APPLE-SA-2018-10-30-6 iTunes 12.9.1

Posted by Apple Product Security on Oct 31APPLE-SA-2018-10-30-6 iTunes 12.9.1

iTunes 12.9.1 is now available and addresses the following:

CoreCrypto
Available for: Windows 7 and later
Impact: An attacker may be able to exploit a weakness in the
Miller-Rabin primality test to incorrectly identify prime numbers
Description: An issue existed in the method for determining prime
numbers. This issue was addressed by using pseudorandom bases for
testing of primes.
CVE-2018-4398: Martin…

Link: http://seclists.org/bugtraq/2018/Oct/51