[Bug 1506887] Re: vulnerability in OTA signature check mechanism

2016-03-14 Thread Launchpad Bug Tracker
This bug was fixed in the package android - 20160307-0742-0ubuntu3 --- android (20160307-0742-0ubuntu3) xenial; urgency=medium * Version bump for overcome burned version number in our landing ppa. -- Simon Fels Mon, 07 Mar 2016 13:23:10 +0100 ** Changed in: android (Ubuntu)

[Bug 1506887] Re: vulnerability in OTA signature check mechanism

2016-03-07 Thread Simon Fels
New release of the android package including this fix is now in progress at https://requests.ci-train.ubuntu.com/#/ticket/1081 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1506887 Title: vulnerabil

[Bug 1506887] Re: vulnerability in OTA signature check mechanism

2015-10-19 Thread Tyler Hicks
Ondrej is preparing a workaround fix in our system-image-upgrader script. However, the core issue lies in busybox's tar implementation. I've opened an upstream busybox bug for that issue: https://bugs.busybox.net/show_bug.cgi?id=8411 ** Bug watch added: Busybox Bugzilla #8411 https://bugs.b

[Bug 1506887] Re: vulnerability in OTA signature check mechanism

2015-10-19 Thread Tyler Hicks
** Changed in: android (Ubuntu) Status: New => In Progress ** Changed in: android (Ubuntu) Importance: Undecided => High ** Changed in: android (Ubuntu) Assignee: (unassigned) => Ondrej Kubik (w-ondra) -- You received this bug notification because you are a member of Ubuntu Bugs,