Apple releases Watch OS 10.3 Updates.
Apple has launched the watchOS 10.3 update, which includes a new Unity Bloom watch face to commemorate Black History month. The update addresses various security issues, such as arbitrary code execution and access to sensitive user data. In addition, the update provides enhancements for Apple Watch Series 4 and later models, such as improved memory handling, constant-time computation in cryptographic functions, and redaction of sensitive information.
To install the update, go to the Apple Watch app on your iPhone, select the ‘General’ section, and click ‘Software Update’. Ensure that your Apple Watch has at least a 50% battery charge, is connected to a charger, and stays near your paired iPhone throughout the installation process.
Here’s what the watchOS 10.3 update includes:
➠ Apple Neural Engine: Apple Watch Series 9 and Apple Watch Ultra 2 now have an update that addresses a security issue. The issue has been resolved by improving memory handling so that an app can no longer execute arbitrary code with kernel privileges.
➠ CoreCrypto: This software update is now accessible for Apple Watch Series 4 and later models. It addresses a timing issue that could allow an attacker to decrypt legacy RSA PKCS#1 v1.5 ciphertexts without requiring the private key. The issue has been fixed by enhancing constant-time computation in cryptographic functions.
➠ Kernel: Apple Watch Series 4 and later can now download an update that fixes a security issue where an app could run arbitrary code with kernel privileges due to poor memory handling.
➠ Mail Search: Available for Apple Watch Series 4 and later, this update fixes an issue that allowed an app to access sensitive user data. The issue has been resolved with improved redaction of sensitive information.
➠ NSSpellChecker: This update resolves a privacy issue that allowed apps to access sensitive user data by improving file handling. It’s available for Apple Watch Series 4 and later models.
➠ Safari: Apple Watch Series 4 and later get an update that fixes a privacy issue. Previously, a user’s private browsing activity was visible in Settings. The update resolves the issue with improved handling of user preferences.
➠ Shortcuts: Available for Apple Watch Series 4 and later, this update fixes an issue where a shortcut could use sensitive data without prompting the user. The issue has been resolved with additional permissions checks.
➠ TCC: Available for Apple Watch Series 4 and later, this update addresses an issue that allowed an app to access user-sensitive data. The issue has been resolved with improved handling of temporary files.
➠ Time Zone: Available for Apple Watch Series 4 and later, this update fixes an issue that allowed an app to view a user’s phone number in system logs. The issue has been resolved with improved redaction of sensitive information.
➠ WebKit: Apple Watch Series 4 and later received an update to address a security vulnerability that could allow malicious websites to identify the user. Access restrictions have been enhanced to resolve the issue.