Apple fixes JailbreakMe flaws

Apple has plugged the security holes used by the JailbreakMe app to allow non-approved apps to run on iPhones, iPads and iPod Touch devices.

The flaws could have allowed hackers to compromise iPhone devices as well as permitting the use of non-approved services, security experts had warned.

Now the Cupertino giant has fixed the vulnerabilities via a new iOS operating system update, as noted in an Apple advisory.

The updated versions are 4.0.2 for iPhone and iPod Touch, and 3.2.2 for iPad.

"Although we haven't yet seen malicious attacks via the JailbreakMe vulnerability, we recommend to install the patch right away," said Mikko Hypponen, chief research officer at F-Secure.

"This does mean that users who have jailbroken their devices and prefer to keep it that way will have to face the increased likelihood of malicious attacks through this vulnerability," Hyponnen warned in a blog post.

It has subsequently emerged that the creator of the jailbreak exploit has made the source code for breaking through the vulnerabilities public.

Going under the name of comex, the JailbreakMe 2.0 developer revealed on Twitter he had posted the code online.

The Jailbreakme app had garnered some support from parts of the tech community who wanted to use non-approved apps on Apple's devices.