It’s only been 10 days or so since Apple released iOS 4.3.4, and now we’ve get yet another update. No prizes for guessing that this new iteration is called iOS 4.3.5.
While iOS 4.3.4 addressed a PDF security exploit, iOS 4.3.5 “fixes a security vulnerability with certificate validation”.
A support page for the update describes it in a bit more detail:
“Impact: An attacker with a privileged network position may capture or modify data in sessions protected by SSL/TLS
“Description: A certificate chain validation issue existed in the handling of X.509 certificates. An attacker with a privileged network position may capture or modify data in sessions protected by SSL/TLS. Other attacks involving X.509 certificate validation may also be possible. This issue is addressed through improved validation of X.509 certificate chains.”
The iOS 4.3.5 update is available for the iPhone 3GS, iPhone 4, iPad 1 and 2, and third and fourth generation iPod touches.
The next big update for iOS, iOS 5, will bring 200+ new features. It’s expected to land in Septemberish.
via: Mac Rumours