A few of Android bulletins not linked to source code

[唐晶]

We are cofused by the android security bulletin update each month, it always has one or two bulletins in Framework and System that are not linked to the source code. This leads us not to know which modification or commit is related to this bulletin, leaving us not apply these bulletins into our products ASAP.

For example:

1) In July,  CVE-2019-2109,CVE-2019-2113
2) In June,  CVE-2019-2101
3) In April, CVE-2019-1985

These bulletins are hinted to the latest binary drives for Pixel in the official release. But the above mentioned bulletins seem not to be releated to the binary drives.

Could anyone help me how to resolve this issue. Thanks all of you.

Jim