Apple is rolling out iOS 13.5.1 update for its iPhone users. The follow up to the last month’s iOS 13.5 update fixes a critical security flaw which could be exploited for an ‘Unc0ver jailbreak’.
The latest update is rolling out to iPhone 6S and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation. Apple has also rolled out an iPadOS 13.5.1 update with the same fixes.
Apple on its support page confirmed the fix for the Unc0ver jailbreak but did not give out full details. Here are the notes for the latest update:
Kernel
Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation
Impact: An application may be able to execute arbitrary code with kernel privileges
Description: A memory consumption issue was addressed with improved memory handling.
CVE-2020-9859: unc0ver
Unc0ver jailbreak
Late last month, a hacking team discovered a new “jailbreak” tool that allowed iPhone users to download any application, bypassing the so-called Apple’s secure “walled garden”. The team were able to exploit the flaw to run random apps on iPhones that run iOS 11 and above which included the most recent iOS 13.
Security experts were quick to issue a warning to iPhone users over trying to implement the jailbreak as it could have put their devices at risk to several other bugs.
“Jailbreaking your device using this tool is of questionable provenance and downloading it could likely expose users to other malicious activities that could be exploited by an attacker – a risk not worth taking with sensitive personal information at stake. While there are reports that this jailbreak keeps the security mechanisms built into iOS intact, we still advise against jailbreaking an iPhone as it could expose users to unforeseen threats,” said Dick Bussiere, Technical Director at Tenable APAC.
Update
To update your iPhone to the latest iOS 13.5.1, go to Settings. Select General and then tap on the “Software Update.” Eligible iPhones should see the new software update. In case you don’t, check after some time as the roll-out may be in a phased manner.
