The Stagefright vulnerability is said to be the biggest Android security problem for years now. The exploit leaves almost 95 percent of all Android users susceptible to attacks.
The Stagefright bug lets attacker remotely execute code using multimedia text messages, and in most cases the users doen’t even see the message.
Google has already worked on the patch and will be releasing to all Android users. “Samsung, HTC, LG, Sony and Android One have already announced pending patches for the bug, along with a device-specific patch for the Alcatel Idol 3,” points out TheVerge.
In an official Android blogpost, Google reveals that Nexus devices will receive ‘regular OTA updates each month that will be focused on security along with platform updates. The first security update has already started rolling out to Nexus 4, Nexus 5, Nexus 6, Nexus 7, Nexus 9, Nexus 10, and Nexus Player.
“This security update contains fixes for issues in bulletins provided to partners through July 2015, including fixes for the libStageFright issues. At the same time, the fixes will be released to the public via the Android Open Source Project,” the blogpost further adds.
Meanwhile, Samsung has also announced its new aggressive Android security update process that will track faster security patches over the air when security vulnerabilities are uncovered. It plans security updates on a regularly basis about once per month.
Samsung claims to have fast tracked security updates to its Galaxy devices with the recent Android Stagefright issues working with the carriers and partners.
“With the recent security issues, we have been rethinking the approach to getting security updates to our devices in a more timely manner. Since software is constantly exploited in new ways, developing a fast response process to deliver security patches to our devices is critical to keep them protected. We believe that this new process will vastly improve the security of our devices and will aim to provide the best mobile experience possible for our users,” said Dong Jin Koh, Executive Vice President and Head of Mobile Research and Development Office, IT & Mobile Communications at Samsung Electronics.
It’s probably the seriousness of the bug that users may start receiving bug fixes faster than expected.
No comments:
Post a Comment