Apple Releases iOS 7.0.6 With Fix for SSL Connection Verification

Apple today released iOS 7.0.6 for iPhone, iPad, and iPod touch, a minor update that includes a fix for SSL connection verification. iOS 7.0.6, which carries a build number of 11b651, is available as an over-the-air-update and weighs in at 35.4MB on an iPhone 5s.

According to an Apple Support Knowledge Base article, the SSL vulnerability allowed a hacker to capture or modify data in supposedly secure sessions.

iOS 7.0.6

Data Security

Available for: iPhone 4 and later, iPod touch (5th generation), iPad 2 and later

Impact: An attacker with a privileged network position may capture or modify data in sessions protected by SSL/TLS

Description: Secure Transport failed to validate the authenticity of the connection. This issue was addressed by restoring missing validation steps.

iOS 7.0.6 comes three weeks after the release of iOS 7.0.5, which was available only for a limited number of devices and more than three months after the release of iOS 7.0.4, a minor bug-fix update.

Apple has also released iOS 6.1.6 (build 10b500) for the iPhone 3GS and fourth-generation iPod touch.