Information Madness

Apple has released a payload of two patches for its iOS devices. The patch iOS 4.0.2 is targeted at iPhone and iPod touch whereas iOS 3.2.2 will fix problems with the iPad.

Apple support site says these patches are available for iOS 2.0 through 4.0.1 for iPhone 3G and later, iOS 2.1 through 4.0 for iPod touch (2nd generation) and later. These patches a security hole in PDF viewer which may allow arbitrary code execution.

The pair of vulnerabilities were first uncovered by hackers, who used the combination of the two to enable jailbreaking of iOS devices via the Web. Security experts quickly cautioned that a maliciously crafted PDF could theoretically use the hole for other, more nefarious purposes. Apple investigated the problem and said last week that it would soon offer a fix for the holes.

Both updates are available via iTunes upon connecting their respective iOS devices, but update size will vary by device model. iOS 4.0.2 is compatible with any iPhone 3G, iPhone 3GS, iPhone 4, or second- and third-generation iPod touch running iOS 4.0 or later; iOS 3.2.2 is compatible with iPads running iOS 3.2 or later.