Apple patches more than 100 flaws in iOS 9

Apple has issued a security update patching more than 100 flaws in its iOS 9 operating system, including multiple kernel bugs.

The extensive list of fixes includes patches for kernel flaws that could allow for privileged code execution, as well as the launch of denial-of-service attacks on targeted TCP connections.

The list of fixes includes more than 30 flaws in WebKit, the web browser engine used by Safari and the App Store among other iOS and OS X applications. These include vulnerabilities that could allow attackers to trigger arbitrary code execution upon visiting a malicious website.

Other vulnerabilities addressed with the patches include a bug in Apple Pay that could have potentially allowed terminals to retrieve recent transaction information and a bug in App Store that could enable denial of service in an enterprise-signed application via a malicious ITMS link.

Apple has subsequently responded to reports of iPhone owners who have had their handsets repaired by a third party encountering a mysterious error which bricks the device after it is upgraded to iOS 9.

Users encountering this 'error 53' have reported having no recourse but to pay for a replacement iPhone, and no way of recovering the data stored on the device.

According to Apple's statement, this error is associated with the device detecting whether a fingerprint sensor has been replaced, which leads to an error as a security precaution. Third-party replacement of screens and other components may also trigger this error.

The company suggested that customers encountering the error contact Apple Support.

Image courtesy of William Hook under CC