Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.misc > #687

iOS SSL is borked; please update

Show all headers | View raw

From the "I keep mine offline for security" department:
Title: You should update your iPhones and iPads to iOS 7.0.6 for a crucial SSL security fix
Author: Josh Ong
Date: Fri, 21 Feb 2014 18:39:04 -0500
Link: http://feedproxy.google.com/~r/TheNextWeb/~3/ktsgT5xIxr0/
Podcast Download URL: http://cdn0.tnwcdn.com/wp-content/blogs.dir/1/files/2014/01/apple-store-520x245.jpg

Apple’s release of iOS 7.0.6[1] might seem like a routine update, but you’ll
definitely want to install it, as it contains an important security fix[2]
that addresses a flaw with SSL encryption.

A support document about the update notes that a validation problem with
Secure Transport could potentially allow attackers “with a privileged network
position to capture or modify data in sessions protected by SSL/TLS.” We’ve
reached to Apple for more information, but in the meantime, you should assume
that the issue is as serious as it sounds.

[image 4][3]

Apple also released an Apple TV update[5] and iOS 6.1.6[6] today to address
the same issue. You can find[7] the iOS updates in iTunes or in the device’s
settings pane. The Apple TV update can be found[8] under Settings > General >
Update Software.

Since SSL is often used to transfer sensitive data like payment information,
personal details and logins, any potential compromise to the authentication
process is a critical vulnerability.

➤ iOS 7.0.6[1] | iOS 6.1.6[9]

Image credit: pauliewoll[10] / Flickr
[image 12][11][image 14][13][image 16][15][image 17]

Links:
[1]: http://support.apple.com/kb/DL1723 (link)
[2]: http://support.apple.com/kb/HT6147 (link)
[3]: http://thenextweb.com/apple/2014/02/22/update-ios-devices-ios-7-0-6-get-crucial-ssl-security-fix/apple-security/ (link)
[4]: http://cdn2.tnwcdn.com/wp-content/blogs.dir/1/files/2014/02/apple-security-730x297.png (image)
[5]: http://support.apple.com/kb/HT6148 (link)
[6]: http://support.apple.com/kb/HT6146 (link)
[7]: http://support.apple.com/kb/ht4623 (link)
[8]: http://support.apple.com/kb/ht5706 (link)
[9]: http://support.apple.com/kb/DL1722 (link)
[10]: http://www.flickr.com/photos/pauliewoll/3133592530 (link)
[11]: http://feeds.feedburner.com/~ff/TheNextWeb?a=ktsgT5xIxr0:o9-vDbTjvng:D7DqB2pKExk (link)
[12]: http://feeds.feedburner.com/~ff/TheNextWeb?i=ktsgT5xIxr0:o9-vDbTjvng:D7DqB2pKExk (image)
[13]: http://feeds.feedburner.com/~ff/TheNextWeb?a=ktsgT5xIxr0:o9-vDbTjvng:yIl2AUoC8zA (link)
[14]: http://feeds.feedburner.com/~ff/TheNextWeb?d=yIl2AUoC8zA (image)
[15]: http://feeds.feedburner.com/~ff/TheNextWeb?a=ktsgT5xIxr0:o9-vDbTjvng:V_sGLiPBpWU (link)
[16]: http://feeds.feedburner.com/~ff/TheNextWeb?i=ktsgT5xIxr0:o9-vDbTjvng:V_sGLiPBpWU (image)
[17]: http://feeds.feedburner.com/~r/TheNextWeb/~4/ktsgT5xIxr0 (image)

Back to comp.misc | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

iOS SSL is borked; please update RS Wood  <rswood@therandymon.com> - 2014-02-22 10:44 +0000
  Re: iOS SSL is borked; please update Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-02-22 17:34 +0000

csiph-web