The Cupertino giant revisits old firmware to patch security flaw

Feb 22, 2014 10:46 GMT  ·  By

In the process of rolling out its newest security patch for iDevice owners, Apple has released a revised iOS 6 with a fix for SSL connection verification.

KB article HT6146 states that iOS 6.1.6 is available for iPhone 3GS and iPod touch (4th generation).

“An attacker with a privileged network position may capture or modify data in sessions protected by SSL/TLS,” Apple says, adding that “Secure Transport failed to validate the authenticity of the connection.”

Apple addressed the flaw by restoring missing validation steps, according to the documentation.

iOS 6.1.6 was a highly unlikely release, as Apple has stopped supplying updates for owners of these old-generation devices. In other words, consider this patch important, and install it as soon as possible. The update is available through iTunes and over the air (OTA), according to Apple.