SANS ISC: The iPhone patch is out

• SANS Site Network
  • Current Site
  • SANS Internet Storm Center
  • Other SANS Sites Help
  • Graduate Degree Programs
  • Security Training
  • Security Certification
  • Security Awareness Training
  • Penetration Testing
  • Industrial Control Systems
  • Cyber Defense Foundations
  • DFIR
  • Software Security
  • Government OnSite Training

SANS ISC InfoSec Forums

Just what we have been waiting for - the patch is out.  We have received confirmation that the patch has been released by Apple to fix the SMS vulnerability in the iPhone OS.  It looks like the patch has to be downloaded from Apple iTunes.  From the Installation notes:

" iTunes will automatically check Apple's update server on its weekly
schedule. When an update is detected, it will download it. When the
iPhone is docked, iTunes will present the user with the option to
install the update. We recommend applying the update immediately if
possible. Selecting "don't install" will present the option the next
time you connect your iPhone."

support.apple.com/kb/HT1222

The information indicates that it may take up to a week for the automatic update process to pick up the patch. They indicate that you can obtain the update manually via the "Check for Update" button in iTunes.  For more information see Apple's support site.

Deb Hale Long Lines, LLC