• Home
  • News
  • Apple Releases iOS 14.5.1 and iPadOS 14.5.1 – Fixes App Tracking Transparency Bug, WebKit Security Issues

Apple Releases iOS 14.5.1 and iPadOS 14.5.1 – Fixes App Tracking Transparency Bug, WebKit Security Issues

Apple Releases iOS 14.5.1 and iPadOS 14.5.1 – Fixes App Tracking Transparency Bug, WebKit Security Issues

Apple today released iOS 14.5.1 and iPadOS 14.5.1, minor security updates that come just a week after the release of the iOS 14.5 update. An accompanying watchOS 7.4.1 update is available for Apple Watch, as is an iOS 12.5.3 update for older devices that can’t run Apple’s latest and greatest.

iOS 14.5.1 and iPadOS 14.5.1 are available as an over-the-air update on eligible devices, in the Settings app. To access the new software, go to “Settings” -> “General” -> “Software Update.

Apple’s release notes say the update fixes a bug with App Tracking Transparency that may have prevented some users from receiving prompts from apps.

This update fixes an issue with App Tracking Transparency where some users who previously disabled Allow Apps to Request to Track in Settings may not receive prompts from apps after re-enabling it. This update also provides important security updates and is recommended for all users.

Security notes for the release offer more information:

WebKit

Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)

Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Description: A memory corruption issue was addressed with improved state management.

CVE-2021-30665: yangkang (@dnpushme)&zerokeeper&bianliang of 360 ATA

WebKit

Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)

Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Description: An integer overflow was addressed with improved input validation.

CVE-2021-30663: an anonymous researcher

Apple says it aware of a report that these issues may have been actively exploited, so users are advised to upgrade immediately.