CVE-2017-2498

Apple iOS 10.3.2 fixes CVE-2017-2498, a certificate trust policy issue in the Security component that allowed bypass of untrusted certificate validation prior to 10.3.2. Affected: iOS prior to 10.3.2. Root cause: certificate handling in the Security module permitted bypass of intended access rest...