iOS 5.1 Public

Apple records an updated AT&T network indicator without describing any underlying radio or throughput change.

1. [1] About iOS 5 · iOS 5.1 — Updated AT&T network indicator

Apple repaired racoon configuration-file handling that could allow crafted system configuration data to run code with system privileges.

1. [1] About the security content of iOS 5.1 Software Update · VPN — CVE-2012-0646

Apple addressed a physical-access sequence that could bypass Passcode Lock through competing slide-to-dial actions.

1. [1] About the security content of iOS 5.1 Software Update · Passcode Lock — CVE-2012-0644

Apple fixed a logic error that could let a malicious program execute code in another program with the same user privileges.

1. [1] About the security content of iOS 5.1 Software Update · Kernel — CVE-2012-0643

Visits produced through the pushState or replaceState JavaScript methods were prevented from appearing in browser history during a private session.

1. [1] About the security content of iOS 5.1 Software Update · Safari — CVE-2012-0585

The update corrected an underflow that Apple said could cause shutdown or arbitrary code execution when a malicious disk image was mounted.

1. [1] About the security content of iOS 5.1 Software Update · HFS — CVE-2012-0642

The voice assistant expanded to Japanese, with Apple warning that availability could be limited during the initial rollout.

1. [1] About iOS 5 · iOS 5.1 — Japanese language support for Siri

The lock-screen Camera shortcut was made continuously visible on listed devices, face detection highlighted all recognized faces, and the iPad Camera app received a new design.

1. [1] About iOS 5 · iOS 5.1 — Camera improvements

Apple lists battery-life bug fixes but does not assign them to a particular device, subsystem, or reproducible symptom.

1. [1] About iOS 5 · iOS 5.1 — battery life

Apple optimized TV-show and movie audio for greater clarity and volume and added podcast playback-speed control with a 30-second rewind.

1. [1] About iOS 5 · iOS 5.1 — iPad media and podcast controls

Apple repaired malformed-URL handling that could cause unexpected headers to be sent to a server and disclose sensitive information.

1. [1] About the security content of iOS 5.1 Software Update · CFNetwork — CVE-2012-0641

The lock-screen policy was tightened so a voice command could not send a frontmost email message to an arbitrary recipient without unlocking.

1. [1] About the security content of iOS 5.1 Software Update · Siri — CVE-2012-0645

The advisory groups fixes for cross-origin isolation and a broad set of memory-safety flaws, including cases capable of script injection, data disclosure, or arbitrary code execution.

1. [1] About the security content of iOS 5.1 Software Update · WebKit — CVE-2011-3887, CVE-2012-0590, CVE-2011-3881 through CVE-2012-0635

Apple corrected a condition that could occasionally cause audio to drop while placing an outgoing call.

1. [1] About iOS 5 · iOS 5.1 — outgoing call audio

The parser was hardened against crafted DNS data that could terminate an application or corrupt heap memory and enable code execution.

1. [1] About the security content of iOS 5.1 Software Update · libresolv — CVE-2011-3453

The Music experience exposed Genius-created mixes and playlists to users with an iTunes Match subscription.

1. [1] About iOS 5 · iOS 5.1 — Genius for iTunes Match subscribers

Photo Stream gained an explicit deletion capability for removing individual images.

1. [1] About iOS 5 · iOS 5.1 — Photo Stream deletion