Resolved security - android master key vulnerability

[jauling]

Hi,

Anyone know if and/or when Xiaomi MIUI or MIUIandroid will be patching the latest ROM to protect against this vulnerability?

details:
http://bluebox.com/corporate-blog/bluebox-uncovers-android-master-key/
http://threatpost.com/android-vulnerability-enables-malicious-updates-to-bypass-digital-signatures/
http://www.zdnet.com/google-releases-fix-to-oems-for-blue-security-android-security-hole-7000017782/

 

[jauling]

confirmed fixed in 3.7.12
http://miuiandroid.com/community/threads/security-patch-for-xiaomi-devices.21294/#post-171507

 

[jauling]

Installed 3.7.12 on Saturday. The Bluebox Security Scanner still says my Mi2S is unpatched

edit - woops, forgot to rescan.. all good!