Apple ha, da qualche ora, reso disponibile la nuova versione di iTunes 12.10.3.

iTunes 12.10.3: le novità presenti nell’aggiornamento

Ecco il changelog ufficiale rilasciato da Apple, per questa versione:

CFNetwork

Available for: Windows 7 and later
Impact: An attacker in a privileged network position may be able to bypass HSTS for a limited number of specific top-level domains previously not in the HSTS preload list
Description: A configuration issue was addressed with additional restrictions.
CVE-2019-8834: Rob Sayre (@sayrer)
Entry added April 4, 2020

CFNetwork Proxies

Available for: Windows 7 and later
Impact: An application may be able to gain elevated privileges
Description: This issue was addressed with improved checks.
CVE-2019-8848: Zhuo Liang of Qihoo 360 Vulcan Team

libexpat

Available for: Windows 7 and later
Impact: Parsing a maliciously crafted XML file may lead to disclosure of user information
Description: This issue was addressed by updating to expat version 2.2.8.
CVE-2019-15903: Joonun Jang

WebKit

Available for: Windows 7 and later
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed with improved memory handling.
CVE-2019-8835: Anonymous working with Trend Micro’s Zero Day Initiative, Mike Zhang of Pangu Team
CVE-2019-8844: William Bowling (@wcbowling)

WebKit

Available for: Windows 7 and later
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: A use after free issue was addressed with improved memory management.
CVE-2019-8846: Marcin Towalski of Cisco Talos

WebKit

Available for: Windows 7 and later
Impact: Visiting a maliciously crafted website may reveal sites a user has visited
Description: An information disclosure issue existed in the handling of the Storage Access API. This issue was addressed with improved logic.
CVE-2019-8898: Michael Kleber of Google
Entry added February 11, 2020, updated February 20, 2020

Per poter aggiornare iTunes all’ultima versione su Windows basta avviare il software “Apple Software Update“ o ricercare l’aggiornamento su Microsoft Store.

iTunes