟動鎖定的裝置可以在操作下短暫的顯示首頁 Impact: An activation-locked device can be manipulated to briefly present the home screen Description: An issue existed with handling user input that caused a device to present the home screen even when activation locked. This was addressed through improved input validation. CVE-2017-2351: Sriram (@Sri_Hxor) of Primefort Pvt. Ltd., Hemanth Joseph -- ※ 發信站: 批踢踢實業坊(ptt.cc), 來自: 131.215.107.226 ※ 文章網址: https://www.ptt.cc/bbs/iPhone/M.1485207039.A.B60.html
→
01/24 06:22, , 1F
TL;DR
01/24 06:22, 1F
噓
01/24 08:02, , 2F
不要上來丟臉了好嗎 你懂英文嗎
01/24 08:02, 2F
噓
01/24 08:25, , 3F
我英文素質低落
01/24 08:25, 3F
噓
01/24 08:27, , 4F
可以桶他嗎？
01/24 08:27, 4F
噓
01/24 08:27, , 5F
貼這幹嘛
01/24 08:27, 5F
→
01/24 08:31, , 6F
iOS 10.2.1 的更新內容啊......
01/24 08:31, 6F
※ 編輯: kyle5241 (206.117.40.12), 01/24/2017 08:32:25
噓
01/24 08:34, , 7F
貼上來沒翻譯沒解釋 洗文喔
01/24 08:34, 7F
→
01/24 08:34, , 8F
這個版是怎麼回事......
01/24 08:34, 8F
噓
01/24 08:41, , 9F
複製貼上誰都會，內文完全沒有個人意見、看法或說明見
01/24 08:41, 9F
→
01/24 08:41, , 10F
解
01/24 08:41, 10F
→
01/24 08:47, , 11F
板規6
01/24 08:47, 11F
噓
01/24 08:50, , 12F
.
01/24 08:50, 12F
噓
01/24 08:51, , 13F
板龜6c
01/24 08:51, 13F
→
01/24 08:52, , 14F
都用這麼久的ptt了，難道不知道不行複製貼上嗎？
01/24 08:52, 14F
噓
01/24 08:54, , 15F
嫩
01/24 08:54, 15F
噓
01/24 08:58, , 16F
噓你才怎麼了 發文不看版規
01/24 08:58, 16F
推
01/24 08:58, , 17F
快推不然以為我們不懂英文
01/24 08:58, 17F
噓
01/24 08:59, , 18F
喔好棒棒喔你懂英文好厲害
01/24 08:59, 18F
推
01/24 09:00, , 19F
我竟然看得懂......(噗~~~)
01/24 09:00, 19F
噓
01/24 09:02, , 20F
Ctrl C + V 這樣也好意思一篇？
01/24 09:02, 20F
→
01/24 09:03, , 21F
所以鬧鐘修好了沒?（x
01/24 09:03, 21F
噓
01/24 09:18, , 22F
呃...
01/24 09:18, 22F
推
01/24 09:39, , 23F
複製貼上的被噓 反觀只貼張截圖就沒問題 廠廠
01/24 09:39, 23F
噓
01/24 09:53, , 24F
我才想問你是怎麼回事咧....
01/24 09:53, 24F
→
01/24 09:56, , 25F
所以勿擾模式修好了沒？
01/24 09:56, 25F
噓
01/24 09:57, , 26F
什麼叫他媽的驚喜
01/24 09:57, 26F
噓
01/24 09:58, , 27F
87
01/24 09:58, 27F
噓
01/24 10:20, , 28F
欺負我沒讀書喔~ 奇怪捏
01/24 10:20, 28F
推
01/24 10:29, , 29F
推推
01/24 10:29, 29F
推
01/24 10:37, , 30F
好啦幫搬運工補個血
01/24 10:37, 30F
推
01/24 10:39, , 31F
好可憐 幫你QQ 果粉不意外
01/24 10:39, 31F
噓
01/24 10:47, , 32F
你貼這樣我直接去蘋果不是更快
01/24 10:47, 32F
噓
01/24 10:48, , 33F
我傻眼XD
01/24 10:48, 33F
噓
01/24 10:54, , 34F
跟上一篇一樣半斤八兩,反正這邊根本沒版主,貼什麼有差嗎
01/24 10:54, 34F
推
01/24 10:59, , 35F
我覺得有東西看不用去找，不錯啊
01/24 10:59, 35F
推
01/24 11:43, , 36F
為什麼要噓？
01/24 11:43, 36F
噓
01/24 11:47, , 37F
第一篇是情報，第二篇是洗文
01/24 11:47, 37F
推
01/24 12:10, , 38F
這個版素質真的越來越差了
01/24 12:10, 38F
還有 38 則推文
還有 1 段內文
推
01/24 21:06, , 77F
再推一次 前面噓的真的很有趣
01/24 21:06, 77F
推
01/24 21:25, , 78F
讚
01/24 21:25, 78F
推
01/24 21:35, , 79F
補血。上面不知道在噓什麼
01/24 21:35, 79F
推
01/24 21:42, , 80F
幫補血
01/24 21:42, 80F
推
01/24 21:47, , 81F
幫補血，原PO別介意，就是有一堆沒知識的秀下限
01/24 21:47, 81F
推
01/24 22:19, , 82F
補
01/24 22:19, 82F
推
01/24 22:22, , 83F
？噓啥
01/24 22:22, 83F
推
01/24 22:55, , 84F
補
01/24 22:55, 84F
推
01/24 22:58, , 85F
補血
01/24 22:58, 85F
推
01/24 23:13, , 86F
辛苦原PO。
01/24 23:13, 86F
推
01/25 00:15, , 87F
推 前面的噓文很有事
01/25 00:15, 87F
推
01/25 02:19, , 88F
讚
01/25 02:19, 88F
推
01/25 02:36, , 89F
幫補一發
01/25 02:36, 89F
推
01/25 03:09, , 90F
補血
01/25 03:09, 90F
推
01/25 03:32, , 91F
推
01/25 03:32, 91F
推
01/25 03:48, , 92F
推
01/25 03:48, 92F
推
01/25 04:31, , 93F
前面的還好嗎...？這明明很有用啊
01/25 04:31, 93F
推
01/25 05:25, , 94F
一堆玻璃心看不懂亂噓，上一篇怎不噓？助推一個
01/25 05:25, 94F
推
01/25 08:16, , 95F
怪了 國民教育沒教英文嗎？
01/25 08:16, 95F
推
01/25 08:35, , 96F
補血
01/25 08:35, 96F
推
01/25 09:50, , 97F
前面都玻璃心喔 幫補
01/25 09:50, 97F
推
01/25 10:11, , 98F
補血
01/25 10:11, 98F
推
01/25 11:34, , 99F
﴿
01/25 11:34, 99F
推
01/25 12:24, , 100F
推推
01/25 12:24, 100F
推
01/25 12:28, , 101F
補血 推
01/25 12:28, 101F
推
01/25 12:56, , 102F
前面的噓文有什麼事
01/25 12:56, 102F
推
01/25 12:59, , 103F
第一篇那樣才誇張吧
01/25 12:59, 103F
推
01/25 13:55, , 104F
從古至今語言是造成戰爭的重要關鍵XD
01/25 13:55, 104F
推
01/25 14:43, , 105F
笑看那些英文不好亂炮的
01/25 14:43, 105F
推
01/25 15:39, , 106F
前面那些人亂噓在秀下限?自己看不懂就亂噓別人廠廠
01/25 15:39, 106F
推
01/26 18:08, , 107F
補推
01/26 18:08, 107F
推
01/27 22:54, , 108F
覺得很有幫助阿
01/27 22:54, 108F
推
01/28 03:29, , 109F
OuO 好兇
01/28 03:29, 109F
推
01/28 07:57, , 110F
噓文的人，你們還好嗎？
01/28 07:57, 110F
推
01/28 22:59, , 111F
滿好的
01/28 22:59, 111F
推
01/29 18:45, , 112F
這篇充實多了，感謝原po分享
01/29 18:45, 112F
推
01/31 00:25, , 113F
因為前面的看不懂英文 哈哈
01/31 00:25, 113F
推
01/31 13:05, , 114F
一堆看不懂英文在悲憤噓文
01/31 13:05, 114F
推
02/01 02:00, , 115F
蠻好的文啊
02/01 02:00, 115F
推
02/01 12:44, , 116F
英文都看不懂，一定是9.2
02/01 12:44, 116F
‣ 更多 kyle5241 的文章
文章代碼(AID): #1OXdN_jW (iOS)