Database Users

security patch

Hi, did anyone recieve march 18. security patch yet? Samsung and BlackBerry devices are receiving April 2. patch and we are still sucking with march 1. update.. Can anyone tell me what is going on?

They're different devices, they're on completely different update schedules. The patch they're receiving is probably actually months old by now.

nope, they are receiving april 2. patch from Google..

Source please?

This is being reported on crackberry with 2nd April security patch. However, that doesn't mean much other than the security for a particular phone, and it is a very particular phone that is still on lollipop.
I'd say this is a little bit of conflation and the fact of lollipop and BB's locked out kernel, bootloader and security makes it a nonstarter in terms of Nexus lines.

SM-G935U Galaxy S7 Edge (Unlocked) - May 1st Security Patches

Had the Nexus 6P - but even with Franco kernel and normal use battery life wasn't long enough. Saw the release of the S7 Edge unlocked which was great so I went and picked it up from best buy last night. Big reason is the monthly update cycle and keeping everything patched from a security standpoint without the Verizon bloat and slow release cycles.
Went to check the patch level and saw "Android security patch level: May 1, 2016". Checked for updates and are none.
Anyone else experiencing this? Appears to be missing June for sure and the newly released July security patches.

kennedyd013 said:
Had the Nexus 6P - but even with Franco kernel and normal use battery life wasn't long enough. Saw the release of the S7 Edge unlocked which was great so I went and picked it up from best buy last night. Big reason is the monthly update cycle and keeping everything patched from a security standpoint without the Verizon bloat and slow release cycles.
Went to check the patch level and saw "Android security patch level: May 1, 2016". Checked for updates and are none.
Anyone else experiencing this? Appears to be missing June for sure and the newly released July security patches.
Click to expand...
Click to collapse
Yeah mine has the same update. Does yours have the briefing feed on the left of your home screen? I noticed mine doesn't like the carrier ones do.

Same here..
Alaris said:
Yeah mine has the same update. Does yours have the briefing feed on the left of your home screen? I noticed mine doesn't like the carrier ones do.
Click to expand...
Click to collapse
Yep - same with me - no briefing feed when you swipe left - nothing there.
Wonder whats happening - would hope Samsung provides updates to their own phone.. ?

I'm guessing it's because the phone just came out that they haven't released an update with the latest security patches yet. They probably have to set up their update servers for this new phone and a bunch of other behind the scenes stuff to get updates rolling. I would assume that it will get something within the next couple weeks and then continue to keep up with the other variants.

Does this variant of the S7 Edge have an unlocked bootloader?

No unlocked bootloader - just not tied to an individual carrier i.e. verizon, etc. with the extra bloatware.
Still no updates yet to the SM-G935U.

Ended up returning it and going back to my Nexus - no updates really sucks.

Has anyone figured out how to get briefing on the left screen. I used that a lot and i can't get it to work. Even went to the play store and Samsung store, got briefing but it won't let me enable it on the home screen settings...?

I've gone round and round with Samsung support about this particular unlocked device. The bottom line is that they are saying OTA updates for these devices might not be available because those are normally pushed through the carrier. They suggested to use their Smart Switch tool to apply updates. Even though this is a terrible idea and they should use OTA (with the invention of non-carrier WiFi these days ), I checked using this tool and surprise... there were no updates available.
I'll spare everyone the entire conversation, but this is how it ended:
"We understand. If you have an unlocked the latest updates for firmware and security can be done through Smart Switch. If you have checked for an update using Smart Switch and there aren't any currently available, we couldn't speculate on when that may change. In many cases this wouldn't be delivered OTA because OTA updates are normally pushed by carriers. Unlocked devices may not be able to get updates directly from the carrier currently being used. ^Jay"

Mine just updated today with the August 1st security patches. If had to guess, they waited until the Olympics were over since they handed these unlocked devices out to every athlete in attendance and they didn't want them receiving updates during the event.

Hopefully now that the unlocked models have received their first update, they will continue to get regular updates at the same time as other variants.

just checked for update - 164.13 mb ) ( g935v flashed to g935u)

Interesting
secsquirl said:
Mine just updated today with the August 1st security patches. If had to guess, they waited until the Olympics were over since they handed these unlocked devices out to every athlete in attendance and they didn't want them receiving updates during the event.
Click to expand...
Click to collapse
Thanks for posting this one, thats good to hear. I wonder if they will proceed further. Good to hear Samsung's infrastructure will support updates in the future. I wonder if its only for security patches or if they will do incremental updates to OS as well, like Android N for example.

Just got this tonight. I didn't have automatic update turned on but I checked and this showed up. Idk if i should do it or not.

I'm on T-Mobile with the SM-G935U. I got the update a few weeks ago and now it shows the Aug 1,2016 Android security update.

As far as root and bootloader unlock should i not do the update or just go for it?

Can the sm-g935U be flashed using DFS Tools? Does these codes bring up the diag menu?
##3424#
###366633#
Can someone please try those codes and see if the diag menu shows.
Thanks

PapaDocta said:
Can the sm-g935U be flashed using DFS Tools? Does these codes bring up the diag menu?
##3424#
###366633#
Can someone please try those codes and see if the diag menu shows.
Thanks
Click to expand...
Click to collapse
Those codes don't bring up anything. Neither does *#0*# - I'm still on the damned May 1, 2016 Security update and it doesn't seem to think I need one.

Latest Galaxy S8 Exynos security patch level

Hi, whats the latest security patch level? I just got my phone and it is showing after the firmware update 1-Apr-2017. My company is not permitting me to access exchange due to old security patch level. What is the latest version and is there a way to force it or install it somehow? Thanks.

April 1st is the current patch level.

thanks for the response, this will be a problem for me then as our admins will require the patch to be installed in a week or 2 after being released by Google.

samitro said:
thanks for the response, this will be a problem for me then as our admins will require the patch to be installed in a week or 2 after being released by Google.
Click to expand...
Click to collapse
Your admins seem a bit clueless when it comes to updates on android phones, let alone non-pixel phones.

In most cases, the patch level will be 15 to 20 days behind on the flagships in unlocked regions with no carrier bs.
The gap widens as major upgrades loom in (ex: from 6.0 to 7.0).
The s7 was left on an old security patch for a few months until 7.0 came out with the latest ones.
Oh, and as the device becomes older, updates switch to 4 month cycles, check the samsung security website for more details on what devices are on what release cycles. Currently, this is anything older than the S6.
EDIT: Link: http://security.samsungmobile.com/introsm.html

Not so good I was looking forward to move away from my iPhone. Thanks anyway.

I purchased an S8 and found out that the security patch is outdated and is not supported by my employer

OP are you using Microsoft Intunes/Company Portal to handle your Exchange account?!

May release is already out since 25th~ of May in some (if not most by now) markets, run an update.

JaeMelo said:
OP are you using Microsoft Intunes/Company Portal to handle your Exchange account?!
Click to expand...
Click to collapse
No, my company required Airwatch MDM to access corporate email.
Skander1998 said:
May release is already out since 25th~ of May in some (if not most by now) markets, run an update.
Click to expand...
Click to collapse
My S8 is the USA unlocked version. No update till now. (Already checked)

sabaatworld said:
No, my company required Airwatch MDM to access corporate email.
My S8 is the USA unlocked version. No update till now. (Already checked)
Click to expand...
Click to collapse
Can you please screenshot your settings -> software info page?

sabaatworld said:
I purchased an S8 and found out that the security patch is outdated and is not supported by my employer
Click to expand...
Click to collapse
Your employer is an idiot if he thinks all android phones will be on the latest security patch, only the pixel is updated monthly.

Skander1998 said:
Can you please screenshot your settings -> software info page?
Click to expand...
Click to collapse
Here you go

peachpuff said:
Your employer is an idiot if he thinks all android phones will be on the latest security patch, only the pixel is updated monthly.
Click to expand...
Click to collapse
My employer doesn't require I use any specific phone, they require that the phone I use on their network be patched with the latest OS Security patch (whether Android, Apple or Microsoft). That doesn't make them an idiot, it makes them conscious about data-loss/breaches. As a consumer of technology you REALLY want that.
More employers are requiring that mobile phones have monthly security patches applied. So far only Apple and Google fit the bill. Google has even cranked up the price of their mediocre flagship because they KNOW this. All the other mobile manufacturers are just handing the business market to Apple and Google by being blind to this.
And I can verify what the OP said. I just purchased an Unlocked S8+ and the security patch level is April 1, so it's 2 months behind the Samsung promised "montly security patching".

Received a firmware update today plus security patch for June

Now you can easily hide the nav bar for immersive experience. Very nice addition.

mbashat said:
Now you can easily hide the nav bar for immersive experience. Very nice addition.
Click to expand...
Click to collapse
It's a very welcome edition and saves messing around with adb commands to get the full immersive experience, shame though that you cannot enable or disable it yet on a per app basis.

daleski75 said:
It's a very welcome edition and saves messing around with adb commands to get the full immersive experience, shame though that you cannot enable or disable it yet on a per app basis.
Click to expand...
Click to collapse
I have checked and the good news is that you do have the option to select which apps run in full screen mode. Not all apps are supported though.
To do this select Settings>Display>Full Screen Apps.

mbashat said:
I have checked and the good news is that you do have the option to select which apps run in full screen mode. Not all apps are supported though.
To do this select Settings>Display>Full Screen Apps.
Click to expand...
Click to collapse
Thats something else and only means the app is filled to the 18.5:9 screen ratio. That was there since launch of the S8(+)

my last was april... shame Samsung...

I heard Verizon's Pixel Got a Software update yesterday Sept security patch

I hear Verizon and Google have released a ota of the Sept security patch for Verizon's pixels yesterday.. if you have a Verizon be sure to check for update manually in settings, about phone, software update..

I saw it on my Pixel XL this morning but not on my wife's Pixel. I have no details except the size of ~55MB since that is all that shows. It is not available for download in the OTA images or the factory images section. I assume it will not work over the standard OTA mechanism since the phones are rooted, and I have no interest in taking the patch blindly anyways.

The september 2017 Security Patch should have been released already. But due to some reasons, Google has delayed the upcoming monthly security update. The reason for the delay could be the release of a new stable Android 8.0.0 Oreo firmware update for Google Pixel and Nexus phone. Under the AOSP project, Google released 3 sets of monthly updates. One for the latest Android 8.0 Oreo, another for 7.1 Nougat, and finally the Marshmallow. Today, the Google Pixel XL device is receiving the September 2017 security patch OTA.
The first Google devices to receive the September 2017 Security Patch are the Unlocked Pixel XL 128 GB on AT&T and Verizon. That means, the US carriers shall receive the OTA update before the global roll out. The international variant of Pixel, Pixel XL, Nexus 6P, and Nexus 5X may receive the next security patch as soon as today. So stay tuned as we will list the update here.
The OTA update for AT&T Pixel XL brings the firmware build number OPR3.170623.007 dated September 5th 2017 level based on Android 8.0.0 Oreo. This an upgrade over the previous OPR6.170623.012 August 5th 2017 8.0.0 Patch.
This September OTA update comes in a very small OTA package. It weight about 50.61 MB in size. The changelog states the following.
This update fixes critical bugs and improves the performance and stability of your Pixel XL. If you download updates over the cellular network or while roaming, additional charges may apply. Update size 50.6 MB
Note: Google Pixel XL users have reported that the OTA notification shows that it is based on Android 7.1.2 Nougat, whereas the Pixel devices are already running 8.0.0 Oreo. However, upon update, the Android version is based on 8.0.0 Oreo and September 2017 security patch level. So it could be an error from Google’s side.
Download Google Pixel (XL) September 2017 Security Patch OTA update
One of the users for Google Pixel XL have managed to capture the latest OTA update from the LogCat file. September 2017 security patch.
AT&T Google Pixel XL 128 GB | OTA Download | google_marlin_marlin
Verizon carrier Pixel XL | OTA download |
8.0.0/OPR3.170623.007 from 8.0.0/OPR6.170623.012
Android 8.0 – Oreo for Pixel XL
Official factory images
Official full OTA images
Build for Global, Bell, Telus, Telstra, TMoUS, Sprint, USCC, Rogers/Fido
Android 8.0 – Oreo for Pixel
Official factory images
Official full OTA images
Build for Global, Bell, Telus, Telstra, TMoUS, Sprint, USCC, Rogers/Fido
Soon the official factory images for September 2017 Security Patch will show up. Also, download OTA update image from above and install it via ADB sideload method.

What's in the security patch
There are 30 issues resolved in the security patch dated 2017-09-01 and 51 in the 2017-09-05 one. Google notes that the two security patch level strings provide “Android partners with the flexibility to more quickly fix a subset of vulnerabilities that are similar across all Android devices.”
Google devices will receive the latter patch, while devices from other manufacturers will also feature OEM-specific fixes. This month’s bulletin also includes a new section that lists patches that are specific to Google devices.
Vulnerabilities range from moderate to critical, with the most severe possibly enabling remote code execution when browsing, using email, or MMS. However, Google notes that there are no reports of customers being affected by these security issues.

Still not interested? Some people are willing to give up root for a little while in order to improve their security... Only someone who thinks having root 24/7 is better than improving security is something different.. I know with this patch it stops people from remotely controlling you're device... I think if I was rooted I'd unroot and add this security protection...

Pixelxluser said:
Still not interested? Some people are willing to give up root for a little while in order to improve their security... Only someone who thinks having root 24/7 is better than improving security is something different.. I know with this patch it stops people from remotely controlling you're device... I think if I was rooted I'd unroot and add this security protection...
Click to expand...
Click to collapse
If someone is rooting, why not apply the update and reroot. We all do that every month. I just did mine for this update. I get the loss of security if you root but you dont need to give up root to update.

Pixelxluser said:
The first Google devices to receive the September 2017 Security Patch are the Unlocked Pixel XL 128 GB on AT&T and Verizon. That means, the US carriers shall receive the OTA update before the global roll out.
The OTA update for AT&T Pixel XL brings the firmware build number OPR3.170623.007 dated September 5th 2017 level based on Android 8.0.0 Oreo. This an upgrade over the previous OPR6.170623.012 August 5th 2017 8.0.0 Patch.
AT&T Google Pixel XL 128 GB | OTA Download | google_marlin_marlin
Click to expand...
Click to collapse
I would like to know where you copied & pasted this info since at&t does not sell the pixel, so, I can't see them releasing a ota.
Last I knew, google controls this
Sent from my Pixel using XDA-Developers Legacy app

I was rooted on Oreo and updated to this new build and my service still sucks? I'm right next to a cell tower and my phone is going from -64 to -80dbm and its making my battery tank. I'm about to go back to 7.1.2.

I think a big misconception is trying to pull people away from improving their own security and safety by using the whole oh you will lose root if you do that and may lock you're bootloader.. just because you personally don't care about you're own safety doesn't mean you should try to prevent someone else from improving their own safety.. come on the fact is it's just root you will be fine to live without it for a little while it's not going to hurt you to give it up for a few...

And another thing is all the new pixels and Pixel XL are gonna come preinstalled with these new security patchs so you all might as well get used to it...

I don't understand why Google doesn't post these on their website immediately. I have a Pixel on Verizon and have no way of accessing it until they finally publish the update to their site or zi just start receiving it. It's always this awkward way with a lot if confusion. It would also be nice if they fixed the few small bugs in Oreo (i.e. picture in picture mode causing reboots when you turn the screen off/back on). It's just a little annoying.

The Sept security patch also fixes a Bluetooth problem. It's recommend to update to any software with Sept security patch and later security patch
Google is still working on getting the September security patches out the door, but it has posted a security bulletin detailing the changes. Several of the flaws noted in the bulletin are part of an enormous Bluetooth vulnerability discovered by Armis Labs, which bills itself as an IoT security firm. The "BlueBorne" attack exposes billions of Android devices to complete takeover by hackers, but it's not only Android. The same flaw exists in Windows, Linux, and some versions of iOS.
BlueBorne is dangerous because most devices have Bluetooth active even when it's not actively being used, and an attacker does not need to pair with the target device to completely take it over. There are eight vulnerabilities listed by Armis, four of which are critical (though Google's classifications differ). The most severe issues are the two remote code executions, which allow an attacker to completely own a device without the user even knowing. These flaws are present in the Bluetooth Network Encapsulation Protocol (BNEP) service, which is used for internet sharing and networking.
You don't even need an internet connection to infect a device, and the Android demo above is wild. If one of the affected devices has Bluetooth on, it's a target. The attacker can gain complete control of the phone to launch any app, install malware, and exfiltrate data. Armis estimates that about 8 billion devices are vulnerable, including 2 billion Android phones, tablets, set top boxes, and watches. There are another 2 billion Windows devices and around 1 billion iOS phones and tablets affected. BlueBorne doesn't work on iOS 10, so the damage is mitigated there.
BlueBorne vulnerabilities in the security bulletin
Most of the vulnerabilities in Android reported by Armis affect all recent builds of the OS, so Google is adding a lot of patches to AOSP. It's up to OEMs to push those out to devices, though. Anything with a patch level of September 1st, 2017 or later will have the necessary fixes. It's going to take time for this patch to roll out, and in the meantime, there are a lot of vulnerable devices.
This was took from Android polices website

It's also recommend that the devs here on xda get rid of the software which is vuneralable to theses problems.. it doesn't really show good faith of a Dev if they know there's security problems in the roms but yet keep them posted for someone to download and install...

Pixelxluser said:
It's also recommend that the devs here on xda get rid of the software which is vuneralable to theses problems.. it doesn't really show good faith of a Dev if they know there's security problems in the roms but yet keep them posted for someone to download and install...
Click to expand...
Click to collapse
Boring.......

Pixelxluser said:
It's also recommend that the devs here on xda get rid of the software which is vuneralable to theses problems.. it doesn't really show good faith of a Dev if they know there's security problems in the roms but yet keep them posted for someone to download and install...
Click to expand...
Click to collapse
Do you even know what the ... ah not worth it
Sent from my Pixel using XDA-Developers Legacy app

L04C567B396 appeared on FF

Today, L04C567B396 appeared on FF, the third update in a month time with no approval for installation for the earlier B394 so far.
With this updae comes two additions and one improvement to the EMUI features plus a new June google security patch.
Again, with this update a hope of eminent EMUI 8 (Oreo) is lost at least for a couple of months if not impossible any time soon in my opinion.
Let's hope that my guess is wrong.
Tell me what do you think in the comments below.
Anyways here's the B396 changelog:
This update reduces Phone Manager's cleanup time to less than one minute, and adds more scenarios to support the one-touch split-screen feature.
[Dual windows]
Adds a button in the Recent apps cards. Touch it to split the screen. This operation is only available for apps that support the split-screen feature.
[System]
Optimizes Phone Manager's cleanup speed and scope. A single cleanup can now be completed in less than one minute.
Optimizes data usage management by allowing you to specify the start date of your data plan.
[Call]
Optimizes Quick calling by enabling speaker mode by default. Press and hold the volume down button to enable Quick calling.
[Security]
Integrates Google security patches released in Jun 2018 for improved system security.
----------------
Update 1: Honor skipped B394 to B395 and stated seeding.
Nitrowarez.
Sent from my FRD-L04 using Tapatalk

Who cares? By the time it's approved it'll be end of July possibly August. Chris (head Dev at honor USA) says they have no control over when it gets approved. We are getting Oreo, and he's getting responses from the beta group about the bootloader issue to give to the higher ups.

agraceful said:
Who cares? By the time it's approved it'll be end of July possibly August.
Click to expand...
Click to collapse
I was thinking the same.
Honor support told me we would get it 'very soon' 2 months ago and its likely another two months if they have only just started alpha/beta testing.
Not sure I agree that is 'very soon'.
Personally I'd prefer lineageos so we get future support, but haven't read the other threads to understand why dev support is limited.
Perhaps 'Chris' can release the kernel source for Oreo on the Honor 8, so others can start development in parallel with Honor, or release the camera blobs or whatever is stopping the camera's working.

I think we better stop creating new threads for each patch for specific model .,. its getting really boring.,., i myself created several threads for the patches but no charm now.., especially after oreo in tow..,
admins if we could join all the threads under patch update.,

SSyar said:
I think we better stop creating new threads for each patch for specific model .,. its getting really boring.,., i myself created several threads for the patches but no charm now.., especially after oreo in tow..,
admins if we could join all the threads under patch update.,
Click to expand...
Click to collapse
I guess I'll make it. Hopefully it works out well

xsacter said:
I guess I'll make it. Hopefully it works out well
Click to expand...
Click to collapse
Hope so?

scoobydu said:
Hope so?
Click to expand...
Click to collapse
Yea because some people might not like the idea, including admins

xsacter said:
Yea because some people might not like the idea, including admins
Click to expand...
Click to collapse
Ok.