Menu
Android device makers to release monthly security fixes

Android device makers to release monthly security fixes

They're starting now with a fix for a major vulnerability called Stagefright

Google, Samsung and LG will move to a monthly security patch release for Android devices after a range of software vulnerabilities were recently disclosed.

Google, Samsung and LG will move to a monthly security patch release for Android devices after a range of software vulnerabilities were recently disclosed.

Google, Samsung and LG will start to issue monthly security patches for Android devices, taking a cue from the PC industry after critical vulnerabilities put hundreds of millions of smartphone users at risk.

Security experts have warned for years that Android devices receive critical updates from manufacturers either too slowly or not at all. Phones and tablets have been increasingly targeted by hackers looking to steal data or defraud users.

Google's Nexus devices will get monthly over-the-air security patches, said Adrian Ludwig, lead engineer for Android security, at the Black Hat security conference in Las Vegas.

"Nexus devices will continue to receive major updates for at least two years and security patches for the longer of three years from initial availability, or 18 months from last sale of the device via the Google Store, he wrote in a blog post.

The first update, released on Wednesday, will include a patch for a severe vulnerability called Stagefright, he said.

Most Android devices are vulnerable to Stagefright, which can compromise a device merely through delivery of a specially crafted multimedia message (MMS). An attacker needs only to know the victim's phone number.

Google has provided manufacturers with monthly notices about security fixes for the last three years, Ludwig wrote. But that doesn't mean they necessarily distributed those updates to users, which might have required cooperation from mobile operators.

"Samsung is currently in conversation with carriers around the world to implement the new approach," the company wrote in a blog post Wednesday. "In collaboration with carriers and partners, more details about the specific models and timelines will be released soon."

Samsung has also fast-tracked updates for its Galaxy device line to fix Stagefright.

At Black Hat, Ludwig said at LG has made a similar commitment. The move to monthly patching mirrors one made by Microsoft in 2003 after it grappled with an increasing number of operating systems flaws that worried security experts.

Microsoft still issues patches on the second Tuesday of the month, a day know as Patch Tuesday. For dangerous flaws, the company occasionally deviates from the schedule and issues an emergency patch. In 2009, Adobe Systems also moved to regular patch schedule after its products were increasingly targeted by hackers.

(Lucian Constantin contributed to this report.)

Send news tips and comments to jeremy_kirk@idg.com. Follow me on Twitter: @jeremy_kirk

Follow Us

Join the New Zealand Reseller News newsletter!

Error: Please check your email address.

Tags samsunglgGooglesecuritymobile security

Slideshows

Top 50 defining moments of the New Zealand channel in 2016

Top 50 defining moments of the New Zealand channel in 2016

Reseller News looks back on a tumultuous 12 months for the New Zealand channel, assessing the fallout from a year of sizeable industry change. Whether it be local or global mergers and acquisitions, distribution deals or job changes, the channel that started the year differs somewhat to the one set to finish it - Reseller News assesses the key moments that made 2016.​

Top 50 defining moments of the New Zealand channel in 2016
​Hewlett Packard Enterprise honours high achieving NZ channel

​Hewlett Packard Enterprise honours high achieving NZ channel

Hewlett Packard Enterprise honoured its top performing Kiwi partners at the second running of its HPE Partner Awards in New Zealand, held at a glitzy ceremony in Auckland. Recognising excellence across eight categories - from distributors to resellers - the tech giant celebrated its first year as a standalone company, following its official split from HP in 2015.

​Hewlett Packard Enterprise honours high achieving NZ channel
Nutanix treats channel partners to Christmas cruise

Nutanix treats channel partners to Christmas cruise

Nutanix recently took to the seas for a Christmas Cruise around Sydney Harbour with its Australia and New Zealand staff, customers and partners to celebrate a stellar year for the vendor. With the sun out, they were all smiles and mingled over drinks and food.

Nutanix treats channel partners to Christmas cruise
Show Comments