12 August 2010

Apple Release iPhone iOS 4.0.2, iPad iOS 3.2.2 [Don't Update!]

Apple has released iOS 4.0.2 for the iPhone. Do not update your device until more details about the firmware are discovered.

It is VERY important that you have your SHSH blobs for 4.0 or 4.0.1 saved. Apple will stop signing 4.0.1 in just a few minutes/hours.

Follow one of these tutorials ASAP:
- Windows
- Mac

It's thought that the 4.0.2 update will patch the PDF vulnerability that comex used to perform his jailbreak.

Planetbeing tweets that Apple hasn't bothered to patch the exploit for the first generation iPhone. Are you serious, Apple's not going to patch the Safari remote execution on the first gen iPhone???!

Update 2:
Apple has posted a support document outlining the security issue that has been fixed.

A stack buffer overflow exists in FreeType's handling of CFF opcodes. Viewing a PDF document with maliciously crafted embedded fonts may allow arbitrary code execution. This issue is addressed through improved bounds checking.

Update 3:
MuscleNerd notes that the baseband hasn't been updated in 4.0.2. iPhone 4 baseband isn't updated in 4.0.2, but ultrasn0w requires JB. 4.0.1 SHSH blobs will protect you from "oops" update


Apple has released iOS 3.2.2 for the iPad which blocks the pdf exploit used for JailbreakMe. The iPhone and iPod touch update was released earlier today.

We recommend not updating to this firmware version and of course making sure that you have your SHSH blobs saved. You can use one of the tutorials below to do this:



Post a Comment