Apple released iOS 7.0.6 and 6.1.6 to patch a specific SSL/TLS security bug.
I can't find anything official about iOS 5. Does iOS 5 have the same bug?
Please cite your answer.
iOS 5 and Mac OS X 10.8 never had the bug
You can visit gotofail.com from Safari in iOS 5 and check yourself.
Jeffrey Grossman (@Jeffrey903) found that the bug came in with iOS 6, which means that iOS 5 and earlier builds are not affected:
I have confirmed that the SSL vulnerability was introduced in iOS 6.0. It is not present in 5.1.1 and is in 6.0 (22 Feb 2014 at 5:11 PM)
He tested for the bug on a variety of earlier devices and versions:
Not sure about 7.1 (device at office). So far I’ve tested 2.2, 2.2.1, 3.0, 3.1.3, 4.3.5, 5.1.1, 6.0, 6.1.3, 7.0.4, 7.0.6 (22 Feb 2014 at 5:13 PM)
I don’t know if he was the first to spot it, but I’m willing to trust his testing.