You might want to ask on android-security-discuss, since they focus on this kind of topic. https://groups.google.com/forum/#!forum/android-security-discuss
But they don't seem to be active recently :-( On Wednesday, November 9, 2016 at 9:33:15 AM UTC-8, Arne-Christian Blystad wrote: > > Hello, > > With the latest security bulletin ( > https://source.android.com/security/bulletin/2016-11-01.html ) it's > really difficult to update all components to the latest security patch > without getting access to the patches. > > E.g. > > - A-30916186 > - A-30259087 > - A-30765246 > - A-28672558 > - A-31217937 > > > We care about security on our products, and would love to provide our > customers with a secure system. > > Best regards, > Arne-Christian Blystad > > On Friday, 12 August 2016 18:40:44 UTC+2, avk wrote: >> >> Hi, >> >> I'd like to [try to] make a custom build of AOSP for my device, which does >> not receive security updates from vendor anymore. For this reason I'm >> looking for sources of Android 4.4 along with all the relevant security >> patches. >> >> source.android.com <http://source.android.com/security/index.html> mentions >> that KitKat still receives security updates: >> >> The Android security team currently provides patches for Android versions >>> 4.4 (KitKat), 5.0 (Lollipop), 5.1 (Lollipop MR1), and 6.0 (Marshmallow). >> >> >> Also latest security bulletin >> <http://source.android.com/security/bulletin/2016-08-01.html> alongside >> many CVE's mentions 4.4.4 among "Updated AOSP versions". Yet when I go >> to appropriate reference >> (for example, this commit >> <https://android.googlesource.com/platform/frameworks/av/+/590d1729883f700ab905cdc9ad850f3ddd7e1f56> >> >> for first CVE in the list), the appropriate commit seems to appear only >> in master branch. I'm not familiar with AOSP version control yet, but I >> checked list of branches for this particular framework here >> <https://android.googlesource.com/platform/frameworks/av/>. >> >> So, my question is: where do backported security patches go? If current >> googlegroup is not appropriate place for this question, please point me >> in the right direction. >> >> Cheers, >> > -- -- unsubscribe: android-porting+unsubscr...@googlegroups.com website: http://groups.google.com/group/android-porting --- You received this message because you are subscribed to the Google Groups "android-porting" group. To unsubscribe from this group and stop receiving emails from it, send an email to android-porting+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
