We have released a security update to Nexus devices through an over-the-air (OTA) update as part of our Android Security Bulletin Monthly Release process. The Nexus firmware images have also been released to the Google Developer site. Builds LMY48Z or later and Android Marshmallow with Security Patch Level of December 1, 2015 or later address these issues. Refer to the Common Questions and Answers section for more details.
Partners were notified about and provided updates for these issues on November 2, 2015 or earlier. Source code patches for these issues will be released to the Android Open Source Project (AOSP) repository over the next 48 hours. We will revise this bulletin with the AOSP links when they are available.
Source: Android