Apple today released iPhone 2.1 Software Update.
iPhone version 2.1 contains many bug fixes and improvements, including the following:
• decrease in call set-up failures and call drops
• significantly improved battery life for most users
• dramatically reduced time to backup to iTunes
• improved email reliability, notably fetching email fro POP and Exchange accounts
• faster installation of 3rd part applications
• fixed bugs causing hangs and crashes if you have lots of 3rd party applications
• improved performance in text messaging
• faster loading and searching of contacts
• improved accuracy of the 3G signal strength display
• repeat alert up to two additional times for incoming text messages
• optiuon to wipe data after ten failed passcode attempts
• Genius playlist creation
About the security content of iPhone v2.1:
• Application Sandbox
CVE-ID: CVE-2008-3631
Available for: iPhone v2.0 through v2.0.2
Impact: An application may be able to read another application’s files
Description: The Application Sandbox does not properly enforce access restrictions between third-party applications. This may allow a third-party application to read files in another third-party application’s sandbox, and lead to the disclosure of sensitive information. This update addresses the issue by enforcing the proper access restrictions between application sandboxes. Credit to Nicolas Seriot of Sen:te and Bryce Cogswell for reporting this issue. This issue does not affect iPhone versions prior to v2.0.
• CoreGraphics
CVE-ID: CVE-2008-1806, CVE-2008-1807, CVE-2008-1808
Available for: iPhone v1.0 through v2.0.2
Impact: Multiple vulnerabilities in FreeType v2.3.5
Description: Multiple vulnerabilities exist in FreeType v2.3.5, the most serious of which may lead to arbitrary code execution when accessing maliciously crafted font data. This update addresses the issue by incorporating the security fixes from version 2.3.6 of FreeType. Further information is available via the FreeType site at http://www.freetype.org/
• mDNSResponder
CVE-ID: CVE-2008-1447
Available for: iPhone v1.0 through v2.0.2
Impact: mDNSResponder is susceptible to DNS cache poisoning and may return forged information
Description: mDNSResponder provides translation between host names and IP addresses for applications that use its unicast DNS resolution API. A weakness in the DNS protocol may allow a remote attacker to perform DNS cache poisoning attacks. As a result, applications that rely on mDNSResponder for DNS may receive forged information. This update addresses the issue by implementing source port and transaction ID randomization to improve resilience against cache poisoning attacks. Credit to Dan Kaminsky of IOActive for reporting this issue.
• Networking
CVE-ID: CVE-2008-3612
Available for: iPhone v2.0 through v2.0.2
Impact: Predictable TCP initial sequence numbers generation may lead to TCP spoofing or session hijacking
Description: TCP initial sequence numbers are sequentially generated. Predictable initial sequence numbers may allow a remote attacker to create a spoofed TCP connection or insert data into an existing TCP connection. This update addresses the issue by generating random TCP initial sequence numbers. This issue does not affect iPhone versions prior to v2.0.
• Passcode Lock
CVE-ID: CVE-2008-3633
Available for: iPhone v2.0 through v2.0.2
Impact: An unauthorized user may bypass the Passcode Lock and launch iPhone applications
Description: The Passcode Lock feature is designed to prevent applications from being launched unless the correct passcode is entered. An implementation issue in the handling of emergency calls allows users with physical access to an iPhone to launch an application without the passcode by double clicking the home button in emergency call. This update addresses the issue through improved handling of emergency calls. Credit to Matthew Yohe of The University of Iowa’s Department of Electrical and Computer Engineering for reporting this issue. This issue does not affect iPhone versions prior to v2.0.
• WebKit
CVE-ID: CVE-2008-3632
Available for: iPhone v1.0 through v2.0.2
Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution
Description: A use-after-free issue exists in WebKit’s handling of CSS import statements. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue through improved handling of document references.
The update is available via iTunes. Simply choose your iPhone in the “Devices” list and click the “Update” button in the “Summary” tab.
thank you
ooh, it’s a big one…
Installing….
Installing now before the servers get bent out of shape…
…scanthedefenses..scanthedefences..scanthedefences…
Its snappier and it BLENDS!
what happened to the promised Nike+ more lies. Why do I have to my other iPod to run?
speaker is louder, and it reactivates the phone, so much for those with hacked phones, genius is really good, backup is much faster, and I now have full bars at my house where I only had one or two. Can’t wait to see if battery life improves. So far an essestial and badly needed update. Apps don’t seem to crash so far. I am very happy, now this is the phone I was promised.
Upgrade just completed and I will report back – at least now iTunes has a section on the iPhone display that says what is being taken up for Apps now
that MaLvado, such a kidder.
” width=”19″ height=”19″ alt=”grin” style=”border:0;” />
updating
(she richer than me…)
What? No mention of GPS improvements….
🙁
The touch update included a small blue arrow head that points toward the battery. It is not touch sensitive and I can’t figure out what it is for. Is the arrow included in the iphone update?
Shake to shuffle?
Look forward to reading everyone’s responses and reactions to the update.
Well my phone got stuck in a sync loop so I had to turn off automatic syncing. But now it’s backing up and seems to be going fine.
@JMO
Just tried to shake while playing a song as well as my other playlists and do not see anything changing on them.
Sorry
Only one ‘snappier’ comment so far? (maybe another got up there before this posted, but still…)
What gives?
This board is falling down on the job!
IT”S SNAPPIER!!!!!!!!!!!!!!
Here’s another pointless post to waste everyone’s time.
I am going to download the update now…
Let me know how yours goes…
I will then report back with how mine went…
Can’t people think before they produce this garbage?
If you don’t have something useful to say keep quiet til you do!!!
Sorry if it offends, but please.
I am officially happy.
I’m running it now, and I have to say so far it has impressed me. FAST contacts! FAST App Installs! FAST Backups!
Thank you .
i am stuck in backup mode
It has addressed my biggest gripe: slowness of contacts. They are much, dare I say it, SNAPPIER!
Still no MMS? Copy and Paste? Minor drawbacks to a product I love using but how long will we have to wait for these simple fixes?
here, add this to the gripe pile…
downloading and installing now
will report back when complete
—
how does this waste your time? because you CHOOSE to read it? please. choose something else to do with your time when you willingly come on a site and scroll down to read the comments. it’s a free planet, let’s learn to act like rational adults.
@ whatever, who promised you nike+ on the iPhone? Jobs didn’t.
First time that managed to pinpoint my location while inside the house (near window)
Most of my apps seem to work
but once again Apple decided to add a lot of new keyboards but NO Greek keyboard although it is on sale from August in Greece like in all of the other countries…
Shame on u apple……. (a lot worse names for apple have been traveling via radiowaves in the past few hours….)
OK, this is old.
I want my TV update…..
@steve516
Fuck off.
Rational nuf?
Barney : “What’s that?”
Moe : “It’s a deep-fryer…I picked it up from the Navy. That baby can flash-fry a buffalo in under 40 seconds.”
Homer : “40 seconds?…Awwww, but I want it now!”
MW: history
Seems to be working much better!!!!!!!!! New 3G/Edge indicators, Contacts running fast!… Just seems Snnnnappy… All the way around…
I’ve been able to temporarily cure the contacts slowness by turning my phone off & back on. No doubt this new software install will reboot the phone as well, so I won’t be able to really tell if it helped for another day or so.
Uh oh. It’s backing up my phone before it does the install and there’s no button to skip this step. Looks like I won’t know what 2.1 is like for another couple of hours, since mine recently got the all-day-backup curse. 2.1 is supposed to fix that, but darnit, I have to wait through the slow one one more time.
switches between 3G and Edge much faster now, takes whichever is strongest, but from my experience this morning going out, it stayed on 3G the whole time with full bars…!! Wasn’t like that before. I am very happy with the update.
SHNAPPY!
For once Apple went far and beyond in reporting what changes/improvements the update brings.
Kudos to them on their lengthy report, hope it is a sign of increased communications from our favorite fruit company.
can someone please confirm the snappiness of this update?
anyone missing Genius button??
@mike:
it’s there. play a song, then press anywhere to bring up the playback controls. At the top, under the timeline indicator, is a big old atom-looking thing
yeah i did that no genius button. thats my problem.
i got it, just had to re-sync it thanks.
No genius button either wtf?
Wow, now you are wasting time reading more posts and then throwing expletives out at someone while stealing their id to write your post. Nice. Obviously your brain hasn’t evolved beyond the cesspool where gnats like you are hatched. Congratulations on proving my point for me – and it shows there is hope for bugs after all!
Now, run along before someone decides to squash you for being the pest that you are.
@Jamie & TowerTone & MDN
Seems the typeface does not have the “Apple” glyph.
” width=”19″ height=”19″ alt=”cool grin” style=”border:0;” />
That’s not Snappy.
Yep resync gives genius button.
Note: So you need to perform the update to 2.1 and then do another sync after that to get everything in place…
Finally finished the backup and install, and the WOW starts NOW. When I hit the “z” in contacts it zips to the end before I even get my finger off the screen! That’s what I call “snappier”. Sorry to use that word, but it really is.
Anyone know if it does anything bad to Netshare? I do like my tethering.
@steve516
If you don’t want someone to steal your ID, then register it, it’s quick and painless.
Ok, I now have NO SERVICE while 3G is activated at my house. Before the update, I used to have 0-1 bar, now, nothing.
Great update.
The contacts, when accessing from the Phone icon do seem faster, but if accessing directly from the Contacts icon still have a delay before they show up.
Oh wait…what the…?
I now have full signal with 3G…I guess it was switching over, which is why I had no service, but it took a minute or two. Weird.
Hmm…I hope its accurate because my 3G signal is much much better then before the upgrade.
I used to have 0-1 bars, now I have a full 4 bars.
EDGE seems the same, I had 2 bars before the update and I have 2 now as well.
Snappiness Abounds.
i’ll be happy if the only thing this update does is improve my battery life…the other features/enhancements are a bonus as my 3G iPhone has been great except for battery life.
So far so good. Backup went from over 2 hours to less than 5 minutes
Download this morning and installed (went smoothly)
” width=”19″ height=”19″ alt=”smile” style=”border:0;” />
” width=”19″ height=”19″ alt=”smile” style=”border:0;” />
-First thing notice on the screen after start up said (phone activated)
-I had the same problem now there is “No Service” on 3G mode… ;( BUT all you have to do is turn off the phone and turn it back on, NOW I got full 3G bar which I only had one before.. Excellent!! (Restart the phone seem quicker than ever)
-Contact pop up right always in any apps that you need to pull it out. (snippier!!)
-Tried Yahoo’s OneConnect, keyboard pop up after away whenever you need it, warrning window seem pop up smoothly (better animation), I assume it will do the same on other apps.
-When unlock the screen by sliding the bar, work much responsive than before
-open and close apps seem very stable and smooth transition.
-New 3G icons
-already open more than 5 different apps included some big one, no crash so far and still very stable… rather than the phone running low in memory
-When open Safari first time and typing the URLs, it used to stuck for few seconds for the phone to pull out your history, now it take one sec… (snippier)
-tried photo editing programs, took pictures and editing, rotate and effect… and save it back to album… seem much faster
Over, everything seem run very smooth… feel like I got a new faster processor inside my phone. I hope everyone got the same result and now we can really enjoy the power of 3G iPhone. I Love You Apple… (sure you have more goodies to come) Cheers!
“can someone please confirm the snappiness of this update?”
Confirmed, its SNAPPY!
One more thing… ladies and gens
Just tried backing up my phone and WOW!! it cut down the backup time by… I don’t know how much… I got about 1GB of data on my phone, about less than 5 mins verse half an hour before
“What a wonderful World..”
Snappy contacts!!!!
Funny, I just wiped everything out and only installed the apps that I paid for and synced my music and video and contacts, which fixed my issue of the phone crashing on me and not starting. Now they fixed it so I can have a crap ton of 3rd party apps again… yay!!
P.S. Where is my copy/paste??
Contact access is much faster (I have nearly 3,000 thanks to my company’s phone list.) This is what I was hoping for but it still isn’t quite as snappy as I would like.
I have four bars at home when I used to have 1 to 2. Am waiting to see if that pays off in fewer dropped calls.
Isnt part of the fun at MDN that we CAN give any ID we want?
In fact, the ID thing is one of the best things about this site.
I am sick of having to register to post on some lousy website.
At least MDN has a sense of proportion – they know that they are just another website, albeit one of my favourites.
At least MDN hasnt got a stick up their collective ass, like most sites. (Macrumors is a bit precious, for example)
BTW, if you do copy an ID, its supposed to be amusing or witty.
Dont forget that one mans wit is another mans witless….
another change that they made:
when you get a txt message if you have your phone on lock mode it only says “new text message” rather than the person’s name.
Update did wonders for my phone–better connection strength and speedier performance.
I just downloaded the update and it finally fixed an audio issue with my Plaintronics bluetooth earpiece where I was unable to hear my voicemail through the earpiece. I could place and receive calls but I was unable to hear a voicemail message.
Thanks Apple!
@steve516 who wrote – “..cesspool where gnats like you are..”
I think you must be a Microsoft Windows user here by accident – Mac users rearely if ever throw around such childish language.
You also need to know that the post with your monicker you refer to was NOT by me. I don’t need to stoop to that level thank you.
Grow up.
Had a bad call earlier…I could hear the other person, but they couldn’t here me…even though the phone showed 3 bars. hmm.
Mike,
Isn’t that arrow the play button that displays when the iPod is running on the phone?
Once again Apple delivers!!! even when my iphone was buggy i still loved it, now its better than ever!!!
Super SNNNNAPPEEEEEE!
@MXNT4.1
Nike promise Nike+ for the iPhone and iPod touch. The iPod touch and iPhone are so similar in external and internal design. Why are they giving them different features? We should have Nike+, shake to shuffle and any other feature. iPhone is better and should all the features. The iPod touch should do everything the iPhone does but make phone call on ATT&T;.
“repeat alert up to two additional times for incoming text messages”
THANK GOD! I can’t tell you how many text messages I’ve discovered on my iPhone 4 – 6 hours after they arrived there because I didn’t hear the one little chirp.
Now if only Calendar would add support for clickable URLs attached to events, like desktop iCal does. That would eliminate one of the major places I find myself wanting copy and paste
It is awesome:
Snappier
” width=”19″ height=”19″ alt=”wink” style=”border:0;” />
Stable
Full 3G bars
Switches between EDGE smoothly
Apps install in seconds
Updating apps are fast
backup is really fast
Genius button is there
Notice that album info is under the song
It remembers the progress bar for the song screen when you tap it
Fewer dropped calls
Awesome
Did I miss anything
@M.X.N.T.4.1
Nike promised Nike+ for the iPod Touch and iPhone. The iPhone is nothing but a iPod Touch with direct phone capabilities. Why are they trying to form different platforms. They play the same games and they should share all features minus the phone.
it is registered… so I don’t know how this fool copied it
??? Why are my post getting deleted
Sorry I see them now. Damn iPhone site causes me to miss the page they are posted on. I should have seen the buttons on the bottom.
Badly need your help. Let not thy will roar, when thy power can but whisper.
I am from Poland and bad know English, give true I wrote the following sentence: “Public advances in australia are typically confused via the telstra argent and optus transact plus card – which has however made the traditional transcend processing in the qualified smart methods.”
With respect :-D, Shane.
Good afternoon. We should every night call ourselves to an account; What infirmity have I mastered today? What passions opposed? What temptation resisted? What virtue acquired? Our vices will abort of themselves if they be brought every day to the shrift. Help me! Help to find sites on the: Mans hairstyle for thinning hair line. I found only this – shampoo for thinning hair for women. This is a black sportsbook for young cosmetics. In most structures the track is modern-day. Waiting for a reply :eek:, Amanda from Kosovo.