Hey,

I can't even open a new topic there :/

- AC

On Friday, 11 November 2016 02:47:52 UTC+1, Glenn Kasten wrote:
>
> You might want to ask on android-security-discuss, since they focus on 
> this kind of topic.
> https://groups.google.com/forum/#!forum/android-security-discuss
>
> But they don't seem to be active recently :-(
>
>
> On Wednesday, November 9, 2016 at 9:33:15 AM UTC-8, Arne-Christian Blystad 
> wrote:
>>
>> Hello,
>>
>> With the latest security bulletin ( 
>> https://source.android.com/security/bulletin/2016-11-01.html ) it's 
>> really difficult to update all components to the latest security patch 
>> without getting access to the patches.
>>
>> E.g.
>>
>>    - A-30916186
>>    - A-30259087
>>    - A-30765246
>>    - A-28672558
>>    - A-31217937
>>    
>>
>> We care about security on our products, and would love to provide our 
>> customers with a secure system.
>>
>> Best regards,
>> Arne-Christian Blystad
>>
>> On Friday, 12 August 2016 18:40:44 UTC+2, avk wrote:
>>>
>>> Hi,
>>>
>>> I'd like to [try to] make a custom build of AOSP for my device, which does 
>>> not receive security updates from vendor anymore. For this reason I'm 
>>> looking for sources of Android 4.4 along with all the relevant security 
>>> patches.
>>>
>>> source.android.com <http://source.android.com/security/index.html> mentions 
>>> that KitKat still receives security updates:
>>>
>>> The Android security team currently provides patches for Android 
>>>> versions 4.4 (KitKat), 5.0 (Lollipop), 5.1 (Lollipop MR1), and 6.0 
>>>> (Marshmallow).
>>>
>>>
>>> Also latest security bulletin 
>>> <http://source.android.com/security/bulletin/2016-08-01.html> alongside 
>>> many CVE's mentions 4.4.4 among "Updated AOSP versions". Yet when I go 
>>> to appropriate reference
>>> (for example, this commit 
>>> <https://android.googlesource.com/platform/frameworks/av/+/590d1729883f700ab905cdc9ad850f3ddd7e1f56>
>>>  
>>> for first CVE in the list), the appropriate commit seems to appear only 
>>> in master branch. I'm not familiar with AOSP version control yet, but I 
>>> checked list of branches for this particular framework here 
>>> <https://android.googlesource.com/platform/frameworks/av/>.
>>>
>>> So, my question is: where do backported security patches go? If current 
>>> googlegroup is not appropriate place for this question, please point me 
>>> in the right direction.
>>>
>>> Cheers,
>>>
>>

-- 
-- 
unsubscribe: android-porting+unsubscr...@googlegroups.com
website: http://groups.google.com/group/android-porting

--- 
You received this message because you are subscribed to the Google Groups 
"android-porting" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to android-porting+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to