Android Security Bulletins

Security has always been a major focus for Android and Google Play: Android was built from day one with security in mind. Monthly device updates are an important tool to make and keep Android users safe. This page contains the available Android Security Bulletins. These security bulletins also include information users can follow to ensure their device has the latest security updates. Android device and chipset manufacturers may also publish security vulnerability details specific to their products, such as:

• LG
• Motorola
• Samsung

Notifications

To get notifications when a new Android bulletin is published, join the Android Security Updates group, and set your email delivery preference to receive all updates. To learn how to check if a device is up to date using the security patch level, read the instructions on the Pixel and Nexus update schedule. In general, it takes about one and a half calendar weeks for the OTA to reach every Nexus device. The Nexus firmware images are also released each month to the Google Developer site.

Sources

Fixes listed in the public bulletin come from various different sources: the Android Open Source Project (AOSP), the upstream Linux kernel, and system-on-chip (SOC) manufacturers. For device manufacturers:

• Android platform fixes are merged into AOSP 24-48 hours after the security bulletin is released and can be picked up directly from there.
• Upstream linux kernel fixes are linked to directly from the bulletin on release and can be picked up from there.
• Fixes from SOC manfacturers are available directly from the manufacturers.

Bulletins