Number: AV16-020
Date: 3 February 2016
Purpose
The purpose of this advisory is to bring attention to the Android Security Bulletin for February.
Assessment
The Android Security Bulletin addresses a security update for 10 vulnerabilities (5 Critical, 4 High, and 1 Moderate) that could potentially enable remote code execution on affected devices. This update is also distributed to the Android Open Source Project (AOSP) repository.
CVE References: CVE-2016-0801, CVE-2016-0802, CVE-2016-0803, CVE-2016-0804, CVE-2016-0805, CVE-2016-0806, CVE-2016-0807, CVE-2016-0808, CVE-2016-0809, CVE-2016-0810, CVE-2016-0811, CVE-2016-0812, CVE-2016-0813
Suggested Action
CCIRC recommends that system administrators look with their respected Android phone vendor and carrier when the update will be available and test and deploy the vendor-released updates to affected applications accordingly.
References:
Nexus Security Bulletin: https://source.android.com/security/bulletin/2016-02-01.html