Android Security Backport Released

Bill Yi

unread,

Sep 9, 2019, 2:25:37 PM9/9/19

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

5725749, android-7.1.1_r60

5725750, android-7.1.2_r38

5729099, android-8.0.0_r38

5725752, android-8.1.0_r68

5748468, android-9.0.0_r48

bill

Baran Jean-Marie

unread,

Sep 10, 2019, 9:53:27 AM9/10/19

to Android Building

Can you explain what that "backport source code" is? I can see the tag released e.g. in frameworks/base for 7.1.2. It looks like it's finally the source code for all the security patches listed by the Android security bulletins, but never reapplied to previous versions of the AOSP. Is that right?

Particularly, is this the solution to Android Security Bulletins and Updated AOSP versions?

Thanks,

Jean-Marie.

Bill Yi

unread,

Nov 4, 2019, 12:34:28 PM11/4/19

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

5887206, android-8.0.0_r40

5887208, android-8.1.0_r70

5887210, android-9.0.0_r50

bill

Chih-Wei Huang

unread,

Nov 11, 2019, 12:59:25 PM11/11/19

to Android Building

Could you explain why the PLATFORM_SECURITY_PATCH of android-8.1.0_r70 is still 2017-12-05?

That's very confusing!

lh@server2:~/cwhuang/oreo/build/make$ git diff android-8.1.0_r65 android-8.1.0_r70 core/version_defaults.mk

diff --git a/core/version_defaults.mk b/core/version_defaults.mk
index 5f45946..5758d22 100644
--- a/core/version_defaults.mk
+++ b/core/version_defaults.mk
@@ -181,7 +181,7 @@ ifndef PLATFORM_SECURITY_PATCH
     # It must be of the form "YYYY-MM-DD" on production devices.
     # It must match one of the Android Security Patch Level strings of the Public Security Bulletins.
     # If there is no $PLATFORM_SECURITY_PATCH set, keep it empty.
-      PLATFORM_SECURITY_PATCH := 2019-06-05
+      PLATFORM_SECURITY_PATCH := 2017-12-05
endif

ifndef PLATFORM_BASE_OS

Bill Yi於 2019年11月5日星期二 UTC+8上午1時34分28秒寫道：

Bill Yi

unread,

Nov 13, 2019, 6:19:57 PM11/13/19

to Android Building

The security backports are not device specific. Hence we are not updating the security string on those branches.

bill

James Muir

unread,

Nov 14, 2019, 3:56:59 AM11/14/19

to 'Bill Yi' via Android Building

maybe I am missing something.

even if a tag is not device-specific, doesn't it make sense to update
the SPL?

e.g. if android-8.1.0_r70 has all the security patches applied from the
November 2019 (and earlier) security bulletin, why not update the
variable PLATFORM_SECURITY_PATCH?

Leaving it set to 2017-12-05 seems unnecessarily confusing.

-James M

On 2019-11-13 6:19 p.m., 'Bill Yi' via Android Building wrote:
> The security backports are not device specific. Hence we are not
> updating the security string on those branches.
>
> bill
>
> On Monday, November 11, 2019 at 9:59:25 AM UTC-8, Chih-Wei Huang wrote:
>
> Could you explain why the PLATFORM_SECURITY_PATCH of
> android-8.1.0_r70 is still 2017-12-05?
> That's very confusing!
>
> lh@server2:~/cwhuang/oreo/build/make$ git diff android-8.1.0_r65

> android-8.1.0_r70 core/version_defaults.mk <http://version_defaults.mk>
> diff --git a/core/version_defaults.mk <http://version_defaults.mk>
> b/core/version_defaults.mk <http://version_defaults.mk>
> index 5f45946..5758d22 100644
> --- a/core/version_defaults.mk <http://version_defaults.mk>
> +++ b/core/version_defaults.mk <http://version_defaults.mk>

> @@ -181,7 +181,7 @@ ifndef PLATFORM_SECURITY_PATCH
>      # It must be of the form "YYYY-MM-DD" on production devices.
>      # It must match one of the Android Security Patch Level
> strings of the Public Security Bulletins.
>      # If there is no $PLATFORM_SECURITY_PATCH set, keep it empty.
> -      PLATFORM_SECURITY_PATCH := 2019-06-05
> +      PLATFORM_SECURITY_PATCH := 2017-12-05
> endif
>
> ifndef PLATFORM_BASE_OS
>
>
> Bill Yi於 2019年11月5日星期二 UTC+8上午1時34分28秒寫道：
>
> Android security backport source code is now available. The
> following builds and tags are supported:
>
> 5887206, android-8.0.0_r40
> 5887208, android-8.1.0_r70
> 5887210, android-9.0.0_r50
>
> bill
>

> --
> --
> You received this message because you are subscribed to the "Android
> Building" mailing list.
> To post to this group, send email to android-...@googlegroups.com
> To unsubscribe from this group, send email to
> android-buildi...@googlegroups.com
> For more options, visit this group at
> http://groups.google.com/group/android-building?hl=en
>
> ---
> You received this message because you are subscribed to the Google
> Groups "Android Building" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to android-buildi...@googlegroups.com
> <mailto:android-buildi...@googlegroups.com>.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/android-building/c0ea71cc-e601-4b1e-9820-e9d47194c879%40googlegroups.com
> <https://groups.google.com/d/msgid/android-building/c0ea71cc-e601-4b1e-9820-e9d47194c879%40googlegroups.com?utm_medium=email&utm_source=footer>.

Chih-Wei Huang

unread,

Nov 15, 2019, 10:01:11 AM11/15/19

to Android Building

James Muir於 2019年11月14日星期四 UTC+8下午4時56分59秒寫道：

maybe I am missing something.

even if a tag is not device-specific, doesn't it make sense to update
the SPL?

e.g. if android-8.1.0_r70 has all the security patches applied from the
November 2019 (and earlier) security bulletin, why not update the
variable PLATFORM_SECURITY_PATCH?

Leaving it set to 2017-12-05 seems unnecessarily confusing.

Yes. Totally agree.

If I update to android-8.1.0_r70, the users would think

this is a VERY OLD release which is not updated for

almost two years!

Even android-8.1.0_r65 has update to 2019-06-05,

why android-8.1.0_r70 became even older?

Please manage the thing right, Google!

James Muir

unread,

Nov 18, 2019, 3:04:45 AM11/18/19

to android-...@googlegroups.com

> Please manage the thing right, Google!

I'm not sure if comments like that are helpful.

Maybe there is a valid reason not to touch the SPL when google has not
published a device release from a given tag, or maybe it is just a
process issue (e.g. may be the release manager is in charge of changing
the SPL).

-James M

Chih-Wei Huang

unread,

Nov 22, 2019, 10:11:24 AM11/22/19

to Android Building

James Muir於 2019年11月18日星期一 UTC+8下午4時04分45秒寫道：

What's the valid reason to keep it to a very old date?

That's inconceivable.

del...@google.com

unread,

Dec 2, 2019, 6:54:29 PM12/2/19

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

5948681, android-8.0.0_r41

5948682, android-8.1.0_r71

5948683, android-9.0.0_r51

Bill Yi

unread,

Jan 6, 2020, 6:53:43 PM1/6/20

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

6037696, android-8.0.0_r42

6037697, android-8.1.0_r72

6037698, android-9.0.0_r52

bill

del...@google.com

unread,

Feb 3, 2020, 7:36:50 PM2/3/20

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

6107732, android-8.0.0_r43

6107733, android-8.1.0_r73

6107734, android-9.0.0_r53

Bill Yi

unread,

Mar 3, 2020, 1:59:32 PM3/3/20

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

6127070, android-8.0.0_r44

6127071, android-8.1.0_r74

6127072, android-9.0.0_r54

bill

Xin Li

unread,

Apr 6, 2020, 10:38:27 PM4/6/20

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

6197207, android-8.0.0_r45

6197208, android-8.1.0_r75

6197209, android-9.0.0_r55

Bill Yi

unread,

May 4, 2020, 6:43:23 PM5/4/20

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

android-8.0.0_r46 6349210

android-8.1.0_r76 6440157

android-9.0.0_r56 6440158

bill

Xin Li

unread,

Jun 1, 2020, 8:47:34 PM6/1/20

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

- android-8.0.0_r47 6454886

- android-8.1.0_r77 6454887

- android-9.0.0_r57 6454888

Bill Yi

unread,

Jul 7, 2020, 11:51:20 AM7/7/20

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

6495664, android-8.0.0_r48

6495665, android-8.1.0_r78

6495666, android-9.0.0_r58

bill

del...@google.com

unread,

Aug 3, 2020, 6:07:30 PM8/3/20

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

6560351, android-8.0.0_r49

6560352, android-8.1.0_r79

6559974, android-9.0.0_r59

Bill Yi

unread,

Sep 8, 2020, 10:23:03 PM9/8/20

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

6644283, android-8.0.0_r50

6644286, android-8.1.0_r80

6644287, android-9.0.0_r60

6777444, android-10.0.0_r46

bill

del...@google.com

unread,

Oct 5, 2020, 8:41:43 PM10/5/20

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

6780349, android-8.0.0_r51

6780335, android-8.1.0_r81

6780336, android-9.0.0_r61

6780337, android-10.0.0_r47

Bill Yi

unread,

Nov 2, 2020, 8:57:55 PM11/2/20

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

6826375, android-security-8.0.0_r52

6826376, android-security-8.1.0_r82

6826377, android-security-9.0.0_r62

6878114, android-security-10.0.0_r48

bill

del...@google.com

unread,

Dec 7, 2020, 11:18:48 PM12/7/20

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

6893676, android-security-8.0.0_r53

6893677, android-security-8.1.0_r83

6893678, android-security-9.0.0_r63

6893682, android-security-10.0.0_r49

tonyya...@gmail.com

unread,

Dec 8, 2020, 8:39:10 PM12/8/20

to Android Building

Yes, totally agree, I get confused too. Even though this backport doesn't have new features added to Android 8.1, why Google downgrade SPL to 2017-12-05, they could keep SPL at 2019-06-05. It's weird that the SPL of android-8.1.0_r70 is older than android-8.1.0_r65.

Guoyin Chen

unread,

Dec 9, 2020, 10:39:38 AM12/9/20

to Android Building

Totally agree. Suggest Google could update the SPL to matcht the security tag.

Bill Yi

unread,

Jan 4, 2021, 10:53:50 PM1/4/21

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

6969596, android-security-8.0.0_r54

6969599, android-security-8.1.0_r84

6969600, android-security-9.0.0_r64

6969601, android-security-10.0.0_r50

bill

Bill Yi

unread,

Feb 2, 2021, 12:23:07 PM2/2/21

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

7023408, android-security-8.1.0_r85

7023409, android-security-9.0.0_r65

7023426, android-security-10.0.0_r51

bill

del...@google.com

unread,

Mar 1, 2021, 11:28:08 PM3/1/21

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

7070700, android-security-8.1.0_r86

7070702, android-security-9.0.0_r66

7070703, android-security-10.0.0_r52

Bill Yi

unread,

Apr 6, 2021, 12:02:46 AM4/6/21

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

android-security-8.1.0_r87 7127520

android-security-9.0.0_r67 7127521

android-security-10.0.0_r53 7127522

bill

del...@google.com

unread,

May 3, 2021, 8:28:11 PM5/3/21

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

android-security-8.1.0_r88 7249334

android-security-9.0.0_r68 7249336

android-security-10.0.0_r54 7250004

del...@google.com

unread,

Jun 8, 2021, 12:39:37 AM6/8/21

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

android-security-8.1.0_r89 7269716

android-security-9.0.0_r69 7269718

android-security-10.0.0_r55 7269719

Bill Yi

unread,

Jul 8, 2021, 4:41:42 PM7/8/21

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

7427955, android-security-10.0.0_r56

7427957, android-security-8.1.0_r90

7427956, android-security-9.0.0_r70

bill

del...@google.com

unread,

Aug 3, 2021, 12:25:52 AM8/3/21

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

7483358, android-security-10.0.0_r57

7449186, android-security-9.0.0_r71

7449185, android-security-8.1.0_r91

Bill Yi

unread,

Sep 10, 2021, 1:05:36 AM9/10/21

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

7507833, android-security-8.1.0_r92

7507834, android-security-9.0.0_r72

7507835, android-security-10.0.0_r58

bill

del...@google.com

unread,

Oct 5, 2021, 5:44:16 AM10/5/21

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

7678330, android-security-8.1.0_r93

7678331, android-security-9.0.0_r73

7678332, android-security-10.0.0_r59

Bill Yi

unread,

Nov 3, 2021, 11:57:01 AM11/3/21

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

android-security-9.0.0_r74 7786868

android-security-10.0.0_r60 7786870

android-security-11.0.0_r49 7786871

bill

Bill Yi

unread,

Dec 7, 2021, 3:28:54 PM12/7/21

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

7804785, android-security-9.0.0_r75
7804786, android-security-10.0.0_r61
7804787, android-security-11.0.0_r50

bill

Bill Yi

unread,

Jan 5, 2022, 3:07:29 PM1/5/22

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

7925397, android-security-9.0.0_r76
7964643, android-security-10.0.0_r62
8001874, android-security-11.0.0_r51

bill

del...@google.com

unread,

Feb 7, 2022, 9:01:13 PM2/7/22

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

8042689, android-security-10.0.0_r63

8042688, android-security-11.0.0_r52

Bill Yi

unread,

Mar 8, 2022, 1:16:02 AM3/8/22

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

8157299, android-security-10.0.0_r64
8157300, android-security-11.0.0_r53

bill

Bill Yi

unread,

Apr 5, 2022, 2:34:28 PM4/5/22

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

8257478, android-security-10.0.0_r65
8257481, android-security-11.0.0_r54
8257479, android-security-12.0.0_r34

bill

del...@google.com

unread,

May 3, 2022, 1:24:39 AM5/3/22

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

8287684, android-security-10.0.0_r66
8287685, android-security-11.0.0_r55
8283927, android-security-12.0.0_r35

del...@google.com

unread,

Jun 7, 2022, 12:24:33 AM6/7/22

to Android Building

Android security backport source code is now available. The following builds and tags are supported:

8528209, android-security-10.0.0_r67
8528208, android-security-11.0.0_r56
8528210, android-security-12.0.0_r36

del...@google.com

unread,

Aug 1, 2022, 4:55:03 PM8/1/22