Home / mailings

PDF

APPLE-SA-2014-05-16-1 iTunes 11.2.1

Posted on 17 May 2014
Apple Security-announce

--===============1322803020==
Content-type: multipart/signed;
boundary="Apple-Mail=_A9E5B4DC-C7F0-4B87-83EC-29862ECA04E8";
protocol="application/pgp-signature"; micalg=pgp-sha1


--Apple-Mail=_A9E5B4DC-C7F0-4B87-83EC-29862ECA04E8
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
charset=us-ascii

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

APPLE-SA-2014-05-16-1 iTunes 11.2.1

iTunes 11.2.1 is now available and addresses the following:

iTunes
Available for: Mac OS X v10.6.8 or later
Impact: A local user can compromise other local user accounts
Description: Upon each reboot, the permissions for the /Users and
/Users/Shared directories would be set to world-writable, allowing
modification of these directories. This issue was addressed with
improved permission handling. For information on the general content
of iTunes 11.2.1, see http://support.apple.com/kb/TS5434
CVE-ID
CVE-2014-1347


iTunes 11.2.1 may be obtained from:
http://www.apple.com/itunes/download/

The download file is named: iTunes11.2.1.dmg
Its SHA-1 digest is: d7e00140775bd15069ded529388add2ce6f0b538

Information will also be posted to the Apple Security Updates
web site: http://support.apple.com/kb/HT1222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

 

TOP