It’s a new month, and you know what that means: Groundhog Day is nearly here! Well, that, but also Google’s latest series of Android security updates is hitting the Nexus family of devices. This afternoon we see an influx of newly updated factory images landing for the whole Nexus series of phones, tablets, and set-top boxes, as Google simultaneously posts its list of security vulnerabilities being addressed by these new releases.
All told, Google’s patching five vulnerabilities it considers critical, as well as just as many issues classified as lower severity – though a number of those appear tied to the more serious bugs. Two of those more critical issues deal with code-execution flaws, including one in the Android Mediaserver (not unlike last year’s Stagefright attacks), and one related to Broadcomm’s WiFi driver, opening users up for attack when sharing WiFi networks.
Google’s already passed these fixes on to its Android partners, so while Nexus devices will lead the way in availability of patches, these same security updates should be hitting other Android phones and tablets soon. For now, you can wait for Google’s updates to hit your Nexus model, or go the impatient route and just full-on flash one of the factory images.
You’re probably safe waiting for your OTA, though, as Google reports that none of these vulnerabilities being addressed today appears to be actively being exploited in the wild.