Reprinted from TidBITS by permission; reuse governed by Creative Commons
license BY-NC-ND 3.0. TidBITS has offered years of thoughtful commentary
on Apple and Internet topics. For free email subscriptions and access to the
entire TidBITS archive, visit http://www.tidbits.com/


   iBooks Author 2.4.1

   Agen G. N. Schmitz

   Apple's [1]iBooks Author has been updated to version 2.4.1 with just a
   single security patch. According to this [2]Apple Support document, an
   XML external entity reference issue existed with iBook Author parsing
   that could lead to disclosure of user information if viewing a
   maliciously crafted iBooks Author file. However, this vulnerability has
   been patched with improved parsing. (Free from the [3]Mac App Store,
   419 MB, 10.10+)

References

   1. http://www.apple.com/ibooks-author/
   2. https://support.apple.com/en-us/HT206224
   3. https://itunes.apple.com/us/app/ibooks-author/id490152466?mt=12&at=10l5PW&at=10l5PW

.