Ask HN: Is iOS 15 vulnerable to the zero-day BLASTPASS?

If it is, why is there no security update yet? Can we expect one soon?

Looks like iOS 15.7.9 is out with a fix for CVE-2023-41064 https://support.apple.com/en-us/HT213913

From my experience, Apple prioritize recent iOS versions when issuing security fixes. Affected legacy iOS versions will get them too, just later. The previous security update landed on my old iPhone one or two weeks later than on the newer one.

Thank you, I didn't know that! Seems pretty slow IMHO, hope the vulnerability isn't widely available to attackers for now.

Reply on news.ycombinator.com