1 <html devsite> 2 <head> 3 <title>Android Security Bulletins</title> 4 <meta name="project_path" value="/_project.yaml" /> 5 <meta name="book_path" value="/_book.yaml" /> 6 </head> 7 <body> 8 <!-- 9 Copyright 2017 The Android Open Source Project 10 11 Licensed under the Apache License, Version 2.0 (the "License"); 12 you may not use this file except in compliance with the License. 13 You may obtain a copy of the License at 14 15 http://www.apache.org/licenses/LICENSE-2.0 16 17 Unless required by applicable law or agreed to in writing, software 18 distributed under the License is distributed on an "AS IS" BASIS, 19 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 20 See the License for the specific language governing permissions and 21 limitations under the License. 22 --> 23 24 25 <p class="note"><strong>Checking if your device is up-to-date?</strong> 26 Look at <em>Google device updates</em> in the most recent bulletin.</p> 27 <p>Security has always been a major focus for Android and Google Play: Android was 28 built from day one with security in mind. Monthly device updates are an 29 important tool to make and keep Android users safe. This page contains the 30 available Android Security Bulletins. These security bulletins also include 31 information users can follow to ensure their device has the latest security 32 updates. Android device and chipset manufacturers may also publish security 33 vulnerability details specific to their products, such as:</p> 34 <ul> 35 <li><a href="https://lgsecurity.lge.com/security_updates.html">LG</a></li> 36 <li><a href="https://motorola-global-portal.custhelp.com/app/software-upgrade-security/g_id/5593">Motorola</a></li> 37 <li><a href="http://security.samsungmobile.com/smrupdate.html">Samsung</a></li> 38 </ul> 39 40 <h3 id="notification">Notifications</h3> 41 <p>To get notifications when a new Android bulletin is published, join the 42 <a href="https://groups.google.com/forum/#!forum/android-security-updates">Android 43 Security Updates group</a>, and set your email delivery preference to receive 44 all updates. To learn how to check if a device is up to date using the security 45 patch level, read the instructions on the 46 <a href="https://support.google.com/nexus/answer/4457705">Pixel and Nexus 47 update schedule</a>. In general, it takes about one and a half calendar 48 weeks for the OTA to reach every Nexus device. The Nexus firmware images are 49 also released each month to the 50 <a href="https://developers.google.com/android/nexus/images">Google Developer 51 site</a>. 52 </p> 53 <h3 id="sources">Sources</h3> 54 55 <p>Fixes listed in the public bulletin come from various different sources: the 56 Android Open Source Project (AOSP), the upstream Linux kernel, and system-on-chip 57 (SOC) manufacturers. For device manufacturers:</p> 58 <ul> 59 <li>Android platform fixes are merged into AOSP 24-48 hours after the security 60 bulletin is released and can be picked up directly from there.</li> 61 <li>Upstream linux kernel fixes are linked to directly from the bulletin on 62 release and can be picked up from there.</li> 63 <li>Fixes from SOC manufacturers are available directly from the manufacturers.</li> 64 </ul> 65 <h3 id="bulletins">Bulletins</h3> 66 67 <table> 68 <col width="19%"> 69 <col width="35%"> 70 <col width="23%"> 71 <col width="23%"> 72 <tr> 73 <th>Bulletin</th> 74 <th>Languages</th> 75 <th>Published date</th> 76 <th>Security patch level</th> 77 </tr> 78 <tr> 79 <td><a href="/security/bulletin/2017-07-01.html">July 2017</a></td> 80 <td>Coming soon 81 <!-- 82 <a href="/security/bulletin/2017-07-01.html">English</a> / 83 <a href="/security/bulletin/2017-07-01.html?hl=ja"></a> / 84 <a href="/security/bulletin/2017-07-01.html?hl=ko"></a> / 85 <a href="/security/bulletin/2017-07-01.html?hl=ru"></a> / 86 <a href="/security/bulletin/2017-07-01.html?hl=zh-cn"> ()</a> / 87 <a href="/security/bulletin/2017-07-01.html?hl=zh-tw"> ()</a> 88 --> 89 </td> 90 <td>July 5, 2017</td> 91 <td>2017-07-01<br> 92 2017-07-05</td> 93 </tr> 94 <tr> 95 <td><a href="/security/bulletin/2017-06-01.html">June 2017</a></td> 96 <td> 97 <a href="/security/bulletin/2017-06-01.html">English</a> / 98 <a href="/security/bulletin/2017-06-01.html?hl=ja"></a> / 99 <a href="/security/bulletin/2017-06-01.html?hl=ko"></a> / 100 <a href="/security/bulletin/2017-06-01.html?hl=ru"></a> / 101 <a href="/security/bulletin/2017-06-01.html?hl=zh-cn"> ()</a> / 102 <a href="/security/bulletin/2017-06-01.html?hl=zh-tw"> ()</a> 103 </td> 104 <td>June 5, 2017</td> 105 <td>2017-06-01<br> 106 2017-06-05</td> 107 </tr> 108 <tr> 109 <td><a href="/security/bulletin/2017-05-01.html">May 2017</a></td> 110 <td> 111 <a href="/security/bulletin/2017-05-01.html">English</a> / 112 <a href="/security/bulletin/2017-05-01.html?hl=ja"></a> / 113 <a href="/security/bulletin/2017-05-01.html?hl=ko"></a> / 114 <a href="/security/bulletin/2017-05-01.html?hl=ru"></a> / 115 <a href="/security/bulletin/2017-05-01.html?hl=zh-cn"> ()</a> / 116 <a href="/security/bulletin/2017-05-01.html?hl=zh-tw"> ()</a> 117 </td> 118 <td>May 1, 2017</td> 119 <td>2017-05-01<br> 120 2017-05-05</td> 121 </tr> 122 <tr> 123 <td><a href="/security/bulletin/2017-04-01.html">April 2017</a></td> 124 <td><a href="/security/bulletin/2017-04-01.html">English</a> / 125 <a href="/security/bulletin/2017-04-01.html?hl=ja"></a> / 126 <a href="/security/bulletin/2017-04-01.html?hl=ko"></a> / 127 <a href="/security/bulletin/2017-04-01.html?hl=ru"></a> / 128 <a href="/security/bulletin/2017-04-01.html?hl=zh-cn"> ()</a> / 129 <a href="/security/bulletin/2017-04-01.html?hl=zh-tw"> ()</a> 130 </td> 131 <td>April 3, 2017</td> 132 <td>2017-04-01<br> 133 2017-04-05</td> 134 </tr> 135 <tr> 136 <td><a href="/security/bulletin/2017-03-01.html">March 2017</a></td> 137 <td><a href="/security/bulletin/2017-03-01.html">English</a> / 138 <a href="/security/bulletin/2017-03-01.html?hl=ja"></a> / 139 <a href="/security/bulletin/2017-03-01.html?hl=ko"></a> / 140 <a href="/security/bulletin/2017-03-01.html?hl=ru"></a> / 141 <a href="/security/bulletin/2017-03-01.html?hl=zh-cn"> ()</a> / 142 <a href="/security/bulletin/2017-03-01.html?hl=zh-tw"> ()</a> 143 </td> 144 <td>March 6, 2017</td> 145 <td>2017-03-01<br> 146 2017-03-05</td> 147 </tr> 148 <tr> 149 <td><a href="/security/bulletin/2017-02-01.html">February 2017</a></td> 150 <td><a href="/security/bulletin/2017-02-01.html">English</a> / 151 <a href="/security/bulletin/2017-02-01.html?hl=ja"></a> / 152 <a href="/security/bulletin/2017-02-01.html?hl=ko"></a> / 153 <a href="/security/bulletin/2017-02-01.html?hl=ru"></a> / 154 <a href="/security/bulletin/2017-02-01.html?hl=zh-cn"> ()</a> / 155 <a href="/security/bulletin/2017-02-01.html?hl=zh-tw"> ()</a> 156 </td> 157 <td>February 6, 2017</td> 158 <td>2017-02-01<br> 159 2017-02-05</td> 160 </tr> 161 <tr> 162 <td><a href="/security/bulletin/2017-01-01.html">January 2017</a></td> 163 <td><a href="/security/bulletin/2017-01-01.html">English</a> / 164 <a href="/security/bulletin/2017-01-01.html?hl=ja"></a> / 165 <a href="/security/bulletin/2017-01-01.html?hl=ko"></a> / 166 <a href="/security/bulletin/2017-01-01.html?hl=ru"></a> / 167 <a href="/security/bulletin/2017-01-01.html?hl=zh-cn"> ()</a> / 168 <a href="/security/bulletin/2017-01-01.html?hl=zh-tw"> ()</a> 169 </td> 170 <td>January 3, 2017</td> 171 <td>2017-01-01<br> 172 2017-01-05</td> 173 </tr> 174 <tr> 175 <td><a href="/security/bulletin/2016-12-01.html">December 2016</a></td> 176 <td> 177 <a href="/security/bulletin/2016-12-01.html">English</a> / 178 <a href="/security/bulletin/2016-12-01.html?hl=ja"></a> / 179 <a href="/security/bulletin/2016-12-01.html?hl=ko"></a> / 180 <a href="/security/bulletin/2016-12-01.html?hl=ru"></a> / 181 <a href="/security/bulletin/2016-12-01.html?hl=zh-cn"> ()</a> / 182 <a href="/security/bulletin/2016-12-01.html?hl=zh-tw"> ()</a> 183 </td> 184 <td>December 5, 2016</td> 185 <td>2016-12-01<br> 186 2016-12-05</td> 187 </tr> 188 <tr> 189 <td><a href="/security/bulletin/2016-11-01.html">November 2016</a></td> 190 <td> 191 <a href="/security/bulletin/2016-11-01.html">English</a> / 192 <a href="/security/bulletin/2016-11-01.html?hl=ja"></a> / 193 <a href="/security/bulletin/2016-11-01.html?hl=ko"></a> / 194 <a href="/security/bulletin/2016-11-01.html?hl=ru"></a> / 195 <a href="/security/bulletin/2016-11-01.html?hl=zh-cn"> ()</a> / 196 <a href="/security/bulletin/2016-11-01.html?hl=zh-tw"> ()</a> 197 </td> 198 <td>November 7, 2016</td> 199 <td>2016-11-01<br> 200 2016-11-05<br> 201 2016-11-06</td> 202 </tr> 203 <tr> 204 <td><a href="/security/bulletin/2016-10-01.html">October 2016</a></td> 205 <td> 206 <a href="/security/bulletin/2016-10-01.html">English</a> / 207 <a href="/security/bulletin/2016-10-01.html?hl=ja"></a> / 208 <a href="/security/bulletin/2016-10-01.html?hl=ko"></a> / 209 <a href="/security/bulletin/2016-10-01.html?hl=ru"></a> / 210 <a href="/security/bulletin/2016-10-01.html?hl=zh-cn"> ()</a> / 211 <a href="/security/bulletin/2016-10-01.html?hl=zh-tw"> ()</a> 212 </td> 213 <td>October 3, 2016</td> 214 <td>2016-10-01<br> 215 2016-10-05</td> 216 </tr> 217 <tr> 218 <td><a href="/security/bulletin/2016-09-01.html">September 2016</a></td> 219 <td> 220 <a href="/security/bulletin/2016-09-01.html">English</a> / 221 <a href="/security/bulletin/2016-09-01.html?hl=ja"></a> / 222 <a href="/security/bulletin/2016-09-01.html?hl=ko"></a> / 223 <a href="/security/bulletin/2016-09-01.html?hl=ru"></a> / 224 <a href="/security/bulletin/2016-09-01.html?hl=zh-cn"> ()</a> / 225 <a href="/security/bulletin/2016-09-01.html?hl=zh-tw"> ()</a> 226 </td> 227 <td>September 6, 2016</td> 228 <td>2016-09-01<br> 229 2016-09-05<br> 230 2016-09-06</td> 231 </tr> 232 <tr> 233 <td><a href="/security/bulletin/2016-08-01.html">August 2016</a></td> 234 <td> 235 <a href="/security/bulletin/2016-08-01.html">English</a> / 236 <a href="/security/bulletin/2016-08-01.html?hl=ja"></a> / 237 <a href="/security/bulletin/2016-08-01.html?hl=ko"></a> / 238 <a href="/security/bulletin/2016-08-01.html?hl=ru"></a> / 239 <a href="/security/bulletin/2016-08-01.html?hl=zh-cn"> ()</a> / 240 <a href="/security/bulletin/2016-08-01.html?hl=zh-tw"> ()</a> 241 </td> 242 <td>August 1, 2016</td> 243 <td>2016-08-01<br> 244 2016-08-05</td> 245 </tr> 246 <tr> 247 <td><a href="/security/bulletin/2016-07-01.html">July 2016</a></td> 248 <td> 249 <a href="/security/bulletin/2016-07-01.html">English</a> / 250 <a href="/security/bulletin/2016-07-01.html?hl=ja"></a> / 251 <a href="/security/bulletin/2016-07-01.html?hl=ko"></a> / 252 <a href="/security/bulletin/2016-07-01.html?hl=ru"></a> / 253 <a href="/security/bulletin/2016-07-01.html?hl=zh-cn"> ()</a> / 254 <a href="/security/bulletin/2016-07-01.html?hl=zh-tw"> ()</a> 255 </td> 256 <td>July 6, 2016</td> 257 <td>2016-07-01<br> 258 2016-07-05</td> 259 </tr> 260 <tr> 261 <td><a href="/security/bulletin/2016-06-01.html">June 2016</a></td> 262 <td> 263 <a href="/security/bulletin/2016-06-01.html">English</a> / 264 <a href="/security/bulletin/2016-06-01.html?hl=ja"></a> / 265 <a href="/security/bulletin/2016-06-01.html?hl=ko"></a> / 266 <a href="/security/bulletin/2016-06-01.html?hl=ru"></a> / 267 <a href="/security/bulletin/2016-06-01.html?hl=zh-cn"> ()</a> / 268 <a href="/security/bulletin/2016-06-01.html?hl=zh-tw"> ()</a> 269 </td> 270 <td>June 6, 2016</td> 271 <td>2016-06-01</td> 272 </tr> 273 <tr> 274 <td><a href="/security/bulletin/2016-05-01.html">May 2016</a></td> 275 <td> 276 <a href="/security/bulletin/2016-05-01.html">English</a> / 277 <a href="/security/bulletin/2016-05-01.html?hl=ja"></a> / 278 <a href="/security/bulletin/2016-05-01.html?hl=ko"></a> / 279 <a href="/security/bulletin/2016-05-01.html?hl=ru"></a> / 280 <a href="/security/bulletin/2016-05-01.html?hl=zh-cn"> ()</a> / 281 <a href="/security/bulletin/2016-05-01.html?hl=zh-tw"> ()</a> 282 </td> 283 <td>May 2, 2016</td> 284 <td>2016-05-01</td> 285 </tr> 286 <tr> 287 <td><a href="/security/bulletin/2016-04-02.html">April 2016</a></td> 288 <td> 289 <a href="/security/bulletin/2016-04-02.html">English</a> / 290 <a href="/security/bulletin/2016-04-02.html?hl=ja"></a> / 291 <a href="/security/bulletin/2016-04-02.html?hl=ko"></a> / 292 <a href="/security/bulletin/2016-04-02.html?hl=ru"></a> / 293 <a href="/security/bulletin/2016-04-02.html?hl=zh-cn"> ()</a> / 294 <a href="/security/bulletin/2016-04-02.html?hl=zh-tw"> ()</a> 295 </td> 296 <td>April 4, 2016</td> 297 <td>2016-04-02</td> 298 </tr> 299 <tr> 300 <td><a href="/security/bulletin/2016-03-01.html">March 2016</a></td> 301 <td> 302 <a href="/security/bulletin/2016-03-01.html">English</a> / 303 <a href="/security/bulletin/2016-03-01.html?hl=ja"></a> / 304 <a href="/security/bulletin/2016-03-01.html?hl=ko"></a> / 305 <a href="/security/bulletin/2016-03-01.html?hl=ru"></a> / 306 <a href="/security/bulletin/2016-03-01.html?hl=zh-cn"> ()</a> / 307 <a href="/security/bulletin/2016-03-01.html?hl=zh-tw"> ()</a> 308 </td> 309 <td>March 7, 2016</td> 310 <td>2016-03-01</td> 311 </tr> 312 <tr> 313 <td><a href="/security/bulletin/2016-02-01.html">February 2016</a></td> 314 <td> 315 <a href="/security/bulletin/2016-02-01.html">English</a> / 316 <a href="/security/bulletin/2016-02-01.html?hl=ja"></a> / 317 <a href="/security/bulletin/2016-02-01.html?hl=ko"></a> / 318 <a href="/security/bulletin/2016-02-01.html?hl=ru"></a> / 319 <a href="/security/bulletin/2016-02-01.html?hl=zh-cn"> ()</a> / 320 <a href="/security/bulletin/2016-02-01.html?hl=zh-tw"> ()</a> 321 </td> 322 <td>February 1, 2016</td> 323 <td>2016-02-01</td> 324 </tr> 325 <tr> 326 <td><a href="/security/bulletin/2016-01-01.html">January 2016</a></td> 327 <td> 328 <a href="/security/bulletin/2016-01-01.html">English</a> / 329 <a href="/security/bulletin/2016-01-01.html?hl=ja"></a> / 330 <a href="/security/bulletin/2016-01-01.html?hl=ko"></a> / 331 <a href="/security/bulletin/2016-01-01.html?hl=ru"></a> / 332 <a href="/security/bulletin/2016-01-01.html?hl=zh-cn"> ()</a> / 333 <a href="/security/bulletin/2016-01-01.html?hl=zh-tw"> ()</a> 334 </td> 335 <td>January 4, 2016</td> 336 <td>2016-01-01</td> 337 </tr> 338 <tr> 339 <td><a href="/security/bulletin/2015-12-01.html">December 2015</a></td> 340 <td> 341 <a href="/security/bulletin/2015-12-01.html">English</a> / 342 <a href="/security/bulletin/2015-12-01.html?hl=ja"></a> / 343 <a href="/security/bulletin/2015-12-01.html?hl=ko"></a> / 344 <a href="/security/bulletin/2015-12-01.html?hl=ru"></a> / 345 <a href="/security/bulletin/2015-12-01.html?hl=zh-cn"> ()</a> / 346 <a href="/security/bulletin/2015-12-01.html?hl=zh-tw"> ()</a> 347 </td> 348 <td>December 7, 2015</td> 349 <td>2015-12-01</td> 350 </tr> 351 <tr> 352 <td><a href="/security/bulletin/2015-11-01.html">November 2015</a></td> 353 <td> 354 <a href="/security/bulletin/2015-11-01.html">English</a> / 355 <a href="/security/bulletin/2015-11-01.html?hl=ja"></a> / 356 <a href="/security/bulletin/2015-11-01.html?hl=ko"></a> / 357 <a href="/security/bulletin/2015-11-01.html?hl=ru"></a> / 358 <a href="/security/bulletin/2015-11-01.html?hl=zh-cn"> ()</a> / 359 <a href="/security/bulletin/2015-11-01.html?hl=zh-tw"> ()</a> 360 </td> 361 <td>November 2, 2015</td> 362 <td>2015-11-01</td> 363 </tr> 364 <tr> 365 <td><a href="/security/bulletin/2015-10-01.html">October 2015</a></td> 366 <td> 367 <a href="/security/bulletin/2015-10-01.html">English</a> / 368 <a href="/security/bulletin/2015-10-01.html?hl=ja"></a> / 369 <a href="/security/bulletin/2015-10-01.html?hl=ko"></a> / 370 <a href="/security/bulletin/2015-10-01.html?hl=ru"></a> / 371 <a href="/security/bulletin/2015-10-01.html?hl=zh-cn"> ()</a> / 372 <a href="/security/bulletin/2015-10-01.html?hl=zh-tw"> ()</a> 373 </td> 374 <td>October 5, 2015</td> 375 <td>2015-10-01</td> 376 </tr> 377 <tr> 378 <td><a href="/security/bulletin/2015-09-01.html">September 2015</a></td> 379 <td> 380 <a href="/security/bulletin/2015-09-01.html">English</a> / 381 <a href="/security/bulletin/2015-09-01.html?hl=ja"></a> / 382 <a href="/security/bulletin/2015-09-01.html?hl=ko"></a> / 383 <a href="/security/bulletin/2015-09-01.html?hl=ru"></a> / 384 <a href="/security/bulletin/2015-09-01.html?hl=zh-cn"> ()</a> / 385 <a href="/security/bulletin/2015-09-01.html?hl=zh-tw"> ()</a> 386 </td> 387 <td>September 9, 2015</td> 388 <td>N/A</td> 389 </tr> 390 <tr> 391 <td><a href="/security/bulletin/2015-08-01.html">August 2015</a></td> 392 <td> 393 <a href="/security/bulletin/2015-08-01.html">English</a> / 394 <a href="/security/bulletin/2015-08-01.html?hl=ja"></a> / 395 <a href="/security/bulletin/2015-08-01.html?hl=ko"></a> / 396 <a href="/security/bulletin/2015-08-01.html?hl=ru"></a> / 397 <a href="/security/bulletin/2015-08-01.html?hl=zh-cn"> ()</a> / 398 <a href="/security/bulletin/2015-08-01.html?hl=zh-tw"> ()</a> 399 </td> 400 <td>August 13, 2015</td> 401 <td>N/A</td> 402 </tr> 403 </table> 404 405 406 407 </body> 408 </html> 409
