Google recently informed OEMs of greatly reduced security support for older releases of Android. For the vast majority of discovered vulnerabilities, only Critical severity issues deemed to be an imminent risk will be backported at all and only to the most recent 2 major yearly releases (16 and 17).
Conversation
Notices
-
Embed this notice
GrapheneOS (grapheneos@grapheneos.social)'s status on Tuesday, 14-Jul-2026 12:35:09 JST
GrapheneOS
-
Embed this notice
GrapheneOS (grapheneos@grapheneos.social)'s status on Tuesday, 14-Jul-2026 12:35:10 JST
GrapheneOS
Android's security policy for the past several years has been to backport patches for Critical and High severity Android vulnerabilities to the past 3 major yearly releases. Moderate and Low severity patches including most fixes for privacy weaknesses have required upgrading to the latest releases.
Steve's Place repeated this.
-
Embed this notice