security update this weekend

nedd

http://news.bbc.co.uk/2/hi/technology/8177755.stm

There is going to be an emergency update this weekend. Will this be like a regular firmware update? I'm jailbroken so I doubt I will be updating.

wayne040576

nedd wrote: »

http://news.bbc.co.uk/2/hi/technology/8177755.stm

There is going to be an emergency update this weekend. Will this be like a regular firmware update? I'm jailbroken so I doubt I will be updating.

If it's an emergency security fix you should probably update.

bluemachaveli

I would imagine it is too early for 3.1 to be released. A new beta only came out a few days ago.

Version 3.0.1? If so it should still be ok for a jailbreak. I would think the update will just address the SMS bug!

It will be like a regular update via iTunes.

wayne040576

bluemachavel wrote: »

I would imagine it is too early for 3.1 to be released. A new beta only came out a few days ago.

Version 3.0.1? If so it should still be ok for a jailbreak. I would think the update will just address the SMS bug!

It will be like a regular update via iTunes.

Yeah, that's all it would be. This is a fairly serious bug that they need to patch quickly. Now that its details have been made public there'll be a few people looking for ways to exploit it.

cojomo2

is it safe to assume that you should not update if you depend on ultrasn0w?

wayne040576

This is the danger with using jailbreak. You can always delay regular updates until a jailbreak is available but when something like this arrives you have to decide if it's more important to have the jailbreak features or a phone without a security hole.

bluemachaveli

3.0.1 is out!

For a change they have given us more info than "Bug Fixes"

Summary
This document describes the security content of iPhone OS 3.0.1.

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website.

For information about the Apple Product Security PGP Key, see "How to use the Apple Product Security PGP Key."

Where possible, CVE IDs are used to reference the vulnerabilities for further information.

To learn about other Security Updates, see "Apple Security Updates."

Products Affected
iPhone, Product Security
iPhone OS 3.0.1
CoreTelephony

CVE-ID: CVE-2009-2204

Available for: iPhone OS 1.0 through iPhone OS 3.0

Impact: Receiving a maliciously crafted SMS message may lead to an unexpected service interruption or arbitrary code execution

Description: A memory corruption issue exists in the decoding of SMS messages. Receiving a maliciously crafted SMS message may lead to an unexpected service interruption or arbitrary code execution. This update addresses the issue through improved error handling. Credit to Charlie Miller of Independent Security Evaluators, and Collin Mulliner of Fraunhofer SIT for reporting this issue.

Important: Information about products not manufactured by Apple is provided for information purposes only and does not constitute Apple’s recommendation or endorsement. Please contact the vendor for additional information.

No word yet on if it can be Jailbroken or not!

anoble66

Dev team have said if you upgrade to 3.0.1 the jailbreak will be lost

Red Alert

Will it disable the carrier settings download which I use to enable tethering? (Thank you O2 for being intransigent on this one :rolleyes:)

bluemachaveli

Red Alert wrote: »

Will it disable the carrier settings download which I use to enable tethering? (Thank you O2 for being intransigent on this one :rolleyes:)

Just updated and re-jailbroke. Carrier settings are fine. I don't think we need to worry about this one until 3.1, this is just a quick fix for the SMS bug!

Mitch Buchannon

Just did the update and lost everything.. my apps , music, mail settings etc etc... PAIN IN THE ASS !!:mad:

Stephen

Surely if you just sync with itunes again they'll all be back?

tripswitch

Anyone able to help with this problem?

Followed the devteam's instructions about allowing iTunes to update to 3.0.1 (on a previously jailbroken/unlocked US iPhone)

But after the 3.0.1 update, redsn0w is sticking on the "waiting for reboot" screen. I tried restarting redsn0w etc but can't get past that point.
The iPhone will restart if I disconnect and reconnect, but naturally it doesn't recognise the O2 sim as being valid because it's at 3.0.1 (and it wants an AT&T sim to authenticate).

Any ideas?

EDIT:

It's OK, I ran redsn0w on a PC instead of a Mac and it worked first time.

jd83

I just jailbreaked with redsn0w and unlocked with ultrasn0w for 3gs 3.0.1. Working fine so far. Took a while as I grabbed those files ibss and ibec. Do you need these to upgrade to the next update or did i just waste an hour getting them

cojomo2

so is it ok to update if i am depending on ultrasn0w?

thanks

jd83

well i did and it worked fine. The only difference for me was I had to use redsn0w instead of purplerain like i had first used. So i just factory reset the phone and updated to 3.0.1. Then i jailbreaked with redsnow you will also need version 3.0 downloaded. Then I unlocked with ultrasn0w and its now working fine with 3.0.1

You might need to have an o2 simcard as once i had factory reset the phone it wouldnt let me activate it with a vodafone one


link: http://www.redmondpie.com/jailbreak-iphone-3.0.1-firmware-with-redsn0w/

Jax Teller

updated to 3.0.1 jailbroke it using redsn0w then unlocked with ultrasn0w . working on meteor fine

CivilEx

Did anyone that updated have any issues with Cydia Apps? Specifically:-

- SBSettings
- Backgrounder
- PdaNet
- 3G Unrestrictor
- Insomnia
- YourTube

Cheers!

jd83

CivilEx wrote: »

Did anyone that updated have any issues with Cydia Apps? Specifically:-

- SBSettings
- Backgrounder
- PdaNet
- 3G Unrestrictor
- Insomnia
- YourTube

Cheers!

I only use 3 of those apps and so far they are working fine. I did get some type of a warning when i installed backgrounder but its working fine

Purple Gorilla

Anyone who hasn't updated yet because they can't be bothered to re-jailbreak their phones, be patient. Saurik has said there there is a way to apply the update without having to re-jailbreak

jd83

The only reason i didnt wait was so i could capture those files that you supposed to need for future updates. Will you definetly need them or did i just waste my time ?

Purple Gorilla

I captured them but can't remember where I saved them :P