Apple releases iOS 7.0.6 and 6.1.6 update to fix major SSL security flaw

[mmadhankumar]

An update to iOS 7 is being pushed out by Apple, to fix a major security flaw that left email and other encrypted communication open to hacking if used on a Wi-Fi network. The update, bringing it to iOS version 7.0.6, began to be rolled out on Friday.

The update, according to Apple, 'provides a fix for SSL connection verification'. Apple evidently found the problem to be severe enough not to wait and deliver the fix in iOS 7.1, which is due to arrive soon.

The iOS 7.0.6 update is meant for the following devices: Apple iPhone 4 or higher, fifth-generation Apple iPod touch, and the Apple iPad 2 or higher. The same exploit was fixed for the Apple iPhone 3GS and fourth-generation Apple iPod touch devices as well, which were bumped to iOS 6.1.6.

A Wi-Fi connection is recommended to be used, as the update could vary in size from 16MB to 35MB. The iOS 7.0.6 available to download over the air for iPhone 4 or later, iPod touch (5th generation) or later, iPad 2 or later, running iOS 5 or later. You can alternatively download it via iTunes.

We strongly recommend you back up your iOS device to iCloud or with iTunes before installing any iOS updates.

Apple's rolling out of the iOS 7.0.6 update is roughly three weeks after it rolled out iOS 7.0.5 for some iOS devices in China, which required a network provisioning fix. The iOS 7.0.4 update was slightly more major, and brought bug fixes and improvements, including a fix for an issue that caused FaceTime calls to fail for some users.

The included security update with iOS 7.0.4 also brings a fix for an issue where app and in-app purchases could have been completed with insufficient authorisation.


Apple releases iOS 7.0.6 and 6.1.6 update to fix major SSL security flaw | NDTV Gadgets