FP4 Security Patch Update

Dear community,

The last update you have received from us is FP4.TP2R.C.0132 released on the 31st of March 2025, with the security patch from March 5th 2025.

We have compiled a new release of Android 13 for Fairphone 4, including the latest security patch, but faced issues during the final building process. We realise that you are now overdue for a security patch, and that this might affect the functioning of some apps that automatically check the security patch level, as well as certain work profiles.

We’re already rebuilding this release, with the aim of rolling it out within the coming two weeks.

We’ll keep you posted with any updates!

Your Fairphone team.

37 Likes

It is really a good and welcomed step that you are communicating these issues to the community!

13 Likes

Many thanks @Alon_Brandt for your post! :blush:
Issues can happen, but as we are aware of your difficulties we can understand :wink: take time to release a stable update as much as possible

4 Likes

It’s great that you decided to communicate. Better late than never… :+1:

That been said, as far as I understand your post, if everything goes as planned you will release the “May 5th” patches somewhere around the June 15-19th.
Is that right, or did I miss something?

Because by then, the patch level “May 5th” will be already outdated by a month and a half… Even just patched, the FP4 remains unpatched!
There is simply no way to have a secure FP4. :frowning_face:

That may be true, but blame this on Google and not on Fairphone.

Android is an utterly broken blob of software. Under the hood it is Linux, but they abandoned almost everything what makes it great.
In the end this is also not solely an Android, but an “corporate controlled OS” problem. iOS is no better.

Those OSes will never be as secure as they should be.

1 Like

Sure, but that’s not an excuse or even relevant here, we’re talking specifically about the security patches Google releases every month.
I’d already be happy if we could get those Google security fixes “as soon as reasonably possible”. It so happens security patches are highly perishable goods, but still I’m willing to accept values of “reasonably”.

Unfortunately security patches have never been a priority for Fairphone, not even back when the FP4 was still the shiny shiny flagship.
And now security patch frequency (already downgraded to “every 2 months”) has de facto become “every 3 months or so”. :frowning_face:
I somehow doubt they will release the next expected patches (“July 5th”) just a couple weeks after the May ones – those “July 5th” patches will arrive “eventually”, maybe in August if we’re lucky, most likely in September. :angry:

1 Like

Hey Kurt, thanks for your question!

The patch expires every 3 months, so - today, June 5th.
This means that the gap is only just up until a couple of weeks, and not from May 5th.

Hope this clears it up!

2 Likes

Oh yes it is relevant!
Alone the fact that this is a bundle of patches for various components is a huge problem. It is all or nothing. So a compilation problem in one of these patches causes that FP cannot supply anything. Ridiculous!

3 Likes

Just because they are slower than orther companies to roll out the monthly patch, it doesnt mean it has no priority.

The rest is just incorrect

  • Security patch level: 5th of November, 2024 released on 25th of Nov
  • Security patch level: 5th of January, 2024 released on 27th of Jan
  • Security patch level: 5th of March, 2025 releaswd on 31st of Mar

So still bi-monthly with an exception for the may SPL.

Edit: And they are still doing better thann the bigger company HMD who have 2 years monthly and after that for 1 more year only quaterly.

FPs roadmap is

We did monthly security updates for about 2,5 years, and then we did switch to bi-monthly security updates* since 2024. Furthermore, we will keep the bi-monthly pace until the end of the software support.

Yes the update isnt available within a few days of the 5th of each month, beside that FP is doing a great job in keeping devices updated for a long time.

8 Likes

Thank you for the news update @Alon_Brandt. :+1:
Being in the know alleviates the problem for me.

5 Likes

Sorry but I have difficulties parsing your statement. :thinking:
“The patch expires every 3 months, so - today, June 5th.” Patches don’t really expire, and Fairphone’s promise was for security patches every 2 months, so what do you mean?
Do you mean the tolerance period for losing the official “up-to-date” status of a device?

And what is it we will get “in the coming two weeks”?

2 Likes

Android seems to have guidance for their " Enterprise Recommended" program to publish security patches within 90 days of the announcement.

Starting from the day your device ships, we guarantee security updates within 90 days for the next two years at least.
Android Enterprise Recommended - HONOR Global

Delivery of Android security updates within 90 days of release from Google, for a minimum of three years (or 5 years for rugged)
What is Android Enterprise Recommended? | Jason Bayton

And because the FP4 is in it as well (AER - Fairphone), they would have the same deadline.

So they have been relatively timely with their updates so far all things considered!

4 Likes

Hello dear community! Great news!

We’ve managed to catch up and will begin to roll out the FP4 A.13 MR12/FP4.TP2U.C.0136 release today to end customers. The security patch level is June 5th, 2025.

Thanks for your patience and keep enjoying your Fairphone!

The Fairphone Team.

13 Likes

Closing here and opening a topic for this update