Does November 5th security patch include the fix for KRACK? - Nexus 6P Q&A, Help & Troubleshooting

If that's the name of the latest Wi-Fi bug discovered recently...
I updated with no problem but wanted confirmation this had been fixed.
Edit: yeah, that's the name https://en.wikipedia.org/wiki/KRACK

gorman42 said:
If that's the name of the latest Wi-Fi bug discovered recently... I updated with no problem but wanted confirmation this had been fixed.
Click to expand...
Click to collapse
Yes. Google is your friend.

... right.
But XDA is my best friend!
Jokes apart, I searched in this forum and not finding anything I thought it hadn't been covered elsewhere. I was wrong. Sorry.

A different question. Is it normal that Nexus 6P is not getting November 6th 2017 security patch level but only November 5th 2017?

v12xke said:
Yes. Google is your friend.
Click to expand...
Click to collapse
Is the latest update on the Nov 5th or 6th patch? Google's announcement states the Nov 6th security patch specifically resolves this exploit:
https://source.android.com/security/bulletin/2017-11-01#top_of_page
Edit: I'm still on 7.1.2 but I've seen some 5X/6P folks say we're on Nov 5th patch level.
Sent from my Nexus 5X using Tapatalk

gorman42 said:
A different question. Is it normal that Nexus 6P is not getting November 6th 2017 security patch level but only November 5th 2017?
Click to expand...
Click to collapse
SlimSnoopOS said:
Is the latest update on the Nov 5th or 6th patch? Google's announcement states the Nov 6th security patch specifically resolves this exploit:
https://source.android.com/security/bulletin/2017-11-01#top_of_page
Edit: I'm still on 7.1.2 but I've seen some 5X/6P folks say we're on Nov 5th patch level.
Click to expand...
Click to collapse
Yes, the November update for the 6P has the November 5th patch date, and so it does appear that the 6P didn't catch it this month. It was only this morning that I went back to discover it was not on the 6th, and so my earlier response was incorrect. I just assumed we had the patch latest date... because we always have in the past. Sorry for that.
Previously, the patch levels have always been the 1st and 5th. This is the first time I know of that there were three patch level dates, and the notes are clear the KRACK vulnerability is addressed in the November 6th patch. Other supported devices may have received the 6th patch level this month. Looks like the 6P will have to wait until next month (or 8.1 DP2).

v12xke said:
Yes, the November update for the 6P has the November 5th patch date, and so it does appear that the 6P didn't catch it this month. It was only this morning that I went back to discover it was not on the 6th, and so my earlier response was incorrect. I just assumed we had the patch latest date... because we always have in the past. Sorry for that.
Previously, the patch levels have always been the 1st and 5th. This is the first time I know of that there were three patch level dates, and the notes are clear the KRACK vulnerability is addressed in the November 6th patch. Other supported devices may have received the 6th patch level this month. Looks like the 6P will have to wait until next month (or 8.1 DP2).
Click to expand...
Click to collapse
All good. Hopefully Google will push another factory image for Nov 6th. It's weird there is no mention of the KRACK vulnerability on the Pixel/Nexus specific bulletin below:
https://source.android.com/security/bulletin/pixel/2017-11-01
But there is on the Android security bulletin I linked in my last post. Maybe that is to distinguish that the vulnerability is Android wide? I do think it would help clarify that they addressed this on Pixel/Nexus devices per the respective bulletin. Guess we'll see if another image is released this month.
Edit: Extra info about the Pixel/Nexus specific security bulletins btw:
http://www.androidpolice.com/2017/1...tails-functional-updates-pixels-nexus-phones/
Sent from my Nexus 5X using Tapatalk

This is why I was asking about this being normal. By reading the release notes I suspected KRACK fix was not included.
Not patching KRACK in November seems like a bad joke to me. They explicitly promised to patch it in the November patch...

Related

Quick question about the security update

I have now run across several 6p users who are part of the Android beta program who have not received the OTA security patch for September. I'm curious if this is just random or if there is a trend to be found here. So, if you are on the developer preview program, have you received your security patch yet?
locke340 said:
I have now run across several 6p users who are part of the Android beta program who have not received the OTA security patch for September. I'm curious if this is just random or if there is a trend to be found here. So, if you are on the developer preview program, have you received your security patch yet?
Click to expand...
Click to collapse
Seriously? First, Nougat OTA was only released a couple weeks ago, so I'd expect the earliest security patch to be October. Second, since there is all kinds of speculation about the full Nougat factory image not being released (hardware, software, something special when Google makes their Pixel announcement), they aren't going to get multiple OTA security releases ahead on their flagship device, for which they haven't even put out a full factory image yet.
It's a simple question, the September security patch did go live 2 days ago, so it is not a question of if it coming, it is a specific question about 6p users on the developer preview program. Not even a serious one, I'm just curious.
No update here
Sent from my Nexus 6P using Tapatalk

Next Android Security Patch Release?

Although I've lost track of when exactly they were pushed out by Lenovorola, I seem to recall my MotoX PE getting a November, then February, security patch and the "latest" May 2016 was pushed around July 20th... If that pattern (pushing out every 3rd Google release ~ 10 weeks later) holds true, might we see the August patch pushed later this month? Or will any more 6.0 patches be skipped in light of the future 7.x upgrade (whenever that may be)?
One of the reasons why I'm sticking with CM. they are on Oct. 5th security patch while the normal stock ROM is far behind
Sent from my XT1575 using XDA-Developers mobile app
Greatness83 said:
One of the reasons why I'm sticking with CM. they are on Oct. 5th security patch while the normal stock ROM is far behind
Click to expand...
Click to collapse
I hear you... One of the reasons I bought a Nexus 5X in June when the price dropped. But looking at my MotoX since then reminds me it's otherwise a better phone imho (VoLTE works fine for me on TMo).
Question: I assume you had to unlock your bootloader to root and run CM ? If so, can you relock in that state? I had to unroot and flash stock multiple times before I was finally able to relock... I could be completely wrong, but I would think the benefit of timely, monthly security updates is outweighed by an unlocked bootloader and root access?
According to a twitter reply from Moto Support, they ditched even the quarterly security update.
" We're implementing essential patches.As new security issues emerge, we will evaluate them and update your phone as needed.-Maya"
Evaluating, means they may or may not release security patches so do not hold your breath for an August updated. Yet, Moto Support on twitter was very quick to reply the first inquiry. I encourage everyone to contact them with questions @Moto_Support Let them know or demands!

Oreo for Mi A¹ ?

Anyone having idea when oreo will be released for our device? Confirmation from Google?
December 2017
Company has said to provide update before 2018 so we can expect during half of December maybe???
I thought it'll be on November? Now it's moved go December? That's sad. And they haven't released the kernel sources too.
We have not even gotten the november security patch yet
.tonmoy said:
We have not even gotten the november security patch yet
Click to expand...
Click to collapse
Security roll out post 15th of the month. So we may receive it in week or so.

I Think Oreo Update Is Eminent Cuz of recent Security Patches

I don't know about anyone else but I have gotten 3 back to back security updates in the past 24 hours to bring my ph up to the April 2018 patch level. Before this, it had been months since I'd gotten a security patch.
I speculate its a pre-req for the Oreo update because I just bought my daughter the Moto X4 this week & the 1st thing that occurred out of the box, is that it got 3 consecutive security patches to bring it up to the March patch level & only then did the Oreo update show up immediately after that.
This is all pure speculation on my part but based on some recent events that don't add up unless they are about to push out the Oreo update.
What do you guys think?
I was surprised to receive the April patch this morning. I really hope they're pushing the Oreo
i think so also man.. because to get march and april so quick..something is up!
Lets see what they are up to.. as we are now in Q2
I would doubt that the security patches mean anything other than the Android Security Team pushed out an extra patch.
Honor release Oreo for 7x.. i think next One It s Honor 8 ?
They're also updating their Huawei Backup app with a newer UI.
I haven't received any updates since Feb, B361, L02 anyone else in India got the security patches for April?
I was thinking this also. I hope it means that for true.
B405 out on FF, just security patches, so...
Giuskiller said:
B405 out on FF, just security patches, so...
Click to expand...
Click to collapse
May patch, if someone interested.
well i am thinking opposite they may be clearing up the queue of the updates towards the end of line
I really hope we will get Oreo and Project Treble, that would most likely mean we could get some more stable ROMs on our phone
Oreo Oreo oreoooo!
Well this seems promising:
https://goo.gl/38v6ow
Sent from my Honor 8 using XDA Labs
famu97 said:
I don't know about anyone else but I have gotten 3 back to back security updates in the past 24 hours to bring my ph up to the April 2018 patch level. Before this, it had been months since I'd gotten a security patch.
I speculate its a pre-req for the Oreo update because I just bought my daughter the Moto X4 this week & the 1st thing that occurred out of the box, is that it got 3 consecutive security patches to bring it up to the March patch level & only then did the Oreo update show up immediately after that.
This is all pure speculation on my part but based on some recent events that don't add up unless they are about to push out the Oreo update.
What do you guys think?
Click to expand...
Click to collapse
I agree, that's exactly what I have thought 5 days ago.
Sent from my FRD-L04 using Tapatalk
---------- Post added at 02:20 PM ---------- Previous post was at 02:19 PM ----------
Rickymills said:
i think so also man.. because to get march and april so quick..something is up!
Lets see what they are up to.. as we are now in Q2
Click to expand...
Click to collapse
We're still in Q1..!!!
Q2 starts exactly July 1st.
Sent from my FRD-L04 using Tapatalk
We're still in Q1..!!!
Q2 starts exactly July 1st.
Click to expand...
Click to collapse
Not really...
Q1 1stJanuary -31stMarch
Q2 1stApril-30thJune
Q3 1stJuly - 30thSeptember
Q4 1stOctober -31st December
We are in the middle of Q2.
Smackeroni said:
Not really...
Q1 1stJanuary -31stMarch
Q2 1stApril-30thJune
Q3 1stJuly - 30thSeptember
Q4 1stOctober -31st December
We are in the middle of Q2.
Click to expand...
Click to collapse
Sorry, I was half awake [emoji38]
Sent from my FRD-L04 using Tapatalk
Honor 8 in China hast oreo
nitrowarez said:
Sorry, I was half awake [emoji38]
Click to expand...
Click to collapse
You were a quarter awake
I dunno. My phone still sits on B394 with august 2017 security updates. And it's bought officially. Go figure.

January update for miA2 ?

it's 21/1/2019 and there is no sign for January ota update for me. anyone got anything?
at this point they'll probly just skip it and release just the feb security patch bummer... (no way they send out 2 stables within 2 weeks to catch up - there's simply not enough time to beta test it - i wouldn't even want 2 releases this close to one another because they would most likely be way too rushed out). i'd rather take a good feb release with some of the ancient bugs fixed instead!
i'd love to see how the contract/obligations between google and xiaomi works, i guess they are allowed to skip security patches in extreme cases (holidays) and taking into account that they pushed out the P update recently? they did the same in oct or nov, they simply skipped the security patch. (it's no biggie the feb patch will fix also any pending jan vulnerability)
laviniu_c said:
at this point they'll probly just skip it and release just the feb security patch bummer... (no way they send out 2 stables within 2 weeks to catch up - there's simply not enough time to beta test it - i wouldn't even want 2 releases this close to one another because they would most likely be way too rushed out). i'd rather take a good feb release with some of the ancient bugs fixed instead!
i'd love to see how the contract/obligations between google and xiaomi works, i guess they are allowed to skip security patches in extreme cases (holidays) and taking into account that they pushed out the P update recently? they did the same in oct or nov, they simply skipped the security patch. (it's no biggie the feb patch will fix also any pending jan vulnerability)
Click to expand...
Click to collapse
That's too bad to hear. I waited january update and i wanted it badly. I'm running on December 5 security patch and it have many issues i wish to be solved ASAP
pegaaus said:
That's too bad to hear. I waited january update and i wanted it badly. I'm running on December 5 security patch and it have many issues i wish to be solved ASAP
Click to expand...
Click to collapse
what makes you think a security patch would fix any issues? if anything a rushed jan patch would bring more issues to the table... yes, everyone's on dec 5. (well anyone who updated to pie)
laviniu_c said:
what makes you think a security patch would fix any issues? if anything a rushed jan patch would bring more issues to the table... yes, everyone's on dec 5. (well anyone who updated to pie)
Click to expand...
Click to collapse
i thought security patches fixes issues ,and bring improvements to the software. in some cases it can add functions such as 1080p 60fps and slo-mo which was not supported on oreo at the beginning.
pegaaus said:
i thought security patches fixes issues ,and bring improvements to the software. in some cases it can add functions such as 1080p 60fps and slo-mo which was not supported on oreo at the beginning.
Click to expand...
Click to collapse
a security patch is just that, a security preventive measure. they update the code to preemptively fix security vulnerabilities found. in most cases this leads to issues to fix and they fix those and then test and release the new version. sure, if they have time they fix also known bugs (or include the fixes together with the security patch), but the shorter the time the more likely it is that they in fact cause more problems then they fix... of course, the most likely moment to get a bug fixed is with a security patch release (since bugs if they're not critical won't get their own release just for them and instead they will be included with the next security patch version) but in most cases they are not fixed by the security patch (unless it's some bug related to security).
laviniu_c said:
a security patch is just that, a security preventive measure. they update the code to preemptively fix security vulnerabilities found. in most cases this leads to issues to fix and they fix those and then test and release the new version. sure, if they have time they fix also known bugs (or include the fixes together with the security patch), but the shorter the time the more likely it is that they in fact cause more problems then they fix... of course, the most likely moment to get a bug fixed is with a security patch release (since bugs if they're not critical won't get their own release just for them and instead they will be included with the next security patch version) but in most cases they are not fixed by the security patch (unless it's some bug related to security).
Click to expand...
Click to collapse
alright i gotcha. thanks ?
Jan update is out
Just received the update
Large files cache problem still not solved.
and ofcourse they would release it 10.0.3 is out with the jan security patch
the_bastian said:
Large files cache problem still not solved.
Click to expand...
Click to collapse
Well, that's disappointing... What about performance?
Yep, It's here
Receiving the update right now ) 110.8mb
the_bastian said:
Large files cache problem still not solved.
Click to expand...
Click to collapse
It will never be solved. Get a replacement, your new unit will be ok.
Seems like Xiaomi doesn't care about fixing bugs, even the small bug of the brightness (doesn't go below 19% in auto) isn't fixed in this update. Just another security patch.
Can someone send the download link of January update? My phone doesn't seem to be getting it..
Sparker0i said:
Can someone send the download link of January update? My phone doesn't seem to be getting it..
Click to expand...
Click to collapse
It was pulled out due to serious bugs, wait for the february update
Abrilabr said:
It was pulled out due to serious bugs, wait for the february update
Click to expand...
Click to collapse
Glad I found that it got pulled because I was curious to know why I'm in December 9.0 still lol. Good call tho too many people reported bootloop
I received January update today, I installed the rom from december update and when I was seeing configs the january update was installed
I flashed the rom yesterday

Categories

Resources