Release record
Release notes
Editorial synthesis with inline references and a source ledger when citations are available.
Apple corrected certificate-chain validation for X.509 certificates. The prior behavior could let an attacker in a privileged network position capture or alter data in SSL/TLS sessions and could permit other certificate-validation attacks.[1]
Source ledger
Sources are linked to the claims they support. Publication and access dates are shown when available.
Apple Support · 2026-07-30 · Data Security — CVE-2011-0228
Apple Support · Apple · 2023-08-10T00:00:00.000Z · iOS 4.3.5 — 25 July 2011
Apple Support · 2026-07-30 · iOS 4.3.5 security content
Documented & observed
Source-linked features, fixes, known issues, removals, and community-observed behavior recorded across this version’s appearances and verified builds.
Release changes
Features, fixes, removals, and regressions first observed in this release record.
security · fixed
Apple documented possible capture or modification of protected-session data by an attacker with a privileged network position.
Recorded at Public
Milestones
Every recorded channel appearance in chronological order. Open an appearance for any available build, scope, notes, and sources.
Public release
iOS 4.3.5 was a focused certificate-validation security update for SSL/TLS and other X.509 trust decisions.
Historical context
Pace, intervals, and duration compared with earlier releases on the same platform.