Release appearance
iOS 4.3.5 Public
Recorded context
About this appearance
iOS 4.3.5 was a focused certificate-validation security update for SSL/TLS and other X.509 trust decisions.
- Date
- Jul 25, 2011
- Availability
- available
- Revision
- No
Release notes
What changed
Original editorial synthesis. Linked references appear with the claims they support and in the source ledger.
Apple corrected certificate-chain validation for X.509 certificates. The prior behavior could let an attacker in a privileged network position capture or alter data in SSL/TLS sessions and could permit other certificate-validation attacks.[1]
Source ledger
References
Sources are linked to the claims they support. Publication and access dates are shown when available.
- About the security content of iOS 4.3.5 Software Update for iPhone
Apple Support · 2026-07-30 · Data Security — CVE-2011-0228
- Apple security updates (2011 to 2012)
Apple Support · Apple · 2023-08-10T00:00:00.000Z · iOS 4.3.5 — 25 July 2011
- About the security content of iOS 4.3.5 Software Update for iPhone
Apple Support · 2026-07-30 · iOS 4.3.5 security content
Release changes
Changed in this release
Features, fixes, removals, and regressions first observed in this release record.
security · fixed
X.509 certificate-chain validation
Apple documented possible capture or modification of protected-session data by an attacker with a privileged network position.
- [1] About the security content of iOS 4.3.5 Software Update for iPhone · Data Security — CVE-2011-0228