Nexus device images are out. Samsung, LG, and cell carriers, you're on the clock.
http://cdn.arstechnica.net/wp-content/uploads/2014/07/google-nexus-logo2-640x320.jpg
by Ron Amadeo - Sep 10, 2015
Stagefright was the scariest Android vulnerability to come along in some time. A bug in Android's "Stagefright" media library could, if fully weaponized, allow an attacker to execute malicious code just by sending an MMS message to a user. Luckily exploit mitigation techniques in newer versions of Android stopped the Stagefright vulnerability from becoming a pwning free-for-all, but the bug shined a bright light on Android's sub-par security situation.
The publicity got the Android device ecosystem—Google, OEMs, and carriers—to at least start paying attention to delivering security updates to users in a timely manner. Google, Samsung, and LG scrambled to get fixes out to their flagship devices and promised monthly security updates for their devices. That was 36 days ago.
Full Article