Home / mailings APPLE-SA-2017-03-27-1 Pages 6.1, Numbers 4.1,
Posted on 27 March 2017
Apple Security-announce-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
APPLE-SA-2017-03-27-1 Pages 6.1, Numbers 4.1, and Keynote 7.1
for Mac; Pages 3.1, Numbers 3.1, and Keynote 3.1 for iOS are now
available and address the following:
Export
Available for: macOS 10.12 Sierra or later, iOS 10 or later
Impact: The contents of password-protected PDFs exported from iWork
may be exposed
Description: iWork used weak 40-bit RC4 encryption for password-
protected PDF exports. This issue was addressed by changing iWork
export to use AES-128.
CVE-2017-2391: Philipp Eckel of ThoughtWorks
Installation note:
Pages 6.1, Numbers 4.1, and Keynote 7.1 for Mac and Pages 3.1,
Numbers 3.1, and Keynote 3.1 for iOS may be obtained from the
App Store.
Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222
This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
