Apple has released updates for iOS that fix a very serious security flaw. The flaw threatened the integrity of encrypted connections under certain conditions.
Versions 7.0.6 and 6.1.6, available for download, address a vulnerability that could allow “an attacker with a privileged network position” to “obtain or modify data protected by SSL/TLS,” according to the Cupertino company. This is due to the Secure Transport component failing to validate “the authenticity of the connection.”
In short, apply the update immediately, because there is a risk of a man-in-the-middle attack: The update is between 16MB and 35MB, and can be applied to any iOS 7 portable, but also to iPhone 3GS and fourth-generation iPods running version 6. The next major release, iOS 7.1, is expected in March.
