Android Security Updates - Security Discussion

Hello there,
I'm using a custom rom based on Nougat. Everything is good, but I have concerns about security. I know that Nougat is discountinued now and most people have moved to Oreo or even better Pie. Last security update was in 2018 and then was abandoned, those security updates I haven't got on my device can affect me? Can I still try by myself to install the latest security updates manually?

Tommytommy1234 said:
Hello there,
I'm using a custom rom based on Nougat. Everything is good, but I have concerns about security. I know that Nougat is discountinued now and most people have moved to Oreo or even better Pie. Last security update was in 2018 and then was abandoned, those security updates I haven't got on my device can affect me? Can I still try by myself to install the latest security updates manually?
Click to expand...
Click to collapse
No, you would need to build the ROM yourself each month with the new security updates in it.

Where do I find them?
IronRoo said:
No, you would need to build the ROM yourself each month with the new security updates in it.
Click to expand...
Click to collapse
Should I decide I would like to build a new ROM where would I find the Updates?
I just purchased a new device, dual SIM 4G LTE with Android 9.0 using a BDF-X20 rom. It ships with Android Sec Update 5 May 2018 and the vendor says there will be no updates. 19 months out of date is a little much in my opinion.

Related

Updates for 6.0.1 without installing 7.0

I had installed Nougat as soon as it was available for my S7 and never really liked the battery life. Maybe I could have tried to fix it but instead I downgraded back to 6.0.1 through Odin.
So far every thing is fine. But the first and only update that I received is the 7.0 upgrade again. Ofcourse I didn't install it this time. But it looks like I'm not getting any other updates or patches now.
When I look at the Security patch level, that is from Dec. 2016.
I think I don't get any updates for 6.0.1 now because the is an upgrade waiting to be downloaded and installed.
Is that how it works or am I missing something.
Thanks.
Baklin said:
I had installed Nougat as soon as it was available for my S7 and never really liked the battery life. Maybe I could have tried to fix it but instead I downgraded back to 6.0.1 through Odin.
So far every thing is fine. But the first and only update that I received is the 7.0 upgrade again. Ofcourse I didn't install it this time. But it looks like I'm not getting any other updates or patches now.
When I look at the Security patch level, that is from Dec. 2016.
I think I don't get any updates for 6.0.1 now because the is an upgrade waiting to be downloaded and installed.
Is that how it works or am I missing something.
Thanks.
Click to expand...
Click to collapse
Install the last (newest) 6.0.1 ROM, and that is the last update you will get for it, it's not like Windows
If you want to stay up to date with security updates you MUST be running the latest available ROM, which is 7.0
Thanks.
I have the latest rom I could find. And was hoping I would get at least the latest security updates for 6.0.1.
Looks like I will have an other look at 7.0 again soon.
Baklin said:
Thanks.
I have the latest rom I could find. And was hoping I would get at least the latest security updates for 6.0.1.
Looks like I will have an other look at 7.0 again soon.
Click to expand...
Click to collapse
Nope, mobile OS's are discontinued once a new major OS version is released
iOS/WP/Android all the same

Downgrade from Pie

I updated to Pie and I hate it. I want to go back to the latest updated version of Oreo just before the Pie upgrade. I'm with Telstra in Australia and can only find the Oreo version form Telstra from September 2017. Is it possible to install that version and apply updates right up just before Pie?
Are you concerned that factory images that do not list a specific carrier or region are not suitable for installation on a Telestra device? For example, 8.1.0 (OPM2.171026.006.G1, Jul 2018) does not call out a region or carrier. The initial Pixel 2 factory image and several later images do not list a carrier or region.
Perhaps you can back up your current install, try the November 2018, and see you like it better. If not, attempt to downgrade to 8.1.0 (OPM2.171026.006.G1, Jul 2018). If the downgrade fails, reinstall your 9.0 backup.
For what it's worth, I have not done this and recommend searching the forum for people who have tried to downgrade: https://forum.xda-developers.com/pixel-2/help/to-downgrade-android-9-0-t3850398
Hope this helps somewhat.
kotton666 said:
I updated to Pie and I hate it. I want to go back to the latest updated version of Oreo just before the Pie upgrade. I'm with Telstra in Australia and can only find the Oreo version form Telstra from September 2017. Is it possible to install that version and apply updates right up just before Pie?
Click to expand...
Click to collapse
Pie was released in October. The September update would be the most recent image for Oreo. You can install it but if you do, you won't be able to update your phone again. All future updates will be Pie. What I'm saying is you won't be able to install future updates without installing the Pie update first. There is no more Oreo after September.
Yeah I'm not interested in upgrading any further than the last Oreo version. So many features of pie are just not to my liking. I can't back up my current install because I haven't unlocked my bootloader or rooted yet. Mainly because Oreo was so good there was no real reason for me to bother. Now I'm forced to, to get rid of this terrible version of android.
kotton666 said:
Yeah I'm not interested in upgrading any further than the last Oreo version. So many features of pie are just not to my liking. I can't back up my current install because I haven't unlocked my bootloader or rooted yet. Mainly because Oreo was so good there was no real reason for me to bother. Now I'm forced to, to get rid of this terrible version of android.
Click to expand...
Click to collapse
What I think @robocuff means is that you will not receive any security patches going forward. All subsequent patches will be for Pie only.
grumpygoof said:
What I think @robocuff means is that you will not receive any security patches going forward. All subsequent patches will be for Pie only.
Click to expand...
Click to collapse
Yeah I understand that. That's why I wanted to get the latest Oreo before pie so I was as up to date as possible. I don't care about updating any further. I just want a decent ROM, which in my opinion, Pie is far from.
Thanks for the input guys.

Security Updates?

I was wondering what happened to security updates? My OnePlus 6 is still on security patch level from January 1st and it is the end of April. Is there something I could do to get regular security updates? Maybe a custom rom or something?
[email protected] said:
I was wondering what happened to security updates? My OnePlus 6 is still on security patch level from January 1st and it is the end of April. Is there something I could do to get regular security updates? Maybe a custom rom or something?
Click to expand...
Click to collapse
Open beta gets regular security updates.
Oh, I didn't know that. Thanks!
It is a bit unfortunate that you have to go to a potentially unstable version of the os to get regular security updates.
Stable OOS 9.0.5 might be available in 1-2 weeks I guess...?
So open betas or custom roms are an option for you to get the latest security updates.

Is it possible to get monthly security patch without updating to One UI?

The S8+ G955W is not able to root and I need call recorder plus I like to theme it with Andromeda, so I decide that I am not going to update to One UI. However, the security patch of Oreo only updated to January, is there anyway to get the March security patch which comes with the Pi update? And how about the future patches?
acwcanada said:
The S8+ G955W is not able to root and I need call recorder plus I like to theme it with Andromeda, so I decide that I am not going to update to One UI. However, the security patch of Oreo only updated to January, is there anyway to get the March security patch which comes with the Pi update? And how about the future patches?
Click to expand...
Click to collapse
You can root. look up jrkruse edl safestrap
As for updates no you can't
TheMadScientist said:
You can root. look up jrkruse edl safestrap
As for updates no you can't
Click to expand...
Click to collapse
Are those really root? Is the bootloader unlocked? Can I install Magisk or Supersu? I believe the answers are no, no and no. And if I have to stay with Nougat then what date of the security patch we are talking about? I appreciate of your suggestion but it just doesn't make sense to me.
acwcanada said:
Are those really root? Is the bootloader unlocked? Can I install Magisk or Supersu? I believe the answers are no, no and no. And if I have to stay with Nougat then what date of the security patch we are talking about? I appreciate of your suggestion but it just doesn't make sense to me.
Click to expand...
Click to collapse
The bootloader it's locked yes but with safestrap you can at least install a rooted nougat image. Its either that or update to pie to get the latest security patches. Its one or the other. There are several threads on rooting and safestrap for bit 5 U models. I think the last night l nougat patch it decent 2017 maybe jan 2018.

Oxygen OS12 to OS 11 downgrade but need a newer security patch now

Hey guys,
So I have been using OxygenOS12 for months on my 8T KB2005 (Global). It was draining my battery by lunch and was terrible to look at so I finally downgraded back to OS11 and everything is working great again. My only concern is my phone is currently on the January 2021 patch. I have the OxygenOSupdater app but that only wants to upgrade me to OS12 again. Anyway I can just get the May 2022 security patch and sideload it? Does anyone know where I could find a zip of that?
Thanks
I know this isn't what you're asking about, but for information sake. I too have same setup. 8T on oxygen OS12 for over a month now. My battery has been great, not looking back to 11 at all. Perhaps something else was causing battery drain?
jabe78 said:
I know this isn't what you're asking about, but for information sake. I too have same setup. 8T on oxygen OS12 for over a month now. My battery has been great, not looking back to 11 at all. Perhaps something else was causing battery drain?
Click to expand...
Click to collapse
yeah not looking to go back to 12. Honestly I am always all about the newest Android system but OxygenOS12 was the ugliest most dysfunctional version of Android I have ever used on a OnePlus device. I am going to use 11 until 13 comes out and I am hoping OP can correct what they did wrong otherwise I'm getting a Pixel or Samsung in the fall.
NYFan said:
Hey guys,
So I have been using OxygenOS12 for months on my 8T KB2005 (Global). It was draining my battery by lunch and was terrible to look at so I finally downgraded back to OS11 and everything is working great again. My only concern is my phone is currently on the January 2021 patch. I have the OxygenOSupdater app but that only wants to upgrade me to OS12 again. Anyway I can just get the May 2022 security patch and sideload it? Does anyone know where I could find a zip of that?
Thanks
Click to expand...
Click to collapse
No. System level security patch will stay on Jan in your case.
Google play security patches will update.
So it's possible to have ROM January security patch and GPlay July.
Rootk1t said:
No. System level security patch will stay on Jan in your case.
Google play security patches will update.
So it's possible to have ROM January security patch and GPlay July.
Click to expand...
Click to collapse
I understand that Google Play will update etc... but OP released a May 2022 security update for OS11 so there has to be a way to upgrade it to that even if I have to do it unconventionally.
NYFan said:
I understand that Google Play will update etc... but OP released a May 2022 security update for OS11 so there has to be a way to upgrade it to that even if I have to do it unconventionally.
Click to expand...
Click to collapse
Where did you find information that OP released May update to OOS11?
Rootk1t said:
Where did you find information that OP released May update to OOS11?
Click to expand...
Click to collapse
My wife has the same phone but never upgraded to OS12, she has the proper security patch. If you Google it you will also find it listed but not downloadable.

Categories

Resources