HTC EVO VIEW Security Patch and updates

---

Thanks to Treve in Evo3D for his amazing work finding this security breach and sharing it with us, and the word reached HTC and now we have several security patches in Sprint via OTA to HTC Evo, HTC Evo3D, HTC Evo View and HTC Sensation.. may have more coming out to their line up.

10/25 Do not let it update itself. See attached pic. Reset will get it back to norm.


Just received in my EVO View a Sprint HTC update for security patch...
Total Download size: 4.63 MB






Here is link for download of the patch in zip file from HTC/Sprint:
http://www.wupload.com/folder/951541




Per Treve after viewing patch file I sent to him (Credits to Treve)

It looks like it deleted these files for you guys

 
       "/system/app/HtcLoggers.apk", "/system/app/HtcLoggers.odex",
       "/system/lib/libhtc_loggers.so",
       "/system/recovery.img");

But on our ota on the 3d it also deleted these files, id make sure you dont have them in your phone as well, especially the /data/data one, thats where the binaries for htcloggers live that made the exploit possible, an the other stuff is just garbage

delete_recursive("/data/data/com.htc.loggers/",
                 "/sdcard/htclog/");
       "/system/app/QXDM2SD.apk", "/system/app/QXDM2SD.odex",
       "/system/bin/androidvncserver", "/system/bin/usbnet",
       "/system/lib/libhtc_loggers.so", "/system/lib/libhtcqxdm2sd.so",
       "/system/recovery.img");

Everything i'm releasing I will be posting patches for - http://forum.xda-developers.com/show....php?t=1247108

Its the main thread and i wrote a scanner app at post 110 http://forum.xda-developers.com/show...&postcount=110

Im sure most of it will be the same on the HTC Flyer/ HTC EVO View.

Thank you again Treve.

Dev's lets take a look into the /data/data one, thats where the binaries for htcloggers as Treve indicates.. Let's get this worked out for our benefits

My ROM is based on the fully patched build matey, got the ota last week

Sent from my LeeDrOiD loaded s-off HTC EVO 3D

Originally Posted by LeeDroid

My ROM is based on the fully patched build matey, got the ota last week

Sent from my LeeDrOiD loaded s-off HTC EVO 3D

Would like to try yours out but mine is the Evo View, not many dev's have it... would be nice though, thx.

Do you think that you can just flash the attached file from recovery?

Originally Posted by geebee1932

Do you think that you can just flash the attached file from recovery?

Need to revert to Stock RUU and then do the update(s) once done the do root process again

In case you need the zip 1.22.651.1
OTA_Express_Sprint_WWE_1.22.651.1-1.18.651.1_release_198260xikterg48lc0snx1.zip

New Update-Security Patch 1.22.651.2
OTA_Express_Sprint_WWE_1.22.651.2-1.22.651.1_release_220183oqo49zm8mw3kfeuv.zip

Odd it shows 2.1 not 3.0

I just flashed the ota zip through recovery. It worked fine no need to revert to stock. The View does not have sense 3.0. I think it has a modified sense 2.

Originally Posted by geebee1932

I just flashed the ota zip through recovery. It worked fine no need to revert to stock. The View does not have sense 3.0. I think it has a modified sense 2.

I flashed and no go on first attempt got the error as shown in first post.. HTC description is as sense 3.0 mostly do to the carousel I believe..

I downloaded the OTA through GoodandEvo.com. I then booted into recovery and was able to flash. I did have to reflash the supersuer to get SU back however. My sense version was 2.1 before I began the update.