Interesting: Was SSL certificate validation completely broken in iOS

Interesting: Was SSL certificate validation completely broken in iOS?

From the iOS 7.0.6 changelist:

Impact: An attacker with a privileged network position may capture or modify data in sessions protected by SSL/TLS.

Description: Secure Transport failed to validate the authenticity of the connection. This issue was addressed by restoring missing validation steps.

Wow.