Possible to install security updates without upgrading OS? - OnePlus 3 Questions & Answers

Is it possible to install security updates without upgrading to Nougat (currently on 6.0.1)? Before anyone suggests just upgrading to Nougat, I have some Xposed modules that are only stable in M and they are very important to my workflow.
Thanks

illBelief said:
Is it possible to install security updates without upgrading to Nougat (currently on 6.0.1)? Before anyone suggests just upgrading to Nougat, I have some Xposed modules that are only stable in M and they are very important to my workflow.
Thanks
Click to expand...
Click to collapse
Simple answer, possibly, if you use a custom ROM that's on andoid 6 it might merge in the security fixes. But other than that, no.

Answer to your question would be sultanxda rom for op3 which is regularly updated but if you want to remain on oxygen os then I don't think it's possible

I am also thinking about this option too, lots of phone company only have update their ROM for 1 year, that makes every android cell phone is not trustful after 1 year.

Johndawolf said:
Simple answer, possibly, if you use a custom ROM that's on andoid 6 it might merge in the security fixes. But other than that, no.
Click to expand...
Click to collapse
I do, I'm actually on Resurrection Remix but they moved to N quite a few patches ago. Are security updates something only the ROM dev's can include in their patches or is there a zip or apk I can flash in recovery?

illBelief said:
I do, I'm actually on Resurrection Remix but they moved to N quite a few patches ago. Are security updates something only the ROM dev's can include in their patches or is there a zip or apk I can flash in recovery?
Click to expand...
Click to collapse
Not that I'm aware of. It might be theoretically possible, but there's no way I know of to do it.

You can update your kernel to a custom version including further security fixes and update all your applications via Google Play, but there are some components of the ROM you can never update without a newer OS.
With time the small security holes will escalate to major bugs as cyber criminals take advantage of those to steal private data.

Related

How often should I update Lineage OS? (Don't need features, just security)

I updated my new Lineage OS device for the first time yesterday to the May 9th build and I had to redo my Tingle patch (which I use to prevent having to use Google crap on my phone).
I don't really care about new features (unless its a theming engine), so should I continue to update my phone weekly, or just check the release notes to see if any security patches are pushed?
If I hold off on updating, will it make it more difficult to get updates OTA in the future?
(I realize this is a major noob question, this is my first Android device.)
z0m8i3 said:
I updated my new Lineage OS device for the first time yesterday to the May 9th build and I had to redo my Tingle patch (which I use to prevent having to use Google crap on my phone).
I don't really care about new features (unless its a theming engine), so should I continue to update my phone weekly, or just check the release notes to see if any security patches are pushed?
If I hold off on updating, will it make it more difficult to get updates OTA in the future?
(I realize this is a major noob question, this is my first Android device.)
Click to expand...
Click to collapse
Can be more changes than just the android security patch level that affects security. I've seen stuff in change logs that indicates replacing the old built-in browser to some new webview based browser, encryption related changes and stuff.
If you don't have any serious issues you could use LOS Changelog or Lineage Downloader for downloading and review changelogs before updating. That could help with knowing if a new build is good for you or if you could skip it without losing out on important changes.
Sent from my XT1650-03 using Tapatalk
z0m8i3 said:
If I hold off on updating, will it make it more difficult to get updates OTA in the future?
Click to expand...
Click to collapse
No

rolling release android

hi guys,
i have a question about android. can i switch my rom to rolling release? thank you for your reply.
Need some more information here...
Unless I missed something idk what rolling release means?
"In software development, a rolling release, rolling update, or continuous delivery is the concept of frequently delivering updates to applications. This is in contrast to a standard or point release development model which uses software versions that must be reinstalled over the previous version."
sorry i dont know enough word to explain in english so i copied a bit and pasted. if you use a linux distro like arch linux, you just update packages like when you get play store updates and never get major updates like on ubuntu.
hajking said:
"In software development, a rolling release, rolling update, or continuous delivery is the concept of frequently delivering updates to applications. This is in contrast to a standard or point release development model which uses software versions that must be reinstalled over the previous version."
sorry i dont know enough word to explain in english so i copied a bit and pasted. if you use a linux distro like arch linux, you just update packages like when you get play store updates and never get major updates like on ubuntu.
Click to expand...
Click to collapse
Just install the alpha and beta version of the rom/firmware you would like for frequent updates.
But sadly it doesn't work like that on mobile, you get a huge update once a year and patches every month (if you are on "stable")
AWESOME1092387456 said:
Just install the alpha and beta version of the rom/firmware you would like for frequent updates.
But sadly it doesn't work like that on mobile, you get a huge update once a year and patches every month (if you are on "stable")
Click to expand...
Click to collapse
yeah im on latest miui tr and i get update every week but there must be a way i think.
hajking said:
yeah im on latest miui tr and i get update every week but there must be a way i think.
Click to expand...
Click to collapse
if our devices supported Project Treble we would be able to receive system-less updates, which are possible due to treble's A/B partition scheme (as far as i konw but i am not entirely sure)
AWESOME1092387456 said:
if our devices supported Project Treble we would be able to receive system-less updates, which are possible due to treble's A/B partition scheme (as far as i konw but i am not entirely sure)
Click to expand...
Click to collapse
thanx dude
AWESOME1092387456 said:
if our devices supported Project Treble we would be able to receive system-less updates, which are possible due to treble's A/B partition scheme (as far as i konw but i am not entirely sure)
Click to expand...
Click to collapse
Firstly, what's that "system-less" but still the updating of the "system"? Learn before talking and know what you're saying (no personal offense, btw).
Then again you're wrong as mi 6 doesn't have that a/b partition scheme (even though it's not that hard to repartition the device storage to have two boot and system partitions, you'll need to have or compile a new kernel that supports that partition and booting scheme - and we don't have that yet).
Treble will only let you to update your system without touching the separated vendor partition.
ccelik97 said:
Firstly, what's that "system-less" but still the updating of the "system"? Learn before talking and know what you're saying (no personal offense, btw).
Then again you're wrong as mi 6 doesn't have that a/b partition scheme (even though it's not that hard to repartition the device storage to have two boot and system partitions, you'll need to have or compile a new kernel that supports that partition and booting scheme - and we don't have that yet).
Treble will only let you to update your system without touching the separated vendor partition.
Click to expand...
Click to collapse
What i meant is we could update the phone without needing to do a full restart and i said "IF OUR DEVICE SUPPORTED PROJECT TREBLE" didn't you read the "IF"? And with "system-less" i meant mostly bugfixes that can be installed without the need of restarting the whole device as that particular service would for example shutdown and then start again and in this way we could receive security patches and minor stability updates, not full android releases or another version of miui (from v9 to v10) these kinds of upsates should still need to be performed through recovery, please next time read a response carefully before responding and i personally stated that i am not that sure either at the end of my response so don't just look for some keywords and then go bashing others for no reason.
AWESOME1092387456 said:
What i meant is we could update the phone without needing to do a full restart and i said "IF OUR DEVICE SUPPORTED PROJECT TREBLE" didn't you read the "IF"? And with "system-less" i meant mostly bugfixes that can be installed without the need of restarting the whole device as that particular service would for example shutdown and then start again and in this way we could receive security patches and minor stability updates, not full android releases or another version of miui (from v9 to v10) these kinds of upsates should still need to be performed through recovery, please next time read a response carefully before responding and i personally stated that i am not that sure either at the end of my response so don't just look for some keywords and then go bashing others for no reason.
Click to expand...
Click to collapse
Sorry my bad on that "if" part you're right.
But still, that's not a "system-less" solution but a "recovery-less" updating way as with the a/b partitioning what we get is not having to use anything other than the currently running system to apply the updates (and the ability to roll back to that very currently running system, is something goes wrong with the new)

How to apply security pacthes on abandonded ROMs for personal use?

Is there a tutorial which can help me on this process? I don't want to move to Oreo right now, but i don't want to miss the security patches also. It's okay if it takes time, i'm willing to learn.
TalkMatt said:
Is there a tutorial which can help me on this process? I don't want to move to Oreo right now, but i don't want to miss the security patches also. It's okay if it takes time, i'm willing to learn.
Click to expand...
Click to collapse
I don't know but I'm interested as well
If you want an updated Nougat rom, it seems that Mokee ROM is nice...
Sent from my Lenovo Vibe K5 Plus using XDA Labs
I'd suggest moving to an aftermarket OS such as DotOS since it is simply impossible to patch/fix anything on an official OS. Lenovo simply abandoned following security updates/posting them and nobody can disassemble their broken OS and fix it for you.
It isn't just "kernel" having security issues, it is whole OS frameworks etc.
Ilgazc said:
I'd suggest moving to an aftermarket OS such as DotOS since it is simply impossible to patch/fix anything on an official OS. Lenovo simply abandoned following security updates/posting them and nobody can disassemble their broken OS and fix it for you.
It isn't just "kernel" having security issues, it is whole OS frameworks etc.
Click to expand...
Click to collapse
Yeah, the question was for me starting on a custom ROM . All custom ROMs are not updated with monthly patches, so I'd like to learn how to do it on a "non maintained" custom ROM like Lineage, or even MIUI

How to roll back to Nougat OOS 4.5.1

Hello Everyone
Since I haven't flashed any custom ROM on my device in a while (I didn't like Pie much), and I am pretty bored with OOS 5.0.8 now, I would like to roll back to Nougat OOS 4.5.1 build. I've heard from multiple sources that Nougat has much better battery life and usual UI is more fluid that Oreo ROMs. Also, a user has intrigued me by saying that games in general perform much better than oreo builds.
So, I would like to give it a shot. But, I've found out so far that it isn't as easy as flashing the OOS build on top of 5.0.8. Many websites claim that I need to flash some special nougat build that will downgrade me to nougat and then I can flash OOS 4.5.1.
So, if anyone has rolled back from 5.0.8 or 5.0.7 to Nougat before, can you please guide me through the process?
abhibnl said:
Hello Everyone
Since I haven't flashed any custom ROM on my device in a while (I didn't like Pie much), and I am pretty bored with OOS 5.0.8 now, I would like to roll back to Nougat OOS 4.5.1 build. I've heard from multiple sources that Nougat has much better battery life and usual UI is more fluid that Oreo ROMs. Also, a user has intrigued me by saying that games in general perform much better than oreo builds.
So, I would like to give it a shot. But, I've found out so far that it isn't as easy as flashing the OOS build on top of 5.0.8. Many websites claim that I need to flash some special nougat build that will downgrade me to nougat and then I can flash OOS 4.5.1.
So, if anyone has rolled back from 5.0.8 or 5.0.7 to Nougat before, can you please guide me through the process?
Click to expand...
Click to collapse
Use this https://forums.oneplus.com/threads/guide-how-to-go-from-oreo-to-stock-nougat.661713/
That's the guide I also have gone through which advised to download the special build. Now the issue is that special build link is not working anymore. That's why I can't proceed with that one
abhibnl said:
That's the guide I also have gone through which advised to download the special build. Now the issue is that special build link is not working anymore. That's why I can't proceed with that one
Click to expand...
Click to collapse
https://downloadmirror.co/Waa/O2N_OBT_15811_OXYGEN_SIGN_wipe.zip
This is a link for an op3 build found on the last page of that link i gave you
v.konvict said:
https://downloadmirror.co/Waa/O2N_OBT_15811_OXYGEN_SIGN_wipe.zip
This is a link for an op3 build found on the last page of that link i gave you
Click to expand...
Click to collapse
Yeah sorry i was the one who posted that there. I did some digging on google yesterday and found that. The thing is, now i just need to have assurance from someone who did it on 5.0.8
That guide is old af and the original poster don't even have a oneplus 3 to test it.
OP changed few things with latest firmware and i hope it won't mess with my partitions if i flash the special build. This is my primary phone so, want to be sure before I do this procedure
abhibnl said:
Yeah sorry i was the one who posted that there. I did some digging on google yesterday and found that. The thing is, now i just need to have assurance from someone who did it on 5.0.8
That guide is old af and the original poster don't even have a oneplus 3 to test it.
OP changed few things with latest firmware and i hope it won't mess with my partitions if i flash the special build. This is my primary phone so, want to be sure before I do this procedure
Click to expand...
Click to collapse
Why don't u backup your existing data elsewhere and try flashing the nougat build because I am sure there will be quite a few of them who might have rolled back to Nougat.
Jigneshg said:
Why don't u backup your existing data elsewhere and try flashing the nougat build because I am sure there will be quite a few of them who might have rolled back to Nougat.
Click to expand...
Click to collapse
You still didn't read my last post properly. I have no issues if it formats my data partition. I'm concerned about the other partitions. I don't want to corrupt my partition table because of downgrading to a lower and older firmware. That's all my concern is.
Was on Omni 8.1 > then Leaked OOS 9.0 build > Official LOS16 > then downgraded to special Nougat build > and now on OOS 4.5.1 with latest Magisk build & Tolyan's last Gcam 5 (1.015 final fix version) release.
No issues with partitions or modems/firmware.
Only back up your data and internal memory as they will be wiped out.
abdozoon said:
Was on Omni 8.1 > then Leaked OOS 9.0 build > Official LOS16 > then downgraded to special Nougat build > and now on OOS 4.5.1 with latest Magisk build & Tolyan's last Gcam 5 (1.015 final fix version) release.
No issues with partitions or modems/firmware.
Only back up your data and internal memory as they will be wiped out.
Click to expand...
Click to collapse
Thanks! That's all the assurance I needed. I shall try it next weekend when I'll be free to do so.
i bricked my phone last week i finally unbricked with this tool it was so easy all u have to do is click on msm tool exe in folder after extracting and press start and that fixed my device and flash noughat stock rom on device,it will relock bootloader though,just make sure u put device in adb mode though with vol up when conecting to pc,hope that helps was soo easy heres link https://forum.xda-developers.com/oneplus-3/how-to/unbrick-phone-msmdownloadtool-v3-0-6-t3575801

General Poco F3 Android Security Update Query

Hi and apologies for the newbie question, Im not very techinical but need some help/advice please. I have a Poco F3 bought new not long ago. Its Running :-
MIU Global 14.07.0 (TKHEUXM)
Andoird Version 13 TKQ1.220829.002
Android Security Update 2023-02-01
The issue I have is that lots of my work apps (Outlook, Teams mainly) wont run becuase security at work requires that I am on at least the March Android Security Update. However my phone doesnt see these update. I dont particularly want to have to buy a new phone (work wont pay for one!) as I only bought it recently. Do any of you kind people know of a way that I can update my version of Android or at least get a newer security update installed on my current phone please.
Thanks for reading and your time in advance.
Strange. Why would apps require you to have such recent of a system update? Most Android phones don't get updated quickly.
Are you sure of this? Where did you read that? Ideally please provide some screenshots to see
Edit: It is possible for you to get a newer security patch, but you'll have to unlock your phone's bootloader and flash a Custom OS on it, which will be too much work (and has caveats), just for getting apps to work.
Second and preferred option is to just wait for Xiaomi to release a system update with updated security patch, but I can't tell you how long they'll take
charliev7 said:
Hi and apologies for the newbie question, Im not very techinical but need some help/advice please. I have a Poco F3 bought new not long ago. Its Running :-
MIU Global 14.07.0 (TKHEUXM)
Andoird Version 13 TKQ1.220829.002
Android Security Update 2023-02-01
The issue I have is that lots of my work apps (Outlook, Teams mainly) wont run becuase security at work requires that I am on at least the March Android Security Update. However my phone doesnt see these update. I dont particularly want to have to buy a new phone (work wont pay for one!) as I only bought it recently. Do any of you kind people know of a way that I can update my version of Android or at least get a newer security update installed on my current phone please.
Thanks for reading and your time in advance.
Click to expand...
Click to collapse
I heard xiaomi dropped support for poco f3 so it won't be getting updates anymore (not sure about security updates). If security updates are your main concern, i would suggest buying an iphone instead as its updates are pushed on every model no matter how old it is. Pixel phones get speedy updates as well. Also, I've used teams and outlook on old android versions myself. I dont see how it's possible for them to enforce a specific security patch. As the user above stated, a screenshot would be very helpful. Also i know its not my place to say this but if your company somehow made outlook and teams enforce security patches, they should sponsor an appropriate phone to their employees as well.
Disregard
Thanks for replying. The screenshot below is what I get when I try Outlook/Teams. Interesting I didnt realise support for the POCO F3 had stopped,, Its the android security update thats the issue. The org is attempting to pass cyberessentials and this is part of the aftermath of locking security on devices. The enforcment is being done by enrolling your device into a policy. If you dont enroll you cant access company data using your phone, if you do enroll then the policy kicks in and requires your device is compliant.
charliev7 said:
Thanks for replying. The screenshot below is what I get when I try Outlook/Teams. Interesting I didnt realise support for the POCO F3 had stopped,, Its the android security update thats the issue. The org is attempting to pass cyberessentials and this is part of the aftermath of locking security on devices. The enforcment is being done by enrolling your device into a policy. If you dont enroll you cant access company data using your phone, if you do enroll then the policy kicks in and requires your device is compliant.
Click to expand...
Click to collapse
You can try asking your organisation to adjust their Microsoft Intune Enrollment Settings, to loosen Android Security Patch Requirement from March to February (your current security patch), or if they can somehow accept your device anyway.
I'm very sure Poco F3 will continue to get Security Patches for the timebeing, only the OS Update to Android 14 is uncertain. It will definitely still get the OS Update to Android 13.1 tho.
Yeah tried both asking for a bit of leniancy and exclusion but no luck. I hope you are right about the security patches, wish they were a bit more timely. It's so convenient to have access via mobile. It's tough luck for my boss and team though as I do a lot of stuff out of hours via phone which I won't do now unless I/they find a solution. I'm certainly not buying a new phone myself. I really appreciate all your replies and for those taking the time to read my query. Thank You.
cyanGalaxy said:
You can try asking your organisation to adjust their Microsoft Intune Enrollment Settings, to loosen Android Security Patch Requirement from March to February (your current security patch), or if they can somehow accept your device anyway.
I'm very sure Poco F3 will continue to get Security Patches for the timebeing, only the OS Update to Android 14 is uncertain. It will definitely still get the OS Update to Android 13.1 tho.
Click to expand...
Click to collapse
ApexPrime said:
I heard xiaomi dropped support for poco f3 so it won't be getting updates anymore (not sure about security updates). If security updates are your main concern, i would suggest buying an iphone instead as its updates are pushed on every model no matter how old it is. Pixel phones get speedy updates as well. Also, I've used teams and outlook on old android versions myself. I dont see how it's possible for them to enforce a specific security patch. As the user above stated, a screenshot would be very helpful. Also i know its not my place to say this but if your company somehow made outlook and teams enforce security patches, they should sponsor an appropriate phone to their employees as well.
Click to expand...
Click to collapse
It will still receive security patch at least for 1 year

Categories

Resources