The Old3DS+New3DS 11.8.0-41 system update was released on July 30, 2018. This Old3DS+New3DS update was released for the following regions: USA, EUR, JPN, CHN, KOR, and TWN.
Security flaws fixed: <fill this in manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>.
Official USA change-log:
- Further improvements to overall system stability and other minor adjustments have been made to enhance the user experience
<fill this in (manually) later>
Actual code changed in Process9.
pxi:am9 command 0x6d0184 was added, see AMPXI:ExportTicketWrapped
The anti-downgrade list was updated (versions bumped and new titles were added, such as TWL_FIRM).
New am:net command 0x8290184 was added, see AMNet:ExportTicketWrapped. This is used by nim.
fpdver version string bumped to 0xC
Added 2 new strings in the codebin: "X-Authentication-Key" and "X-Authentication-Data".
Now uses AMNet:ExportTicketWrapped during code related to downloading contents(?) (function at 0x143B9C; its caller at 0x123ABC uses amnet:Begin/ResumeImportContent)
If ExportTicketWrapped succeeded, then the new http headers are passed: "X-Authentication-Key" set to base64(wrapped_aes_key) and "X-Authentication-Data" set to base64(crypted_ticket).
This (when activated server-side - gradually since 2018-8-9, it appears) would prevent downloading crypted contents entirely (including TMDs) without a valid ticket.
System update report(s):