Google has just released the latest Android Security updates. Since last year’s Stagefright circus, Google and other companies vowed to roll out monthly updates. For Google, Nexus updates are released every month to ensure there will be no compromises. Not every Android device may need security patches but the latter may still fix a number of known issues. The Internet giant is true to its promise that software updates will be available to fix any current and potential security issues on Android devices.
The past months, Google was made aware of a rooting application that uses an unpatched local elevation. There’s been vulnerability in the kernel of some Android devices (CVE-2015-1805) especially when installed. This poses a problem so Google blocked installation on Google Play Store and even outside with the ‘Verify Apps’ step.
Google provided a security patch for this issue to partners and has updated its system to detect apps that use the said vulnerability. Patches can be downloaded from the Android Open Source Project (AOSP) repository.
An abuse of this vulnerability happened on a Nexus 5 and it was reported quickly to Google. The latter then confirmed it and tried to release the update as soon as possible. All Nexus and Android devices on kernel versions 3.4, 3.10, and 3.14 are now ready to receive the said updates.