The Citrix XenMobile team has send out the following announcement regarding the new XenMobile Update:
A security bulletin was issued on October 29th for XenMobile, specifically for the MDX Toolkit and SDK. This fix is specific to iOS 8.
What is this release all about?
iOS 8 introduced a change in how the operating system manages data caching for apps. The MDX Toolkit 9.0.4 fix disables data caching on the disk for MDX wrapped apps avoiding the potential for data leakage. The Worx App Suite (WorxMail, WorxWeb, WorxNotes, ShareFile, WorxEdit) requires re-wrapping.
Impact for app developers!
If you are developing your own applications or obtain from a 3rd party, ensure that the iOS application is using NSURLCache as a caching mechanism in the context of URL loading system (NSURLConnection), additionally your application requires the new Worx App SDK and MDX Toolkit to address this vulnerability.
The change in the SDK and MDX Toolkit disables disk caching using the NSURLCache mechanism.
This updated version of the Toolkit and SDK can be downloaded here
For further information reference check out CTX200260
The following sources have been used to create this post:
Citrix XenMobile Partner communication
Esther has been working in different roles and functions as an IT consultant ever since she finished her Masters degree in Computer Science in 1997. She has worked as a web developer, database administrator, and server administrator until she discovered how Server-Based Computing ( SBC ) combined servers, desktops, and user experience in one solution. Esther has been specializing in virtualization solutions such as SBC, VDI, application, and server virtualization for over eight years now and is currently working as a Senior Consultant at PepperByte, where she designs and implements Citrix® solutions for both small-business and large-enterprise infrastructures scaling from 100 to 15,000 users.
In january 2014 her first book Citrix XenApp 6.5 Expert Cookbook was published by Packt Publishing.
Esther is awarded as a Citrix Technology Professional (CTP) from 2015 - 2017.
Esther is awarded as a Microsoft Most Valuable Professional (MVP) in 2017.
Esther is a Citrix Certified Expert – Virtualization (CCE-V), Citrix Certified Professional – Mobility (CCP-M), Citrix Certified Professional – Networking (CCP-N) and RES Software Certified Professional (RCP).