Katie Marsal
Targeting vulnerabilities that could be exploited through malicious websites, version 1.0.1 (build 1C25) of the handset's software updates Safari's JavaScript handling to prevent cross-site scripting and a buffer overflow in the Perl code library.
The latter scripting flaw was heavily publicized last week when consultants from Independent Security Evaluators used it to effectively hijack the phone's core functions.
Also addressed by software patch were three separate issues within the company's WebCore and WebKit platforms that form the backbone of Safari. Two of the fixes guard against false XML requests and frame rendering glitches that could be used to control the phone or crash the browser through memory errors.
Like recent iPod updates, the iPhone fix is downloadable solely through iTunes and can be installed the next time the phone is docked or detected by the jukebox software.
In a brief set of release notes, Apple said the iPhone software update also includes several "bug fixes." The company recommends that users install the patch "immediately."
Charles Martin
Wesley Hilliard
Oliver Haslam
Marko Zivkovic
Amber Neely
25 Comments
Apple has tackled concerns about potentially dangerous security holes in its mobile version of Safari with the first revision to the iPhone's code.
Tuesday marked the release of Apple's first ever fix for the iPhone since the product's June 29th release and mends vulnerabilities relating to visiting malicious websites.
First Post?! - Maybe...
Any word on whether this patch just deals with Safari? What about the little idiosyncrasies of the other apps on the phone and the wishlists that have been reported on or dreamed about. What is it's status, anyone?
Cool deal
Anybody else have to restore their iPhone in order to install the update?
It killed my ringtones. As soon as it's done installing, I'll let you know if I can use Jailbreak again.
Anybody else have to restore their iPhone in order to install the update?
It killed my ringtones. As soon as it's done installing, I'll let you know if I can use Jailbreak again.
Yup. It gave me an error when trying to update normally when it was extracting or verifying, and now I'm restoring my iPhone as I type. It scared me at first because it was giving an unknown error when trying to restore, but it's working now...
flawless install.
and 1.0.1 1C25 is so much snappier than 1.0 (had to say it!!)
lol.
no new functionality but bug fixes are good before Aug 2!
I really hope a lot of cool stuff comes with Leopard for the Apple TV and iPhone.