The September Android update rolls out for Pixel phones – with critical security patches



Pixel phone users (of which I have been one since the Pixel 1) are lucky because they receive Android security patches before anyone else. These security patches are released monthly and although they don’t generally include a litany of new features, what they do offer is absolutely crucial to the well-being of your phone and your data.

Also: Why you can still trust (other) password managers, even after that LastPass mess

The September security update addresses 32 vulnerabilities that affect Android OS, specific hardware issues, and other Pixel-specific vulnerabilities as well. These updates are all detailed in the Android Security Bulletin for September 2023 and include four CVEs (Common Vulnerabilities and Exposures) marked Critical. Those critical CVEs are:

  • A-274617156 – Accesses a header field after the buffer holding it may have been freed.
  • A-273966636 – Can lead to an integer overflow and unexpected behavior.
  • A-271335899 – The tx mtu in EATT can be controlled by a remote device.
  • A-285902431 * – Memory corruption in WLAN Firmware.

Of course, there are also a number of High severity vulnerabilities that were patched with this update including framework, system, Google Play system, and closed-source components (such as those for Qualcomm hardware). 

If you want more details about every vulnerability patched, make sure to click the Security Bulletin link above.

How to update to the latest security patch

What you’ll need: The only thing you’ll need for this is a Pixel phone. That’s it. Let’s update.

Open the Settings app either by pulling down the Notification Shade twice and tapping the gear icon or opening the App drawer and tapping the Settings launcher. With Settings open, go to System > System Update. This page will list your patch level. If it’s not (at least) September 1, 2023, tap Check for update.

A Pixel 7 Pro with the September 1, 2023 security patch applied.

Make sure to routinely check to see if your Android device has the latest security patch.

Jack Wallen/ZDNET

The required file will take a few minutes to download. When the download completes, you’ll be prompted to restart your phone to apply the new patch. Do this by tapping Restart now.

The September security patch has been downloaded and is ready for installation.

If you don’t reboot your device now, it will happen automatically in four days.

Jack Wallen/ZDNET

After the update completes, you should now have the latest security patches on your Android device. Make sure to do this each month to keep your phone protected against known vulnerabilities.


Source link