Google confirms Android attacks; no fix for most Samsung users

> This [update] was rushed out to all Pixel users.

Pixel 8 here, still don't have the update. That's... not great.

I'd suggest you to use GrapheneOS.

Just go to the software update, touch the button, then touch it a second time, and that will give you all available updates immediately, regardless of your random position in the rollout process.

Not working for me on Android 16, additional taps of the "Check for update" button in the bottom-right don't change the fact that it says "Your system is up to date" and that the last change was last month.

Could be model-specific. I got the update by doing that manually on my Pixel 8 Pro, that also happens to be on the beta track so there are a few confounders. But that is the way to get the latest software that is waiting to be released to your phone, without waiting.

I think your carrier hasn't approved it yet. T-mobile seems to lag on these things. I also can't seem to find a system update. A Google Play system update does seem to exist

I see same behavior on my 8.

We have an OS security update that is only release to users of a specific hardware, once approved by their mobile operator. It may be added to vendor-specific OS versions some time later (weeks, month or never). The vendor-specific may not be approved by a telco if the vendor doesn't have a relationship with that telco.

Now think that millions of people use the same OS on many different flavours, on different hardware, on multiple operators.

What an inneficient way of doing things.

My friend is still on the Pixel 2. Are they affected?

How quickly did GrapheneOS roll out the update?

I don't see it yet either and have mashed it a bunch (Pixel 7, T-Mobile). Says it's running October's update with no updates available.

I had the same experience as peer comments. I'm on Pixel 8 and Google Fi. When I check for updates, I'm told I'm up-to-date with the last update being over a month old.

Is the patch already available for GrapheneOS?

Three days ago.

https://grapheneos.org/releases#2025120400

https://github.com/GrapheneOS/platform_manifest/releases/tag...

https://grapheneos.social/@GrapheneOS/115666650605430196

not sure how soon it made it to a majority of devices, but i do have it rn

EDIT: I was wrong, it's actually first mentioned in https://grapheneos.org/releases#2025102200

oct 22? https://github.com/GrapheneOS/platform_manifest/releases/tag...

Pixel 2 stopped getting updates almost 5 years ago

You can manually download the full OTA from https://developers.google.com/android/ota#shiba and install it with adb.

I never understood why a mobile operator has any say in when to apply security patches?

Does it happen with iPhones?

That doesn't answer the question.

iOS updates are not limited by the operator.

There are two kinds of people:

1. Those who can extrapolate from incomplete information

According to above comments, it was added 3 days ago. I'm updating to the latest release now.

Nope. When a new iOS update comes out, all supported devices may immediately install the update if they seek it out. Or it will usually auto update on its own, or at least nag the user to update.

It’s gotten slightly more confusing with the major updates now being optional. You get a choice between getting a feature update or just security patches. Unless I missed it, my phone never really asked me to update to the latest iOS 26. But I can, it’s there. I’m instead on the latest version of iOS 18. (They changed number schemes. 18 is last years major update)

Apple also does security updates for quite a long time. iOS 15, from 2021, got a security patch in September of this year, and works on the iPhone 6s from 2015.

Faster than Google. Literally.

https://news.ycombinator.com/item?id=46173407

Thanks that worked, so weird that you have to do it twice...

It was made available in the end of OCTOBER in the special security preview channel.

GoS has already deployed patches to some of the vulnerabilities you'll read about in January.

All the partnering vendors have access to the same bulletins.

Multi-billion companies like Samsung or Google had access to that since AT LEAST October. They chose to release these patches late. Some will release these patches months form now. Some, perhaps never.

So, the tiny team wins.

Is this true for updates that might affect the way it interacts with the network (eg baseband firmware updates)? I assume it's much easier for iPhones to decouple that layer from the rest of the OS, which isn't the case for Android/Linux.

Please, feel free to extrapolate for me whether the "unspecified vulnerability" referenced in the article was introduced more or less than five years ago.

The point was the whole phone has been vulnerable to a multitude of RCEs for five years, so it doesn't really matter if its the latest exploit, its a silly request.