APPLE-SA-2011-07-25-1 iOS 4.3.5 Software Update

Monty Solomon · 2011-08-04T21:36:27+00:00

APPLE-SA-2011-07-25-1 iOS 4.3.5 Software UpdateiOS 4.3.5 Software Update is now available and addresses thefollowing:Data SecurityAvailable for:iOS 3.0 through 4.3.4 for iPhone 3GS and iPhone 4 (GSM),iOS 3.1 through 4.3.4 for iPod touch (3rd generation) and later,iOS 3.2 through 4.3.4 for iPadImpact: An attacker with a privileged network position may captureor modify data in sessions protected by SSL/TLSDescription: A certificate chain validation issue existed in thehandling of X.509 certificates. An attacker with a privileged networkposition may capture or modify data in sessions protected by SSL/TLS.Other attacks involving X.509 certificate validation may also bepossible. This issue is addressed through improved validation ofX.509 certificate chains.CVE-IDCVE-2011-0228 : Gregor Kopf of Recurity Labs on behalf of BSI, andPaul Kehrer of Trustwave's SpiderLabsInstallation note:This update is only available through iTunes, and will not appearin your computer's Software Update application, or in the AppleDownloads site. Make sure you have an Internet connection and haveinstalled the latest version of iTunes from iTunes will automatically check Apple's update server on its weeklyschedule. When an update is detected, it will download it. Whenthe iPhone, iPod touch or iPad is docked, iTunes will present theuser with the option to install the update. We recommend applyingthe update immediately if possible. Selecting Don't Install willpresent the option the next time you connect your iPhone, iPod touch,or iPad.The automatic update process may take up to a week depending on theday that iTunes checks for updates. You may manually obtain theupdate via the Check for Updates button within iTunes. After doingthis, the update can be applied when your iPhone, iPod touch, or iPadis docked to your computer.To check that the iPhone, iPod touch, or iPad has been updated:* Navigate to Settings* Select General* Select About. The version after applying this update will be"4.3.5...