Skip to main content

First-ever monthly Android security updates start to roll out


Jasper_The_Rasper
Moderator
Forum|alt.badge.img+54

Nexus device images are out. Samsung, LG, and cell carriers, you're on the clock.

 
                                     http://cdn.arstechnica.net/wp-content/uploads/2014/07/google-nexus-logo2-640x320.jpg
 
by Ron Amadeo - Sep 10, 2015
 
Stagefright was the scariest Android vulnerability to come along in some time. A bug in Android's "Stagefright" media library could, if fully weaponized, allow an attacker to execute malicious code just by sending an MMS message to a user. Luckily exploit mitigation techniques in newer versions of Android stopped the Stagefright vulnerability from becoming a pwning free-for-all, but the bug shined a bright light on Android's sub-par security situation.
 
The publicity got the Android device ecosystem—Google, OEMs, and carriers—to at least start paying attention to delivering security updates to users in a timely manner. Google, Samsung, and LG scrambled to get fixes out to their flagship devices and promised monthly security updates for their devices. That was 36 days ago.
 
Full Article

18 replies

Dermot7
Gold VIP
Forum|alt.badge.img+3
  • Gold VIP
  • 1450 replies
  • September 11, 2015
By David LaVeque, 
 
 
Google has kept true to its word and has released a gaggle of updates for its Nexus Android devices.
Lets hope that this time they've managed to fix the StageFright vulnerability properly, as their first attempt was a dud.
There is no word from Samsung and LG so far, regarding when it will be issuing their promised updates for Android customers. Do you hear those crickets? 
 
 https://grahamcluley.com/2015/09/google-monthly-android-updates/

  • Community Guide
  • 5988 replies
  • September 12, 2015
2 Sep 2015 at 01:21, Team RegisterVulture nybbles Google has emitted its first monthly batch of security updates for the latest version of Android – as promised in early August.
The web giant vowed to regularly release fixes for vulnerabilities after it was rocked by the Stagefright bug that affected potentially hundreds of millions of devices.
The first patch batch is detailed in this mailing-list post here, dated September 9, and new builds of Android 5.1.1 are available now for Nexus handhelds.
It's up to carriers to sling the updates out to subscribers (T-Mobile US has, for one, already started doing so) or savvy fandroids can install the new OS themselves by hand.
The following bugs have been squished in the update:

  full article

Dermot7
Gold VIP
Forum|alt.badge.img+3
  • Gold VIP
  • 1450 replies
  • October 5, 2015
 
The widespread Stagefright vulnerability has lead Google and Samsung to announce plans for monthly Android updates, which would minimize the time it usually takes to fix security bugs in their distributions. LG has quickly followed suit with a similar pledge of its own, but, when asked if it will do the same, HTC has basically said "no".
HTC is among the few Android vendors that deliver major software updates in a timely fashion, so this comes as a bit of a surprise. HTC America president Jason Mackenzie says that such a commitment is "not realistic", pointing at carrier approvals as the main reason why it is extremely difficult to guarantee a monthly release schedule. 
 
 http://betanews.com/2015/10/05/monthly-android-update-guarantee-is-unrealistic/

Ssherjj
Moderator
Forum|alt.badge.img+62
  • Moderator
  • 21927 replies
  • October 5, 2015
Thanks ?...
 
I'll be waiting! Ha There is more to getting updates then I was aware of. Good article!!

Dermot7
Gold VIP
Forum|alt.badge.img+3
  • Gold VIP
  • 1450 replies
  • October 6, 2015
 
So, here comes the latest version of Android - named in Google's typically sweet-toothed fashion, Marshmallow.
Or rather, chances are that it won't be coming to your Android smartphone. Chances are that you're not even running Android Lollipop yet.
Because, the giant problem with securing Android devices is the how to keep the OS updated with the latest security patches and fixes. In many cases, updates simply are not made available to Android's many millions of users.  
 
 http://grahamcluley.com/2015/10/marshmallow-fails-fix-huge-update-problem-androids-heart/

Ssherjj
Moderator
Forum|alt.badge.img+62
  • Moderator
  • 21927 replies
  • October 6, 2015
This is really getting depressing!:@

shorTcircuiT
Gold VIP
  • Gold VIP
  • 7721 replies
  • October 6, 2015
I have an Android phone, a few years old, and not in use at the moment.  I have NEVER been able to update as my cell provider never did issue any OS updates.  At all.
 
We have Android tablets, nice cheap ones from Wal Mart.  My wife and I have one brand, the girls have a different brand, but in all cases NONE of the tablets have ever been able to be updated easily.  
 
I like Android, I really do not like the interface of iOS at all to be honest.  That being said... I have always disliked the manner in which Android may or may not be able to be updated, depending on the specific device maker or service provider.  It is quite a hassle and a worry.

Ssherjj
Moderator
Forum|alt.badge.img+62
  • Moderator
  • 21927 replies
  • October 6, 2015
Well I just called Verizon to ask about Marshmellow and to get any feedback about it. The sTech Support said he'd have to look it up because he hasn't heard of it yet. I just asked if I would be eligible for the upgrade and if my Android was indeed a Lollipop. He said anything over 5 is Lollipop and that yes I'd be eligible for the upgrade if and when it comes out beings as I have a newer phone. So.....
EDIT: I've had Androids for years now..4th phone and I love them especially over an iPhone!;)

Nemo
Community Leader
Forum|alt.badge.img+34
  • Community Leader
  • 644 replies
  • October 6, 2015
Smug alert!!
 
When I bought my first (Android) tablet earlier this year, I rather stumbled into getting a Nexus 9. Turns out it was a good choice as the Nexus hardware is first in line to get the automatic updates. Certainly it updated faultlessly to the latest version of Lollipop a couple of months ago so I'm hoping for a further sweet upgade soon! 😃

shorTcircuiT
Gold VIP
  • Gold VIP
  • 7721 replies
  • October 6, 2015
@ wrote:
Smug alert!!
 
When I bought my first (Android) tablet earlier this year, I rather stumbled into getting a Nexus 9. Turns out it was a good choice as the Nexus hardware is first in line to get the automatic updates. Certainly it updated faultlessly to the latest version of Lollipop a couple of months ago so I'm hoping for a further sweet upgade soon! :D
Bragger.
 
 
Hehehehehehe    :)

Nemo
Community Leader
Forum|alt.badge.img+34
  • Community Leader
  • 644 replies
  • October 13, 2015
Not bragging David but I have been very pleased with it thus far.  Anyway just posting to say that I've now received the Marshmallow update which has gone very smoothly.   That is if anyone is remotely interested! :p
 
 
 
 
 

Ssherjj
Moderator
Forum|alt.badge.img+62
  • Moderator
  • 21927 replies
  • October 13, 2015
Hi Nemo. .

I am interested and jealous as well. Are you bragging again? LOLS I am very happy for you. My Samsung Note will probably be the last one to upgrade to that Marshmallow. . 😞

Nemo
Community Leader
Forum|alt.badge.img+34
  • Community Leader
  • 644 replies
  • October 13, 2015
Hi Sherry
 
For my part, I would be interested to know how long it is before you get the OTA update for your Samsung. Now that Google are pushing their updates out monthly, they and all the manufacturers (and service proividers) need to get their various acts together.
 
FWIW I haven't noticed much difference yet but I'm sure the new "doze" function will preserve battery life and save me having to charge quite as often.
 
Out of interest there was an update of Lollipop to a new Build Number first (ending in T, from M) before the bigger update to MM.
 
Nemo
 
PS I think that this must be the first time that I've bought a piece of kit that anyone is jealous of! 😃

Ssherjj
Moderator
Forum|alt.badge.img+62
  • Moderator
  • 21927 replies
  • October 13, 2015
Hi ?
 
Not sure about the QTA. Verizon doesn't even know.  As I have called their support line asking if my Samsing is eligible. They said probably but the tech didn't have much more information about Marshmellow. So I guess I'll have to do some reearch on my own! I don't want to be left behind without that upgrade. I know patience...isn't easy for me when it comes to devices and upgrades.
 
I would like to get the upgrade just for the battery life. My battery life is not as good as they had told me when purchasing the new phone. But I am always online ...so that does drain my battery alot quicker. I have even bought another batter to have it charges and ready to go into phone when traveling. Can haven't too many batteries! LOLs.
 
Then of course the security updates that come with Marshmellow is important!
 
Let us know if you notice anything else different with your new toy!
 
Anyways enjoy your device!!:p
 
Regards, Sherry

Nemo
Community Leader
Forum|alt.badge.img+34
  • Community Leader
  • 644 replies
  • October 13, 2015
Couple of points ?
 
MM only goes into Doze mode when the device is motionless, like left on a table. If you carry it around in a bag for example, it wouldn't kick in. Perfect for a tablet but possibly not quite as useful with a phone.
 
You will still get your security updates with Lollipop, at least you should! :D
 
Nemo
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Ssherjj
Moderator
Forum|alt.badge.img+62
  • Moderator
  • 21927 replies
  • October 13, 2015
Thank you Nemo for that bit of information.
 
:DMine rarely sits still. :D
 
I do check my phone for updates and looks like there isn't any for the system right now!
 
 

  • New Member
  • 1 reply
  • December 21, 2023
Dermot7 wrote:

 
The widespread Stagefright vulnerability has lead Google and Samsung to announce plans for monthly Android updates, which would minimize the time it usually takes to fix security bugs in their distributions. LG has quickly followed suit with a similar pledge of its own, but, when asked if it will do the same, HTC has basically said "no".
HTC is among the few Android vendors that deliver major software updates in a timely fashion, so this comes as a bit of a surprise. HTC America president Jason Mackenzie says that such a commitment is "not realistic", pointing at carrier approvals as the main reason why it is extremely difficult to guarantee a monthly release schedule. 
 
 http://betanews.com/2015/10/05/monthly-android- update -guarantee-is-unrealistic/

Finally After a long got something  i can relate, Hehe


Jasper_The_Rasper
Moderator
Forum|alt.badge.img+54

@samnere Your replying to an 8 year old topic?


Reply