Google's Android Security Bulletins squash critical flaws and exploits, and that's especially true this month. The search giant recently confirmed that the January 5, 2018 security patch contains fixes for the Spectre and Meltdown processor vulnerabilities that were disclosed earlier this month, both of which leverage flaws in the speculative execution feature of modern-day CPUs.
Google published the January Android security bulletin two weeks ago and rolled out patches for Spectre and Meltdown to the first-generation and second-generation Google Pixel smartphones, as well as the Nexus 5X and the Nexus 6P. Unfortunately, though, a number of Android OEMs have yet to follow suit. Essential became the first earlier this month, rolling out the January security patch to the Essential Phone. But as of now, a majority of Android phones remain affected. (It's worth noting, of course, that there isn't any proof that these CPU vulnerabilities have been exploited.)
Now, Sony is stepping up to the plate. This week, the Sony Xperia XA1 and the Xperia XA1 Plus received the January security patch with a fix for Spectre and Meltdown. (The Xperia XA1's update has a build number of 40.0.A.6.189, and the Xperia XA1 Plus's update has a build number of 48.0.A.1.131.)
For the uninitiated, the Xperia XA1 and the Xperia XA1 Plus are mid-range smartphones Sony announced in 2017. They're powered by Helio P20 system-on-chips and run Android 7.0 Nougat, though Sony's announced plans to update the phones to Android Oreo later this year.
It's encouraging to see Sony support the older devices in its portfolio -- especially in light of the unveiling of its 2018 lineup, which includes the Xperia XA2, the Xperia XA2 Ultra and the Xperia L2. Here's hoping that other Android OEMs follow in its footsteps -- at least where the January Android security bulletin and Spectre and Meltdown are concerned.