Apple Releases iOS 11.2.2 With Security Fixes to Address Spectre Vulnerability

[MacRumors]

Apple today released iOS 11.2.2, the ninth official update to the iOS 11 operating system. iOS 11.2.2 comes almost one month after the release of iOS 11.2.1, another minor update, and a month after iOS 11.2, which brought brought Apple Pay Cash, faster 7.5W wireless charging, and a long list of bug fixes.

The iOS 11.2.2 update can be downloaded for free on all eligible devices over-the-air in the Settings app. To access the update, go to Settings --> General --> Software Update.

The iOS 11.2.2 includes further fixes for the "Meltdown" and "Spectre" vulnerabilities that came to light last week. Meltdown and Spectre are serious hardware-based vulnerabilities that take advantage of the speculative execution mechanism of a CPU, allowing hackers to gain access to sensitive information.

While Meltdown was addressed in the iOS 11.2 update, Apple said it would introduce a mitigation for Spectre early this week. There is no hardware fix for Spectre, so Apple is addressing the vulnerability using Safari-based software workarounds. From Apple's security support document:

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Description: iOS 11.2.2 includes security improvements to Safari and WebKit to mitigate the effects of Spectre (CVE-2017-5753 and CVE-2017-5715).

For more on iOS 11 and its updates, make sure to check out our iOS 11 roundup.

Article Link: Apple Releases iOS 11.2.2 With Security Fixes to Address Spectre Vulnerability

 

[Lobwedgephil]

Big security update.

 

[ediks]

Hope it doesnt throttle down my 8

 

[0003939]

Huge update. Highly recommend updating this.

 

[zorinlynx]

What about devices left behind on iOS 10 like the iPhone 5 and 5C? Are they going to remain insecure?

 

[modufour]

My update is 65,2mb...

 

[matt_and_187_like_this]

As important as this is, definitely going to wait on reviews on this one. You be the testers for me, guys.

 

[jav6454]

I'll let the beta tester go first with this one.

 

[thatJohann]

Anyone think it includes any bug fixes or improvements too? Or is it just 11.2.1 + security patch?

 

[matram]

I'll let the beta tester go first with this one.

Beta testing is already on 11.2.5 and I assume the patch is already in there. No new download for my iPhone with a developer profile anyhow.

 

[sbailey4]

Anyone think it includes any bug fixes or improvements too? Or is it just 11.2.1 + security patch?

Well most likely there will be other under the hood fixes/changes. The builds are 15C153 to 15C202. Not that means anything specifically, but most likely there were other changes other than just the Safari patch for Spectre would be my guess.

 

[H3LL5P4WN]

Beta testing is already on 11.2.5 and I assume the patch is already in there. No new download for my iPhone with a developer profile anyhow.

I was wondering the same thing, since our betas were out before the news broke.

 

[sbailey4]

Wonder if this also addresses the Month 13 issue. Anyone on mac maybe test this and see?

 

[pnoyblazed]

so does the latest 11.2.5 beta have this fix?

 

[0003939]

I'll let the beta tester go first with this one.

What are you talking about? iOS 11.2.2 is a public release. iOS 11.2.5 is the latest beta.

 

[justperry]

Beta testing is already on 11.2.5 and I assume the patch is already in there. No new download for my iPhone with a developer profile anyhow.

The Spectre patch is most likely not in the last beta.
Meltdown yes, as it has been in normal releases as well.

 

[0003939]

Anyone think it includes any bug fixes or improvements too? Or is it just 11.2.1 + security patch?

Just security patch most likely.

 

[Shanghaichica]

Amazing how quickly Apple pushed this out after it broke last week.

 

[justperry]

Wonder if this also addresses the Month 13 issue. Anyone on mac maybe test this and see?

This is about iOS, but I'll answer, it was fixed in one of the last few beta's.

so does the latest 11.2.5 beta have this fix?

Spectre likely not yet.

Amazing how quickly Apple pushed this out after it broke last week.

It was known about for (much) longer, like months ago.

 

[Delorean2006]

Geekbench went up after the update
(iPhone 8 Plus)
10070 - 11.2.1
10505 - 11.2.2

If that counts for anything

 

[maka344]

Geekbench went up after the update
(iPhone 8 Plus)
10070 - 11.2.1
10505 - 11.2.2

If that counts for anything

Probably just a restart.

 

[Delorean2006]

Probably just a restart.

actually hard restarted my phone last night and my multicore score was actually 10020...

 

[dampfnudel]

Geekbench went up after the update
(iPhone 8 Plus)
10070 - 11.2.1
10505 - 11.2.2

If that counts for anything

Try it a couple more times to see if the results are similar.

On another note, I just got an X and will be opening the box shortly. I just read online that some iPhone X owners are experiencing overheating when running certain apps/multiple apps. Anyone experiencing issues like that or something else?

 

[204353]

As important as this is, definitely going to wait on reviews on this one. You be the testers for me, guys.

I'll let the beta tester go first with this one.

This is literally just a security update for Spectre. Don’t be so dramatic.

 

[RecentlyConverted]

What about devices left behind on iOS 10 like the iPhone 5 and 5C? Are they going to remain insecure?

I hope for owners of older devices there is a software update similar to 6.1.6 ( being that it was released after iOS 7) that fixes KRACK and these other vulnerabilities.

I really believe Apple should be providing security patches to all their devices for a min of 5 years after they stop selling those devices.

( iPad mini for example discontinued June 2015 ( though available in retail outlets much longer ) supported until September 2016)