Android 1.5, Release 3 includes a security fix. The updated system
image for ADP1 is available from the HTC support site
http://www.htc.com/www/support/android/adp.htmlFor details on the issue and patch, please see the recent oCERT
advisory:
http://www.ocert.org/advisories/ocert-2009-011.htmlJBQ
--
Jean-Baptiste M. "JBQ" Queru
Software Engineer, Android Open-Source Project, Google.
Questions sent directly to me that have no reason for being private
will likely get ignored or forwarded to a public forum with no further
warning.