topic Re: Firmware patch for Fake-Id vulnerability in XPERIA archive

Firmware patch for Fake-Id vulnerability

chriscap — Wed, 30 Jul 2014 06:34:53 GMT

Hi,

Is Sony planning to roll-out a patch for the Fake-ID Android vulnerability that was recently discovered ?

Best regards,

Chris

rajanv — Wed, 30 Jul 2014 07:39:16 GMT

This vulnerability needs more investigation. Let us wait for more information and see if it leads to a patch.

chriscap — Wed, 30 Jul 2014 07:57:38 GMT

The bug was reported by Bluebox to Google in April.

Google sais it issued a patch to all (major) vendors.

The vendor is ofcourse responsible for applying/testing/distributing the patch.

The fear is that most vendord will not upgrade 'older' phones leaving millions of devices vulnerable.

Note that a fix is also available in the source tree.

rajanv — Wed, 30 Jul 2014 10:38:47 GMT