14 DAY TRIAL // iOS 4.1, the first major software update to the operating system powering the iPhone, iPod touch, and iPad, has been released to the public packing various enhancements and fixes, among which a large number of security bugs are patched.
Some 24 holes have been plugged, most of which are located in the WebKit browser engine.
“A use after free issue exists in WebKit's handling of ‘foreignObject’ elements in SVG documents,” Apple reveals in the description of a bug affecting iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later.
“Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution,” the documentation reads.
“This issue is addressed through additional validation of SVG documents. Credit to wushi of team509, working with TippingPoint's Zero Day Initiative for reporting this issue,” Apple reveals.
FaceTime is just starting to make a name for itself in the smartphone world and it already has a flaw, according to Aaron Sigel of vtty.com who discovered that an attacker in a privileged network position may be able to redirect FaceTime calls.
Available for iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later, the issue is described as follows:
“An issue in the handling of invalid certificates may allow an attacker in a privileged network position to redirect FaceTime calls.”
This issue is addressed through improved handling of certificates. Credit to Aaron Sigel of vtty.com for reporting this issue.”
For the full list of security issues patched in iOS 4.1, visit Apple here.
In addition to the security patches, the iOS 4.1 Software Update contains major new additions and improvements.
Game Center is one of them. It comes with abilities like send and receive friend requests; iInvite friends to multi-player games over the Internet; play multi-player games by auto-matching with other players; view Leaderboards and Achievements; discover new games from friends.
High dynamic range (HDR) photos is another new feature, albeit only on iPhone 4. Support for TV show rentals on iTunes is also enabled, while the ability to upload HD videos to YouTube and MobileMe is also limited to capable devices.
Additional support for AVRCP-supported accessories,including next & previous track control, has been added.
Finally, FaceTime calling can now be enabled directly from Favorites, Apple said.
Bug fixes, include the iPhone 4 proximity sensor performance, iPhone 3G performance, Nike+iPod fixes, and Bluetooth improvements, Apple said.
Users can either download the iOS 4.1 IPSW update / restore file by connecting their device to iTunes, or by manually grabbing the firmware bundle using the link below.