Next Android Security Patch Release? - X Style (Pure) Q&A, Help & Troubleshooting

Although I've lost track of when exactly they were pushed out by Lenovorola, I seem to recall my MotoX PE getting a November, then February, security patch and the "latest" May 2016 was pushed around July 20th... If that pattern (pushing out every 3rd Google release ~ 10 weeks later) holds true, might we see the August patch pushed later this month? Or will any more 6.0 patches be skipped in light of the future 7.x upgrade (whenever that may be)?

One of the reasons why I'm sticking with CM. they are on Oct. 5th security patch while the normal stock ROM is far behind
Sent from my XT1575 using XDA-Developers mobile app

Greatness83 said:
One of the reasons why I'm sticking with CM. they are on Oct. 5th security patch while the normal stock ROM is far behind
Click to expand...
Click to collapse
I hear you... One of the reasons I bought a Nexus 5X in June when the price dropped. But looking at my MotoX since then reminds me it's otherwise a better phone imho (VoLTE works fine for me on TMo).
Question: I assume you had to unlock your bootloader to root and run CM ? If so, can you relock in that state? I had to unroot and flash stock multiple times before I was finally able to relock... I could be completely wrong, but I would think the benefit of timely, monthly security updates is outweighed by an unlocked bootloader and root access?

According to a twitter reply from Moto Support, they ditched even the quarterly security update.
" We're implementing essential patches.As new security issues emerge, we will evaluate them and update your phone as needed.-Maya"
Evaluating, means they may or may not release security patches so do not hold your breath for an August updated. Yet, Moto Support on twitter was very quick to reply the first inquiry. I encourage everyone to contact them with questions @Moto_Support Let them know or demands!

Related

Quick question about the security update

I have now run across several 6p users who are part of the Android beta program who have not received the OTA security patch for September. I'm curious if this is just random or if there is a trend to be found here. So, if you are on the developer preview program, have you received your security patch yet?
locke340 said:
I have now run across several 6p users who are part of the Android beta program who have not received the OTA security patch for September. I'm curious if this is just random or if there is a trend to be found here. So, if you are on the developer preview program, have you received your security patch yet?
Click to expand...
Click to collapse
Seriously? First, Nougat OTA was only released a couple weeks ago, so I'd expect the earliest security patch to be October. Second, since there is all kinds of speculation about the full Nougat factory image not being released (hardware, software, something special when Google makes their Pixel announcement), they aren't going to get multiple OTA security releases ahead on their flagship device, for which they haven't even put out a full factory image yet.
It's a simple question, the September security patch did go live 2 days ago, so it is not a question of if it coming, it is a specific question about 6p users on the developer preview program. Not even a serious one, I'm just curious.
No update here
Sent from my Nexus 6P using Tapatalk

No recent security update for Galaxy Tab A 10.1 (2016, SM-T580)?

After years of keeping an old tablet alive with Cyanogenmod, I needed a new tablet and decided to be content with a stock ROM this time. So I ordered a Galaxy Tab A 10.1 (SM-T580 XAR) after reading positive reviews of the hardware. I knew that there was little likelihood of a third-party ROM for the Exnyos processor but I assumed (perhaps naively) I would have a year or two of support/updates from Samsung.
So I was shocked upon booting the tablet to find that the most recent update is on the July 1 mad: !?!?) security patch from Google, meaning that this new SM-T580 is still vulnerable to several nasty Stagefright vulnerabilities. I kept pressing system update, thinking this must be a mistake, only to find that this supposedly new machine is already woefully out-of-date. Regular security updates should not only be a "bonus feature" for flagship devices; in my view, manufacturers have the responsibility to support all their new hardware with timely security updates. I knew that many manufacturers had poor support for Android, but I assumed (perhaps naively) that Samsung was different.
Is this typical of Samsung? From your experience, how often do non-flagship devices receive security updates?
I'm planning to return the tablet as defective unless there is hope of regular updates in the future.
One additional bit of information/question: The Galaxy Tab A SM-T550 (9.7", 2015, wifi) has received more regular updates than the the newer SM-T580 (10.1", 2016, wifi). Both U.S. models received an update in July, but the 2015 version received an additional update in September with the critical September security patches. So the older tablet has been getting more frequent updates?
madalu said:
After years of keeping an old tablet alive with Cyanogenmod, I needed a new tablet and decided to be content with a stock ROM this time. So I ordered a Galaxy Tab A 10.1 (SM-T580 XAR) after reading positive reviews of the hardware. I knew that there was little likelihood of a third-party ROM for the Exnyos processor but I assumed (perhaps naively) I would have a year or two of support/updates from Samsung.
So I was shocked upon booting the tablet to find that the most recent update is on the July 1 mad: !?!?) security patch from Google, meaning that this new SM-T580 is still vulnerable to several nasty Stagefright vulnerabilities. I kept pressing system update, thinking this must be a mistake, only to find that this supposedly new machine is already woefully out-of-date. Regular security updates should not only be a "bonus feature" for flagship devices; in my view, manufacturers have the responsibility to support all their new hardware with timely security updates. I knew that many manufacturers had poor support for Android, but I assumed (perhaps naively) that Samsung was different.
Is this typical of Samsung? From your experience, how often do non-flagship devices receive security updates?
I'm planning to return the tablet as defective unless there is hope of regular updates in the future.
Click to expand...
Click to collapse
I agree, I am also in the same situation, July 1. LG is the same, I got the G4 (2015) flagship which is also on July's patch. After the whole stagefright thing died down OEMs have pretty much shelved the whole monthly update promises, except for Google ofc.
Same here. I'm returning mine due lack of updates. That and the fact it weighs a ton! Hate to praise Apple but at least they patch their OS!
perky55 said:
Same here. I'm returning mine due lack of updates. That and the fact it weighs a ton! Hate to praise Apple but at least they patch their OS!
Click to expand...
Click to collapse
Wow ok. The security updates (or lack of should I say) don't bother me too much, as long as the tablet gets nougat which it almost certainly will, I'm happy. To the average user the security updates meaning nothing, just make sure the unknown sources option is unchecked and you should be fine (also always install reputable apps/from Google Play).
ShinOrochiX said:
Wow ok. The security updates (or lack of should I say) don't bother me too much, as long as the tablet gets nougat which it almost certainly will, I'm happy. To the average user the security updates meaning nothing, just make sure the unknown sources option is unchecked and you should be fine (also always install reputable apps/from Google Play).
Click to expand...
Click to collapse
Trouble is it's not just the apps, the apps pull down ads which can be compromised (check out this securityweek page) . If you use the browser you're at risk just as you would be on an unpatched PC. If you look at the release notes for the monthly security patches Google release they nearly always have half a dozen critical vulnerabilities. That means your device is at risk.
I just think it's unacceptable for a company like Samsung to leave their customers vulnerable and I won't support them for that reason.
perky55 said:
Trouble is it's not just the apps, the apps pull down ads which can be compromised (check out this securityweek page) . If you use the browser you're at risk just as you would be on an unpatched PC. If you look at the release notes for the monthly security patches Google release they nearly always have half a dozen critical vulnerabilities. That means your device is at risk.
Click to expand...
Click to collapse
In the case of this particular bug, one would be protected by disabling app installs from Unknown Sources; it still requires the user action of installing an apk. And this particular bug is a problem with Chrome, rather than the Android core. Unlike the vulnerabilities addressed in the monthly security patch, this one can be fixed via the play store.
The bigger danger comes from the mediaserver bugs - theoretically, a website could host a multimedia file that would cause the mediaserver to crash, thereby gaining the ability to execute code remotely. I have no idea how feasible this is or whether there are exploits for the recent mediaserver bugs in the wild, but that's why timely patches are important.
I simply don't understand why it is so hard for Samsung to apply these patches and rebuild the rom. Custom rom maintainers do it all the time -- how hard can it be for a company with the vast resources of Samsung? These aren't major overhauls of the code -- just minor fixes.
Yeah some of the vulnerabilities mentioned can be serious, and it is true, a company as large as Samsung really has no excuse not to deliver the patches, they previously pledged to keep devices patched-so much for that.
So I decided to keep the tablet and I am regretting it. We're in January and still no security patches...
perky55 said:
So I decided to keep the tablet and I am regretting it. We're in January and still no security patches...
Click to expand...
Click to collapse
I sent mine back because of the numerous issues I had, still awaiting my refund.
But I ended up buying the 7" Tab A which with I am satisfied, no issues, running Sept patch but on Lollipop. Though it is fit for purpose, I see it as a large chunk of money saved. :victory:
£90 for the 7" vs £170 for the 10.1", huge difference.
the SM-T580 and the SM-P580 got the updates recently:
https://forum.xda-developers.com/galaxy-tab-a/how-to/tab-sm-p580-update-t3528298
security patch is from december, 1st, 2016
Still no updates
I don't feel very secure using this device. Very disappointed with Samsung and won't be buying another Samsung product based on the less than satisfactory support for the T580.
Just went ahead and flashed the latest german rom with odin. Everything went fine and now i'm on the december security patch.
Can you change the language to English from the German rom?
perky55 said:
Can you change the language to English from the German rom?
Click to expand...
Click to collapse
Yes you can. All languages are there. I 'm using it in Dutch.
Received an update today - patch level 1st January 2017
I had an update yesterday and my T585 now says security patch January 17

H918 Next Update

Do any of you think we're going to get an update anytime soon? Especially with the wake of the CIA hacking leak that just happened. While yes I do understand that the process of exploitation is a pain and all, getting updates is good on another front.
jameslapc2 said:
Do any of you think we're going to get an update anytime soon? Especially with the wake of the CIA hacking leak that just happened. While yes I do understand that the process of exploitation is a pain and all, getting updates is good on another front.
Click to expand...
Click to collapse
Depending of what comes within the update. Sometimes are just small fixes and not security patches. Sometimes it comes with security patches and not fixes. Sometimes it comes with different things such as fixes, patches, and new features at the same time.... But sometimes, to update is even useless lol. Thats why i wait and read what does it applies. If it is nothing that interest me then i just keep the same version i had instead of upgrading.
Word has it that the US 996 version got an update yesterday, so perhaps there's hope for us (I couldn't find any details as to whether it's 7.1.x, etc.)
I was just thinking it's been a while since the last update.
Yes, my gpad has had at least 3 updates, and my wife's Stylo has had 2 or 3 since the last time my "flagship" v20 has been the stylo is on the March security update and my gpad is on the April update. V20 is Dec 2016?
Sent from my LG-V521 using XDA-Developers Legacy app

Regarding Oreo Update

Went through many news and YT videos, they are claiming that we will get Oreo 8.0 update till the end of this month i.e., May'18.
Can anyone verify this more accurately?
By the way I don't oreo update from Motorola/Lenovo since when we have XDA.
Using AEX ( Thanks @ishubhamsingh for the awesome work) from a long time.
While commenting mention your ROM too.
Anything other than official updates should be ignored. Other sources usually have no proof and are pretty much just clickbait.
Still waiting
Got the May OTA security update via TMO today. Still no Oreo.
I am inclined to believe that our phones will not be getting Oreo, ever. Motorola's strategy seems to be to kick the can down the road until they can say our phones are "no longer supported." They've left us at the side of the road for dead.
Eventually, when I get a replacement for this phone, it will not be a Motorola.
bikergeek1553 said:
Got the May OTA security update via TMO today. Still no Oreo.
I am inclined to believe that our phones will not be getting Oreo, ever. Motorola's strategy seems to be to kick the can down the road until they can say our phones are "no longer supported." They've left us at the side of the road for dead.
Eventually, when I get a replacement for this phone, it will not be a Motorola.
Click to expand...
Click to collapse
May update? What device are you on? So far I've seen people on either March or April update plus some rare cases where some haven't received even earlier OTAs
psychopac said:
May update? What device are you on? So far I've seen people on either March or April update plus some rare cases where some haven't received even earlier OTAs
Click to expand...
Click to collapse
Moto G5 Plus/potter. I just got a security update today, is that not the May security update?
bikergeek1553 said:
Moto G5 Plus/potter. I just got a security update today, is that not the May security update?
Click to expand...
Click to collapse
The month will be mentioned in the changelog. Just tap the update notification and you'll see which month's security update you've received. Let me know
psychopac said:
The month will be mentioned in the changelog. Just tap the update notification and you'll see which month's security update you've received. Let me know
Click to expand...
Click to collapse
Says "April 1, 2018." Silly me, I thought that I'd get a May security update in May.

Clarification on security updates.

I know Nexus 6P won't receive Android P but I was wondering: will this mean a complete stop to security updates as soon as P is released or there's still some time with security updates guaranteed by Google?
Looks like the updates for the Nexus 6P will end with either the October or November monthly security updates. https://support.google.com/nexus/answer/4457705?hl=en#nexus_devices
Are the Lineage builds available reasonably updated as far as security patches are concerned? Or would I be better off buying a new phone (something I'd avoid if possible, 6P is still doing all I bought it for)?

Categories

Resources