Apple fixes 49 security bugs in iOS 9.1; kills jailbreak

[InfoSec News <alerts () infosecnews org>]

http://www.zdnet.com/article/apple-fixes-security-bugs-in-ios-9-1-kills-jailbreak/

By Zack Whittaker
Zero Day
ZDNet.com
October 21, 2015

Apple has fixed 49 separate security vulnerabilities in iOS 9.1.

The company, which released the software on Wednesday for iPhones and 
iPads, detailed the flaws in its updated security documentation.

Two of the fixes were credited to PanguTeam, a well-known jailbreak team 
based out of China, which earlier this month released the first jailbreak 
tool for devices running iOS 9.

Jailbreaking (similar to "rooting" for Android phones) allows a user to 
gain access to more features on a iPhone or iPad, but it comes with 
additional security risks. It's not illegal but it will void a user's 
warranty.

Apple said a heap based buffer overflow issue could allow a malicious app 
"to elevate privileges," similar to how jailbreaking works.Another flaw 
allows a malicious app to exploit a memory corruption issue to "execute 
arbitrary code with kernel privileges," which Apple said it fixed this 
flaw with improved memory handling.

[...]



--
Evident.io - Continuous Cloud Security for AWS.
Identify and mitigate risks in 5 minutes or less.
Sign up for a free trial @ https://evident.io/