BlackBerry Priv owners can now get their hands on the July 5 Android security patch. The update is for those who purchased their phones from ShopBlackBerry, Amazon or otherwise factory unlocked and patches the latest set of vulnerabilities. Some people may have already seen this update arrive earlier this week.
This security patch fixes a number of vulnerabilities that are detailed by BlackBerry. Some of them include:
- Remote Code Execution Vulnerabilities in Mediaserver
- Remote Code Execution Vulnerability in Bluetooth
- Elevation of Privilege Vulnerability in NFC
- Information Disclosure Vulnerability in Qualcomm USB Driver
Be sure to check out all of the details in BlackBerry's Knowledge Base post and check your phone for the update. If you aren't already seeing the update, you can head into Settings, then About phone and finally check for update.
Reader comments
BlackBerry Priv gets the July 5 Android security patch
On AT&T, my last security patch level shows May 2016. Is there something wrong on my hardware end or is AT&T really withholding my security updates? I feel like that's just irresponsible and should be made illegal by the FCC or something.
Posted via the CrackBerry App for Android
Nobody beats the update system on the iPhone.
And they come out for all supported devices, not just a few. Apple doesn't publish updates as often as Android though. So how can they be better?
LeapSTR100-2/10.3.2.2876
When will BlackBerry get its android updates???
AT&T still punishing their customers & Blackberry Knowledge Database is still not updated as of last month where they say that Blackberry is looking for a way to make possible that all AT&T Privs with a non AT&T sim can be updated...
I have a brand new unopen carrier unlocked AT&T Priv.. I'm considering selling it to get a fully unlock device because this wait is painful & i dont want to run lolipop.
Same here.
Too long to wait
In my opinion, as BlackBerry is going Android, they need to release these devices with the ability to update INDEPENDENT of carriers. Standing back and looking at the whole update picture, having a scattered MESS of phones in various stages of repair (as it were, considering the updates ARE an element of maintenance... which is in the "repair" family) a manufacturer is open to constant upheaval and discontent, not to mention having their devices "captured" and held back by carriers.
Again, in my opinion, BlackBerry needs to take a Bold (groan) step and find the way to polish their devices with the "needful" and stop all this skitter-step nonsense.
I have an AT&T Passport that hasn't seen an update, so I get the frustration. I don't pay too much attention to that because the Passport still rocks, as is.
My next device will be an SE - unlocked - to step around all of the delays.
BlackBerry could set the stage to stop all of the nonsense and strike a new path. Before I get flamed for the idea, I realize handset makers rely on carriers for distribution. Yet, I firmly believe that leaving a carrier to keep a device from being updated was a terrible idea from the onset.
If carriers can cope with unlocked devices in the same environs as their "hostage handsets" without calamity, I'm stunned that this hasn't been addressed sooner.
Why do andriod need a update every month? Can someone explain? I'm on bb10 and haven't had a update for over a year and my phone is working fine, what's all the once amonth updates about?
Posted via CB10
I understand why Android needs patching all the time. I also understand why BlackBerry has taken an aggressive stance on getting patches pushed out.
What I don't understand is how any android user can think this is acceptable when compared to BlackBerry OS devices, which get so few security updates as to be unmemorable. Android phone makers and carriers can make a marketing pitch to claim who is better at keeping devices updated, but you'd think BlackBerry as a whole could make a marketing claim that they don't even need constant patching. But then again, perhaps the more relevant question is, "would anyone care?".
Thank you to those device makers who aggressively push out updates and patches. But it just stuns me that ppl would choose to put themselves in that position in the first place.
It can't be a case of BlackBerry being so irrelevant now that malcontents and ne'er-do-wells aren't targeting BlackBerry (as used to be claimed for applied products that the ignorant claimed meant that iProducts war impervious to viruses). BlackBerry is still used in govt and business, so if anyone was a target for hacking, it would be them. And yet they are need to issue patch after endless patch.
My point is that BlackBerry ha ha best of both worlds: an aggressive and consistent update schedule for their *factory unlocked* android devices since the masses demand android, and an even more secure platform, bb10, for those who need/want even more security without the need for constant maintenance.
BlackBerry, where is your marketing team on this?
I got this security update a few days ago in Toronto Ontario. Blackberry is doing a great job even beating Nexus device for monthly security update.
Posted via the CrackBerry App for Android
+1
Updated yesterday. Now my Bell Priv is a dud. Stopped halfway and went to boot loader screen. Now when I try to power up I get as far as BlackBerry By android screen than little green guy showing error. What do I do?
Bring it back to wherever you bought it from. It should still be under warranty.
Call support. I got that once when updating and managed to get past it by giving it a hard reboot.
Of course it will...meanwhile in BB10 OS update news...crickets! LOL...
Cartman says: Nothing Due To Censorship
Glad my passport doesn't need that kind of security patches every month, gonna stick with the passport and bb10 as long as it lives
Posted via CB10
See the comment above yours.
+1 Passport since day 1.. works for me :)
Posted via CB10
BB10 probably has these vulnerabilities too, but remains unpatched.
To date, no BlackBerry 10 device ever got "hacked". QNX kicks ****! :) (android needs all the patches it can get, and BlackBerry has kicked **** in that regard). No other manufacturer has even done that.
Typed using my QNX powered BlackBerry Classic running 10.3.2.2876 on WINDmobile HSPA+
The Priv has never been hacked either.
noting yet one more grey hair
I didn't think I had gotten mine but followed Bla1se's instructions at the end of the article about going in and finding it in the settings. He wrote:
"If you aren't already seeing the update, you can head into Settings, then About phone and finally check for update."
Sure enough, there it said "update available" and I don't know how long it was sitting there before I discovered. I suppose it would have eventually given me a memo but it was good to get it taken care of.
Got my update last night
Posted via the CrackBerry App for Android
Where is the BB10 Os update!!!??? Promised from March????
Coming soon
It's just keeps on coming... maybe it's stuck! ;-D
• There's a Crack in the Berry right now... •
They need to do a C-section on that update.
Or a BB-Section
10.3.3?
Blackberry Passport (I0maginary 10.3.3)
I wish is would just run smoother.
Posted via BlackBerry PRIV
Anyone thinking of replacing their secure BB10 device for a Priv et al, should first read this. It makes sobering reading......
https://encrypted.google.com/url?q=http://thenextweb.com/dd/2016/07/05/a...
Posted via CB10
The article mentions the android kernel.
Pretty sure BlackBerry has specifically hardened that kernel, probably for that exact reason.
Posted via the CrackBerry App for Android
This ain't your daddy's Android, son
;)
Posted via the CrackBerry App for Android
BB 10 devices have stop production, 10.3.3 is the last update. It means no matter how good the software we BlackBerry fan love it, it just not enough critical mass or good funding to support this Blackberry 10 organization. For me I have left Blackberry 10 for Blackberry priv. At first i hate android but slowly BlackBerry bring over their key feature and I started to accept. Give it a try!
Posted via the CrackBerry App for Android
It's a shame they can't send an update through that fixes the poor build quality...
So glad they've ditched foxconn. When you get in to bed with a company who has a more attractive partner the side, you're only ever gonna get sloppy seconds.
I shouldn't be having to prise the edges of my phone off and injecting superglue in an attempt for it to sound less like a cheap child's toy when I use it...
Just saying.
Posted via the CrackBerry App for Android
Priv was built by Wistron in Mexico, not Foxconn.
Well luckily I'm not getting the android approach to blackberry I rather stay on 10 os it's more secure then android.... I'm not missing the android apps my z10 runs every app I need
Posted via CB10
Where is the proof of that?
Security and Android in the same sentence? That just doesn't seem possible.
Posted using a Q10, 10.3.2.2474.
In before the Where's the 10.3.3 update?
:-)
Are you ready for it?.......... SOON!
Posted via CB10 / AT&T /Z10 STL100-3 /10.3.2.2813
The file was 31MB, installed with no hassle. Definitely don't regret getting unlocked from shop blackberry. A shame they don't sell CDMA versions, really don't like when the carriers hold back on updates.
Posted via CB10
when is t-mobile july update coming ??
July.
And there's my at&t unlocked priv that's still with its preloaded android version. If only I knew it...Dunno what happens next. :'(
Posted via CB10
Go get a At&t sim and update to the May Security update
Posted via the Priv for Android
Whose hacking phones though... surely your're not that important
Jé Be....Here But Gone...
So, both the BBOSs and the android share the same Qualcomm brand snapdragons and all that...
When the hackers figure out how one system is hacked in the USB driver (in this cas android) can the fix be applied (if the problem also applies) to the BBOSs?
Posted via CB10
The ******** never stops here , even when they trying to secure your phone on a monthly basis, I guess that's what make their lifes go.
Posted via the CrackBerry App for Android
BB....so secure because no one gives a crap about OS10
Posted via the CrackBerry App for Android
Come on June security update from At&t... Come on little buddy. You can do it.
Posted via the Priv for Android
How many security updates does this thing needs
Posted via CB10
They come every month as per the normal schedule. That is what they're called 'monthly updates'.
I'm aware of the monthly updates. That's besides the point. It just seems that Android is broken beyond repair.
Posted via CB10
Amen... :-)
• There's a Crack in the Berry right now... •
It probably has more to do with being the most popular mobile OS and having a standard more vulnerable file system as compared to Apple's more secure siloed approach with IOS.
The update is released as vulnerability in the software is found. Buffer overflow is a common security concern, for example. It doesn't mean that BlackBerry Android is insecure; it is prudent software maintenance. Even our beloved BBOS was not immune to these types of issues.
BlackBerry Priv with CrackBerry App for Android
Lol that's like asking why Microsoft sends out windows updates.
Z30 STA100-5/10.3.2.2474
Constant security updates are a good thing....why is this being shunned? The world of digital security and attacks is constantly changing and updates are needed to keep things up to date.
Posted via the 5X
Android is based almost entirely on open source software. And while it is true that anyone can look at open source software the truth is almost no one does. The few people who do, and aren't looking to take advantage of the vulnerabilities can only report on a handful per month. So those get fixed. That's one reason we are on the fifth or sixth consecutive month of security patches for the Media Server library. They even changed the library name from StageFright to get that provocative tag off the patch reports. Now we have news of Symantec / Norton have used open source software with known 7 year old vulnerabilities in their PSP products that they didn't patch even though the vulnerabilities were known and disclosed.
Commercial companies don't use open source because it is better. They use it because it is cheaper. They could hire people to look at the code and secure it, but that turns out to be more expensive than writing it from scratch. They fix the few bugs that are actually found and most users who don't know anything about security say how wonderful having frequent patches. SMH
Frequent patches are better than infrequent when the code quality is so low but it leaves us with the question: how many vulnerabilities are found by people who who don't disclose them, but exploit them for malware? Kaspersky recently reported that ransom ware on Android quadrupled year on year 2016 over 2015.
So yes, if you are using an Android phone you want to be using one that is supported by regular patches, because the alternative is not very good at all if you care about security. Much better to be using a phone that doesn't have to have serious flaws fixed every 30 days in the hope that you might stay ahead of the bad guys.
LeapSTR100-2/10.3.2.2876
Priv is ahead of the field in that regard.
Ahead of the field? It gets the same patches as Nexus devices. Ahead of the majority of Android devices perhaps, but far behind all other kinds.
LeapSTR100-2/10.3.2.2876
My Nexus 6 is still on June security patch where as my Priv received the July patch more than 2 weeks ago with the O/S update (Beta 7)
Nexus devices and Sammy released their patches earlier today before BB and the source of the patches is Google who makes Android...
Posted via the CrackBerry App for Android
I got mine yesterday.
One day. Not much of an advantage. But as you can see from other posts some Priv owners are still waiting for the June patches.
But the real telling thing in all of this is when you compare the number of vulnerabilities found in the parts of Android written by Google (Dalvik, ART, Play Services, etc) with those taken from the general open source community (Media Server, etc). That will give you an idea of the difference between a professionally managed project, whether it is open source or not, and one that not so well managed.
Google usually writes very good code. A lot of that gets open sourced. I use a lot of their projects in my day to day work. Some other companies contribute good code to the open source community as well. Still others write equally high quality code and keep it proprietary. Then there are the projects, both open and closed source, that aren't so good. Unfortunately there is a lot of the latter in Android, but not just Android of course.
A good rule of thumb is to assume that the vulnerabilities reported and patched are just the tip of the iceberg. It gives you an idea how big the problem is. But getting lots of patches is not necessarily a good thing, just like being on the Titanic and seeing a large iceberg dead ahead wasn't a good thing.
LeapSTR100-2/10.3.2.2876
Priv owners in the beta program got their patches 1-2 weeks ago! Lol!
Posted via the CrackBerry App for Android
So true.... With new threats emerging almost daily on the Net, people need a smartphone that is 100% secure, and that can only be achieved with BB10. How BlackBerry can continue to offer total security to governments and businesses with Android remains to be seen.
Posted via CB10
100% total security can only be achieved with an OS that rarely receives updates?
You don't need frequent patches to make a secure os, you need frequent patches when you have a poorly written os.
The best Security is with software that has the fewest bugs which would mean fewer and less frequent patches. You do remember that the reason we first started getting regular patches was because Windows XP was such a mess? Before that no one would have accepted patches blindly from a software provider because the patches could often make things worse. Prior to the widespread use of the Internet it was comparatively easy for programmers to stay ahead of the security threats. This is no longer true.
BBOS was developed post Internet by a company that was founded on a number of goals, the primary one being securing mobile data on an always connected device. At the time this was a unique endeavour. No other devices provided the level of mobile connectivity that could take your data into hostile areas like a BlackBerry. That is the core difference between BlackBerry and Android (even BlackBerry powered by Android). BBOS and BB10 were built from the ground up to be secure in a connected environment. Linux which is the basis of Android is not like this at all. It was built from the ground up to work and be easy to use by people who mostly didn't work on it full time or even develop software on a professional basis. That is why researchers keep finding more bugs in the same libraries over and over again.
You don't need frequent patches to make a secure os, you need frequent patches when you have a poorly written os.
LeapSTR100-2/10.3.2.2876
I wanna make why the Priv needs monthly security patches each month. Is there a crack in the wall somewhere?
Posted via CB10
Fundamentally android has a crack that continuously needs to be parched
Posted via CB10
Yes security through obscurity is the best method....for BB, it is so secure because no one gives a **** enough about them anymore to hack them or OS10.
Posted via the CrackBerry App for Android
These are released by Google every month.
Posted via CB10
Just like Microsoft does for Windows.
With all these security patches when will the Marshmallow be available on Verizon?
Posted via the CrackBerry App for Android on BlackBerry PRIV
Probably.... never. It's Verizon
Posted via CB10
I downloaded this update but since I did, I can't share my files with any app, like fotos, videos and music! The google music app isn't working giving me that the id isn't valid and even if I download 3rd party multimedia apps they also can't synchronize music or fotos or videos from the phone! I don't know what to do! I already sent a bug report but till now still not working! Please any help with that?
Posted via the CrackBerry App from PRIVilege PRIVacy working on 6.0.1