LG’s January Security Bulletin is now live as the manufacturer has just posted the bulletin up to their product security website. The security patch is listed as containing a total of 81 patches to fix a number of different vulnerabilities. Some of those vulnerabilities are more pressing than others when it comes to making sure they were fixed, and as LG points out one of these was a fairly serious risk, as it could allow someone to execute code on a device remotely through various means, such as email or web browsing. With that said, this will certainly be an important patch for LG device owners to get their hands on and make sure it’s installed on their devices as soon as possible.
While the security patch does contain all of 81 fixes, only a handful of those are LVE vulnerabilities. LVE is LG’s term for the vulnerabilities that have to do with their own software on devices, and LG states that there are 8 of these out of the 81. The remaining 73 vulnerabilities are listed as CVE, and these are vulnerabilities which lie in the Android software itself.
While LG does list off the number of ever single CVE vulnerability that has been fixed with this security patch, they do not mention any specifics in regards to them. They do, however, mention details for the 8 LVE vulnerabilities, which should make more sense as these are the LG specific issues and there are far less of them than those that are listed as CVE. LG has also posted their security bulletin a bit earlier than expected, and before Google has posted theirs, which is when the detail for the CVE risks will likely be explained in detail. It’s worth noting that this is just the security bulletin and not the actual software patch, so users probably won’t be seeing the update hit their devices today, but it is possible that the software could end up coming through sometime next week after January hits. With that being the case, LG device owners will definitely want to keep an eye out for the patch as LG could begin to send it out to devices any day now, although when it hits each device will also depend on the carrier with which the device is connected. Although there is no firm date for when this release will be pushed out, it’s possible that it could hit January 3rd, which is the date Google’s Android Security Patch is rumored to be released.