IOS7.1.1出了～ - iOS

因為SSL又有洞了
所以可以的話建議盡快更新

http://seclists.org/bugtraq/2014/Apr/135

7.0.x JB 的機器，就等等看會不會有人做 patch 吧

Security - Secure Transport
Available for: iPhone 4 and later,
iPod touch (5th generation) and later, iPad 2 and later
Impact: An attacker with a privileged network position may capture
data or change the operations performed in sessions protected by SSL
Description: In a 'triple handshake' attack, it was possible for an
attacker to establish two connections which had the same encryption
keys and handshake, insert the attacker's data in one connection, and
renegotiate so that the connections may be forwarded to each other.
To prevent attacks based on this scenario, Secure Transport was
changed so that, by default, a renegotiation must present the same
server certificate as was presented in the original connection.
CVE-ID
CVE-2014-1295 : Antoine Delignat-Lavaud, Karthikeyan Bhargavan and
Alfredo Pironti of Prosecco at Inria Paris

※ 引述《danielpupu20 (哇書豪啦)》之銘言：
: IOS7.1.1剛剛開放更新了！！！
: iPhone5 OTA共18.8MB
: iPad air cellular版 21.3 MB
: This update contains improvement,bug fixes and security updates,including:
: Further improvement to Touch ID fingerprint recognition
: Fixes a bug that could impact keyboard responsiveness
: Fixes an issue when using Bluetooth keyboards with VoiceOver enabled
: 希望有改善耗電問題
: 來更新去

--

--