Related
Hi Everyone
I use a Xiaomi phone, I just flashed beta version of their new UI rom (OEM build).
I noticed that " android security patch level " was dated as august 1st even when the beta rom was released in july 30th.
Is it normal to have a security patch level be dated later, than its actual release date in beta rom.
I believe google makes these patches and they hadn't released it on their nexus phones yet.
If something i said is wrong , pls correct me and pls direct me to a site/article that actually shows how security patch level updates really work.
P.S yes i asked in their forum and couldn't get a proper response
Hello and thank you for posting in the Q&A section,
it can't be. Google hasn't released the new security updated yet.
Check with Stagefright Detector, if your device is vulnerable.
Best regards
Trafalgar Square
Hi, thanks for replying
Trafalgar Square said:
it can't be. Google hasn't released the new security updated yet.
Click to expand...
Click to collapse
yeah i was also thinking the same, but..
link to screenshot taken from my phone on july 31st
https://drive.google.com/open?id=0Bx15_cvfXHO6cGVLaGkxZURzM1k
Trafalgar Square said:
Check with Stagefright Detector, if your device is vulnerable.
Click to expand...
Click to collapse
Done testing and found not vulnerable,...good to know that
Flip-Flop said:
Hi, thanks for replying
yeah i was also thinking the same, but..
link to screenshot taken from my phone on july 31st
https://drive.google.com/open?id=0Bx15_cvfXHO6cGVLaGkxZURzM1k
Done testing and found not vulnerable,...good to know that
Click to expand...
Click to collapse
This article really cleared my doubts,
http://www.androidcentral.com/monthly-security-patches-are-most-important-updates-youll-never-get
from the article
Google's partners who make the phones we love get the changes a month in advance so they can also be ready to update as soon as they can. Some, like BlackBerry, are able to push these updates right away, with a short delay for carrier branded (remember this, it's important) models. Others take a little longer, and some phones will never, ever get any security patches.
Click to expand...
Click to collapse
Hi guys, as reported on the vodafone italian forum this week has been released a new update for G6, now is available trough LGBridge (didn't check trough OTA).
Don't which patch are, or if there are any difference because "Bridge is a Britch" (Sorry), and it'll take a while to download the entire KDZ of 3.04GB.
I'll keep you updated about possible changes, cheers
- Edit -
Just flashed the KDZ, January patch! Incredible!
Killua96 said:
Hi guys, as reported on the vodafone italian forum this week has been released a new update for G6, now is available trough LGBridge (didn't check trough OTA).
Don't which patch are, or if there are any difference because "Bridge is a Britch" (Sorry), and it'll take a while to download the entire KDZ of 3.04GB.
I'll keep you updated about possible changes, cheers
- Edit -
Just flashed the KDZ, January patch! Incredible!
Click to expand...
Click to collapse
Do you have a KDZ for us? Or a source to download the new Firmware? Thanks
LGG6Fan said:
Do you have a KDZ for us? Or a source to download the new Firmware? Thanks
Click to expand...
Click to collapse
Here: http://pkg02.lime.gdms.lge.com/dn/d...2ONAXIC8D5F3D5/H87011i_00_OPEN_EU_OP_0108.kdz
unfortunately, the patches of January 1 do not include protection for spectre and meltdown as they include those of January 5, 2018
manuel79 said:
unfortunately, the patches of January 1 do not include protection for spectre and meltdown as they include those of January 5, 2018
Click to expand...
Click to collapse
That's not so important for two major reasons:
- 821 is not vulnerable to Meltdown
- Spectre is a vulnerability that cannot be soft-patched, patches are only to block some applications of Spectre.
Anyway they're still better than December patch xD
in any case g6 no brand ita no update of the patches at the moment, nor through ota or lg bridge,in any case if I have the chance to sell the g6 and I'll take another.
New update V11i here. H870 buy in Orange. Only avalible in lg bridge. No OTA yet.
No branded phone
Same here, Italian G6 no brand just updated to 11i via Bridge...
Inviato dal mio LG-H870 utilizzando Tapatalk
Carrier free H870-POC successfully updated via LG Bridge.
Can anyone confirm these KDZ details?
H87011i_00_OPEN_EU_OP_0108.kdz
size: 3,04 GB
CRC32:
Code:
4D144B99
MD5:
Code:
496A4A2168084E965CCD484006AA9A0C
SHA-1:
Code:
B96CAE6C178EC25DB6C5F10D6F130C57B2A32F6C
edit2
I've compared hashes with the file from the link a few posts back and they match
edit3
GDrive - H87011i_00_OPEN_EU_OP_0108.kdz
Good morning I connected my G6 or LG Bridge tells me that it is impossible to verify the version of the soft, you know the reason, thanks
Updated through LG Bridge too...
What is with all that fuzz about a security patch?! It seems that all of you work at Nasa or Cia and you have big data that interest anyone....
Sent from my LG-H870 using Tapatalk
vic604 said:
What is with all that fuzz about a security patch?! It seems that all of you work at Nasa or Cia and you have big data that interest anyone....
Click to expand...
Click to collapse
We've been without updates for several months and received November patch at the end of December, this is why it's surprising to see January patch.
Killua96 said:
We've been without updates for several months and received November patch at the end of December, this is why it's surprising to see January patch.
Click to expand...
Click to collapse
Yeah... But you see that is only ninja smoke... This is did to forget for a while about android 8.0 update... And also my humble opinion is that this security update don't matter. And keep in mind if someone with the right know how wants to find an exploit to access your phones it will be done...
I am sorry for speaking my mind, I usually read without saying anything, but this time I did not understand what was the hole fuzz... A new thread and some of the guys asking the developer about updates with the new patch
Sent from my LG-H870 using Tapatalk
vic604 said:
Yeah... But you see that is only ninja smoke... This is did to forget for a while about android 8.0 update... And also my humble opinion is that this security update don't matter. And keep in mind if someone with the right know how wants to find an exploit to access your phones it will be done...
I am sorry for speaking my mind, I usually read without saying anything, but this time I did not understand what was the hole fuzz... A new thread and some of the guys asking the developer about updates with the new patch
Sent from my LG-H870 using Tapatalk
Click to expand...
Click to collapse
It's not ninja smoke, it's what LG should have done since ever like other OEMs, realising updates frequently. No one forgot the late 8.0 update, i am (and probably all) angry with LG for late Major updates without any right excuse (like introducing treble, for example).
Also security patch are important when there are RELEASED vulnerability that allows anyone with the right abilities to steal your data, your money or whatever else, like the Krack vulnerability, which is KNOWN since november and patched in december and we received the update now.
I see much negativity coming from you, you're right, if an hacker wants your data will probably get those anyway, but the probability is low like many other scenarios.
To sum up:
- I'm happy to have received a new update
- I'm happy that my device is more secure
- I'm UNhappy that LG won't update the G6 soon to Oreo.
That's all for me =)
Killua96 said:
It's not ninja smoke, it's what LG should have done since ever like other OEMs, realising updates frequently. No one forgot the late 8.0 update, i am (and probably all) angry with LG for late Major updates without any right excuse (like introducing treble, for example).
Also security patch are important when there are RELEASED vulnerability that allows anyone with the right abilities to steal your data, your money or whatever else, like the Krack vulnerability, which is KNOWN since november and patched in december and we received the update now.
I see much negativity coming from you, you're right, if an hacker wants your data will probably get those anyway, but the probability is low like many other scenarios.
To sum up:
- I'm happy to have received a new update
- I'm happy that my device is more secure
- I'm UNhappy that LG won't update the G6 soon to Oreo.
That's all for me =)
Click to expand...
Click to collapse
My opinion is that most of us, here we've got our phones rooted and we also have a bunch of apps that can be manipulateed to gain access in our phones and in my opinion, for me is not so much of LG work but for the work of developers here that patch the systems and kernels and apps that we use daily. My current negativity through all the talk here, about this patch is regarding the pressure on developers to upgrade their work. And I know that none ask for the exact date of upgrade, but some people pointed out the release of the patch and wanted a new upgrade... So this seems to me a bit rude... I don't want to fight with anyone... But I needed to express my thoughts. Have a good one guys and enjoy a great device
Sent from my LG-H870 using Tapatalk
vic604 said:
My opinion is that most of us, here we've got our phones rooted and we also have a bunch of apps that can be manipulateed to gain access in our phones and in my opinion, for me is not so much of LG work but for the work of developers here that patch the systems and kernels and apps that we use daily. My current negativity through all the talk here, about this patch is regarding the pressure on developers to upgrade their work. And I know that none ask for the exact date of upgrade, but some people pointed out the release of the patch and wanted a new upgrade... So this seems to me a bit rude... I don't want to fight with anyone... But I needed to express my thoughts. Have a good one guys and enjoy a great device
Sent from my LG-H870 using Tapatalk
Click to expand...
Click to collapse
Devs here on XDA do this because they like doing it, that's why it's not correct to press them for updates. But OEMs devs are different, they're paid for what they're doing like my boss pay me for the work i do, and he expect me to do my best. Here it's LG fault (concerning the both lack of updates between July and December and Oreo) because other OEMs have already updated their flagship devices, and some also their medium range devices.
I never press devs of apps, mods, kernel or ROMs because they make me a favor. I press OEMs' devs because they're paid for what they're doing, and because all other OEM's devs are doing a better job.
Hope i've been more clear, there is no reason to fight, we're discussing our own ideas, i'm not angry with you only because you expressed your thoughts
Why is this maj only available via computer? Will she be available later in Ota?
I do not have a computer
Sent from my LG G6 using XDA Labs
Someone have the kdz unbrand? I'm with a brand Tim g6 till on july patch, it's time to manually update.
Hello.
So, I've got some news on new Elephone Frimware, it WILL come out, there will be some bug fixes and other stuff, but Elephone are kinda useless and don't want to give me any info on it, practically ignoring my question overall. So I would be glad, if anyone who knows anything about it can write here, what he knows about new Frimware, like what bug fixes or exact date of release, because they don't want to give me that too, they just say this, in very very bad English... "We will new Frimware soon, please wait"... So any info on anything?
So far my known bugs:
- Absolutely Camera
- Sometimes fingerprint doesn't work, somehow bugged
- Phone gets very hot
- Screen very sensitive on rain drops
- RAM management is absolute SH*T, I turn on Snapchat and messenger and I get 300MB of free ram left.... ON 4GB RAM PHONE
Thanks for help
MatoXD said:
Hello.
So, I've got some news on new Elephone Frimware, it WILL come out, there will be some bug fixes and other stuff, but Elephone are kinda useless and don't want to give me any info on it, practically ignoring my question overall. So I would be glad, if anyone who knows anything about it can write here, what he knows about new Frimware, like what bug fixes or exact date of release, because they don't want to give me that too, they just say this, in very very bad English... "We will new Frimware soon, please wait"... So any info on anything?
So far my known bugs:
- Absolutely Camera
- Sometimes fingerprint doesn't work, somehow bugged
- Phone gets very hot
- Screen very sensitive on rain drops
- RAM management is absolute SH*T, I turn on Snapchat and messenger and I get 300MB of free ram left.... ON 4GB RAM PHONE
Thanks for help
Click to expand...
Click to collapse
Nice to hear that they are going to release Oreo. That means it's better to stay stock and don't remove adups package or root the phone right? By the way updating the phone to a new OS will keep the files and installed apps?
steverway said:
Nice to hear that they are going to release Oreo. That means it's better to stay stock and don't remove adups package or root the phone right? By the way updating the phone to a new OS will keep the files and installed apps?
Click to expand...
Click to collapse
I will stay with stock and see how new update will look like, if it's gonna be okey, okey, but if it's gonna be **** like now, I will switch to other custom ROM (I saw one here, it sounds pretty good, can't remember the name right now) and yes, well probably, like other phone updates, probably this should keep files and apps on it after update, but make a backup of pictures and stuff just in case.... It's Elephone.... There is a reason why they are not on worldwide market and Samsung is....
Rooting your phone doens't matter... You can root it, just don't install any custom ROMs...
MatoXD said:
I will stay with stock and see how new update will look like, if it's gonna be okey, okey, but if it's gonna be **** like now, I will switch to other custom ROM (I saw one here, it sounds pretty good, can't remember the name right now) and yes, well probably, like other phone updates, probably this should keep files and apps on it after update, but make a backup of pictures and stuff just in case.... It's Elephone.... There is a reason why they are not on worldwide market and Samsung is....
Rooting your phone doens't matter... You can root it, just don't install any custom ROMs...
Click to expand...
Click to collapse
Do we have a timetable or the release is going to be like "boom" ?
You mean Eragon rom, I'm not sure if the most people decide to use Eragon instead of stock because it has some issues too.
steverway said:
Do we have a timetable or the release is going to be like "boom" ?
You mean Eragon rom, I'm not sure if the most people decide to use Eragon instead of stock because it has some issues too.
Click to expand...
Click to collapse
No, nothing... They don't want to give me any info, like I said, just bad English response "We will out soon"... Yeah Eragon right... Yeah, but you must agree, that Eragon has less issues, unlike stock... MOST IMPORTANT... RAM management on stock is sh*t
MatoXD said:
No, nothing... They don't want to give me any info, like I said, just bad English response "We will out soon"... Yeah Eragon right... Yeah, but you must agree, that Eragon has less issues, unlike stock... MOST IMPORTANT... RAM management on stock is sh*t
Click to expand...
Click to collapse
True dat. But I can accept it as it is for now. Will be waiting for Oreo update. Hope it's not an endless waiting... zzzz
I don't believe in updates anymore !
They release new devices but do not give support for existing models.
Never buy Elephone again.
The-b said:
I don't believe in updates anymore !
They release new devices but do not give support for existing models.
Never buy Elephone again.
Click to expand...
Click to collapse
As much as they told me, there supposed to be an update... I'm done with this Chinese useless sh*t too, just keep fuc*ing trying to make their way out of this sh*t situation
MatoXD said:
Hello.
So, I've got some news on new Elephone Frimware, it WILL come out, there will be some bug fixes and other stuff, but Elephone are kinda useless and don't want to give me any info on it, practically ignoring my question overall. So I would be glad, if anyone who knows anything about it can write here, what he knows about new Frimware, like what bug fixes or exact date of release, because they don't want to give me that too, they just say this, in very very bad English... "We will new Frimware soon, please wait"... So any info on anything?
So far my known bugs:
- Absolutely Camera
- Sometimes fingerprint doesn't work, somehow bugged
- Phone gets very hot
- Screen very sensitive on rain drops
- RAM management is absolute SH*T, I turn on Snapchat and messenger and I get 300MB of free ram left.... ON 4GB RAM PHONE
Thanks for help
Click to expand...
Click to collapse
Hello,
In Times of Fake News:
What's your source for that?
Beta
No 8.0 Update for Elephone S8 - Official
"Dear customer,
Please notice that S8 can be updated with a week, but it can't be available for Oreo.
Best Regards,
Elephone Team"
From my understanding this phone will NOT receive the Android 8.0 Oreo update. Hoping for some more work software wise through custom roms and such, just ordered one based off the specs and build quality for the price.
Original Question: "So the Elephone S8 will NOT be receiving the Android 8.0 Oreo update? Also, is anything being done about the known bugs?"
"Dear customer,
S8 can be updated with a week to fix those bugs, and we believe everything will be better after that.
Best Regards,
Elephone Team"
Well, that blows.
FancyPantsu said:
"Dear customer,
Please notice that S8 can be updated with a week, but it can't be available for Oreo.
Best Regards,
Elephone Team"
From my understanding this phone will NOT receive the Android 8.0 Oreo update. Hoping for some more work software wise through custom roms and such, just ordered one based off the specs and build quality for the price.
Original Question: "So the Elephone S8 will NOT be receiving the Android 8.0 Oreo update? Also, is anything being done about the known bugs?"
"Dear customer,
S8 can be updated with a week to fix those bugs, and we believe everything will be better after that.
Best Regards,
Elephone Team"
Click to expand...
Click to collapse
Yeah it does.. But supposedly an update for bug fixes including camera within the next week.. we'll see huh?! I'm constantly thinking about this purchase, it's still processing, $255 ish with expedited shipping (like $25 from their store) lol. Lots of controversy with this phone. I hope everyone is aware of the network availability and price point when they're buying it. I will base my review on other aspects mainly.
I have adups fota package deleted. Is there a chance for me to get the new update this week without wiping my device to factory settings?
steverway said:
I have adups fota package deleted. Is there a chance for me to get the new update this week without wiping my device to factory settings?
Click to expand...
Click to collapse
I'd say give the update a shot, worse case is it doesn't install? But you shouldn't have to wipe.
FancyPantsu said:
I'd say give the update a shot, worse case is it doesn't install? But you shouldn't have to wipe.
Click to expand...
Click to collapse
I'm going to wait. But since I don't have wireless update Manager what action can I make..?
I sent an email to them and this what they responded
Charles Ed said:
I sent an email to them and this what they responded
Click to expand...
Click to collapse
The only thing we can do is wait...
and hope it will be worth it. :good:
Weeks become months and months become years.
Nice tip on improving the autofocus speed in that last one. Though it wasn't worrying me, ISO 200 seems, for want of a better word, snappy.
Good news, if you go to Elephone store for the S8 there is a QnA section. A customer asks if there will be a Oreo update and Elephone confirms Oreo comes out on May!
You can confirm it by yourself!
I don't see such a response there - just them saying that they'll release it when they get it. But maybe I'm missing it -
can you please post link Steverwray?
steverway said:
Good news, if you go to Elephone store for the S8 there is a QnA section. A customer asks if there will be a Oreo update and Elephone confirms Oreo comes out on May!
You can confirm it by yourself!
Click to expand...
Click to collapse
are we expecting an update on the 4 of April?
updates are usually planned for the first Monday of the month right?
Right
I personally am not expecting this phone to get updated on the first Monday. And technically that would not even be a month from the last update anyway. For whatever reason Google really hasn't been able to keep this phone on the same schedule as the others. I could be due to the fact that it is the only one and Linux kernel version 5 all others are on version 4. Or maybe it's because they have too much other crap going on with dev previews. We had 12l dp which as really only a feature drop. Then we have 13 beta. And then they announced that the 12l program would be continues as a monthly platform for the next feature drop. So I personally think they took on too much. Then you add in the the p6 is a completely different phone than the previous generations of pixels. They still haven't figured out the modem yet.
So my answer is no I don't expect it the first Monday in April maybe the second Monday.... maybe
Yes l am expecting an update on Monday, Google need to start releasing timely updates for there latest phones.
Without any actual information on which to base my opinion, I'm guessing yes we'll see the update on the 4th. It's not a Feature drop month so the update will be simpler, and they really need to incorporate the dirty pipe patched kernel.
I'm not expecting anything. I'll wait until my Pixel 6 comes back from RMA (for the second time) and then I'll sell that POS.
Haptics!!!
The March update seemed to be on schedule for the older Pixel devices using older kernels. I believe that latest devices with the newer kernels were delayed because of the 0-day exploit that was discovered last-minute. They wanted to patch that in the March update.
So barring anything like that then I would expect Google to be on time with the April update. Or at least not as late as the March update was.
The only bad thing about updates is the unnecessary new threads from peeps not understanding what they are doing.
Also custom Roms create issues.
I guess flashing and modding for the hell of it with no idea why. Is like a drug to some peeps.
utnick said:
I believe that latest devices with the newer kernels were delayed because of the 0-day exploit that was discovered last-minute. They wanted to patch that in the March update.
Click to expand...
Click to collapse
The fix is in kernel version 5.10.102 and above and the kernel version for the March update is 5.10.66. The CVE for this vulnerability is not listed in the March update either.
I don't believe they fixed this in March.
TonikJDK said:
The fix is in kernel version 5.10.102 and above and the kernel version for the March update is 5.10.66. The CVE for this vulnerability is not listed in the March update either.
I don't believe they fixed this in March.
Click to expand...
Click to collapse
You are correct. They didn't fix the dirty pipe vulnerability with the March update and in fact Google confirmed that the delay in March was not due to this particular vulnerability.
TonikJDK said:
The fix is in kernel version 5.10.102 and above and the kernel version for the March update is 5.10.66. The CVE for this vulnerability is not listed in the March update either.
I don't believe they fixed this in March.
Click to expand...
Click to collapse
I guess I should have looked that up.
But I'm really not bothered about when in the month the updates come as long as they come. Though I'm coming from an LG phone and updates weren't really a thing I expected from them.
utnick said:
I guess I should have looked that up.
But I'm really not bothered about when in the month the updates come as long as they come. Though I'm coming from an LG phone and updates weren't really a thing I expected from them.
Click to expand...
Click to collapse
I am not too worried about this vuln. It requires physical access to the phone.
Based on previous updates I won't be in a hurry to install the next one right away.
TonikJDK said:
I am not too worried about this vuln. It requires physical access to the phone.
Click to expand...
Click to collapse
AS far as I know, the dirty pipe vulnerability can be included in a compromised app.
Fido hasn't listed anything yet.
The March update was released on 03/21, right? That will be two weeks tomorrow -- seems an awful short turnaround.
I'll be pretty surprised if the April update rolls out on the 4th.
It`s here.
Update 12.1.0 (SP2A.220405.004, Apr 2022) released 1PM EDT April 4th
Still Kernel 5.10.66.
where do we find a changelog?
there was a patch out in January for dirtypipes but as of May dirtypipes were not fixed on the Pixel 6
did it get fixed in the may update because I see no other reason to update and risk new bugs?
Improvements for haptic feedback
Fixes for display & launcher
Latest security fixes
the fixes listed are not important
I think it might be time to jump to protonaosp or some other custom ROM..
melleno said:
there was a patch out in January for dirtypipes but as of May dirtypipes were not fixed on the Pixel 6
did it get fixed in the may update because I see no other reason to update and risk new bugs?
Improvements for haptic feedback
Fixes for display & launcher
Latest security fixes
the fixes listed are not important
I think it might be time to jump to protonaosp or some other custom ROM..
Click to expand...
Click to collapse
Yes, May update includes the dirty pipe fix.
Man what do ya'll have on your phones you're so worried you'll be targeted by a very complicated hacking attack? :O
Hmm.. let's see. Banking nah screw it I only have 5k in the account. No biggie. Email, contacts, passwords, ahh screw it who cares? Text and phone calls? Not a huge loss. Medical information? I'm healthy right? Well kind of.. who me? Why worry? Hack away...btw why is the IRS knocking on my screen door? No! That's not my return. Honey.. call the lawyer. Damn dirty pipe.
melleno said:
there was a patch out in January for dirtypipes but as of May dirtypipes were not fixed on the Pixel 6
did it get fixed in the may update because I see no other reason to update and risk new bugs?
Improvements for haptic feedback
Fixes for display & launcher
Latest security fixes
the fixes listed are not important
I think it might be time to jump to protonaosp or some other custom ROM..
Click to expand...
Click to collapse
The may update will be easier than any custom ROM...
The best security you can have is to post your cell phone number and blab about your life on Facecrook.
And don't forget to post your email address.
To be real. Don't unlock your bootloader.
I have my Pixel 6 unlocked. Just like all of my previous devices. And guess what? I don't care.
Guys!! guys!! I just update it! Okay! thanks for the help! you guys scared me at first but it's okay now, Thanks again!
I have the latest update and everything is working spot on.
anyone know if the magisk "install to active slot" method will work with this update to keep root without wiping?
Wrong thread. There are numerous root threads a mere click away.
melleno said:
there was a patch out in January for dirtypipes but as of May dirtypipes were not fixed on the Pixel 6
did it get fixed in the may update because I see no other reason to update and risk new bugs?
Improvements for haptic feedback
Fixes for display & launcher
Latest security fixes
the fixes listed are not important
I think it might be time to jump to protonaosp or some other custom ROM.. https://omegle.site/ https://ome-tv.org/
Click to expand...
Click to collapse
Okay guys, Thanks for all the replies! It's sarcastic and funny at the same time! I had a great time! thanks again!
bobby janow said:
Wrong thread. There are numerous root threads a mere click away.
Click to expand...
Click to collapse
thread is a question about whether or not the May update was worth it. if it turns into a pita to re-root after updating, its not worth it to me, earlier updates it was much more simple. and it might be relevant to the op.