3 ms·
I deleted a couple of responses to this but the short version is that no, Skia (the affected component) is not being updated through the Play Store Framework. F
by voltagex_ 8y ago
I deleted a couple of responses to this but the short version is that no, Skia (the affected component) is not being updated through the Play Store Framework. Flippant responses to security issues are not useful.
- graeme 8y agoThanks! I was 99% sure the common reddit response was wrongheaded. I'll make this point explicitly when I see it, that phones may get some updates, but that old phones don't get the security patches at an os level. Am not on android so I didn't want to be mistaken in how it worked.
- voltagex_ 8y agoI don't have the info on Project Treble (Android 8 and up) - this changes things as the "Android Framework" is separated out from the rest of the phone firmware. It's not clear if this would include kernel and driver updates (I don't think so), but it's very likely things like Skia and codecs would be able to be updated faster. Very happy to be corrected. It also looks like not all devices running 8.0 were required to be Treble compliant. Hi, Samsung.
- graeme 8y agoGotcha. So for 8.0 devices onwards the issue will be less severe. Still some unpatched bugs, but a smaller portion of them.