Reprinted from TidBITS by permission; reuse governed by Creative Commons
license BY-NC-ND 3.0. TidBITS has offered years of thoughtful commentary
on Apple and Internet topics. For free email subscriptions and access to the
entire TidBITS archive, visit http://www.tidbits.com/


        iOS 12.5.6 Fixes Serious WebKit Vulnerability for Older Devices

   Josh Centers

   Apple has released [1]iOS 12.5.6, a small but important security update
   for older devices to fix a serious WebKit vulnerability also addressed
   by iOS 15.6.1 (see '[2]iOS 15.6.1, iPadOS 15.6.1, and macOS 12.5.1
   Monterey Address Serious Security Vulnerabilities,' 17 August 2022).
   You can install the update from Settings > General > Software Update.
   Because this vulnerability has been exploited in the wild, we recommend
   that you update immediately if you're still using any of the following
   devices:
     * iPhone 5s
     * iPhone 6
     * iPhone 6 Plus
     * iPad Air (1st generation)
     * iPad mini 2iPad mini 3iPod touch (6th generation)

   Apple noted that iOS 12 was not affected by the kernel vulnerability
   fixed in iOS 15.6.1.

References

   1. https://support.apple.com/en-us/HT213428
   2. https://tidbits.com/2022/08/17/ios-15-6-1-ipados-15-6-1-and-macos-12-5-1-monterey-address-serious-security-vulnerabilities/

.