website icon indicating copy to clipboard operation
website copied to clipboard

Document that older Android versions have unmitigatable security risks on our supported platforms page

Open Hixie opened this issue 1 year ago • 6 comments

Subcomponent of https://github.com/flutter/flutter/issues/63559.

We should update our public documentation to mention that versions of Android older than Android 9 (aka Pie, SDK level 28) leave applications vulnerable to the StrandHogg attack, and then link to https://developer.android.com/privacy-and-security/risks/strandhogg.

Hixie avatar Mar 01 '24 20:03 Hixie

cc @mariamhas

Hixie avatar Mar 01 '24 20:03 Hixie

This issue is assigned to @reidbaker and @mariamhas but has had no recent status updates. Please consider unassigning this issue if it is not going to be addressed in the near future. This allows people to have a clearer picture of what work is actually planned. Thanks!

flutter-triage-bot[bot] avatar Oct 08 '24 20:10 flutter-triage-bot[bot]

This issue is assigned to @reidbaker but has had no recent status updates. Please consider unassigning this issue if it is not going to be addressed in the near future. This allows people to have a clearer picture of what work is actually planned. Thanks!

flutter-triage-bot[bot] avatar Feb 12 '25 20:02 flutter-triage-bot[bot]

This will be a flutter/website change.

reidbaker avatar Feb 14 '25 15:02 reidbaker

Transferred this to the website. Maybe we add a note here: https://docs.flutter.dev/get-started/install/linux/android

@sfshaza2 what do you think? This seems like an Android issue, not a Flutter issue. But it also seems like a pretty serious issue.

antfitch avatar Mar 17 '25 21:03 antfitch

@antfitch I added this PR https://github.com/flutter/website/pull/11829 to add a new page for vulnerabilities.

ash2moon avatar Mar 18 '25 22:03 ash2moon