APPLE has announced a new release of iPhone OS with varied security fixes.
Multiple security issues concerning its QuickTime media software for Mac OS X and Windows were also fixed.
One group of fixes relates to external attacks, which included changes to the handling of maliciously crafted AAC and MP3 files to avoid crashing or arbitrary code execution, and improvements to SMS handling.
Also fixed are various WebKit flaws that allow crashing, arbitrary code execution, cross-site scripting, and the disclosure of user names and passwords.
Another group of issues concerns issues requiring physical access.
An Exchange Server inactivity time lock can no longer be overridden by extending the iPhone OS's Require Password setting.
The updates are available via iTunes. iPhone OS 3.1 is a free download; iPhone OS 3.1.1 costs $A5.99.