Add Android vulnerability fixes

canonical · Jan 15, 2025 · 40da562 · 40da562
1 parent 16c592d
commit 40da562
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 6 deletions.
diff --git a/reference/component-versions.md b/reference/component-versions.md
@@ -21,11 +21,13 @@ N/A
 |----------|--------------|---------|
 | `ams`    | `1.24/stable` | `1.24.2-c816e2633` |
 | `aar`    | `1.24/stable` | `1.24.2-c816e2633` |
+| `amc`    | `1.24/stable` | `1.24.2-c816e2633` |
+| `ams-node-controller` (Deprecated) | `1.24/stable` | `1.24.2-c816e2633` |
 | `anbox-cloud-dashboard` | `1.24/stable` | `1.24.2-c816e2633` |
 | `anbox-stream-agent` | `1.24/stable` | `1.24.2-c816e2633` |
 | `anbox-stream-gateway` | `1.24/stable` | `1.24.2-c816e2633` |
+| `anbox-connect` | `1.24/stable` | `1.24.2-c816e2633` |
 | `anbox-cloud-appliance` | `1.24/stable` | `1.24.2-c816e2633` |
-| `nats` | `latest/stable` | `1.24.2-c816e2633` |
 
 ### Anbox images
 
@@ -79,7 +81,6 @@ The following Anbox images are available in two variants: one based on a contain
 | `anbox-stream-agent` | `1.24/stable` | `1.24.1-fcc9cd96b`  |
 | `anbox-stream-gateway` | `1.24/stable` |  `1.24.1-fcc9cd96b` |
 | `anbox-cloud-appliance` | `1.24/stable` | `1.24.1-fcc9cd96b`  |
-| `nats` | `latest/stable` | `1.24.1-fcc9cd96b` |
 
 ### Anbox images
 
@@ -153,7 +154,6 @@ There are no VM images for ARM64.
 | `anbox-stream-agent` | `1.24/stable` | `1.24.0-599f42a84`  |
 | `anbox-stream-gateway` | `1.24/stable` |  `1.24.0-599f42a84` |
 | `anbox-cloud-appliance` | `1.24/stable` | `1.24.0-599f42a84`  |
-| `nats` | `latest/stable` | `1.24.0-599f42a84` |
 
 ### Anbox images
 

diff --git a/reference/release-notes/1.24.2.md b/reference/release-notes/1.24.2.md
@@ -23,9 +23,6 @@ See [Requirements](https://documentation.ubuntu.com/anbox-cloud/en/latest/refere
 
 There are no new deprecations announced for 1.24.2. For the list of features or components that were deprecated earlier and are planned to be removed in future releases, see [deprecation notices](https://documentation.ubuntu.com/anbox-cloud/en/latest/reference/deprecation-notices/).
 
-## Known issues
-
-
 ## CVEs
 
 The Anbox Cloud 1.24.2 release includes fixes from the respective upstreams and components for the following CVEs:
@@ -37,6 +34,22 @@ The Anbox Cloud 1.24.2 release includes fixes from the respective upstreams and
 | [CVE-2024-6219](https://nvd.nist.gov/vuln/detail/CVE-2024-6219) | AMS |
 | [CVE-2024-45337](https://nvd.nist.gov/vuln/detail/CVE-2024-45337) | AMS, Anbox runtime |
 | [CVE-2024-45338](https://nvd.nist.gov/vuln/detail/CVE-2024-45338) | AMS, Anbox runtime |
+| [CVE-2024-49749](https://source.android.com/docs/security/bulletin/2025-01-01) | Android 12, 13, 14 |
+| [CVE-2024-49738](https://source.android.com/docs/security/bulletin/2025-01-01) | Android 12, 13, 14 |
+| [CVE-2024-49744](https://source.android.com/docs/security/bulletin/2025-01-01) | Android 12, 13, 14 |
+| [CVE-2024-49745](https://source.android.com/docs/security/bulletin/2025-01-01) | Android 12, 13, 14 |
+| [CVE-2024-49733](https://source.android.com/docs/security/bulletin/2025-01-01) | Android 12, 13, 14 |
+| [CVE-2024-49742](https://source.android.com/docs/security/bulletin/2025-01-01) | Android 12, 13, 14 |
+| [CVE-2024-49737](https://source.android.com/docs/security/bulletin/2025-01-01) | Android 13, 14 |
+
+The security patches for the following CVEs are not included in the 1.24.2 release since we are waiting for disclosure from upstream:
+
+| CVE | Affected Components |
+|-----|---------------------|
+| [CVE-2024-49724](https://source.android.com/docs/security/bulletin/2025-01-01) | Android 12, 13, 14 |
+
+
+
 
 ## Bug fixes