Apple Security Advisory 2017-02-21-2 - Logic Pro X 10.3.1 is now available and addresses a memory corruption vulnerability.
3eed75a7242320f6481a22179eaefd954c54322d7a2947a90ddbefa68b2f94a4
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
APPLE-SA-2017-02-21-2 Logic Pro X 10.3.1
Logic Pro X 10.3.1 is now available and addresses the following:
Projects
Available for: OS X Yosemite v10.10 or later (64 bit)
Impact: Opening a maliciously crafted GarageBand Project file may
lead to arbitrary code execution
Description: A memory corruption issue was addressed through improved
memory handling.
CVE-2017-2374: Tyler Bohan of Cisco Talos
Installation note:
Logic Pro X may be obtained from the Mac App Store.
Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222
This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org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=hzK7
-----END PGP SIGNATURE-----