Release appearance
iOS 3.1 Public
Recorded context
About this appearance
The public iPhone OS 3.1 release expanded iTunes organization, syncing, recommendations, ringtones, MobileMe controls, and anti-phishing behavior while repairing audio, enterprise, mail, recovery, telephony, password, and web security defects.
- Date
- Sep 9, 2009
- Availability
- available
- Revision
- No
Release notes
What changed
Original editorial synthesis. Linked references appear with the claims they support and in the source ledger.
Apple’s dated records place iPhone OS 3.1 on September 9, 2009. Apple’s launch material ties it to home-screen organization in iTunes, more selective media and photo syncing, Genius Mixes and Genius for Apps, direct ringtone purchases, MobileMe remote lock, and anti-phishing protection.[1][2][3]
The matching security advisory covers crafted audio, Exchange passcode policy, deleted mail in Spotlight, recovery-mode access, SMS resilience, password display, credential leakage, cross-site scripting, code execution, and deceptive internationalized URLs. Claims specific to iPod touch are not generalized to every iPhone.[4][5]
Source ledger
References
Sources are linked to the claims they support. Publication and access dates are shown when available.
- Apple Premieres iTunes 9
Apple Newsroom · 2009-09-09T00:00:00Z · Improved syncing and iPhone Store ringtones
- Apple security updates (15-Jan-2008 to 03-Dec-2009)
Apple Support · Apple · 2026-07-30 · iOS 3.1 — 09 September 2009
- Apple Introduces New iPod touch Lineup
Apple Newsroom · 2009-09-09T00:00:00Z · iPhone 3.1 features and update availability
- About the security content of iOS 3.1 and iOS 3.1.1 for iPod touch
Apple Support · 2009-09-09T00:00:00Z · iOS 3.1 security content
- Apple Introduces New iPod touch Lineup
Apple Newsroom · 2009-09-09T00:00:00Z · iPod touch product and pricing qualifications
- Apple Introduces New iPod touch Lineup
Apple Newsroom · 2009-09-09T00:00:00Z · 3.1 software update features
- About the security content of iOS 3.1 and iOS 3.1.1 for iPod touch
Apple Support · 2009-09-09T00:00:00Z · CoreAudio — CVE-2009-2206
- About the security content of iOS 3.1 and iOS 3.1.1 for iPod touch
Apple Support · 2009-09-09T00:00:00Z · Exchange Support — CVE-2009-2794
- Apple Premieres iTunes 9
Apple Newsroom · 2009-09-09T00:00:00Z · Genius Mixes
- Apple Introduces New iPod touch Lineup
Apple Newsroom · 2009-09-09T00:00:00Z · Genius Mixes
- Apple Premieres iTunes 9
Apple Newsroom · 2009-09-09T00:00:00Z · Improved syncing with iPhone OS 3.1
- Apple Introduces New iPod touch Lineup
Apple Newsroom · 2009-09-09T00:00:00Z · iPhone 3.1 features
- Apple Introduces New iPod touch Lineup
Apple Newsroom · 2009-09-09T00:00:00Z · iPhone 3.1 software features
- Apple Premieres iTunes 9
Apple Newsroom · 2009-09-09T00:00:00Z · iPhone OS 3.1 integration
- Apple Premieres iTunes 9
Apple Newsroom · 2009-09-09T00:00:00Z · iTunes Store on iPhone
- About the security content of iOS 3.1 and iOS 3.1.1 for iPod touch
Apple Support · 2009-09-09T00:00:00Z · MobileMail — CVE-2009-2207
- About the security content of iOS 3.1 and iOS 3.1.1 for iPod touch
Apple Support · 2009-09-09T00:00:00Z · Recovery Mode — CVE-2009-2795
- About the security content of iOS 3.1 and iOS 3.1.1 for iPod touch
Apple Support · 2009-09-09T00:00:00Z · Telephony — CVE-2009-2815
- About the security content of iOS 3.1 and iOS 3.1.1 for iPod touch
Apple Support · 2009-09-09T00:00:00Z · UIKit — CVE-2009-2796
- About the security content of iOS 3.1 and iOS 3.1.1 for iPod touch
Apple Support · 2009-09-09T00:00:00Z · WebKit — CVE-2009-1724 and CVE-2009-1725
- About the security content of iOS 3.1 and iOS 3.1.1 for iPod touch
Apple Support · 2009-09-09T00:00:00Z · WebKit — CVE-2009-2797 and CVE-2009-2199
Release changes
Changed in this release
Features, fixes, removals, and regressions first observed in this release record.
feature · introduced
Precut ringtone purchases
The iPhone store offered more than twenty thousand precut ringtones for individual purchase at launch.
- [1] Apple Premieres iTunes 9 · iTunes Store on iPhone
security · changed
MobileMe remote lock and anti-phishing
Apple identified MobileMe remote lock and anti-phishing behavior as part of the 3.1 software, with service and device applicability preserved.
- [1] Apple Introduces New iPod touch Lineup · iPhone 3.1 software features
security · fixed
Web credential and deceptive-URL protections
WebKit stopped placing URL credentials in referral headers and rendered known look-alike domain characters in Punycode.
- [1] About the security content of iOS 3.1 and iOS 3.1.1 for iPod touch · WebKit — CVE-2009-2797 and CVE-2009-2199
enhancement · changed
More selective media and photo syncing
Apple added music selection by artist and genre plus photo selection by Events and Faces, alongside broader media-sync improvements.
- [1] Apple Premieres iTunes 9 · Improved syncing with iPhone OS 3.1
security · fixed
Recovery Mode passcode boundary
Apple repaired a heap overflow that could let someone with physical access bypass a passcode and reach user data.
- [1] About the security content of iOS 3.1 and iOS 3.1.1 for iPod touch · Recovery Mode — CVE-2009-2795
security · fixed
SMS arrival resilience
The update fixed a null-pointer condition through which a malicious SMS could interrupt service.
- [1] About the security content of iOS 3.1 and iOS 3.1.1 for iPod touch · Telephony — CVE-2009-2815
security · fixed
Exchange passcode timeout enforcement
The update aligned the user's Require Passcode options with the server-defined maximum inactivity timeout.
- [1] About the security content of iOS 3.1 and iOS 3.1.1 for iPod touch · Exchange Support — CVE-2009-2794
enhancement · changed
Home-screen app organization in iTunes
iTunes 9 could organize an iPhone home-screen app layout and reproduce the arrangement during synchronization.
- [1] Apple Premieres iTunes 9 · Improved syncing with iPhone OS 3.1
security · fixed
Password undo privacy
Apple stopped a deleted password character from becoming visible again when the deletion was undone.
- [1] About the security content of iOS 3.1 and iOS 3.1.1 for iPod touch · UIKit — CVE-2009-2796
security · fixed
CoreAudio memory safety
Apple corrected a heap overflow that could terminate an application or execute code when a malicious audio file was opened.
- [1] About the security content of iOS 3.1 and iOS 3.1.1 for iPod touch · CoreAudio — CVE-2009-2206
feature · introduced
Genius Mixes
Genius Mixes could generate up to twelve ongoing mixes based on Apple’s analysis of submitted music libraries.
- [1] Apple Introduces New iPod touch Lineup · Genius Mixes
- [2] Apple Premieres iTunes 9 · Genius Mixes
feature · introduced
Genius for Apps
Apple listed Genius for Apps among the user-facing benefits available with the 3.1 update.
- [1] Apple Introduces New iPod touch Lineup · 3.1 software update features
security · fixed
Deleted Mail exclusion from Spotlight
Apple prevented Spotlight from exposing email that had already been deleted from Mail folders.
- [1] About the security content of iOS 3.1 and iOS 3.1.1 for iPod touch · MobileMail — CVE-2009-2207
security · fixed
WebKit script and memory safety
Apple repaired parent/top object handling and numeric character-reference processing that could cross security origins, terminate an app, or execute code.
- [1] About the security content of iOS 3.1 and iOS 3.1.1 for iPod touch · WebKit — CVE-2009-1724 and CVE-2009-1725