Hot on the heels of releasing iOS 7.0.6, Apple has also released iOS 6.1.6 (build number: 10B500) for iPhone 3GS and iPod touch 4G for bug fixes.
According to the release note the update includes a fix for SSL connection verification just like iOS 7.0.6.
The update seems to be available over-the-air. Launch the Settings app, and navigate to General > Software Update to download and install the update.
Jailbreakers are advised to avoid upgrading to iOS 6.1.6, and wait for for the winocm to confirm if it is safe to update to the latest iOS software update.
iOS 6.1.6 fixes the following security issue:
Available for: iPhone 3GS, iPod touch (4th generation)
Impact: An attacker with a privileged network position may capture or modify data in sessions protected by SSL/TLS
Description: Secure Transport failed to validate the authenticity of the connection. This issue was addressed by restoring missing validation steps.
Here are the direct download links for iOS 6.1.6:
- Download iOS firmware file for iPhone
- Download iOS firmware file for iPod touch
winocm has confirmed that iOS 6.1.6 does not fix the vulnerabilities used in p0sixspwn jailbreak, so it is safe, but you may want to wait for them to release a new version of the jailbreak for iOS 6.1.6.
Actually, correction, 6.1.6 doesn’t fix any bugs as far as I know, so, go ahead and update.
— winocm (@winocm) February 21, 2014