Android bug concern ?

[Beenherebefore]

http://www.bbc.co.uk/news/technology-37005226

[MI5]

Manufacturers would have been told about the risk long before the report was published - speed of response is the key to any security risk.

[Cairdeas]

Eek! My phone is on the list  x

[jonsie]

Samsung are usually on the ball with security updates. I've had three since updating to Marshmallow....

[viridis]

Tbh, most modern Samsung won't be affected anyway, at least Exynos based systems won't.
It's like stagefright all over again. In that the scaremongering is far worse than flaws that take 6 months of reverse engineering to find.
Hands up all those who knew a single person affected by the stagefright flaw?

[MI5]

Precisely that.
Also appears only to be a risk if installing apps from unknown sources too ?

[Martin-O2]

Hey guys I'll ask the team if they have any information about the deployment of this patch. I'll update this thread once I get a response. 

[Cairdeas]

---

@Martin-O2 wrote:

Hey guys I'll ask the team if they have any information about the deployment of this patch. I'll update this thread once I get a response. 

---

Thanks Martin..my HTC10 has the same 4 vulnerabilities as the lg user x

[Martin-O2]

No problem @Cairdeas I'll update you as soon as I have any news. 

[Chris_K · Accepted solution]

As with all updates we receive from vendors (eg, Sony, HTC, Samsung etc) we look to test and approve these quickly. With security patches, we aim to approve these the day we receive them. Many devices already have patches for this bug and those that don't, should have them soon, so keep your eyes peeled.

We'd also like to recommend some good habits to get into with your Android device that may help keep you more secure

1. Ensure ‘Unknown Sources’ in ‘Settings’ is disabled and only install games/apps from the official Play Store
2. Ensure you’re using the official O2 software/updates and not a 3rd party ROM or unlocked bootloader
3. Set up a secure password or PIN, don’t open suspicious emails, don’t connect suspicious USB devices (ie, via USB OTG)

[Fellwalker]

What I have noticed from reading various articles is that so long as your phone is on the current version of Android, the likelihood is that you will get a patch. But for the many phones that are stuck on Lollipop or earlier, those do not get security or any other updates.

Is this the case with O2 as well?  If the manufacturer does not send you a patch for an older phone, you have nothing to send on to users?  So this would apply to any people who converted from Contract to PAYG or to SIM Only because they were happy with their then phone or ran out of cash.