December Security Patch for Android Rolling Out to Pixel & Nexus Devices
Not a lot of things happen with clock-like precision. The monthly Android security patch, however, is not one of them. Usually, we see the monthly security patch for Android devices roll out on the fifth of every month, and today, it looks like we got them a tad early. Sadly, Pixel 3 owners are in a never-ending game of whack-a-mole with every Android security patch. While it may address some older issues, it opens the door to entirely new bugs that take yet another month to fix. The Pixel 3 and Pixel 3 XL received its first update to address a handful of bugs with last month’s security patch. Since then, more issues have arisen, with the December security patch rolling out today to address them.
Meanwhile, the Nexus 5X and 6P are still receiving updates for this month. The Nexus 5X, Nexus 6P, and Pixel C are still receiving security updates, despite meeting the required three-year deadline of required fixes from Google last month. Once again, the Pixel and Pixel XL patch are again delayed, like in November.
There are 17 issues resolved in the December security patch dated 2018-12-01 and 36 for 2018-12-05. Vulnerabilities range from high to critical, with the most severe relating to the media framework and a remote attacker possibly executing arbitrary code through a crafted file. Google notes that there are no reports of customers being affected by these security issues.
Here are the factory image and OTA links if you want to sideload the updates yourself. The rollout is already underway, so expect it to hit your device shortly.
- Pixel 3 XL: Android 9.0 —PQ1A.181205.006 — Factory Image — OTA
- Pixel 3: Android 9.0 —PQ1A.181205.006 — Factory Image — OTA
- Pixel 2 XL: Android 9.0 —PQ1A.181205.002 — Factory Image — OTA
- Pixel 2: Android 9.0 —PQ1A.181205.002 — Factory Image — OTA
- Pixel C: Android 8.1 — OPM8.181205.001 — Factory Image — OTA
- Nexus 6P: Android 8.1 —OPM7.181205.001 — Factory Image — OTA
- Pixel 5X: Android 8.1 —OPM7.181205.001 — Factory Image — OTA
Source: Android Security Bullletin