spectre meltdown - Galaxy Tab S2 General

Is there any hope to get patches for spectre meltdown on tab s2?

maybe and maybe not.. all depends on Samsung and if they care about the customers .

I'd think LineageOS would get patches via AOSP so if you're rooted you could go that route. That's what I'm researching anyway. Havent come across official word from Samsung but some unofficial stuff I've seen insinuates the Tab S2 won't be getting a patch from ol' Sammy. This might not be so bad if an 8" version of the Tab S3 existed.

Found this interesting article. I wonder if the "L Refresh" is the 2016 refresh?

Probably

LÖRLZ You cereals? Samsung didnt even release patches yet for WPA2 Krack. Even though, they say somewhere on their site, the Tab S2 is marked as quarter based security updates. But there was none for Q4 2017 so far. Besides, I totally dont want any spectre meltdown fixed on my Tab S2, if it renders it into a slow brick.

Well, LOS has these patches for sure as soon as available. ^^ Luckily we have LOS for it

Does anyone know of any Rom that has the patches that might work on t810? Can't seem to find one.

Tab s2 got updated today to January 1 2018 security update. This update most likely has the spectre meltdown patches and the wp2 vulnerability patched.

Related

Updated Dec 19 - Jelly bean for N8010 LG4 owners coming on Dec 27

I had complained to Samsung about the S-Note PDF import problem (it crashes when attempting to import any PDF) and my contact told me that they have uploaded "for Kies a new version of your OS with the pdf issue fixed. You should have access to it very soon if not already). I just plugged the Note into Kies but nothing's updated yet but hopefully it should be there soon enough.
Note that he said "a new version of your OS". I had previously told him that I'm on build IMM76D.N8010XWALG4 of Android 4.0.4 so we're probably just getting the fixed ICS version and not Jelly Bean. If I recall correctly the fixed build is IMM76D.N8010XWALI4 or something.
Update Dec 8 2012:
Got another text from my contact!
He says that the "Jelly Bean version GT-N8010 EUR OPEN 4.1.2 Maintenance Release (LG4 -> LI4)" is in the process of final verification at Samsung's India R&D cetner. He hasn't given me a timeframe but he'll let me know as soon as it's posted to Kies.
My only concern is that everything directly quoted has a bunch of contradictions in it, lol. First, as far as I can tell, "maintenance release" doesn't usually refer to going from one android version to another, but rather an update within the existing version. However, he specifically calls it Jelly Bean version of N8010 4.1.2. Lastly, LG4, and LI4 are the last three digits of most ICS / 4.0.4 CSC or PDA numbers, and not for Jelly Bean. So really what's going on? Heh. Time will tell.
Update Dec 19:
Got another text from Samsung customer support and here it is verbatim:
"LI4 Jelly Bean OS for your tablet will be released in Canada Dec 27th and will be available through Kies at that time."
So if your firmware is xwalg4 then you're getting jelly bean on Dec 27!
skadebo said:
So I had complained to Samsung about the S-Note PDF import problem (it crashes when attempting to import any PDF) and my contact told me that they have uploaded "for Kies a new version of your OS with the pdf issue fixed. You should have access to it very soon if not already). I just plugged the Note into Kies but nothing's updated yet but hopefully it should be there soon enough.
Note that he said "a new version of your OS". I had previously told him that I'm on build IMM76D.N8010XWALG4 of Android 4.0.4 so we're probably just getting the fixed ICS version and not Jelly Bean. If I recall correctly the fixed build is IMM76D.N8010XWALI4 or something.
Click to expand...
Click to collapse
that would be awsome!
Kies is updating itself right now! Coincidence??
Edit: Aaaand nothing for the Note itself
Not entirely sure what this update is supposed to fix aside from this PDF import problem you have. Would much rather have the JB update, but this would be a start I guess.
Kind of a random question, but what does Canada fall under on Sammobile? We aren't listed in their firmware section.
thas5 said:
Not entirely sure what this update is supposed to fix aside from this PDF import problem you have. Would much rather have the JB update, but this would be a start I guess.
Kind of a random question, but what does Canada fall under on Sammobile? We aren't listed in their firmware section.
Click to expand...
Click to collapse
Yep, sammobile doesn't have anything for Canada.
Indonesian Owner, wait for Dec 15, as Samsung told KOMPAS Daily in a press release. Update can be done via OTA or via Samsung Service Center. Suppose Samsung Canada can issue a press release as well.
See:
Code:
http ://tekno.kompas.com/read/xml/2012/12/02/08594361/Siap-siap..Galaxy.Note.10.1.Bakal.Disuguhi.Jelly.Bean
It's in Indonesian Language, but there's always Google Translate if you need it.
Hi, any more updates from the Canadian side? When the hell are we getting JB? im looking to buy my first tablet for christmas and deciding between n10 and note 10.1..looking for a good door crasher event on boxing day lol..but hope note 10.1 gets jelly bean soon
It's going to get something I just don't know what! First post updated with new info Dec 8.
Can you give us some clarification on what you mean by "my contact". At first I thought you meant Samsung customer service or just some employee, but I'm not sure anymore.
I guess you could say he's customer support, but not the regular one because he called me after I sent my complaint to Samsung Canada CEO's office from their support page. I only did that after exhausting 'regular' customer support.
Updated again! Dec 27 it is!
I am not sure of that deadline because of the exploit they would be working on patching that first and then releasing the roms after so I feel everything will get delayed and it will depend is how easy it will be to get the patch out.
You need to remember the exy 4 processor device base is around 40 million n it becomes even a bigger issue when everyone know that how easy it is to hack.
So I think Samsung would be spending all developement on this
skadebo said:
Updated again! Dec 27 it is!
Click to expand...
Click to collapse
great news! now i hope thats true,,i will probably be picking mine up on boxing day in canada so would love to have a jelly bean update the next day!
I for sure believe that deadline will not be met as the next market where note will be release will be europe, then asia n then us the fact is it has not gone beyond germany and even note 8000 has not reached asia
Italy doesn't have the update yet, as US. Do anyone have some news about the release date for Italy?
Sent from my GT-N8000 using xda app-developers app
samir_a said:
I am not sure of that deadline because of the exploit they would be working on patching that first and then releasing the roms after so I feel everything will get delayed and it will depend is how easy it will be to get the patch out.
Click to expand...
Click to collapse
Since the fix isn't ROM dependent they could send a patch out via Samsung Apps or Play also. That would be more efficient since they don't have the resources to update the ROMs individually on that many devices at the same time.
Here's their statement....
Samsung is aware of the potential security issue related to the Exynos processor and plans to provide a software update to address it as quickly as possible. The issue may arise only when a malicious application is operated on the affected devices; however, this does not affect most devices operating credible and authenticated applications. Samsung will continue to closely monitor the situation until the software fix has been made available to all affected mobile devices.​
Well you do not know what would it be required to patch it up as the patch we have is temp and not permanent they will have to rewrite the kernel in someway I guess and that will have implications how deep they are will decide how they bring out the patch.
This is not a OS flaw but a kernel flaw so it is a very serious issue.
samir_a said:
Well you do not know what would it be required to patch it up
Click to expand...
Click to collapse
Does anyone? Chainfire plugged it without having to modify the ROM itself.
This is not a OS flaw but a kernel flaw so it is a very serious issue.
Click to expand...
Click to collapse
I guess. Based on how I use my device(s) I'm not particularly worried about it. I don't visit sleazy websites, accept certificates for sites I don't know are reputable, and don't install no-name apps with few downloads. It's not as if some malicious code is going to find your device passively; you'll have to be the one to put your device in jeopardy proactively. I'd suggest people block "Unknown sources" in settings and set the "Show security warnings" in the browser.
Well even chainfire mentions its not the full patch but just a workaround and it screws up the camera which may not be important for note 10.1 owner but is to S3 and Note 2
Well after people know about this patch many would try to screw up the device just for fun, there are many who are newbies who can be targeted
I too am not sure they'll release an update in Canada on that date, but I really hope they do. It's a perfect time to do so too. Shortly after Christmas where some might get it as a present & right after boxing day where people will get it on sale.

Update Signs?

First off let me say I Do Not intend for this to be another whine thread....
Just wanted to reach out and see if anyone has had any signs of an update. I recall from one of the previous now closed threads started one user mentioned the 5th as being a possible date. Though seemingly arbitrary date the 5th is here.
People chime in if you get the notification!
Nothing for me yet.
It probably won't come out until the new Google phones do. I know it's difficult for flashaholics, but be patient.
Now I'm waiting for the September security update for Marshmallow, maybe it will be late too. They seem to be in a huge work.
This thread is the best sign.
daimerion said:
First off let me say I Do Not intend for this to be another whine thread....
Just wanted to reach out and see if anyone has had any signs of an update. I recall from one of the previous now closed threads started one user mentioned the 5th as being a possible date. Though seemingly arbitrary date the 5th is here.
People chime in if you get the notification!
Click to expand...
Click to collapse
That's what intended mine to be, but it went south so fast! Lol no sign for me yet, I'm hoping maybe by tonight. It's REALLY behind said release date. Staying optimistic!
This is the only sign from Google I have seen.
Absolutely notting here. Not even the sept security update.
There will be a September in 2017,too
If I'm remembering the same post, a user speculated that the update would be tied to the September monthly security update. That seemed like pure speculation. I hope the updates are posted soon but I don't think today will be the day, since it is already the afternoon and a business holiday. Hope I'm wrong!
Hope it's soon.
theman22 said:
If I'm remembering the same post, a user speculated that the update would be tied to the September monthly security update. That seemed like pure speculation. I hope the updates are posted soon but I don't think today will be the day, since it is already the afternoon and a business holiday. Hope I'm wrong!
Click to expand...
Click to collapse
Maybe tomorrow then, I forgot it was a holiday. What gets me is how they got everyone all riled up that it was gonna be in August, and it's gonna be out at the same time haha
Yeah Im ready for the official build too, this NPD90G preview wants me to want more, or at least some minor fixes.
No updates.............there will be speculations.
No speculations.....probably updates.
From what I've heard Qualcomm needs to do some driver upgrades for full Android N Support. If that is the case, it would explain why Google hasn't released the update yet, they simply can't until Qualcomm delivers. I can imagine Qualcomm has their hands full at the moment with all the smartphone companies out their requesting driver updates to support Android N as well.
I don't have any references for this, as I read it in a post somewhere but don't remember where. Don't take my word for it. But of course it would be interesting if someone could confirm or deny this.
I don't expect the update any time soon, but at least the latest beta runs very smoothly on my device. Can't complain at the moment.
Thats what has confused me DP5 runs well so id have thought it was near release quality but I guess not with the update taking so long. As far as qualcomm surely google should be the highest priority for drivers/updates given that they build the entire base that all other android phones base off? So an N driver for a specific SoC should work for all devices using that SoC?
I'm pretty satisfied with the Uber N ROM as is.
What @onemandivision said is correct, driver updates are critical. It's not just the kernel and the android base.
I'm a little confused by the delay though since it is already clear that phones on chips older than snapdragon 800/801 won't get nougat (ie 65-70% of all android phones according to some surveys), so there should be very few drivers to update/fine tune? Am I wrong?
Sent from my Nexus 6 using XDA-Developers mobile app
september update , my s7 edge still has the july update , samsung are dam slow pushing updates , my nexus 6 has the latest dev update but hope oneday soon the real 7.0 comes out.
New Marshmallow Image up... (MOB31E)

Next Android Security Patch Release?

Although I've lost track of when exactly they were pushed out by Lenovorola, I seem to recall my MotoX PE getting a November, then February, security patch and the "latest" May 2016 was pushed around July 20th... If that pattern (pushing out every 3rd Google release ~ 10 weeks later) holds true, might we see the August patch pushed later this month? Or will any more 6.0 patches be skipped in light of the future 7.x upgrade (whenever that may be)?
One of the reasons why I'm sticking with CM. they are on Oct. 5th security patch while the normal stock ROM is far behind
Sent from my XT1575 using XDA-Developers mobile app
Greatness83 said:
One of the reasons why I'm sticking with CM. they are on Oct. 5th security patch while the normal stock ROM is far behind
Click to expand...
Click to collapse
I hear you... One of the reasons I bought a Nexus 5X in June when the price dropped. But looking at my MotoX since then reminds me it's otherwise a better phone imho (VoLTE works fine for me on TMo).
Question: I assume you had to unlock your bootloader to root and run CM ? If so, can you relock in that state? I had to unroot and flash stock multiple times before I was finally able to relock... I could be completely wrong, but I would think the benefit of timely, monthly security updates is outweighed by an unlocked bootloader and root access?
According to a twitter reply from Moto Support, they ditched even the quarterly security update.
" We're implementing essential patches.As new security issues emerge, we will evaluate them and update your phone as needed.-Maya"
Evaluating, means they may or may not release security patches so do not hold your breath for an August updated. Yet, Moto Support on twitter was very quick to reply the first inquiry. I encourage everyone to contact them with questions @Moto_Support Let them know or demands!

No recent security update for Galaxy Tab A 10.1 (2016, SM-T580)?

After years of keeping an old tablet alive with Cyanogenmod, I needed a new tablet and decided to be content with a stock ROM this time. So I ordered a Galaxy Tab A 10.1 (SM-T580 XAR) after reading positive reviews of the hardware. I knew that there was little likelihood of a third-party ROM for the Exnyos processor but I assumed (perhaps naively) I would have a year or two of support/updates from Samsung.
So I was shocked upon booting the tablet to find that the most recent update is on the July 1 mad: !?!?) security patch from Google, meaning that this new SM-T580 is still vulnerable to several nasty Stagefright vulnerabilities. I kept pressing system update, thinking this must be a mistake, only to find that this supposedly new machine is already woefully out-of-date. Regular security updates should not only be a "bonus feature" for flagship devices; in my view, manufacturers have the responsibility to support all their new hardware with timely security updates. I knew that many manufacturers had poor support for Android, but I assumed (perhaps naively) that Samsung was different.
Is this typical of Samsung? From your experience, how often do non-flagship devices receive security updates?
I'm planning to return the tablet as defective unless there is hope of regular updates in the future.
One additional bit of information/question: The Galaxy Tab A SM-T550 (9.7", 2015, wifi) has received more regular updates than the the newer SM-T580 (10.1", 2016, wifi). Both U.S. models received an update in July, but the 2015 version received an additional update in September with the critical September security patches. So the older tablet has been getting more frequent updates?
madalu said:
After years of keeping an old tablet alive with Cyanogenmod, I needed a new tablet and decided to be content with a stock ROM this time. So I ordered a Galaxy Tab A 10.1 (SM-T580 XAR) after reading positive reviews of the hardware. I knew that there was little likelihood of a third-party ROM for the Exnyos processor but I assumed (perhaps naively) I would have a year or two of support/updates from Samsung.
So I was shocked upon booting the tablet to find that the most recent update is on the July 1 mad: !?!?) security patch from Google, meaning that this new SM-T580 is still vulnerable to several nasty Stagefright vulnerabilities. I kept pressing system update, thinking this must be a mistake, only to find that this supposedly new machine is already woefully out-of-date. Regular security updates should not only be a "bonus feature" for flagship devices; in my view, manufacturers have the responsibility to support all their new hardware with timely security updates. I knew that many manufacturers had poor support for Android, but I assumed (perhaps naively) that Samsung was different.
Is this typical of Samsung? From your experience, how often do non-flagship devices receive security updates?
I'm planning to return the tablet as defective unless there is hope of regular updates in the future.
Click to expand...
Click to collapse
I agree, I am also in the same situation, July 1. LG is the same, I got the G4 (2015) flagship which is also on July's patch. After the whole stagefright thing died down OEMs have pretty much shelved the whole monthly update promises, except for Google ofc.
Same here. I'm returning mine due lack of updates. That and the fact it weighs a ton! Hate to praise Apple but at least they patch their OS!
perky55 said:
Same here. I'm returning mine due lack of updates. That and the fact it weighs a ton! Hate to praise Apple but at least they patch their OS!
Click to expand...
Click to collapse
Wow ok. The security updates (or lack of should I say) don't bother me too much, as long as the tablet gets nougat which it almost certainly will, I'm happy. To the average user the security updates meaning nothing, just make sure the unknown sources option is unchecked and you should be fine (also always install reputable apps/from Google Play).
ShinOrochiX said:
Wow ok. The security updates (or lack of should I say) don't bother me too much, as long as the tablet gets nougat which it almost certainly will, I'm happy. To the average user the security updates meaning nothing, just make sure the unknown sources option is unchecked and you should be fine (also always install reputable apps/from Google Play).
Click to expand...
Click to collapse
Trouble is it's not just the apps, the apps pull down ads which can be compromised (check out this securityweek page) . If you use the browser you're at risk just as you would be on an unpatched PC. If you look at the release notes for the monthly security patches Google release they nearly always have half a dozen critical vulnerabilities. That means your device is at risk.
I just think it's unacceptable for a company like Samsung to leave their customers vulnerable and I won't support them for that reason.
perky55 said:
Trouble is it's not just the apps, the apps pull down ads which can be compromised (check out this securityweek page) . If you use the browser you're at risk just as you would be on an unpatched PC. If you look at the release notes for the monthly security patches Google release they nearly always have half a dozen critical vulnerabilities. That means your device is at risk.
Click to expand...
Click to collapse
In the case of this particular bug, one would be protected by disabling app installs from Unknown Sources; it still requires the user action of installing an apk. And this particular bug is a problem with Chrome, rather than the Android core. Unlike the vulnerabilities addressed in the monthly security patch, this one can be fixed via the play store.
The bigger danger comes from the mediaserver bugs - theoretically, a website could host a multimedia file that would cause the mediaserver to crash, thereby gaining the ability to execute code remotely. I have no idea how feasible this is or whether there are exploits for the recent mediaserver bugs in the wild, but that's why timely patches are important.
I simply don't understand why it is so hard for Samsung to apply these patches and rebuild the rom. Custom rom maintainers do it all the time -- how hard can it be for a company with the vast resources of Samsung? These aren't major overhauls of the code -- just minor fixes.
Yeah some of the vulnerabilities mentioned can be serious, and it is true, a company as large as Samsung really has no excuse not to deliver the patches, they previously pledged to keep devices patched-so much for that.
So I decided to keep the tablet and I am regretting it. We're in January and still no security patches...
perky55 said:
So I decided to keep the tablet and I am regretting it. We're in January and still no security patches...
Click to expand...
Click to collapse
I sent mine back because of the numerous issues I had, still awaiting my refund.
But I ended up buying the 7" Tab A which with I am satisfied, no issues, running Sept patch but on Lollipop. Though it is fit for purpose, I see it as a large chunk of money saved. :victory:
£90 for the 7" vs £170 for the 10.1", huge difference.
the SM-T580 and the SM-P580 got the updates recently:
https://forum.xda-developers.com/galaxy-tab-a/how-to/tab-sm-p580-update-t3528298
security patch is from december, 1st, 2016
Still no updates
I don't feel very secure using this device. Very disappointed with Samsung and won't be buying another Samsung product based on the less than satisfactory support for the T580.
Just went ahead and flashed the latest german rom with odin. Everything went fine and now i'm on the december security patch.
Can you change the language to English from the German rom?
perky55 said:
Can you change the language to English from the German rom?
Click to expand...
Click to collapse
Yes you can. All languages are there. I 'm using it in Dutch.
Received an update today - patch level 1st January 2017
I had an update yesterday and my T585 now says security patch January 17

Be Right Back, Samsung update for T813

I hope this update isn't crap. I plugged my SM-T813 into SmartSwitch to do a backup, and it said there was an update available. It is version T813XXS2BRB1/T813XAR2BRB1. It is only 60MB, so clearly not a major android version change. I'd put up a screen shot of the What's New, but it is utterly useless. It only gives a completely generic "A software update can include..." statement. January 1, 2018 security patch level, which is good.
Other than the expected extra long reboot, I don't notice any difference. Except for the rainbows shooting out of the top of the tablet, and the fresh spring scent it's emitting. That's new.
Yep, I got the same one yesterday.
It's just the quarterly security update - boosts you to the January security date. I haven't noticed any other changes so far.
Got this update today March 5 2018. I have a tab s2 t810. My update was over 300mb. I was thinking I was getting the Oreo update but I was wrong.
Downloading new update right now... 378.85 MB
Version T813XXU2BRB2
the only change i seen from this update was a different updated splash screen. i cant beleve it took till March to get a security update from January. i really wish google still made affordable nexus and pixel tablets

Categories

Resources