Supply Chain Council of European Union |

December security patch rolling out to Google Pixel, factory images & OTAs live

The last update of 2019 is rolling out this morning to all Google phones, including — for one last time — the original Pixel and Pixel XL. Rolling out with factory/OTA images now available, the December security patch makes the usual bug and security fixes.

There are 15 issues resolved in the December security patch dated 2019-12-01 and 27 for 2019-12-05. Vulnerabilities range from moderate to critical, with the most severe relating to the media framework and a remote attacker possibly executing arbitrary code through a crafted file. 

In the Android Security & Privacy 2018 Year in Review, Google notes that “no critical security vulnerabilities affecting the Android platform were publicly disclosed without a security update or mitigation available for Android devices.” Additionally, there was an 84% year-over-year jump in security patches during Q4 2018 compared to the prior year.

This is the last update for the original Pixel phones introduced in 2016 that kicked off the Made by Google lineup, and includes all features and fixes in the November patch. The Pixel 4 and Pixel 4 XL update will begin rolling out next week, but Google has already detailed all the fixes that it will include.

The dedicated bulletin for Google’s phones and tablets lists 8 security fixes, while many Android 10 features that debuted on the Pixel 4 are now available for older devices. The December security patch brings Pixel Themes and gesture support for third-party launchers, while Live Caption is now available on the Pixel 3 and Pixel 3a.

Android 10

FTC: We use income earning auto affiliate links. More.

Check out 9to5Google on YouTube for more news:

Related posts

Phoebe Bridgers Launches Saddest Factory Label With Dead Oceans: Exclusive


Watch now: Steak Factory owner and self-proclaimed ‘simple guy’ Tony Cleaves makes his mark carving boneless ribeyes | Local News


Gardaí raid ‘smishing factory’ and find 10,000 scam texts a day – linked to fake websites – were sent from phones