GarageBand for Mac 10.4.8 fixes two vulnerabilities that might enable an app to leak delicate person data and achieve elevated privileges.
UPDATE: The article was up to date with particulars concerning the fixes in GarageBand 10.4.8.
- What’s taking place? Apple has launched GarageBand for macOS 10.4.8, fixing two safety flaws. The corporate advises that each one customers set up this replace.
- Why care? The vulnerabilities may enable an app to leak delicate person data and achieve elevated privileges in the course of the set up of GarageBand.
- What to do? Obtain the replace from the App Retailer.
GarageBand 10.4.8. fixes two vulnerabilities
In response to the official launch notes on Apple’s web site, GarageBand for macOS v10.4.8 “gives essential safety fixes and is really useful for all customers” of the software program. Additioanl data is accessible in one other assist doc describing the safety content material of GarageBand for macOS 10.4.8.
The replace fixes a problem that might enable an app to achieve elevated privileges in the course of the set up of GarageBand. Apple has patched this bug by eradicating the susceptible code. One other difficulty that GarageBand 10.4.8 addresses may allow an app to leak delicate person data. “A attainable out-of-bounds when importing MIDI information was addressed with improved enter validation,” Apple notes.
GarageBand is Apple’s free software program for iOS, iPadOS and macOS for music creation. The Mac model is appropriate with all Macs operating macOS Monterey 12.3 or later.
Find out how to obtain GarageBand for macOS 10.4.8
The automated updates function will set up the most recent GarageBand replace, however which will take days and even weeks. As an alternative of ready, manually replace the app by opening the GarageBand web page on the App Retailer and clicking the Replace button.
Doing so will instantly obtain and set up the app’s most up-to-date model.
Why Apple doesn’t instantly disclose fixes?
Apple not instantly offering specifics concerning the contents of a bug-fix replace normally means the corporate has addressed a zero-day vulnerability which may have been exploited within the wild however doesn’t but need the world to find out about it.
“For the safety of our clients, Apple doesn’t disclose, focus on or affirm safety points till an investigation has occurred and patches or releases are usually accessible,” reads a assist doc detailing Apple’s safety updates.
