Number: AV16-041
Date: 7 March 2016
Purpose
The purpose of this advisory is to bring attention to the Android Security Bulletin for March.
Assessment
The Android Security Bulleting addresses a security update for 16 vulnerabilities (6 Critical, 8 High, and 2 Moderate) that could potentially enable remote code execution on affected devices. This update is also distributed to the Android Open Source Project (AOSP) repository.
CVE References: CVE-2016-0728, CVE-2016-0815, CVE-2016-0816, CVE-2016-0818, CVE-2016-0819, CVE-2016-0820, CVE-2016-0821, CVE-2016-0822, CVE-2016-0823, CVE-2016-0824, CVE-2016-0825, CVE-2016-0826, CVE-2016-0827, CVE-2016-0828, CVE-2016-0829, CVE-2016-0830, CVE-2016-0831, CVE-2016-0832, CVE-2016-1621
Suggested Action
CCIRC recommends that system administrators look with their respected Android phone vendor and carrier when the update will be available and test and deploy the vendor-released updates to affected applications accordingly.
References:
Android web site: https://source.android.com/security/bulletin/2016-03-01.html