Apple Releases iOS 11.2.2 With Security Fixes to Address Spectre Vulnerability

[McScooby]

Maybe it's more "don't update on the go", since your charging access may be hindered or you will stay out of service for quite some time? Maybe you have this "50% battery" now, but maybe you're skiing and cold temp will get to it and it won't update successfully?

They limited it via recognizing 3G/WiFi but maybe agenda behind it is much more complex.

& they don’t allow an iCloud backup to be run from another iOS device on personal hotspot, some message about not ideal network conditions despite films & music streaming just fine!

 

[Dangermen]

What about devices left behind on iOS 10 like the iPhone 5 and 5C? Are they going to remain insecure?

Right, those were EOL once there were no more updates. You should consider your devices boat anchors even if you think they are viable. They are susceptible to lots of exploits Apple is never going to fix.

 

[deanthedev]

Right, those were EOL once there were no more updates. You should consider your devices boat anchors even if you think they are viable. They are susceptible to lots of exploits Apple is never going to fix.

Wrong. Although rare, Apple has issued updates for previous versions of iOS. I think this is a big enough issue that we’ll see an update.

 

[chucker23n1]

Wrong. Although rare, Apple has issued updates for previous versions of iOS. I think this is a big enough issue that we’ll see an update.

It’s extremely rare with iOS. Don’t get your hopes up.

 

[deanthedev]

Certain ARM architectures (used by Apple) are also vulnerable to out of order execution vulnerabilities in as detailed in Meltdown paper.

Spectre affects pretty much everyone. Meltdown only affects the A75 ARM core.

There’s a reason for this, and it basically comes down to the fact older ARM cores are too simple to be affected.

 

[RecentlyConverted]

Wrong. Although rare, Apple has issued updates for previous versions of iOS. I think this is a big enough issue that we’ll see an update.

I am aware of 6.1.6, can you let me know of the others (might be before my time with Apple)?

 

[heretiq]

On another note, I just got an X and will be opening the box shortly. I just read online that some iPhone X owners are experiencing overheating when running certain apps/multiple apps. Anyone experiencing issues like that or something else?

I’m not seeing any of those issues on my X.

 

[rhaezorblue]

iPhone 8 Plus 64gb here

Rebooted phone and got the following Geekbench scores

cpu scores before patch (single, multi)

Pass 1
4190
10104

Pass 2
4177
10150



cpu scores after patch (single, multi)

Pass 1
4243
10308

Pass 2
4240
10295

 

[MrGuder]

So does this mean I'm being forced into updating from 9.3.5 to this?

 

[deanthedev]

I am aware of 6.1.6, can you let me know of the others (might be before my time with Apple)?

That’s the one I’m thinking of. I’d say Meltdown/Spectre would be at least as severe (if not moreso) than the exploits patched in 6.1.6. Which I think is why Apple might fix iOS 10 as well. I don’t know if any others.

 

[MH01]

Already did in the other thread and at 65%.

https://forums.macrumors.com/thread...-diagnostic-test.2098675/page-5#post-25662170

Oops......

That is dated 2nd Jan 2018, sure that is yours ?

 

[macTW]

What about devices left behind on iOS 10 like the iPhone 5 and 5C? Are they going to remain insecure?

They’re still insecure... but they are for other security reasons as well.

I wouldn’t expect apple to release a security patch for an older OS, because they have no reason to, but it would be nice if they did.

 

[dampfnudel]

So does this mean I'm being forced into updating from 9.3.5 to this?

At the moment, there doesn’t seem to be any sign that Apple will release a 9.3.6 update to address this issue for those stuck on iOS 9 (4s owners for example). Same story so far for iPhone 5/5c owners stuck with iOS 10.

 

[brendu]

So does this mean I'm being forced into updating from 9.3.5 to this?

If you want to patch this vulnerability it looks that way, yes.

 

[u65403]

iPad Pro 12.9 second gen

And after update

 

[sbailey4]

This is about iOS, but I'll answer, it was fixed in one of the last few beta's.



Spectre likely not yet.



It was known about for (much) longer, like months ago.

No I meant in iOS not macOS. I realize macOS was already fixed in a beta. iOS has the same issue but you need a mac to see it (in console I think it was) Sorry.

 

[RecentlyConverted]

This behavior still drives me nuts. Some people don't have access to Wi-Fi all the time.

If Apple wants to display a scary warning before you download a cellular update OTA, that's fine. But if I can send hundreds of MBs over the air to sync my Photos Library or stream videos all day long, I should be able to install a security update without having to wait hours or days to connect to decent Wi-Fi or risk using some questionable public hotspot to (ironically) download a security update.

I agree, give a nice big warning about eating loads of mobile data, but give us grown ups the option to download iOS updates (and WatchOS updates) over mobile data networks!

 

[deanthedev]

That is dated 2nd Jan 2018, sure that is yours ?

Quite sure. Unlike the MR trolls, I don’t run around lying about devices I own or tests I run. I don’t need to lie.

Here’s my test after I upgraded. My battery hit 50%. Going to run another test right now and post it. Just for you.

 

[Wags]

iPhone 8 Plus 64gb here

Rebooted phone and got the following Geekbench scores

cpu scores before patch (single, multi)

Pass 1
4190
10104

Pass 2
4177
10150



cpu scores after patch (single, multi)

Pass 1
4243
10308

Pass 2
4240
10295

Hmmm, maybe Apple starting to tweak their battery management as to not throttle as much.

 

[sbailey4]

Now this sucks. Have iOS 10.3.3 on my iPhone 7 plus , very useful update, though don't want throttling.

Me too!

Stay on 10.3.3

It's unclear to me in real world end user (i.e. not server farm) how much these two hacks are real security threats.

Guys, the throttling was introduced in 10.2.1 so you already have it on 10.3.3. If that is all that's stopping you just know that. But some prefer 10.3.3 over 11 anyway so base your decisions on that.

[Edit] The 7 series phones got the throttling in 11.2 not 10.2.1. Only the 6,6s,SE series got it in 10.2.1. Sorry about that.

 

[Tech198]

If you want to patch this vulnerability it looks that way, yes.

...and if you don't, stay with what ya got

 

[deanthedev]

iPad Pro 12.9 second gen

View attachment 745918

And after update

View attachment 745919

Interesting. You also got NaN for some results, just like I did. Those must be the parts that don’t run properly after the fix.

The rest of your scores seem to be only slightly slower, which lines up with Apples claim of 2.5% slower in JetStream.

 

[MH01]

Guys, the throttling was introduced in 10.2.1 so you already have it on 10.3.3. If that is all that's stopping you just know that. But some prefer 10.3.3 over 11 anyway so base your decisions on that.

Not on the iPhone 7, it was 11.2
[doublepost=1515447617][/doublepost]

Quite sure. Unlike the MR trolls, I don’t run around lying about devices I own or tests I run. I don’t need to lie.

Here’s my test after I upgraded. My battery hit 50%. Going to run another test right now and post it. Just for you.

Why thank you. Given a result on the 2nd of Jan is not relevant to this iOS patch.... you latest one is. Now it's clear . Your phone is running well , thumbs up

 

[Baymowe335]

Geekbench went up after the update
(iPhone 8 Plus)
10070 - 11.2.1
10505 - 11.2.2

If that counts for anything

This isn't a surprise for anyone who actually read and understands the power management software Apple explained.

 

[kesennnnn]

I'll let the beta tester go first with this one.

Beta testers don’t get the regular updates lol, hence the beta. Also if I read correctly the latest developers beta now hasnt addresses Spectre. Maybe Should take it off lol