Adam Chester

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13 **Description** The issue allows an app to modify protected parts of the file system. This was addressed with improved data protection. **Recommendations** For versions prior to 13, update to macOS Ventura 13 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.5 macOS Big Sur versions prior to 11.6.8 Security Update versions prior to 2022-005 Catalina **Description** An access issue was addressed with improvements to the sandbox, allowing an app to potentially access sensitive user information. **Recommendations** For macOS versions prior to 12.5, update to macOS Monterey 12.5. For macOS Big Sur versions prior to 11.6.8, update to macOS Big Sur 11.6.8. For Security Update versions prior to 2022-005 Catalina, apply Security Update 2022-005 Catalina.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 14.0 iPadOS versions prior to 14.0 macOS Catalina versions prior to 10.15.7 tvOS versions prior to 14.0 watchOS versions prior to 7.0 **Description** A logic issue was addressed with improved restrictions, which may have allowed a malicious application to access restricted files. **Recommendations** For iOS versions prior to 14.0, update to iOS 14.0 or later. For iPadOS versions prior to 14.0, update to iPadOS 14.0 or later. For macOS Catalina versions prior to 10.15.7, update to macOS Catalina 10.15.7 or later. For tvOS versions prior to 14.0, update to tvOS 14.0 or later. For watchOS versions prior to 7.0, update to watchOS 7.0 or later.

**Name of the Vulnerable Software and Affected Versions** cups-filters versions 1.0.42 through 1.4.0 Foomatic versions 4.0.x **Description** The issue allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job. This is due to an incomplete blacklist vulnerability in util.c in foomatic-rip. **Recommendations** For cups-filters versions 1.0.42 through 1.4.0, update to version 1.4.0 or later. For Foomatic versions 4.0.x, consider disabling the foomatic-rip function until a patch is available. Restrict access to the util.c module to minimize the risk of exploitation.