“For our customers’ protection, Apple doesn’t disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page,” it said in its release notes Monday.
The update provided several fixes for kernel vulnerabilities, including one that could allow a program to modify a kernel state and may have been actively exploited in the wild. According to Apple, the bug is now patched on all of its platforms.
“Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1,” the company also said.
The updates also patched a vulnerability to WebKit, the engine that powers the Safari browser, that Apple also said could have been actively exploited.
Boris Larin, a security researcher with antivirus software maker Kaspersky, urged users on Monday to update their devices after the Apple fix was issued.
To update your iPhone or iPad, go to the device’s Settings app before going to General and tapping Software Update. It will then prompt the user to install the latest update, which is iOS or iPad 16.6.
To install the update on a Mac, click on System Settings, then click Software Update, and Download and Install. Users will have to follow the prompts before restarting their computer.
The update comes just two days before Apple is scheduled to shut down its My Photo Stream service on July 26.
That service uploads users’ most recent 1,000 photos to iCloud automatically for free and allows users to access the photos on any Apple device owned by the customer for 30 days. It already stopped working on June 26, according to Apple.
“The photos in My Photo Stream are already stored on at least one of your devices, so as long as you have the device with your originals, you won’t lose any photos as part of this process,” Apple says on its support page.