Apple has released an update to its firmware for iPhone, iPod and iPad portable devices, iOS 4.3.5. The update appears to be a minor one that fixes a vulnerability. You should be able to plug your iPhone, iPad or iPod touch into iTunes now to obtain the update.
The update notice says that it “Fixes a security vulnerability with certificate validation.”
The Verizon version of the iPhone 4 has also been updated, but continues its firmware fork by moving to iOS 4.2.10. This fork is expected to merge with the main version of iOS with the release of iOS 5 this September.
Calling all Scaleup founders! Join the Soonicorn Summit on November 28 in Amsterdam.
Meet with the leaders of Picnic, Miro, Carbon Equity and more during this exclusive event dedicated to Scaleup Founders!
Apple has provided further information about the vulnerability fixed on itssupport site:
Impact: An attacker with a privileged network position may capture or modify data in sessions protected by SSL/TLS
Description: A certificate chain validation issue existed in the handling of X.509 certificates. An attacker with a privileged network position may capture or modify data in sessions protected by SSL/TLS. Other attacks involving X.509 certificate validation may also be possible. This issue is addressed through improved validation of X.509 certificate chains.
Download links for iOS 4.3.5
This is a breaking story, we will be updating continuously. Please refresh.
Story byMatthew Panzarino
Matthew Panzarino was Managing Editor at TNW. He’s no longer with the company, but you can follow him on Twitter.(show all)Matthew Panzarino was Managing Editor at TNW. He’s no longer with the company, but you can follow him onTwitter.
Get the TNW newsletter
Get the most important tech news in your inbox each week.
