Lfy@Secsys

A logic issue allowed an application to potentially access user-sensitive data. This issue was resolved with improved checks.

A privacy issue was addressed with improved private data redaction for log entries. An app may be able to access contact info related to notifications in Notification Center.

A path handling issue was addressed with improved validation, which may allow an app to read sensitive location information.

A path handling issue was addressed with improved validation, which may allow a remote attacker to gain unauthorized access to confidential data. The issue is related to incorrect restriction of the path name to a directory with limited access. A shortcut may output sensitive user data without consent.