Extra notes about numerous safety patches had been added to iOS 16.3 shortly after it was faraway from Apple’s signed working system. That is an uncommon transfer for the corporate.
A Twitter consumer named @aaronp613, who’s the client expertise lead for a jailbreak web site referred to as Havoc Repo, mentioned the brand new Change safety observeHe discovered a brand new CVE added to the collection of replace notes on February twentieth.
A patch widespread to many of those up to date notes was the patch for CVE-2023-23524 shared by David Benjamin of Google Chrome. This allowed for denial of service as a result of dealing with of maliciously crafted certificates, and was addressed with improved enter validation.
As Aaron identified, Apple simply eliminated iOS 16.3 from signed updates. This implies the consumer can not downgrade from his iOS 16.3.1. Shortly after this de-signing, Apple added patch notes to his web site.
This will simply be a coincidence. Apple routinely stops signing updates as quickly as a brand new model is launched. These notes could have been withheld to verify the patch really labored earlier than making iOS 16.3.1 the one signed model.
With the discharge of iOS 16.3.1 and different latest working system updates, customers not have to fret about these safety points. They’re patched and reviewed within the wild, so customers ought to safely replace to the most recent working methods to make sure they’re protected against these recognized safety points.