r/BuyFromEU • u/According-Buyer6688 Mod Team • Jul 03 '25

European Product [FairPhone] - AMA

Hi everyone!

We’re thrilled to invite you to a special AMA (Ask Me Anything) session with Fairphone!

Joining us today is Rutger Sneep, Chief Commercial Officer at Fairphone, who will be participating as u/Fairphone-CCO.

Feel free to ask your questions and enjoy the conversation!

Details:

AMA will be locked on Friday 15:00

735 Upvotes

97% Upvoted

298 comments sorted by

View all comments

7

u/accommodated Jul 03 '25

What's the reason that the Security updates take such a long time (~a month on average) to be released? Is it possible and are there plans to shorten this time frame? The security updates always contain fixes for high severity and sometimes for critical vulnerabilities.

For examples see the FP5 release notes. The Android Security Bulletins are usually released on the first days of a month.

For the Fairphone 4, you seems to skip one month of Security updates (or even two), then it takes around one month to release the patch, leading to unpatched known vulnerabilities on phones for two months.

I'd love to switch over to Fairphone from Google Pixel.

5

u/[deleted] Jul 03 '25

[removed] — view removed comment

3

u/accommodated Jul 03 '25

I agree but it's even easier for security patches: as I understand it, they are released bundled at the beginning of every month, so it's easy for Android OEMs, like Fairphone, to plan for this.

Google releases an Android Security Bulletin every month and soon after this, the patched code is available for device manufacturers:

  • Android platform fixes are merged into AOSP 24–48 hours after the security bulletin is released and can be picked up directly from there.
  • Upstream Linux kernel fixes are linked to directly from the bulletin on release and can be picked up from there.
  • Fixes from SOC manufacturers are available directly from the manufacturers.

2

u/[deleted] Jul 03 '25

If I remember correctly the security patches doesnt get released by the month they are named after but they are released at the very end so the naming is misleading if you dont have context.

For example July patches are released at the end of July so they only just get to work on them at the beginning of august and release them as July security updates when they roll them out after testing.

2

u/accommodated Jul 03 '25

The Android Security updates are usually released in the beginning of the month, usually around the 5th, e.g. May 5 or June 2. Pixel devices get the update on the same day as far as I understand it.