Apple releases a fix for the iOS security hole that allowed the iPhone jailbreak



[ad_1]

Photo: Alex Cranz (Gizmodo)

About a week after the Apple iOS 12.4 update was reported, a flaw that allowed the jailbreak (and had already been fixed in a previous update) was released by a fix that fixes the bug after the problem has been reported by security experts.

Apple released on Monday its iOS 12.4.1, which corrects again the vulnerability that was originally fixed in iOS 12.3 but was canceled in July with the release of version 12.4, as previously reported by Motherboard. Apple said in its notice that the fix solves the problem that could have allowed a bad actor "to execute arbitrary code with system privileges".

Jailbreaking certainly has its advantages – for example, giving users more control over their devices for customization and prohibited applications that may not appeal to Apple – but it also poses additional security risks.

In an interview with Motherboard last week, security researcher Jonathan Levin said that "12.4 being the latest version of iOS currently available and the only one that Apple allows for the upgrade, for the next two days (until To 12.4.1), all devices in this version (or all versions 11.x and 12.x below 12.3) are considered a term of imprisonment, which means they are also vulnerable to what is actually an exploit of more than 100 days. "

Security researcher Pwn20wnd, who released a public jailbreak last week for users of the latest version of iOS, received a "tip of the hat" in this week's Apple security ad. A spokesman for Apple confirmed by email that the vulnerability that allowed the jailbreaking had been corrected, according to his notification, but refused to continue the discussion on the problem.

So, if you care about security, be sure to update your iPhone. If you care about jailbreaks, avoid updating like the plague, because you never know how long it will take for you to have another opportunity.

[ad_2]

Source link