FP Security Updates need to be more frequent

Is there any hope for significant improvements on this topic or indication that it is worked on from official channels?

The fairphone 6 just got the security update published on first of May at the end of June. And the updates from June are still not available…

1 Like

It has always (at least since 2022 when I bought mine) been like that, even for the current flagship: Updates are usually late, period. Just check the beginnings of this thread, keeping in mind that it only appeared after an exceptionally long wait…

Fairphone regularly promises to do something about that, but after a couple of those promises you understand they are just empty promises… :frowning_face:

4 Likes

And soon 3 months will be over and we with FP 5 will have a problem again from September 5th :thinking:

3 Likes

last minute, and (almost) only the security patch: Update: FP5 A.14 MR2 (FP5.VT2D.C.054.20250814) release 📢

But I guess with Deutsche Telekom as network provider I will wait another two weeks before the provider will allow it…

Another zero-interaction exploit being actively used in the wild.

3 Likes

Yes, there is a reason Security Patches exist. They’re not just to cater for the pathological paranoid… :roll_eyes: :grin:

Well, to get back to that nasty vulnerability, fortunately for us the “September, 5th” security update is bound to arrive tomorrow… :rofl: :rofl: :rofl:

1 Like

plenty of goodness in exploitland. hooray, quarterly or toned down release cycle updates for older generation phones makes absolutely NO sense. you are either secure and up to date or you are not. doesnt care if your phone is elderly model or so, either you wana be alive or you are dead and bust. you decide.

2 Likes

Technically true. But from a bean counter point of view, the just-in-time releases the very last day of contractual deadline still qualify as fulfilling the contract. “Sense“ has nothing to do with it… :roll_eyes:

The point is: Never believe marketing, and especially not Fairphone’s: They promised “updates”, they never promised you’d be secure. :frowning:

5 Likes

Hello all reader,

The last security updates was 5 July it’s almost october now! And it’s really quit from Fairphone for updates and security updates! There are still unsolved problems with the fp6 like the fps drops light sensor ( there is a work around for the fps drops) but it really just need the work as expected! I hope to get some clarity from @Fairphone_CM and maby a roadmap for future planning because android 16 is here also what are the plans? Greetings from a fp6 user

9 Likes

You never are secure but you can be safer with security updates.

6 Likes

Even with daily updates, you are never 100% secure.

1 Like

Maybe so, but if you install every available update daily you’ll get pretty damn close.

Constantly being 3 months behind on updates on a phone with broken Verified Boot since they used the test keys for production? Maybe not so close.

2 Likes

:open_mouth: :man_facepalming:

1 Like

Jokes aside, the updates release when they release. There’s little to no consistency or communication from Fairphone in this regard - or in any other regard for that matter.

9 Likes

My FP6 never got an update. it’s still at FP6.QREL.15.84.0 (Vodafone DE) I have opened a ticket with Fairphone on 21st of August, 15:30. The only “progress” I got out of it was a booby price. I picked a screen protector.

I’m not sure in what state my ticket is now that I received the booby price. I’ll wait a few days and check again.

I had the same problem with Vodafone when I still had my FP3. Then I opened a ticket with Vodafone. I never even got a copy of the ticket. After a few weeks and too much lifetime spent, I gave up.

As that was also discussed in the forum, I found out that updates resumed roughly two months after I gave up. Just a rough guess about the time.

So I don’t know about fairphone to wonder whether them breaking the “monthly security updates" promise after less than 4 months of the FP6 being available is a bad sign of lack of resources to work on multiple products at the same time or a good sign that they thought they could skip it because Android 16 is imminent…

Thoughts from long time users, please?

1 Like

I really hope that FP hast this in their scope: Patchday: Critical malicious code vulnerability in Android 13, 14, 15, 16 closed | heise online

4 Likes