Issue #1353
closedSecurity bugs 17969135 and 17671795
90%
Description
Found two security bugs that are not yet in replicant.
Bug 17969135
CVE: https://www.cvedetails.com/cve/CVE-2014-8507/
patch: https://android.googlesource.com/platform/frameworks/base/+/48ed835468c6235905459e6ef7df032baf3e4df6%5E!/
Bug 17671795
CVE: https://www.cvedetails.com/cve/CVE-2014-8610/
patch: https://android.googlesource.com/platform/packages/apps/Mms/+/008d6202fca4002a7dfe333f22377faa73585c67%5E!/
Both are tested on my device. Patches are also attached.
Hope this helps!
Files
Updated by Wolfgang Wiedmeyer over 8 years ago
I mean "bugs that are not yet FIXED in replicant" ;)
Updated by My Self over 8 years ago
- File Externally-Reported-patchset-reviewed.zip Externally-Reported-patchset-reviewed.zip added
- Status changed from New to In Progress
- % Done changed from 0 to 90
Thanks a lot for providing this patchses!
I've merged them to my local repo and successfully compiled/reflashed/tested Replicant 4.2 on my i9100, too.
I've attached your patchses as patchset again, with the suffix -reviewed. I've modified the header of your patches inside of this attachment a bit. I added a Signed-off-by: {'From:' contact of the originally patch header}, followed by your Signed-off-by line, finalized with my Tested-by line. Hope that's ok?
Updated by Wolfgang Wiedmeyer over 8 years ago
I've attached your patchses as patchset again, with the suffix -reviewed. I've modified the header of your patches inside of this attachment a bit. I added a Signed-off-by: {'From:' contact of the originally patch header}, followed by your Signed-off-by line, finalized with my Tested-by line. Hope that's ok?
Yes, sure!
Updated by Denis 'GNUtoo' Carikli over 8 years ago
- Device Not device specific added
Updated by Kurtis Hanna over 4 years ago
- Status changed from In Progress to Closed
- Resolution set to wontfix
This issue has been closed because Replicant 4.2 is no longer supported or maintained.