iOS 8.1 arrived with big improvements, but few noticed that it also contained several security fixes. Even fewer users noticed that a new Apple TV firmware was released alongside the update, which also contains patches for a few recently discovered vulnerabilities.
With the release of these two updates, Apple has fixed a total of seven security vulnerabilities that were discovered in recent weeks in both operating systems. iOS 8.1 had five bugs, while Apple TV 7.0.1 only had two.
The official release notes for iOS 8.1 describe the content of the update, with Apple including a link to its website, where security updates.
Regarding the Apple TV, a vulnerability was discovered by Mike Ryan from iSEC Partners and is described as follows: "Unencrypted connections were allowed by Human Interface Device-class Bluetooth Low Energy accessories. If a device was connected to such an accessory, an attacker could bypass it to establish a connection. Apple addressed the issue by denying the use of unencrypted HID connections."
Another issue involved SSL 3.0, where the bug allowed an attacker to force the use of SSL 3.0, even when the server supports a better version of TLS, blocking TLS 1.0 connections and higher connection attempts.
