Slashdot Mirror

← Back to Stories (view on slashdot.org)

Google Patches More Stagefright Vulnerabilities In Android (threatpost.com)

Posted by samzenpus on from the raise-shields dept.

msm1267 writes: The Stagefright vulnerabilities are the gifts that keep on giving. Months after the potentially devastating security flaws in the mobile OS were publicly disclosed, Google continues to send out patches addressing vulnerabilities related to the initial reports. Today's monthly Android security bulletin includes a fix for another flaw in the Stagefright media playback engine, one in libutils where the Stagefright 2.0 vulnerabilities were found, and two in Android Mediaserver where all the vulnerable code runs. The over-the-air update was released today to Google's Nexus devices and will be added to the Android Open Source Project (AOSP) repository in the next two days; Google partners including Samsung were provided the patches on Oct. 5, Google said, adding that the vulnerabilities are patched in Build LMY48X or later, or in Android Marshmallow with a patch level of Nov. 1.

5 of 56 comments (clear)

  1. And carriers like Verizoned are where? by Anonymous Coward · · Score: 2, Insightful

    And how many months if EVER will Verizon and carriers send out these updates? I'm still waiting for the last 3 patches that they haven't done shit about.

    1. Re:And carriers like Verizoned are where? by silverkniveshotmail. · · Score: 4, Insightful

      It's important that you don't do anything shady like uninstall Facebook.

  2. Update status will drive my next phone purchase by mcrbids · · Score: 4, Insightful

    I have a 2.5 year old phone that I otherwise love and while it's EOL, I still use it extensively.

    The idea that a phone can be not even 3 years old and not have any hope of getting updates is something I balk STRONGLY at.

    --
    I have no problem with your religion until you decide it's reason to deprive others of the truth.
  3. Apple does this right by SuperKendall · · Score: 2, Insightful

    Not sure you are following the analogy, because the original complaint is that you need the carriers permission to install an update from Google.

    Meanwhile Apple is supporting devices around four years old with updates, no matter what carrier you have.

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley
  4. It doesn't work by Ilgaz · · Score: 4, Insightful

    Google should admit there is a problem in Android's model of getting updates and do something about it.

    It is not just code.

    If they don't care because Android is doing well in terms of market share etc, they should read comments & stories about Nokia Symbian. Developers, users, authors were telling them everything which were wrong and they were laughing at them showing their massive marketshare. Now, their own Google Keyboard didn't autocomplete Symbian, it is that irrelevant.