Security Kernel Security Update: Local Privilege Escalation CVE-2016-5195

eva2000 · Nov 14, 2016

looks like Android still vulnerable after November security updates Fix for critical Android rooting bug is a no-show in November patch release | Ars Technica

Android users waiting for a fix for a newly discovered flaw that allows apps to bypass key operating-system security protections will have to wait at least another month. The just released patch batch for November, inexplicably, won't include it.
Click to expand...

Among the fixes announced in the November security bulletin is one for yet another Stagefright-style vulnerability in an Android component known as mediaserver. Rated critical, it allows attackers to remotely execute malicious code. A separate critical vulnerability fixed this month in the libzipfile component allows for escalation of privileges. A Google spokesman told Ars the Dirty Cow patch will be released in December. As is the case with all security fixes Google releases for Android, it will be available only for Nexus devices and a small list of other qualifying handsets. The spokesman didn't say why the Dirty Cow patch wasn't included in the patch bundle being released this month.
Click to expand...

eva2000 · Dec 5, 2016

eva2000 said: ↑
thanks @Matt for heads up. Not seeing it on my end yet.

preview of what's to come in 123.09beta01 for a kernelcheck.sh script to be baked into centmin mod

normal output mode
Code (Text):
./kernelcheck.sh
-------------------------------------------------------------
system kernel is up to date, nothing to do
-------------------------------------------------------------
debug output mode
Code (Text):
./kernelcheck.sh
latest: 3.10.0-327.36.2
current: 3.10.0-327.36.2
distro: rpm
needs_update: False
latest_installed: True
latest_available: False
inside_container: False
installed: False
up2date: False
supported: True
 
DEBUG Mode Output:
kc_latest = 3.10.0-327.36.2
kc_current = 3.10.0-327.36.2
kc_distro = rpm
kc_needs_update = False
kc_latest_installed = True
kc_latest_available = False
kc_inside_container = False
kc_installed = False
kc_up2date = False
kc_supported = True

-------------------------------------------------------------
system kernel is up to date, nothing to do
-------------------------------------------------------------
yes kernelcare detection and support/reporting
Click to expand...
officially added to 123.09beta01 ssh login alerts for kernel updates and kernelcare support Centmin Mod KernelCare & Kernel Update Check Alerts | Centmin Mod Community

Log in / Register

Forums

Want to subscribe to topics you're interested in?

Security Kernel Security Update: Local Privilege Escalation CVE-2016-5195

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Want to subscribe to topics you're interested in?

Security Kernel Security Update: Local Privilege Escalation CVE-2016-5195

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.