Google’s December 2017 Security Bulletin Goes Live Ahead Of Android 8.1 Release Tomorrow


Google's Android security bulletin for December is finally out, and it means that the currently supported lineup of Pixel and Nexus phones should be getting new builds tomorrow. The security bulletin has been released a day ahead to detail what Google has fixed in the new version of the builds.

The Android security bulletin is different from Pixel/Nexus bulletin as it talks about security patches done at the Android patch level rather than just Google devices. In the bulletin released today, Google notes that it has resolved 19 issues in the patch 2017-12-01 and 28 issues in the patch dated 2017-12-05.

The HTC U12+ Will Feature Qualcomm’s Snapdragon 845, 6GB RAM, 3410mAh Battery And Amazing Cameras Suggests Leak From Reliable Source

As usual, the vulnerabilities level has been segmented from high to critical, with the most critical one relating to the media framework, possibly allowing remote attackers to execute arbitrary code through a “crafted file”. This issue has been fixed and Google also notes that there is no report that a consumer has been affected by this issue. The December bulletin shows that a handful of issues have been resolved around several other categories like kernel components, Broadcom components, MediaTek components, Qualcomm components, and NVIDIA components.

The dedicated Android bulletin for Google’s phones and tablets includes 48 additional fixes but has no mention for any functional updates. One significant fix is for the KRACK Wi-Fi vulnerability that was not present in November security patch. Verizon release notes for Google's Pixel and Pixel 2 states that it addresses that critical issue.

Verizon reveals build number

Verizon also revealed that the build number for the next update is OPM1.171019.011. Given that Google released a new build number format with Oreo, “M1” here denotes the first maintenance release that is Android 8.1. As Google also notes, Android 8.1 is an incremental maintenance release of Android 8.0 Oreo as it comes with new features, APIs, bug fixes, optimizations, security patches and more.

As we mentioned at the start of this article, the firmware images won't be out until tomorrow. OTA updates are expected to roll out as soon as the images go live. So, tomorrow will bring us the first look at the new builds. December brings two patch levels - December 1, 2017, and December 5, 2017.