Apple today released iPhone 2.1 Software Update.
iPhone version 2.1 contains many bug fixes and improvements, including the following:
• decrease in call set-up failures and call drops
• significantly improved battery life for most users
• dramatically reduced time to backup to iTunes
• improved email reliability, notably fetching email fro POP and Exchange accounts
• faster installation of 3rd part applications
• fixed bugs causing hangs and crashes if you have lots of 3rd party applications
• improved performance in text messaging
• faster loading and searching of contacts
• improved accuracy of the 3G signal strength display
• repeat alert up to two additional times for incoming text messages
• optiuon to wipe data after ten failed passcode attempts
• Genius playlist creation
About the security content of iPhone v2.1:
• Application Sandbox
CVE-ID: CVE-2008-3631
Available for: iPhone v2.0 through v2.0.2
Impact: An application may be able to read another application’s files
Description: The Application Sandbox does not properly enforce access restrictions between third-party applications. This may allow a third-party application to read files in another third-party application’s sandbox, and lead to the disclosure of sensitive information. This update addresses the issue by enforcing the proper access restrictions between application sandboxes. Credit to Nicolas Seriot of Sen:te and Bryce Cogswell for reporting this issue. This issue does not affect iPhone versions prior to v2.0.
• CoreGraphics
CVE-ID: CVE-2008-1806, CVE-2008-1807, CVE-2008-1808
Available for: iPhone v1.0 through v2.0.2
Impact: Multiple vulnerabilities in FreeType v2.3.5
Description: Multiple vulnerabilities exist in FreeType v2.3.5, the most serious of which may lead to arbitrary code execution when accessing maliciously crafted font data. This update addresses the issue by incorporating the security fixes from version 2.3.6 of FreeType. Further information is available via the FreeType site at http://www.freetype.org/
• mDNSResponder
CVE-ID: CVE-2008-1447
Available for: iPhone v1.0 through v2.0.2
Impact: mDNSResponder is susceptible to DNS cache poisoning and may return forged information
Description: mDNSResponder provides translation between host names and IP addresses for applications that use its unicast DNS resolution API. A weakness in the DNS protocol may allow a remote attacker to perform DNS cache poisoning attacks. As a result, applications that rely on mDNSResponder for DNS may receive forged information. This update addresses the issue by implementing source port and transaction ID randomization to improve resilience against cache poisoning attacks. Credit to Dan Kaminsky of IOActive for reporting this issue.
• Networking
CVE-ID: CVE-2008-3612
Available for: iPhone v2.0 through v2.0.2
Impact: Predictable TCP initial sequence numbers generation may lead to TCP spoofing or session hijacking
Description: TCP initial sequence numbers are sequentially generated. Predictable initial sequence numbers may allow a remote attacker to create a spoofed TCP connection or insert data into an existing TCP connection. This update addresses the issue by generating random TCP initial sequence numbers. This issue does not affect iPhone versions prior to v2.0.
• Passcode Lock
CVE-ID: CVE-2008-3633
Available for: iPhone v2.0 through v2.0.2
Impact: An unauthorized user may bypass the Passcode Lock and launch iPhone applications
Description: The Passcode Lock feature is designed to prevent applications from being launched unless the correct passcode is entered. An implementation issue in the handling of emergency calls allows users with physical access to an iPhone to launch an application without the passcode by double clicking the home button in emergency call. This update addresses the issue through improved handling of emergency calls. Credit to Matthew Yohe of The University of Iowa’s Department of Electrical and Computer Engineering for reporting this issue. This issue does not affect iPhone versions prior to v2.0.
• WebKit
CVE-ID: CVE-2008-3632
Available for: iPhone v1.0 through v2.0.2
Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution
Description: A use-after-free issue exists in WebKit’s handling of CSS import statements. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue through improved handling of document references.
The update is available via iTunes. Simply choose your iPhone in the “Devices” list and click the “Update” button in the “Summary” tab.
Oh wait…what the…?
I now have full signal with 3G…I guess it was switching over, which is why I had no service, but it took a minute or two. Weird.
Hmm…I hope its accurate because my 3G signal is much much better then before the upgrade.
I used to have 0-1 bars, now I have a full 4 bars.
EDGE seems the same, I had 2 bars before the update and I have 2 now as well.
Snappiness Abounds.
i’ll be happy if the only thing this update does is improve my battery life…the other features/enhancements are a bonus as my 3G iPhone has been great except for battery life.
So far so good. Backup went from over 2 hours to less than 5 minutes
Download this morning and installed (went smoothly)
” width=”19″ height=”19″ alt=”smile” style=”border:0;” />
” width=”19″ height=”19″ alt=”smile” style=”border:0;” />
-First thing notice on the screen after start up said (phone activated)
-I had the same problem now there is “No Service” on 3G mode… ;( BUT all you have to do is turn off the phone and turn it back on, NOW I got full 3G bar which I only had one before.. Excellent!! (Restart the phone seem quicker than ever)
-Contact pop up right always in any apps that you need to pull it out. (snippier!!)
-Tried Yahoo’s OneConnect, keyboard pop up after away whenever you need it, warrning window seem pop up smoothly (better animation), I assume it will do the same on other apps.
-When unlock the screen by sliding the bar, work much responsive than before
-open and close apps seem very stable and smooth transition.
-New 3G icons
-already open more than 5 different apps included some big one, no crash so far and still very stable… rather than the phone running low in memory
-When open Safari first time and typing the URLs, it used to stuck for few seconds for the phone to pull out your history, now it take one sec… (snippier)
-tried photo editing programs, took pictures and editing, rotate and effect… and save it back to album… seem much faster
Over, everything seem run very smooth… feel like I got a new faster processor inside my phone. I hope everyone got the same result and now we can really enjoy the power of 3G iPhone. I Love You Apple… (sure you have more goodies to come) Cheers!
“can someone please confirm the snappiness of this update?”
Confirmed, its SNAPPY!
One more thing… ladies and gens
Just tried backing up my phone and WOW!! it cut down the backup time by… I don’t know how much… I got about 1GB of data on my phone, about less than 5 mins verse half an hour before
“What a wonderful World..”
Snappy contacts!!!!
Funny, I just wiped everything out and only installed the apps that I paid for and synced my music and video and contacts, which fixed my issue of the phone crashing on me and not starting. Now they fixed it so I can have a crap ton of 3rd party apps again… yay!!
P.S. Where is my copy/paste??
Contact access is much faster (I have nearly 3,000 thanks to my company’s phone list.) This is what I was hoping for but it still isn’t quite as snappy as I would like.
I have four bars at home when I used to have 1 to 2. Am waiting to see if that pays off in fewer dropped calls.
Isnt part of the fun at MDN that we CAN give any ID we want?
In fact, the ID thing is one of the best things about this site.
I am sick of having to register to post on some lousy website.
At least MDN has a sense of proportion – they know that they are just another website, albeit one of my favourites.
At least MDN hasnt got a stick up their collective ass, like most sites. (Macrumors is a bit precious, for example)
BTW, if you do copy an ID, its supposed to be amusing or witty.
Dont forget that one mans wit is another mans witless….
another change that they made:
when you get a txt message if you have your phone on lock mode it only says “new text message” rather than the person’s name.
Update did wonders for my phone–better connection strength and speedier performance.
I just downloaded the update and it finally fixed an audio issue with my Plaintronics bluetooth earpiece where I was unable to hear my voicemail through the earpiece. I could place and receive calls but I was unable to hear a voicemail message.
Thanks Apple!
@steve516 who wrote – “..cesspool where gnats like you are..”
I think you must be a Microsoft Windows user here by accident – Mac users rearely if ever throw around such childish language.
You also need to know that the post with your monicker you refer to was NOT by me. I don’t need to stoop to that level thank you.
Grow up.
Had a bad call earlier…I could hear the other person, but they couldn’t here me…even though the phone showed 3 bars. hmm.
Mike,
Isn’t that arrow the play button that displays when the iPod is running on the phone?
Once again Apple delivers!!! even when my iphone was buggy i still loved it, now its better than ever!!!
Super SNNNNAPPEEEEEE!
@MXNT4.1
Nike promise Nike+ for the iPhone and iPod touch. The iPod touch and iPhone are so similar in external and internal design. Why are they giving them different features? We should have Nike+, shake to shuffle and any other feature. iPhone is better and should all the features. The iPod touch should do everything the iPhone does but make phone call on ATT&T;.
“repeat alert up to two additional times for incoming text messages”
THANK GOD! I can’t tell you how many text messages I’ve discovered on my iPhone 4 – 6 hours after they arrived there because I didn’t hear the one little chirp.
Now if only Calendar would add support for clickable URLs attached to events, like desktop iCal does. That would eliminate one of the major places I find myself wanting copy and paste
It is awesome:
Snappier
” width=”19″ height=”19″ alt=”wink” style=”border:0;” />
Stable
Full 3G bars
Switches between EDGE smoothly
Apps install in seconds
Updating apps are fast
backup is really fast
Genius button is there
Notice that album info is under the song
It remembers the progress bar for the song screen when you tap it
Fewer dropped calls
Awesome
Did I miss anything
@M.X.N.T.4.1
Nike promised Nike+ for the iPod Touch and iPhone. The iPhone is nothing but a iPod Touch with direct phone capabilities. Why are they trying to form different platforms. They play the same games and they should share all features minus the phone.