Google is now rolling out the January security patch for Pixel and Nexus devices. The new patch was released alongside the Android Security Bulletin for January 2018. There are two patches dated January 1, 2018, and January 5, 2018, which fix 38 issues between them.
The patch will first be rolled out for Nexus 5X, Nexus 6P, Pixel, Pixel XL, Pixel 2, Pixel 2 XL, and the Pixel C. It also brings the screen burn-in mitigation features to all of the above-stated devices, and ranges the fixed vulnerabilities from high to critical. The most severe flaw pertains to the media framework that could allow a remote attacker to execute arbitrary code using a 'crafted file'. However, Google notes that no users have reported being affected by these security issues.
The first patch dated January 1, 2018 covers the Android runtime, Media Framework and System vulnerabilities, whereas the second patch fixes issues with across multiple components like LG, HTC, MediaTek, Nvidia, and Qualcomm. Google, in it’s security bulletin, said, “ All supported Google devices will receive an update to the 2018-01-05 patch level. We encourage all customers to accept these updates to their devices,"
The latest security patch is being rolled out as an OTA update. As mentioned earlier, it is currently only available for the Pixel and Nexus devices, but other Android device manufacturers are also expected to soon roll out the patch for their devices. Additionally, the new patch also comes with two new functional updates, one of which handles key upgrades in keystore and another improves the stability and performance of a device after an OTA installation.