Apple releases iOS 4.3.5 and iOS 4.2.10 security fix for iPhone, iPad, iPod touch

Apple has released iOS 4.3.5 for iPad, iPod touch, and GSM /AT&T iPhone 4 and iPhone 3GS, and iOS 4.2.10 for Verizon iPhone, which fixes a security vulnerability with certificate validation.

Impact: An attacker with a privileged network position may capture or modify data in sessions protected by SSL/TLS Description: A certificate chain validation issue existed in the handling of X.509 certificates. An attacker with a privileged network position may capture or modify data in sessions protected by SSL/TLS. Other attacks involving X.509 certificate validation may also be possible. This issue is addressed through improved validation of X.509 certificate chains. CVE-ID

This latest release arrives just 10 days after Apple plugged the jailbreakme PDF exploit with the release of iOS 4.3.4.

Plug into iTunes and check for updates to get it. As always, if you’re Jailbroken already, stay away or you’ll lose your Jailbreak.

[Apple knowledge base article (opens in new tab)]


UK editor at iMore, mobile technology lover and air conditioning design engineer.

  • i'm doing it right now. i was on 4.3.3 and i found both redsn0w & jailbreakme to be unstable on my 3GS. might have just been a fluke, but i'm going w/ team pure...just for a while, anyway. ;)
  • Good for u. Noone cares.
  • What's the download size for iPhone 4 GSM ?
  • 666.6mb
  • thanks !!!
  • So very frustrating that VZW iPhones are not on 4.3.x and is excluded from the iCloud features that every other current iOS has access to.
  • You understand the concept of consequences of actions, right? Buy from a second rate cell company with non-standard tech..then complain about it?
  • That's an utter line of bovine processed feed grains.
    You are a troll. And dang if I didn't fall into feeding you.
  • What cloud features are in 4.3.X??? I'm not aware of any. This is not an 5.X update.
  • There is iCloud on iOS 4.3? :O
  • Sticking with my jailbroken 4.3.3 via JailbreakMe. Haven't had one single problem, and I've pretty much got the phone exactly where I always wanted it. Finally.
  • Well said
  • Boy, I can't wait until I'm on 4.2.838 on Verizon and everybody else is on 5.0!
  • has anyone else had issues loading this on a non jb iPhone 4?? I'm getting a 2002 unknown error
  • It keeps happening to me as well i dont want to do a restore. Its agitating me!
  • Staying with 4.2.1 for now, so I can tether without AT&T busting me (unless people have been lying about that — but I've never received an SMS from them). Haven't yet decided what I'll do when 5.0 comes out... but I sure don't want to remain behind forever.
  • I'm not sure if I should 'upgrade' since the last 'upgrade' sucked so badly. the GPS won't lock anymore, my wifi range has been about cut in half, and this thing locks up more than it ever now. Apple can either get with the program or I'm gone. I have to wonder which monkeys they left at the helm.
  • Geez, Apple.
    Have they ever heard of using Delta updates?
    Yes, apparently it will be in iOS 5.0, but I will believe it when I see it in action.
  • Wow u are the one with the small brain because CDMA technology is old and dead. It is unable to to provide the speeds of a gsm company so check ur facts 1st verizon will have to turn to gsm to provide true LTE services so yea. Reading is a skill.
  • Heh, this just highlights that Apple always rush out releases to fix the Jailbreak wholes under the disguise of actual security updates... as a week later and the actually security updates comes :) cheers for the infos!
  • 4.3.5 Can Be pwned into DFU Mode and DownGraded to 4.1.0 to Be Jail Broken Using Red Snow 18
  • After Downgrading Use Tiny umbrella Or Recboot to Get out of your 1015 error Which it will always Give you Install Cydia And your Good to Go