Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

CVE-2016-3921 CVE-2016-3885 CVE-2016-3861

Related Vulnerabilities: CVE-2016-3921   CVE-2016-3885   CVE-2016-3861   CVE-2017-0508   CVE-2017-0507   CVE-2017-0427   CVE-2016-6753   CVE-2016-3803   CVE-2016-3802   CVE-2016-3775  

Source

Debian Bug report logs - #858177
CVE-2016-3921 CVE-2016-3885 CVE-2016-3861

version graph

Package: src:android-platform-system-core; Maintainer for src:android-platform-system-core is Android Tools Maintainers <android-tools-devel@lists.alioth.debian.org>;

Reported by: Moritz Muehlenhoff <jmm@debian.org>

Date: Sun, 19 Mar 2017 12:39:04 UTC

Severity: important

Fixed in versions android-platform-system-core/1:7.0.0+r1-4, android-platform-system-core/1:7.0.0+r33-1

Done: Hans-Christoph Steiner <hans@eds.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, team@security.debian.org, secure-testing-team@lists.alioth.debian.org, Android Tools Maintainers <android-tools-devel@lists.alioth.debian.org>:
Bug#858177; Package src:android-platform-system-core. (Sun, 19 Mar 2017 12:39:07 GMT) (full text, mbox, link).

Acknowledgement sent to Moritz Muehlenhoff <jmm@debian.org>:
New Bug report received and forwarded. Copy sent to team@security.debian.org, secure-testing-team@lists.alioth.debian.org, Android Tools Maintainers <android-tools-devel@lists.alioth.debian.org>. (Sun, 19 Mar 2017 12:39:07 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Moritz Muehlenhoff <jmm@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: CVE-2016-3921
Date: Sun, 19 Mar 2017 13:38:15 +0100
Source: android-platform-system-core
Severity: grave
Tags: security

Please see
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3921

Cheers,
        Moritz

Information forwarded to debian-bugs-dist@lists.debian.org, Android Tools Maintainers <android-tools-devel@lists.alioth.debian.org>:
Bug#858177; Package src:android-platform-system-core. (Sun, 19 Mar 2017 18:09:10 GMT) (full text, mbox, link).

Acknowledgement sent to Moritz Mühlenhoff <jmm@inutil.org>:
Extra info received and forwarded to list. Copy sent to Android Tools Maintainers <android-tools-devel@lists.alioth.debian.org>. (Sun, 19 Mar 2017 18:09:10 GMT) (full text, mbox, link).

Message #10 received at 858177@bugs.debian.org (full text, mbox, reply):

From: Moritz Mühlenhoff <jmm@inutil.org>
To: 858177@bugs.debian.org
Cc: control@bugs.debian.org
Subject: Re: CVE-2016-3921
Date: Sun, 19 Mar 2017 19:05:32 +0100
retitle 858177 CVE-2016-3921 CVE-2016-3885
thanks

On Sun, Mar 19, 2017 at 01:38:15PM +0100, Moritz Muehlenhoff wrote:
> Source: android-platform-system-core
> Severity: grave
> Tags: security
> 
> Please see
> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3921

Also:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3885 

Also, if you're packaging Android for Debian, please make an effort
to follow these advisories on your own. These have been released
in October last year...

Cheers,
        Moritz

Changed Bug title to 'CVE-2016-3921 CVE-2016-3885' from 'CVE-2016-3921'. Request was from Moritz Mühlenhoff <jmm@inutil.org> to control@bugs.debian.org. (Sun, 19 Mar 2017 18:09:11 GMT) (full text, mbox, link).

Information forwarded to debian-bugs-dist@lists.debian.org, Android Tools Maintainers <android-tools-devel@lists.alioth.debian.org>:
Bug#858177; Package src:android-platform-system-core. (Sun, 19 Mar 2017 21:12:08 GMT) (full text, mbox, link).

Acknowledgement sent to Moritz Mühlenhoff <jmm@inutil.org>:
Extra info received and forwarded to list. Copy sent to Android Tools Maintainers <android-tools-devel@lists.alioth.debian.org>. (Sun, 19 Mar 2017 21:12:08 GMT) (full text, mbox, link).

Message #17 received at 858177@bugs.debian.org (full text, mbox, reply):

From: Moritz Mühlenhoff <jmm@inutil.org>
To: Moritz Mühlenhoff <jmm@inutil.org>
Cc: 858177@bugs.debian.org, control@bugs.debian.org
Subject: Re: CVE-2016-3921
Date: Sun, 19 Mar 2017 22:10:49 +0100
retitle 858177 CVE-2016-3921 CVE-2016-3885 CVE-2016-3861
thanks
 
> On Sun, Mar 19, 2017 at 01:38:15PM +0100, Moritz Muehlenhoff wrote:
> > Source: android-platform-system-core
> > Severity: grave
> > Tags: security
> > 
> > Please see
> > https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3921
> 
> Also:
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3885 

Also:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3861
(the platform/system/core bits)

Cheers,
        Moritz

Changed Bug title to 'CVE-2016-3921 CVE-2016-3885 CVE-2016-3861' from 'CVE-2016-3921 CVE-2016-3885'. Request was from Moritz Mühlenhoff <jmm@inutil.org> to control@bugs.debian.org. (Sun, 19 Mar 2017 21:12:25 GMT) (full text, mbox, link).

Information forwarded to debian-bugs-dist@lists.debian.org, Android Tools Maintainers <android-tools-devel@lists.alioth.debian.org>:
Bug#858177; Package src:android-platform-system-core. (Tue, 21 Mar 2017 20:15:05 GMT) (full text, mbox, link).

Acknowledgement sent to Hans-Christoph Steiner <hans@eds.org>:
Extra info received and forwarded to list. Copy sent to Android Tools Maintainers <android-tools-devel@lists.alioth.debian.org>. (Tue, 21 Mar 2017 20:15:05 GMT) (full text, mbox, link).

Message #24 received at 858177@bugs.debian.org (full text, mbox, reply):

From: Hans-Christoph Steiner <hans@eds.org>
To: 858177@bugs.debian.org
Subject: not affected
Date: Tue, 21 Mar 2017 21:12:28 +0100
Almost all of the Android CVEs are for the Android OS, not the Android
SDK.  The tricky part is that they are built from the same source tree.
Another thing to note is that some of the Android SDK libs used in the
SDK run at elevated privileges in Android OS, but not when part of the
SDK.  So there is a whole class of exploits that are irrelevant to the
SDK.  And we haven't packaged any part of the Android SDK that interacts
with the network, so anything saying "remote code execution on Android"
seems unlikely to be relevant.

So anyone who wants to look out for these should only look for CVEs that
affect the Android SDK, not Android, e.g.
https://www.cvedetails.com/vulnerability-list/vendor_id-1224/product_id-13517/Google-Android-Sdk.html

CVE-2016-3861 - not affected
* no remote access
* nothing runs as a privileged process
* some affected files not included in any Debian package:
  * libs/binder/Parcel.cpp
  * media/libmediaplayerservice/MediaPlayerService.cpp
* looks worth fixing as a usability bug

CVE-2016-3885 - not affected
* debuggerd/debuggerd.cpp is not included in any Debian package
* the whole debuggerd is not packaged

CVE-2016-3921 - not affected
* libsysutils/src/FrameworkListener.cpp is not included in any Debian
package
* the whole libsysutils is not packaged


So my question to you is: how can we make it easier to ignore these?  I
think its safe to ignore Android CVEs, since there have been some
separate Android SDK CVEs.  I can't think of a security bug in Android
that has affected the SDK in any significant way.

Information forwarded to debian-bugs-dist@lists.debian.org, Android Tools Maintainers <android-tools-devel@lists.alioth.debian.org>:
Bug#858177; Package src:android-platform-system-core. (Tue, 21 Mar 2017 20:15:10 GMT) (full text, mbox, link).

Acknowledgement sent to Hans-Christoph Steiner <hans@eds.org>:
Extra info received and forwarded to list. Copy sent to Android Tools Maintainers <android-tools-devel@lists.alioth.debian.org>. (Tue, 21 Mar 2017 20:15:10 GMT) (full text, mbox, link).

Message #29 received at 858177@bugs.debian.org (full text, mbox, reply):

From: Hans-Christoph Steiner <hans@eds.org>
To: Moritz Muehlenhoff <jmm@debian.org>, 858177@bugs.debian.org
Subject: Re: Bug#858177: CVE-2016-3921
Date: Tue, 21 Mar 2017 21:14:21 +0100
Control: severity -1 important
Control: tags -1 -security

Severity set to 'important' from 'grave' Request was from Hans-Christoph Steiner <hans@eds.org> to 858177-submit@bugs.debian.org. (Tue, 21 Mar 2017 20:15:10 GMT) (full text, mbox, link).

Removed tag(s) security. Request was from Hans-Christoph Steiner <hans@eds.org> to 858177-submit@bugs.debian.org. (Tue, 21 Mar 2017 20:15:11 GMT) (full text, mbox, link).

Reply sent to Hans-Christoph Steiner <hans@eds.org>:
You have taken responsibility. (Mon, 27 Mar 2017 21:03:16 GMT) (full text, mbox, link).

Notification sent to Moritz Muehlenhoff <jmm@debian.org>:
Bug acknowledged by developer. (Mon, 27 Mar 2017 21:03:16 GMT) (full text, mbox, link).

Message #38 received at 858177-close@bugs.debian.org (full text, mbox, reply):

From: Hans-Christoph Steiner <hans@eds.org>
To: 858177-close@bugs.debian.org
Subject: Bug#858177: fixed in android-platform-system-core 1:7.0.0+r1-4
Date: Mon, 27 Mar 2017 21:00:13 +0000
Source: android-platform-system-core
Source-Version: 1:7.0.0+r1-4

We believe that the bug you reported is fixed in the latest version of
android-platform-system-core, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 858177@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Hans-Christoph Steiner <hans@eds.org> (supplier of updated android-platform-system-core package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 15 Mar 2017 13:47:44 +0100
Source: android-platform-system-core
Binary: android-liblog android-liblog-dev android-libcutils android-libcutils-dev adb android-libsparse android-libsparse-dev android-libutils android-libutils-dev android-libziparchive android-libziparchive-dev android-platform-system-core-headers android-libbacktrace android-libbacktrace-dev android-libadb android-libadb-dev android-libbase android-libbase-dev fastboot simg2img img2simg append2simg android-tools-adb android-tools-fastboot
Architecture: source amd64 all
Version: 1:7.0.0+r1-4
Distribution: unstable
Urgency: medium
Maintainer: Android Tools Maintainers <android-tools-devel@lists.alioth.debian.org>
Changed-By: Hans-Christoph Steiner <hans@eds.org>
Description:
 adb        - Android Debug Bridge
 android-libadb - Library for Android Debug Bridge
 android-libadb-dev - Library for Android Debug Bridge - Development files
 android-libbacktrace - Android backtrace library
 android-libbacktrace-dev - Android backtrace library - Development files
 android-libbase - Android base library
 android-libbase-dev - Android base library - Development files
 android-libcutils - Android utils library for C
 android-libcutils-dev - Android utils library for C - Development files
 android-liblog - Android NDK logger interfaces
 android-liblog-dev - Android NDK logger interfaces - Development files
 android-libsparse - Library for sparse files
 android-libsparse-dev - Library for sparse files - Development files
 android-libutils - Android Utility Function Library
 android-libutils-dev - Android Utility Function Library - Development files
 android-libziparchive - Library for ZIP archives
 android-libziparchive-dev - Library for ZIP archives - Development files
 android-platform-system-core-headers - Shared headers in AOSP repository platform/system/core
 android-tools-adb - transitional package
 android-tools-fastboot - transitional package
 append2simg - Android sparse image tool
 fastboot   - Android fastboot tool
 img2simg   - Android sparse image creation tool
 simg2img   - Android sparse image conversion tool
Closes: 688280 823792 858177
Changes:
 android-platform-system-core (1:7.0.0+r1-4) unstable; urgency=medium
 .
   * transitional dummy packages for android-tools-adb / android-tools-fastboot
   * move adb log file to proper dir (Closes: #823792, #688280)
   * import upstream 7.0.0_r31 fixes for CVE-2016-3861 (Closes: #858177)
Checksums-Sha1:
 9ce2a71feb396562649096cc6cde3488f643b669 5104 android-platform-system-core_7.0.0+r1-4.dsc
 3395d91be9e1bf1686518b1481b8247f6f5bcda8 31876 android-platform-system-core_7.0.0+r1-4.debian.tar.xz
 f26e8a27da442dd8062a560ddfa68c45924c0ece 397836 adb-dbgsym_7.0.0+r1-4_amd64.deb
 40d658282649f740ff469d10ef9b6ab7de1df45b 71538 adb_7.0.0+r1-4_amd64.deb
 4e4348167f227eaeab5ecb0120c72f2d3bd10913 763150 android-libadb-dbgsym_7.0.0+r1-4_amd64.deb
 d62fc636df7d3e3959a920312d37d94c4fd73d66 14996 android-libadb-dev_7.0.0+r1-4_amd64.deb
 52548f39de99b2c4d4be4c73b9941e9b76bd19b8 82414 android-libadb_7.0.0+r1-4_amd64.deb
 14e016cf1c969c3d9f2341aefbe80f3244612d38 244906 android-libbacktrace-dbgsym_7.0.0+r1-4_amd64.deb
 422db3c6b63e4c5be8fe2f9ee1585f627ed3439e 9732 android-libbacktrace-dev_7.0.0+r1-4_amd64.deb
 d40ed0f370d53a07522f0c369d90feb3b2bb8c12 33498 android-libbacktrace_7.0.0+r1-4_amd64.deb
 8a9d2214bcf87d856316bcbe234be0be42353979 161310 android-libbase-dbgsym_7.0.0+r1-4_amd64.deb
 2ec9443e85dd098f10f7b105f014cc48b0e93806 17220 android-libbase-dev_7.0.0+r1-4_amd64.deb
 d5147f63a91bf5eb50adad246b411d4b66964745 20438 android-libbase_7.0.0+r1-4_amd64.deb
 9e6e9e7df32049e6b6231bfe15e4adb649bff88d 56268 android-libcutils-dbgsym_7.0.0+r1-4_amd64.deb
 f6588122aaad3d6264b8419a73e9131f7121d12a 23062 android-libcutils-dev_7.0.0+r1-4_amd64.deb
 d01ce9e75a246ec31858be0b15b329bd5f43caf0 24290 android-libcutils_7.0.0+r1-4_amd64.deb
 71c073d6582977f8a31229f55c78e9c1e3db68b7 33506 android-liblog-dbgsym_7.0.0+r1-4_amd64.deb
 2bf62e268285d66385783dd59b3f22fb1c29b488 19056 android-liblog-dev_7.0.0+r1-4_amd64.deb
 a3be6e5d9ed3b802730ee67369b0cfeb68f443ac 18016 android-liblog_7.0.0+r1-4_amd64.deb
 4784e927eff04c84669dd52d277fc22c6517d9a9 28922 android-libsparse-dbgsym_7.0.0+r1-4_amd64.deb
 fb42601d620a6a8d548ed84ff81754ab69a141c0 9250 android-libsparse-dev_7.0.0+r1-4_amd64.deb
 3f4958cb8076a41a9b1d96ff7a02414d81b2c873 18272 android-libsparse_7.0.0+r1-4_amd64.deb
 480eabee6b607d215f1035ed0f9d879bac6448bc 242736 android-libutils-dbgsym_7.0.0+r1-4_amd64.deb
 3619f7641d844a54e6cdcdcfd22159b42b0438f4 52240 android-libutils-dev_7.0.0+r1-4_amd64.deb
 3f6c2d469f7b6af9825760c005bef2014468157c 50582 android-libutils_7.0.0+r1-4_amd64.deb
 f74091c6e6f535b00e25938c2f23d3cd3a15f85c 116826 android-libziparchive-dbgsym_7.0.0+r1-4_amd64.deb
 75ac5c77ca34f945d88de0e1412b5b0f17de6a38 10768 android-libziparchive-dev_7.0.0+r1-4_amd64.deb
 4a3ec06256fbcfda248f6812cd9297898d687de2 21244 android-libziparchive_7.0.0+r1-4_amd64.deb
 7fc13e3d85d49f8353c2dd52c4573d00d4c5caca 32846 android-platform-system-core-headers_7.0.0+r1-4_all.deb
 835346dca2e573a8d49a034c8a696791fc90bcf2 16729 android-platform-system-core_7.0.0+r1-4_amd64.buildinfo
 9f07f8304f1591c3b8c4989c08d7ba58de0eb948 6722 android-tools-adb_7.0.0+r1-4_all.deb
 9290fbd672790ce38997ef8ace2480c56b4a32be 6726 android-tools-fastboot_7.0.0+r1-4_all.deb
 1c008529d006981d5bc5590d731fae9cdcd3642b 6596 append2simg-dbgsym_7.0.0+r1-4_amd64.deb
 3096adae0a57f9282ca0d4e719223719599a1fcf 9766 append2simg_7.0.0+r1-4_amd64.deb
 115049599931b34dcc5b6163a4f18c5a8dd6bccb 300994 fastboot-dbgsym_7.0.0+r1-4_amd64.deb
 2c7ce81cc8235228b8e39236642e1d05c602a59c 48876 fastboot_7.0.0+r1-4_amd64.deb
 74687154d05331c0cdefabf994130b35a91b0e42 6178 img2simg-dbgsym_7.0.0+r1-4_amd64.deb
 2b4e6f60f8455237590194ff62b3d0ecddfa1a06 9610 img2simg_7.0.0+r1-4_amd64.deb
 78effe3cbf966f6febb255271066fa89a80e9cab 6278 simg2img-dbgsym_7.0.0+r1-4_amd64.deb
 793b486860bdbb087b734de36b236b129250d141 10668 simg2img_7.0.0+r1-4_amd64.deb
Checksums-Sha256:
 443ed83a2f207c90efb46e3f2303f11b1a9a3d1a7fe5171c88ad4a8b2f04e92d 5104 android-platform-system-core_7.0.0+r1-4.dsc
 14c16b79e05076e20d7c7987488f9a7627d57c3e42f3639db38666a84bae5fef 31876 android-platform-system-core_7.0.0+r1-4.debian.tar.xz
 6c3e90c7215dc99c49574f8f84ab89ab6b609bb7b3b439c6dcf3fb3ef51bfbd1 397836 adb-dbgsym_7.0.0+r1-4_amd64.deb
 6d58c4fd485d60a45b273eedb309911b8e54d24642a1e3fc80858cc51dcf8a6f 71538 adb_7.0.0+r1-4_amd64.deb
 1d70cc4b099b2a8b10cdcd79af3c80781cc88430ede92717139f53370be9a410 763150 android-libadb-dbgsym_7.0.0+r1-4_amd64.deb
 da974218d6af56435a941f94ab324ccc8f5349da9e91a35f0dec46e854bd288b 14996 android-libadb-dev_7.0.0+r1-4_amd64.deb
 49ab279121da76753b69680642a65cac5ac065080c1d9f4c9985f6d070b68e90 82414 android-libadb_7.0.0+r1-4_amd64.deb
 836175b1374d39cc2e2c19ab0726d114a3db2c986fc0ed140c9a5a0bdf6e9b4a 244906 android-libbacktrace-dbgsym_7.0.0+r1-4_amd64.deb
 78a8d26e644696ec2630a758e2b37d33b7793650f2afb864b2789f8a27004930 9732 android-libbacktrace-dev_7.0.0+r1-4_amd64.deb
 d3f4f5dc5b49385c7a86632fe5a6f47b2d6adbc19fb911eb9f5ab3580e48d3d4 33498 android-libbacktrace_7.0.0+r1-4_amd64.deb
 8a4115ce2d25898c01dc91aff6ed42a97456c06bc0427529acf554de5c84ef09 161310 android-libbase-dbgsym_7.0.0+r1-4_amd64.deb
 a48dd4c753783d14fe324f61b937cef9c354da8872668298cf49144f73e4bfed 17220 android-libbase-dev_7.0.0+r1-4_amd64.deb
 1691b8b636f7170772bd42181a137b0de4a98032aec452cc70bfe1f08941f838 20438 android-libbase_7.0.0+r1-4_amd64.deb
 d0a237c6ed1a669a89edbb1fc8a48b6ebe02375d1920112d7cdf86a38aabd172 56268 android-libcutils-dbgsym_7.0.0+r1-4_amd64.deb
 57d9f5ada18f92a3129b4413a0ea46b150eef8a7d51095dbd51b9163c5436dc8 23062 android-libcutils-dev_7.0.0+r1-4_amd64.deb
 9037feced803a1e9997ede4c8d1a362303a7d75836ec4eeb4855af26ffa8873e 24290 android-libcutils_7.0.0+r1-4_amd64.deb
 cb066ed5daca545a476c2ecb1e10bf249d408304c96e7c720a3a8db2387e5bfd 33506 android-liblog-dbgsym_7.0.0+r1-4_amd64.deb
 40ec70c9970d1388515e92394b8a24095dc9494b66e3fb2a635533c25b81ef17 19056 android-liblog-dev_7.0.0+r1-4_amd64.deb
 728b417d09aa85eb778a2e925b25d52925cfefa4e2805dc3c6a0031fb2646e3b 18016 android-liblog_7.0.0+r1-4_amd64.deb
 0ba06d2e1166a14fbad6129a506ee9a7473337d463131387e7cc4b339d278f58 28922 android-libsparse-dbgsym_7.0.0+r1-4_amd64.deb
 20cba47bc92baad1846d10e11d104332d07b756c91c77e819cfdb0121de4382c 9250 android-libsparse-dev_7.0.0+r1-4_amd64.deb
 54e999de0dd33ed48730d998ab8e707eb7e4446b9381353c249576a535780da9 18272 android-libsparse_7.0.0+r1-4_amd64.deb
 ff26f6f1f91efa72e8e0c446011e3551c3a0e611a7763c54609021c5ce942c11 242736 android-libutils-dbgsym_7.0.0+r1-4_amd64.deb
 8198bd360d81993f118e1db57c8e8cabe9b007800942f5f3bf78aebaeef7a1dd 52240 android-libutils-dev_7.0.0+r1-4_amd64.deb
 6f13e62e41ac7e6c3ba8d4804ff6f929092075b9ce05dd7fbe386b64026b23ae 50582 android-libutils_7.0.0+r1-4_amd64.deb
 e6cb6d6b0a89930cd586fe702ae5293e114e87a0cfffcb863ea2828964c800e0 116826 android-libziparchive-dbgsym_7.0.0+r1-4_amd64.deb
 b84f3b58acfa79ef62abd0481eb1ea85f24bb8876561c58f2a6224e8eace1600 10768 android-libziparchive-dev_7.0.0+r1-4_amd64.deb
 faad24c4f7c5c16f4fc53a5b2a6e63ff8dfcdaf2e0942855f37a595820ea3505 21244 android-libziparchive_7.0.0+r1-4_amd64.deb
 042c308f0e953151aece746ddcde3ec97afaddc296e583623e382022e8e4d492 32846 android-platform-system-core-headers_7.0.0+r1-4_all.deb
 d34d5a3c03a4d521cff6b70af349fc8395d02268687c6e419611817346601531 16729 android-platform-system-core_7.0.0+r1-4_amd64.buildinfo
 3459ab5c6f0c53f5af04d14b0dc5dba40b153eed3790000b5f4ad6117c8d17c9 6722 android-tools-adb_7.0.0+r1-4_all.deb
 ab2f80d008ff818dd3e0bcb8602b090938ebb0571f78128955b4d7f163bba6d9 6726 android-tools-fastboot_7.0.0+r1-4_all.deb
 3a67a85c5ac70aa30b5e38edabd823f5b8b2344c79834ef520063f96b4b51141 6596 append2simg-dbgsym_7.0.0+r1-4_amd64.deb
 f2f9496274bf69d8de5352cc9596b807b0000b6f0d89a608ceb079158053304e 9766 append2simg_7.0.0+r1-4_amd64.deb
 7472cd59edf144284de6c85f0118888e478f9df286b1d0e3a1708ece79430569 300994 fastboot-dbgsym_7.0.0+r1-4_amd64.deb
 ac116448a699114e12e2dab54bce7129b3ce1242c6d67743246151d4ddfd795f 48876 fastboot_7.0.0+r1-4_amd64.deb
 7ca7f443e1a11fedf938b3e5695f7a33234625d70cbf19cd5f521e0bf48598e9 6178 img2simg-dbgsym_7.0.0+r1-4_amd64.deb
 3f7f33083866c770f61c2526e8e42b6e1c992eff7a3b7f462e4fcee7de3f38ff 9610 img2simg_7.0.0+r1-4_amd64.deb
 ba3d66342786f801b9a8479a55e1fff25fe0f874e1ecccab62ec666e3273642b 6278 simg2img-dbgsym_7.0.0+r1-4_amd64.deb
 86f65ca246db17b9c399e2d2d142a296d356b79d126c031b85d9811ce51488e2 10668 simg2img_7.0.0+r1-4_amd64.deb
Files:
 45df1bda153a64dd098d9ec234b5d722 5104 devel optional android-platform-system-core_7.0.0+r1-4.dsc
 95cf397cf64c867f3e55b8b8a52c3951 31876 devel optional android-platform-system-core_7.0.0+r1-4.debian.tar.xz
 7d4c54bb650558a3c02b8d90b17889f8 397836 debug extra adb-dbgsym_7.0.0+r1-4_amd64.deb
 3aa5a37eaaae8cbaba10ea9229ffa06a 71538 devel optional adb_7.0.0+r1-4_amd64.deb
 66417a6200dca64675a6e9600c27d1f2 763150 debug extra android-libadb-dbgsym_7.0.0+r1-4_amd64.deb
 b343ab0e7c78064044464d766c2a74a3 14996 libdevel optional android-libadb-dev_7.0.0+r1-4_amd64.deb
 4df2e4e3e88a2ba57c92d4767836fa74 82414 libs optional android-libadb_7.0.0+r1-4_amd64.deb
 0df5e04c34899a96116d9e563114ec9d 244906 debug extra android-libbacktrace-dbgsym_7.0.0+r1-4_amd64.deb
 75c173ba4472be02421192d030777e7e 9732 libdevel optional android-libbacktrace-dev_7.0.0+r1-4_amd64.deb
 de54d775a282336ec5d86acfa55ad304 33498 libs optional android-libbacktrace_7.0.0+r1-4_amd64.deb
 9a1f94fb71c2f84202e6524f0e426638 161310 debug extra android-libbase-dbgsym_7.0.0+r1-4_amd64.deb
 80d6973a39746cc80225c82f09ed02d7 17220 libdevel optional android-libbase-dev_7.0.0+r1-4_amd64.deb
 9d3a6155e11685568a039bd54a6fbdb7 20438 libs optional android-libbase_7.0.0+r1-4_amd64.deb
 e90e564febd971bd4a92621fe76ed8a9 56268 debug extra android-libcutils-dbgsym_7.0.0+r1-4_amd64.deb
 976bb1a65038118b9ee062799c5d67f5 23062 libdevel optional android-libcutils-dev_7.0.0+r1-4_amd64.deb
 7a25c59438cebcf4dead977af52bfbc5 24290 libs optional android-libcutils_7.0.0+r1-4_amd64.deb
 49ef52ff4189de3fdc324dedd038a5b1 33506 debug extra android-liblog-dbgsym_7.0.0+r1-4_amd64.deb
 84cb5d83bd21a18a7cd80e8b362a9b45 19056 libdevel optional android-liblog-dev_7.0.0+r1-4_amd64.deb
 c33bc16f93aad7cc4eb83922787f56b6 18016 libs optional android-liblog_7.0.0+r1-4_amd64.deb
 b5fb9ae93f02d4843d220989fec1ad45 28922 debug extra android-libsparse-dbgsym_7.0.0+r1-4_amd64.deb
 108cf88c5d78091a5fd09cd17d012e18 9250 libdevel optional android-libsparse-dev_7.0.0+r1-4_amd64.deb
 89cd1d81122ffc53c12e49b0ea70f1d8 18272 libs optional android-libsparse_7.0.0+r1-4_amd64.deb
 55e202fc731d578a0b8e9a2cfcb62f96 242736 debug extra android-libutils-dbgsym_7.0.0+r1-4_amd64.deb
 5e7860a14b9a8de1364e06b6f32012c9 52240 libdevel optional android-libutils-dev_7.0.0+r1-4_amd64.deb
 c38c77fbb22176e44c12353b9c87c4e7 50582 libs optional android-libutils_7.0.0+r1-4_amd64.deb
 7154ce7b732d20947936f5eda6a5d34e 116826 debug extra android-libziparchive-dbgsym_7.0.0+r1-4_amd64.deb
 227aa43f0fd1c7c7b49e974dc6535c75 10768 libdevel optional android-libziparchive-dev_7.0.0+r1-4_amd64.deb
 9c5c978f9c252929d7c8caa25a353e10 21244 libs optional android-libziparchive_7.0.0+r1-4_amd64.deb
 fbd96e7007303eae2559a9f22ecdfbbb 32846 libdevel optional android-platform-system-core-headers_7.0.0+r1-4_all.deb
 b8de9fd8fee9c219589caa7fba26c2a3 16729 devel optional android-platform-system-core_7.0.0+r1-4_amd64.buildinfo
 57a002a174e03bfbe2df23254de6cde4 6722 oldlibs extra android-tools-adb_7.0.0+r1-4_all.deb
 6819914667c76ff1ee3559d6cdaa901f 6726 oldlibs extra android-tools-fastboot_7.0.0+r1-4_all.deb
 429e81276978b6f80cc4941c2d6d4dda 6596 debug extra append2simg-dbgsym_7.0.0+r1-4_amd64.deb
 3f5b7e63c33d15aaa2d6b692b0089adb 9766 devel optional append2simg_7.0.0+r1-4_amd64.deb
 03945268d76307ac6b3179c649f37693 300994 debug extra fastboot-dbgsym_7.0.0+r1-4_amd64.deb
 84cbfd24bc9aa1300b25222fa41b5dee 48876 devel optional fastboot_7.0.0+r1-4_amd64.deb
 88327f14eb1041d8aed191a8e683d69d 6178 debug extra img2simg-dbgsym_7.0.0+r1-4_amd64.deb
 73bd405fc3f65e37ea723fd05aea86e2 9610 devel optional img2simg_7.0.0+r1-4_amd64.deb
 b6dd278625890354c08b92606685f2f0 6278 debug extra simg2img-dbgsym_7.0.0+r1-4_amd64.deb
 a308270621e73699952a80b6052d78bd 10668 devel optional simg2img_7.0.0+r1-4_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: GPG for Android - https://guardianproject.info/code/gnupg/

iQEcBAEBCAAGBQJY2Lr+AAoJED4XeBe6G5v69RIIAMO58UtnpUyiUmga6LhyKvk/
QL/5T7WDLTKws9GDNLhmh4j/J+3z3ROu+byEAQzQc3jaDeUxhyhLVA1i98VXsIJS
40ej430x+T3MGmAeqps+esW5L/n1hFtCrxKzp3I6tM28tFfFx1aDgbSQpGxBm0Hh
8M25V6iq/UQX4fSaqMSQ9mJ9xt6l/jwKnEUAJbWmhXNVzV0/VRuMgJT9xoTlcOfg
4AOObTsbDATVEpYg7whKkd0wzozAqQI2uOaOuawiWWYQGCFSFC3jY43ohNcKAF0i
kOLYaB1j8FJijTppPYBW6VZSOgpIYLQokGMiS353BN3GQdmZkCP+1mYP3ENQ2N0=
=99yw
-----END PGP SIGNATURE-----

Information forwarded to debian-bugs-dist@lists.debian.org, Android Tools Maintainers <android-tools-devel@lists.alioth.debian.org>:
Bug#858177; Package src:android-platform-system-core. (Tue, 28 Mar 2017 21:48:03 GMT) (full text, mbox, link).

Acknowledgement sent to Moritz Mühlenhoff <jmm@inutil.org>:
Extra info received and forwarded to list. Copy sent to Android Tools Maintainers <android-tools-devel@lists.alioth.debian.org>. (Tue, 28 Mar 2017 21:48:03 GMT) (full text, mbox, link).

Message #43 received at 858177@bugs.debian.org (full text, mbox, reply):

From: Moritz Mühlenhoff <jmm@inutil.org>
To: Hans-Christoph Steiner <hans@eds.org>
Cc: 858177@bugs.debian.org
Subject: Re: not affected
Date: Tue, 28 Mar 2017 23:44:41 +0200
On Tue, Mar 21, 2017 at 09:12:28PM +0100, Hans-Christoph Steiner wrote:
> 
> Almost all of the Android CVEs are for the Android OS, not the Android
> SDK.  The tricky part is that they are built from the same source tree.
> Another thing to note is that some of the Android SDK libs used in the
> SDK run at elevated privileges in Android OS, but not when part of the
> SDK.  So there is a whole class of exploits that are irrelevant to the
> SDK.  And we haven't packaged any part of the Android SDK that interacts
> with the network, so anything saying "remote code execution on Android"
> seems unlikely to be relevant.
> 
> So anyone who wants to look out for these should only look for CVEs that
> affect the Android SDK, not Android, e.g.
> https://www.cvedetails.com/vulnerability-list/vendor_id-1224/product_id-13517/Google-Android-Sdk.html
> 
> CVE-2016-3861 - not affected
> * no remote access
> * nothing runs as a privileged process
> * some affected files not included in any Debian package:
>   * libs/binder/Parcel.cpp
>   * media/libmediaplayerservice/MediaPlayerService.cpp
> * looks worth fixing as a usability bug
> 
> CVE-2016-3885 - not affected
> * debuggerd/debuggerd.cpp is not included in any Debian package
> * the whole debuggerd is not packaged
> 
> CVE-2016-3921 - not affected
> * libsysutils/src/FrameworkListener.cpp is not included in any Debian
> package
> * the whole libsysutils is not packaged

Thanks. I'll update the security tracker on those.

> So my question to you is: how can we make it easier to ignore these?  I
> think its safe to ignore Android CVEs, since there have been some
> separate Android SDK CVEs.  I can't think of a security bug in Android
> that has affected the SDK in any significant way.

I'd say for the next Android security bulletin, we simply run this by
you and the other Debian Android maintainer and we then let you comment?

And somewhat related, is there are security contact for Android, which
is able to answer technical questions?

There's a number of CVE IDs in the Android bulletins, which might
potentially affect the standard Linux kernel and we'd like clarification:
https://security-tracker.debian.org/tracker/CVE-2017-0508
https://security-tracker.debian.org/tracker/CVE-2017-0507
https://security-tracker.debian.org/tracker/CVE-2017-0427
https://security-tracker.debian.org/tracker/CVE-2016-6753
https://security-tracker.debian.org/tracker/CVE-2016-3803
https://security-tracker.debian.org/tracker/CVE-2016-3802
https://security-tracker.debian.org/tracker/CVE-2016-3775

Cheers,
        Moritz

Reply sent to Hans-Christoph Steiner <hans@eds.org>:
You have taken responsibility. (Mon, 24 Apr 2017 15:09:03 GMT) (full text, mbox, link).

Notification sent to Moritz Muehlenhoff <jmm@debian.org>:
Bug acknowledged by developer. (Mon, 24 Apr 2017 15:09:04 GMT) (full text, mbox, link).

Message #48 received at 858177-close@bugs.debian.org (full text, mbox, reply):

From: Hans-Christoph Steiner <hans@eds.org>
To: 858177-close@bugs.debian.org
Subject: Bug#858177: fixed in android-platform-system-core 1:7.0.0+r33-1
Date: Mon, 24 Apr 2017 15:04:42 +0000
Source: android-platform-system-core
Source-Version: 1:7.0.0+r33-1

We believe that the bug you reported is fixed in the latest version of
android-platform-system-core, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 858177@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Hans-Christoph Steiner <hans@eds.org> (supplier of updated android-platform-system-core package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 24 Apr 2017 15:53:07 +0200
Source: android-platform-system-core
Binary: android-liblog android-liblog-dev android-libcutils android-libcutils-dev adb android-libsparse android-libsparse-dev android-libutils android-libutils-dev android-libziparchive android-libziparchive-dev android-platform-system-core-headers android-libbacktrace android-libbacktrace-dev android-libadb android-libadb-dev android-libbase android-libbase-dev fastboot simg2img img2simg append2simg android-tools-adb android-tools-fastboot
Architecture: source amd64 all
Version: 1:7.0.0+r33-1
Distribution: unstable
Urgency: medium
Maintainer: Android Tools Maintainers <android-tools-devel@lists.alioth.debian.org>
Changed-By: Hans-Christoph Steiner <hans@eds.org>
Description:
 adb        - Android Debug Bridge
 android-libadb - Library for Android Debug Bridge
 android-libadb-dev - Library for Android Debug Bridge - Development files
 android-libbacktrace - Android backtrace library
 android-libbacktrace-dev - Android backtrace library - Development files
 android-libbase - Android base library
 android-libbase-dev - Android base library - Development files
 android-libcutils - Android utils library for C
 android-libcutils-dev - Android utils library for C - Development files
 android-liblog - Android NDK logger interfaces
 android-liblog-dev - Android NDK logger interfaces - Development files
 android-libsparse - Library for sparse files
 android-libsparse-dev - Library for sparse files - Development files
 android-libutils - Android Utility Function Library
 android-libutils-dev - Android Utility Function Library - Development files
 android-libziparchive - Library for ZIP archives
 android-libziparchive-dev - Library for ZIP archives - Development files
 android-platform-system-core-headers - Shared headers in AOSP repository platform/system/core
 android-tools-adb - transitional package
 android-tools-fastboot - transitional package
 append2simg - Android sparse image tool
 fastboot   - Android fastboot tool
 img2simg   - Android sparse image creation tool
 simg2img   - Android sparse image conversion tool
Closes: 858177 858942 859081
Changes:
 android-platform-system-core (1:7.0.0+r33-1) unstable; urgency=medium
 .
   * New upstream release (Closes: #858177, #859081, #858942)
Checksums-Sha1:
 1b75cff2f1d7bd0b5f6fab7339d6d5043f00f8a5 5111 android-platform-system-core_7.0.0+r33-1.dsc
 3967de7f902309b8cc0544d506611e62d8773632 1572607 android-platform-system-core_7.0.0+r33.orig.tar.gz
 cd6a08aee12c76db6c2526e144c95765a1c9032b 27460 android-platform-system-core_7.0.0+r33-1.debian.tar.xz
 fbc704cfa8b2bf9029c726e68f3e3ad898eefe91 398066 adb-dbgsym_7.0.0+r33-1_amd64.deb
 2fa52cee8cd1e551ee484971ef538bbaa7395a56 71544 adb_7.0.0+r33-1_amd64.deb
 0aacff7692cd46d7d9064b97e5f66dd2bb3c261a 763614 android-libadb-dbgsym_7.0.0+r33-1_amd64.deb
 6617c278ed1010c71c49e6fb20324ee67bdc8ed2 15006 android-libadb-dev_7.0.0+r33-1_amd64.deb
 0e95eef20b8ce3dc0c4d0afe752feacbbac72800 82240 android-libadb_7.0.0+r33-1_amd64.deb
 2a3c07bc7f1c415b562847194c76177bc76008e9 244974 android-libbacktrace-dbgsym_7.0.0+r33-1_amd64.deb
 dceba2bc9459ecc3802724efa63116cdf1858ad8 9746 android-libbacktrace-dev_7.0.0+r33-1_amd64.deb
 704bf164a52e3f2a0d870ac3ba0781046b6f6650 33564 android-libbacktrace_7.0.0+r33-1_amd64.deb
 28e1ca84fcb8e800b24bb2d6737372cdd3cc512c 161284 android-libbase-dbgsym_7.0.0+r33-1_amd64.deb
 3af100740c4005bdf7b30555b59bf589e19f1fdb 17242 android-libbase-dev_7.0.0+r33-1_amd64.deb
 a58aaa7edd18920d9e4796a52ded8f6140b6e07a 20464 android-libbase_7.0.0+r33-1_amd64.deb
 51235654b05beef2736da3589941b2dc126d0e8a 56188 android-libcutils-dbgsym_7.0.0+r33-1_amd64.deb
 f630559af62596ede854c83c995178ba524064a1 23074 android-libcutils-dev_7.0.0+r33-1_amd64.deb
 127d89b0750a26f7671e99cfb735bad7ec737d99 24264 android-libcutils_7.0.0+r33-1_amd64.deb
 72fbd348655cd1cefae676f945448d44f9a8a7cc 33504 android-liblog-dbgsym_7.0.0+r33-1_amd64.deb
 d699efdb78f18a9c0434f3bb59feed407d2fae16 19074 android-liblog-dev_7.0.0+r33-1_amd64.deb
 e9f93b79d93193cafe0cfa525a319ef467c07c49 18046 android-liblog_7.0.0+r33-1_amd64.deb
 b1b486670a9ae354f926db3d3095c950f64a7882 28926 android-libsparse-dbgsym_7.0.0+r33-1_amd64.deb
 96fc8ea34999b47596df544644c0d219141eabb5 9272 android-libsparse-dev_7.0.0+r33-1_amd64.deb
 909bcfa9b1025d46290c64ac75ad4111ff54365f 18350 android-libsparse_7.0.0+r33-1_amd64.deb
 24ccd1c4761b2f822cdc4fe8f24b5726c83509d7 242700 android-libutils-dbgsym_7.0.0+r33-1_amd64.deb
 2af871a71a028419c6eab71faf301fab03ec92ce 52252 android-libutils-dev_7.0.0+r33-1_amd64.deb
 a3dc489f9ed17140e5d300be73062db01b480ef7 50488 android-libutils_7.0.0+r33-1_amd64.deb
 2d3c613b170550d6a1d5022b09c557d003cd37f4 116850 android-libziparchive-dbgsym_7.0.0+r33-1_amd64.deb
 e6732d1943e7b607149b3d8c115349f355075ad0 10784 android-libziparchive-dev_7.0.0+r33-1_amd64.deb
 3d06c5a38adf386c44f20745bb7f8f43f60835c4 21260 android-libziparchive_7.0.0+r33-1_amd64.deb
 325ffcc036e8cf8463b66f4f5cb16033829782db 32860 android-platform-system-core-headers_7.0.0+r33-1_all.deb
 59f576fab7639b922170fd132bb4e0254006e99b 16848 android-platform-system-core_7.0.0+r33-1_amd64.buildinfo
 cb21e5765dd828ea4ca5c58b038c43ddc9c1845a 6750 android-tools-adb_7.0.0+r33-1_all.deb
 be46274570f142b5f1d9da60e844a0ed060c7ea4 6752 android-tools-fastboot_7.0.0+r33-1_all.deb
 c8433376f9a1525be1b30ea4759ad677672c11d2 6600 append2simg-dbgsym_7.0.0+r33-1_amd64.deb
 5b09cfa596a1100f34d0d8452391673d4b83eb86 9794 append2simg_7.0.0+r33-1_amd64.deb
 6a801d3793f706c21bafdb8347da181a0f350e06 301220 fastboot-dbgsym_7.0.0+r33-1_amd64.deb
 881f7edb3c56ca5f99a0049284c8c1e1eb9649f8 48910 fastboot_7.0.0+r33-1_amd64.deb
 826b7c25861feaa5c63901124144b709ab90d2ca 6182 img2simg-dbgsym_7.0.0+r33-1_amd64.deb
 c6535c53778d524d013d4099a058a98df448632d 9646 img2simg_7.0.0+r33-1_amd64.deb
 3b08bbd44b6ae23119e729e14bb19bb5df0a75fc 6292 simg2img-dbgsym_7.0.0+r33-1_amd64.deb
 c0791b7abba36f89d0954d407d38fe37018c9184 10716 simg2img_7.0.0+r33-1_amd64.deb
Checksums-Sha256:
 d023733dd4abbbaccb123bd5880dbacfb614b83711f3e6a94362e3472a05669d 5111 android-platform-system-core_7.0.0+r33-1.dsc
 f653cf80bf04d441cbd1bb4db2dd7a2146197a5897dd5d14f074b4c08caaf685 1572607 android-platform-system-core_7.0.0+r33.orig.tar.gz
 d4b382c39fc848240743f99f57027ac2fe209e2d72fe2130beeb77aa71947fc8 27460 android-platform-system-core_7.0.0+r33-1.debian.tar.xz
 423b8e0dffd411f75aa76265ee70101d030ce76687a4b1f95af9f57313573f06 398066 adb-dbgsym_7.0.0+r33-1_amd64.deb
 9568895301036d261e9290495bc86cbafb48b355f79aaeec660898b753c6d297 71544 adb_7.0.0+r33-1_amd64.deb
 3b015c820031af301abfe263a92f7e5fdfd91ea909362444cf442426ac433841 763614 android-libadb-dbgsym_7.0.0+r33-1_amd64.deb
 9d0f0c413d95a4c1a04aea8a1df9d6aa76dca86dc932d696d0f43d0966a8e0d7 15006 android-libadb-dev_7.0.0+r33-1_amd64.deb
 85d0e42045cce4bb743ab443577f1e2ac199e785d4347bff1fe2affd863d4946 82240 android-libadb_7.0.0+r33-1_amd64.deb
 f5e8896b576f2c51b139c49202463f3c3fd3e3e5171e43ea34db46c6ca227b43 244974 android-libbacktrace-dbgsym_7.0.0+r33-1_amd64.deb
 3327ee764d705db4f14913cd8be46245d80734d300f4ca369cdd8f6fcbe8325c 9746 android-libbacktrace-dev_7.0.0+r33-1_amd64.deb
 a67befa0bef158f00b3b5fe340da43af4ee625690b70da302186fd1c1deb8cfb 33564 android-libbacktrace_7.0.0+r33-1_amd64.deb
 14d266179be9c2a958969f5fd548f92a6a5c2cc730169274539918659aec05b5 161284 android-libbase-dbgsym_7.0.0+r33-1_amd64.deb
 902f1da3fc385fdd0e153f3323daa7e5763ad1b7b21c97d3917db41ab21a6556 17242 android-libbase-dev_7.0.0+r33-1_amd64.deb
 4bb6a3900d423f9b567bc7b9139c9c908edadd011f36b917880664ee7463243a 20464 android-libbase_7.0.0+r33-1_amd64.deb
 e9e7c9e1b1b5a2b3f92d0d93c97c7de1d35f17a32cb524d4255598ede0483bbe 56188 android-libcutils-dbgsym_7.0.0+r33-1_amd64.deb
 4149db9ce1796bbd1a1fd9c60379681b4c08bfbdffd7491dbc37d1219bba68c4 23074 android-libcutils-dev_7.0.0+r33-1_amd64.deb
 46ce10de01130b1d35e4359cbfac7cc7780b7bababe7cb950419346f40ebbb87 24264 android-libcutils_7.0.0+r33-1_amd64.deb
 df5d58f3ea2debea0bd0f12eabf271a84efdb1aa5cd46cb08c76ce56751146c9 33504 android-liblog-dbgsym_7.0.0+r33-1_amd64.deb
 b55ffd518bfcc42f6a2ecc8d07e1bb6a3e0de6eb7d645034803bc0105edb5686 19074 android-liblog-dev_7.0.0+r33-1_amd64.deb
 29a0c1178de6267876e9cadc2a676bab3a0d8b59ea178e0fb25eff0f617dd70c 18046 android-liblog_7.0.0+r33-1_amd64.deb
 441b47c907f1520a14ffb68edf46183252996739c4678138e356173211903656 28926 android-libsparse-dbgsym_7.0.0+r33-1_amd64.deb
 cab757bad99be9563348ef0b6b39232a902c2c14cf2626d7b223b8ed7cc0636a 9272 android-libsparse-dev_7.0.0+r33-1_amd64.deb
 afd713b1115315591380e64b1febaa2d023a8b5245344e4730c1d1760bfce521 18350 android-libsparse_7.0.0+r33-1_amd64.deb
 a0af16952865731f559e96eee2f527e81151c08eee5f1f343bcc43a21fc3a457 242700 android-libutils-dbgsym_7.0.0+r33-1_amd64.deb
 4795bdfd4f228f011fa52b44c51cf7e38ed5b8f60e6f13349047954e6e27fa9f 52252 android-libutils-dev_7.0.0+r33-1_amd64.deb
 adbb5583bdfa011e8cdef8d85fe5a0737bcf6611f449f761e794aae0463ed489 50488 android-libutils_7.0.0+r33-1_amd64.deb
 efef0af9d6ee5ececaa54d8d47174e671b5ad6195c9f997d1ae8c698926f2969 116850 android-libziparchive-dbgsym_7.0.0+r33-1_amd64.deb
 3db8e2667050a75bd6bfd13f8b1f499b2f405e80d134707d66116dba87655261 10784 android-libziparchive-dev_7.0.0+r33-1_amd64.deb
 ced85bae70a1f51fc911cb365a9c71009006c180e503b738345953716666058b 21260 android-libziparchive_7.0.0+r33-1_amd64.deb
 888b78821f61d21f9cbc7ec692076940726e6181d76bfb2518a446b791563b7a 32860 android-platform-system-core-headers_7.0.0+r33-1_all.deb
 14380f7bd1dd92f3eb1ee1e16428514c60059ccb9ba61e6f52f55c746ebc7700 16848 android-platform-system-core_7.0.0+r33-1_amd64.buildinfo
 bec74a5c225ce912c1e1e29f6d2e59ec9407e1b2896b8e781e3ba9d09d89560d 6750 android-tools-adb_7.0.0+r33-1_all.deb
 d3b62738dc0a60d357120bcd7b7df92730edccae27f0b175fe9426f7af293012 6752 android-tools-fastboot_7.0.0+r33-1_all.deb
 e84b2d0505b5a5aba9d34898a0ded9ed30d2993b07be939ce9fcec9fc32af022 6600 append2simg-dbgsym_7.0.0+r33-1_amd64.deb
 6cc871b66bf40bfc262cf2c72fd65a2b0d3fccc4cd543dbc567f80210ddb7bd7 9794 append2simg_7.0.0+r33-1_amd64.deb
 decfa8bac807dfc37ea2d56bff27964f78803f17e90b546957344f61cd265255 301220 fastboot-dbgsym_7.0.0+r33-1_amd64.deb
 679dc965835ba8bee6b199a36edebdcc339ba01e26ad472102daa645a27cc029 48910 fastboot_7.0.0+r33-1_amd64.deb
 56e16da7ca223e22e562bcf83612502daa4a07bd5508ef855e70d485abe6f497 6182 img2simg-dbgsym_7.0.0+r33-1_amd64.deb
 4c508c58143204413f6cbba4131e09c183a51b45bd0409d1fbba61ef6d77866b 9646 img2simg_7.0.0+r33-1_amd64.deb
 7143523518c9852cdd977b715ce8eeff73014c3a4cf0c11610d63ef8f4696dd5 6292 simg2img-dbgsym_7.0.0+r33-1_amd64.deb
 21fe859ba4c382443206ccc5ae31b9646b73584ef97169c9bca5932e9ab7aa33 10716 simg2img_7.0.0+r33-1_amd64.deb
Files:
 5fb5ffe08a30ab15e88d42a227fabb15 5111 devel optional android-platform-system-core_7.0.0+r33-1.dsc
 0d11d43282579b6e4af976e7f8298652 1572607 devel optional android-platform-system-core_7.0.0+r33.orig.tar.gz
 8cbc16a5dc4f19d61bf709e0c1e6c0bc 27460 devel optional android-platform-system-core_7.0.0+r33-1.debian.tar.xz
 cd91f5b1d84eb30f3b5babb11a4e833a 398066 debug extra adb-dbgsym_7.0.0+r33-1_amd64.deb
 cf1768df2e987bacadc0a689361868d0 71544 devel optional adb_7.0.0+r33-1_amd64.deb
 ee896ed89506a0a00cadc29613366dc4 763614 debug extra android-libadb-dbgsym_7.0.0+r33-1_amd64.deb
 f2bf12bb05c5158bfd47d792c1411bff 15006 libdevel optional android-libadb-dev_7.0.0+r33-1_amd64.deb
 76ee135ace4d82e6a66197d30be70491 82240 libs optional android-libadb_7.0.0+r33-1_amd64.deb
 7480165f27a46815f05c3c5b8254b8cd 244974 debug extra android-libbacktrace-dbgsym_7.0.0+r33-1_amd64.deb
 7b2886b8322c5f89ac93576240425788 9746 libdevel optional android-libbacktrace-dev_7.0.0+r33-1_amd64.deb
 302d4e1f974c7ebbc708f6a6df86f286 33564 libs optional android-libbacktrace_7.0.0+r33-1_amd64.deb
 7ed75ca65c517613e34a6f7978e42130 161284 debug extra android-libbase-dbgsym_7.0.0+r33-1_amd64.deb
 453284b15bf83561b45fae36d22d693b 17242 libdevel optional android-libbase-dev_7.0.0+r33-1_amd64.deb
 b678bdf20924156df3369293ec29794d 20464 libs optional android-libbase_7.0.0+r33-1_amd64.deb
 022c959b66b3f06140df1f299f60dd2f 56188 debug extra android-libcutils-dbgsym_7.0.0+r33-1_amd64.deb
 0b603116eee940e1a5960490fbcb426c 23074 libdevel optional android-libcutils-dev_7.0.0+r33-1_amd64.deb
 468942dc31b87d94bde93f7f0e8cb4a5 24264 libs optional android-libcutils_7.0.0+r33-1_amd64.deb
 d50a74fb4919a9674bd5b7cfa07d9a6a 33504 debug extra android-liblog-dbgsym_7.0.0+r33-1_amd64.deb
 e92ddf77ecd39300ddf80391126a9e52 19074 libdevel optional android-liblog-dev_7.0.0+r33-1_amd64.deb
 cdc477ca48c604bfd822a1d60d9dc0c9 18046 libs optional android-liblog_7.0.0+r33-1_amd64.deb
 e066dd46d5a2d03a84db911dbf5722ab 28926 debug extra android-libsparse-dbgsym_7.0.0+r33-1_amd64.deb
 c1a5a3cd78767f31da153dc8244ff92d 9272 libdevel optional android-libsparse-dev_7.0.0+r33-1_amd64.deb
 93f50be31bc52eda978e9f390945e5dd 18350 libs optional android-libsparse_7.0.0+r33-1_amd64.deb
 d71e2c59f2e24ed5649dc4c9deff0a96 242700 debug extra android-libutils-dbgsym_7.0.0+r33-1_amd64.deb
 c4fd0e75d3b84efe9a2668f74d6895e0 52252 libdevel optional android-libutils-dev_7.0.0+r33-1_amd64.deb
 6867104a7044256844150c3ffbcbcfc1 50488 libs optional android-libutils_7.0.0+r33-1_amd64.deb
 2fbdfeb43018619abdb609e062cfef8b 116850 debug extra android-libziparchive-dbgsym_7.0.0+r33-1_amd64.deb
 9303bc14222517a104ea2f5e44648655 10784 libdevel optional android-libziparchive-dev_7.0.0+r33-1_amd64.deb
 737684f63d3f146e05eb4b27bd985530 21260 libs optional android-libziparchive_7.0.0+r33-1_amd64.deb
 fa35434d713c7955860026aec5f135bd 32860 libdevel optional android-platform-system-core-headers_7.0.0+r33-1_all.deb
 e49623212d7bccaade0353774ee0612c 16848 devel optional android-platform-system-core_7.0.0+r33-1_amd64.buildinfo
 a5ffc854606bb92095ce04be36760bfb 6750 oldlibs extra android-tools-adb_7.0.0+r33-1_all.deb
 799a2b339f327ea177622468e49613ba 6752 oldlibs extra android-tools-fastboot_7.0.0+r33-1_all.deb
 4b7527dde6496fd7900740cf537546a5 6600 debug extra append2simg-dbgsym_7.0.0+r33-1_amd64.deb
 13f3eca16be6c2931c237350dbc1745f 9794 devel optional append2simg_7.0.0+r33-1_amd64.deb
 181c96191dd3e3a4406f2e61c4034bc0 301220 debug extra fastboot-dbgsym_7.0.0+r33-1_amd64.deb
 74f0fafd94c1fb434683f7a2fe5165d4 48910 devel optional fastboot_7.0.0+r33-1_amd64.deb
 777b3f41af4f1a592c9a43da11899c2d 6182 debug extra img2simg-dbgsym_7.0.0+r33-1_amd64.deb
 b94645f3c236165375844ed836fb34f1 9646 devel optional img2simg_7.0.0+r33-1_amd64.deb
 ca7f6e0bc768ef643b2892be417b0bf8 6292 debug extra simg2img-dbgsym_7.0.0+r33-1_amd64.deb
 45f136a0f1700804cd6a7ef7b0ce26d1 10716 devel optional simg2img_7.0.0+r33-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: GPG for Android - https://guardianproject.info/code/gnupg/

iQEcBAEBCAAGBQJY/gpYAAoJED4XeBe6G5v6Eq4H/jJ/8SBKCqP5OXNo5flRxBeR
9Rb6k4b3RMP9hACiKN3f5FGqp+M6uB10Gb3SPGug2Sf9xbux3cBEh4513tu8QWXH
W1NRyUYliGUAI5pqlXRbFxmNhdCuDdvQ1f/0ejyVH4iyowbJHov1xvTZ/L+CzGKa
BsGpRi9CzoJC/EX5fcho0HxWFFEVbphxYQP+T0dlyGFnNziyp7QG+3GKYzedRUsk
5EuE1a1iZvtIuoVu0/XNgWtZ9eVVAW3oqpcf4qMN3tfUdEdx27+NyUVgZQ1COWRL
MQwHCD86eHhPo8uX8WkIJCcx9BKtl0o8zSbjfHcYAe1KSj59Nl8NoXiuBx2BTD4=
=/gSn
-----END PGP SIGNATURE-----

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Mon, 05 Jun 2017 07:29:35 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jun 19 17:22:51 2019; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook

Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started