Hey, I can't even open a new topic there :/
- AC On Friday, 11 November 2016 02:47:52 UTC+1, Glenn Kasten wrote: > > You might want to ask on android-security-discuss, since they focus on > this kind of topic. > https://groups.google.com/forum/#!forum/android-security-discuss > > But they don't seem to be active recently :-( > > > On Wednesday, November 9, 2016 at 9:33:15 AM UTC-8, Arne-Christian Blystad > wrote: >> >> Hello, >> >> With the latest security bulletin ( >> https://source.android.com/security/bulletin/2016-11-01.html ) it's >> really difficult to update all components to the latest security patch >> without getting access to the patches. >> >> E.g. >> >> - A-30916186 >> - A-30259087 >> - A-30765246 >> - A-28672558 >> - A-31217937 >> >> >> We care about security on our products, and would love to provide our >> customers with a secure system. >> >> Best regards, >> Arne-Christian Blystad >> >> On Friday, 12 August 2016 18:40:44 UTC+2, avk wrote: >>> >>> Hi, >>> >>> I'd like to [try to] make a custom build of AOSP for my device, which does >>> not receive security updates from vendor anymore. For this reason I'm >>> looking for sources of Android 4.4 along with all the relevant security >>> patches. >>> >>> source.android.com <http://source.android.com/security/index.html> mentions >>> that KitKat still receives security updates: >>> >>> The Android security team currently provides patches for Android >>>> versions 4.4 (KitKat), 5.0 (Lollipop), 5.1 (Lollipop MR1), and 6.0 >>>> (Marshmallow). >>> >>> >>> Also latest security bulletin >>> <http://source.android.com/security/bulletin/2016-08-01.html> alongside >>> many CVE's mentions 4.4.4 among "Updated AOSP versions". Yet when I go >>> to appropriate reference >>> (for example, this commit >>> <https://android.googlesource.com/platform/frameworks/av/+/590d1729883f700ab905cdc9ad850f3ddd7e1f56> >>> >>> for first CVE in the list), the appropriate commit seems to appear only >>> in master branch. I'm not familiar with AOSP version control yet, but I >>> checked list of branches for this particular framework here >>> <https://android.googlesource.com/platform/frameworks/av/>. >>> >>> So, my question is: where do backported security patches go? If current >>> googlegroup is not appropriate place for this question, please point me >>> in the right direction. >>> >>> Cheers, >>> >> -- -- unsubscribe: android-porting+unsubscr...@googlegroups.com website: http://groups.google.com/group/android-porting --- You received this message because you are subscribed to the Google Groups "android-porting" group. To unsubscribe from this group and stop receiving emails from it, send an email to android-porting+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.