Blackview User Forum

 
User avatar
es20490446e
Topic Author
Posts: 7
Joined: Sat Nov 24, 2018 3:09 am

Why is the security patch level so old?

Sat Nov 24, 2018 5:08 am

I have recently purchased a P6000, and there's a thing that surprised me a lot. If I go to "Settings -> About phone -> Android security patch level" it says "November 5, 2017".

But if I go to the Android Security Bulletins website, I can clearly see that plenty of more recent patches have been published since them, many of which contain important vulnerabilities.

Shall I be worried?
 
blackview_admin
Posts: 6331
Joined: Mon Aug 17, 2015 3:30 am
Contact:

Re: Why is the security patch level so old?

Sat Nov 24, 2018 10:16 pm

Security patches require a lot of work to be updated each time they get released. Don't worry.
 
User avatar
es20490446e
Topic Author
Posts: 7
Joined: Sat Nov 24, 2018 3:09 am

Re: Why is the security patch level so old?

Sun Nov 25, 2018 1:35 am

I personally choose to only use a phone which it's secure and updated. Also not to wait for you to react on this.

Consider upgrading all your devices to Android 8, which is way easier to patch, and automate the deployment of new updates. I would even made that code public, so other people can help with them even when you are no longer interested in supporting the device.


Image
 
User avatar
es20490446e
Topic Author
Posts: 7
Joined: Sat Nov 24, 2018 3:09 am

Re: Why is the security patch level so old?

Sun Nov 25, 2018 2:00 am

Don't get me wrong, this phone hardware is superb and I'm aware this is a common issue with nearly all Android manufacturers.

But that doesn't make the issue less worse. Having all the secrets in a device which updates less than a year is a big no no.

As example my desktop Linux operating system, Manjaro, takes upstream patches in days, not weeks. While Lineage OS delivers updated Android to a wide variety of phones for way longer than what is supported by the manufacturer. Both of them in a stable way, both of them made by a small group of people in their spare time.

The trick is simply to automate the updates in such a way they stop the line in case an issue is detected, till it's fixed.
 
jean_bruder
Posts: 3
Joined: Fri Nov 30, 2018 7:55 am

Re: Why is the security patch level so old?

Fri Mar 08, 2019 3:14 pm

es20490446e wrote:
The trick is simply to automate the updates in such a way they stop the line in case an issue is detected, till it's fixed.

I fully agree with what is said: why not port LineageOS to BV phones and focus only on hardware?
Jean
 
User avatar
es20490446e
Topic Author
Posts: 7
Joined: Sat Nov 24, 2018 3:09 am

Re: Why is the security patch level so old?

Sun Mar 10, 2019 11:04 pm

jean_bruder wrote:
I fully agree with what is said: why not port LineageOS to BV phones and focus only on hardware?
Jean

There are restrictions on the redistribution of Google software outside Android. Although it seems you can work-around that by using Open GApps.

Who is online

Users browsing this forum: No registered users and 1 guest