A new version of iOS has been released, though it’s still not yet the highly anticipated iOS 5. The new version of iOS is version 4.3.5, with the exception of iPhone 4 CDMA (Verizon) version which upgraded to version 4.2.10, and was released barely a week after the release of iOS 4.3.4/iOS 4.2.9 which patched a vulnerability on PDF viewing that been used a jailbreak exploit.
iOS 4.3.5 is a relatively minor update though, which fixes another vulnerability found. The vulnerability is related to certification chain validation issue. According to HT4824, the issue is described as:
Impact: An attacker with a privileged network position may capture or modify data in sessions protected by SSL/TLS
Description: A certificate chain validation issue existed in the handling of X.509 certificates. An attacker with a privileged network position may capture or modify data in sessions protected by SSL/TLS. Other attacks involving X.509 certificate validation may also be possible. This issue is addressed through improved validation of X.509 certificate chains.
The update is available through iTunes.
Direct Download Links to IPSW of iOS 4.3.5
iPad (WiFi): iPad1,1_4.3.5_8L1_Restore.ipsw
iPad 2 (WiFi): iPad2,1_4.3.5_8L1_Restore.ipsw
iPad 2 (3G-GSM): iPad2,2_4.3.5_8L1_Restore.ipsw
iPad 2 (3G-CDMA): iPad2,3_4.3.5_8L1_Restore.ipsw
iPhone 3GS: iPhone2,1_4.3.5_8L1_Restore.ipsw
iPhone 4 (GSM): iPhone3,1_4.3.5_8L1_Restore.ipsw
iPhone 4 (CDMA – ver 4.2.10): iPhone3,3_4.2.10_8E600_Restore.ipsw
iPod touch 3rd Gen: iPod3,1_4.3.5_8L1_Restore.ipsw
iPod touch 4th Gen: iPod4,1_4.3.5_8L1_Restore.ipsw
Update: iOS 5