Google has released the details about what is contained in its latest security patch for Android devices. However, as of this writing, the company has yet to release factory images or OTA downloads for its own Pixel and Nexus devices.
Google does state that its own Pixel, Pixel XL, Pixel C, Nexus Player, Nexus 5X, and Nexus 6P devices will be able to get the new security patches “as part of the upgrade to Android Oreo.” However, at least one non-Google device can already get an over-the-air update for the September 2017 security bulletin. NokiaPowerUser reports that owners of the Nokia 5 have reported downloading the 142 MB update.
As far as the security update itself, Google notes it has been split in two, with 30 specific issues fixed in the September 1 dated patch, with 51 more bugs resolved in the September 5 patch. The most critical bug was with an issue that could “enable a remote attacker using a specially crafted file to execute arbitrary code within the context of a privileged process” on an Android device. Google reports there are no reports of this bug being exploited in the real world before the company fixed it with this update.
We will update this post when Google does release the factory images and OTA downloads for its Pixel and Nexus devices with the September 2017 security update.