HACKINTOSH.ORG | Macintosh discussion forums

Macintosh News => Apple News => Topic started by: HCK on January 14, 2024, 04:05:03 pm



Title: Apple Releases Magic Keyboard Firmware Update With Bluetooth Security Fix
Post by: HCK on January 14, 2024, 04:05:03 pm
Apple Releases Magic Keyboard Firmware Update With Bluetooth Security Fix

Apple on Tuesday released Magic Keyboard firmware version 2.0.6 with a fix for a Bluetooth-related security vulnerability (https://github.com/skysafe/reblog/blob/main/cve-2024-0230/README.md).



(https://images.macrumors.com/article-new/2021/08/magic-keyboard-hands-on.jpg)

"An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic," an Apple support document (https://support.apple.com/en-us/HT214050) says.



The firmware update is available for various Magic Keyboard models for the Mac, including the standard Magic Keyboard, Magic Keyboard with Numeric Keypad, Magic Keyboard with Touch ID, and Magic Keyboard with Touch ID and Numeric Keypad.



Magic Keyboard firmware updates are automatically installed while the keyboard is paired to a device running macOS, iOS, iPadOS, or tvOS, with no way to manually apply an update. To check a Magic Keyboard's firmware version on a Mac, open the System Settings app, click Bluetooth, and click on the info button next to your keyboard.



Apple's full security disclosure:
<strong>Bluetooth</strong>



Available for: Magic Keyboard; Magic Keyboard (2021); Magic Keyboard with Numeric Keypad; Magic Keyboard with Touch ID; and Magic Keyboard with Touch ID and Numeric Keypad



Impact: An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic



Description: A session management issue was addressed with improved checks.



CVE-2024-0230: Marc Newlin of SkySafe
This is the first firmware update for some Magic Keyboard models in several years, according to MacRumors contributor Aaron Perris (https://twitter.com/aaronp613).
This article, &quot;Apple Releases Magic Keyboard Firmware Update With Bluetooth Security Fix (https://www.macrumors.com/2024/01/11/apple-releases-magic-keyboard-firmware-update/)&quot; first appeared on MacRumors.com (https://www.macrumors.com)

Discuss this article (https://forums.macrumors.com/threads/apple-releases-magic-keyboard-firmware-update-with-bluetooth-security-fix.2416063/) in our forums



Source: Apple Releases Magic Keyboard Firmware Update With Bluetooth Security Fix (https://www.macrumors.com/2024/01/11/apple-releases-magic-keyboard-firmware-update/)