Apple releases iOS and iPadOS 14.4.2 with a critical Webkit security fix

Apple has released a minor update to iOS and iPadOS, bringing the version number to 14.4.2. The release notes are as basic as can be:

This update provides important security updates and is recommended for all users.

As for what those security updates are, Apple’s security support site says it’s a Webkit security fix, which means that any app that loads content from the web could be impacted:

WebKit

• Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)
• Impact: Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been actively exploited.
• Description: This issue was addressed by improved management of object lifetimes.
• CVE-2021-1879: Clement Lecigne of Google Threat Analysis Group and Billy Leonard of Google Threat Analysis Group

In other words, it’s an important security fix and you should probably download and apply it right away. Apple is still actively working on iOS 14.5, but don’t wait for that release to protect yourself from a serious web vulnerability.

For older devices that do not support iOS 13 or iOS 14, Apple has released iOS (and iPadOS) 12.5.2 with the same fix. That will apply to the iPhone 5s, iPhone 6, iPod Touch (6th gen), iPad mini 2 and 3, and the original iPad Air.

How to update to iOS 14.4.2

To update your iPhone or iPad, open the Settings app, then tap General, then Software Update and follow the instructions. If you don’t see the update right away, be patient, as it can take a little while to roll out everywhere.