Post Syndicated from corbet original http://lwn.net/Articles/686006/rss
The Android
security bulletin for May is available. It lists 40 different CVE
numbers addressed by the May over-the-air update; the bulk of those are at
a severity level of “high” or above. “Partners were notified about
the issues described in the bulletin on April 04, 2016 or earlier. Source
code patches for these issues will be released to the Android Open Source
Project (AOSP) repository over the next 48 hours. We will revise this
bulletin with the AOSP links when they are available. The most severe of
these issues is a Critical security vulnerability that could enable remote
code execution on an affected device through multiple methods such as
email, web browsing, and MMS when processing media files.”