Google said to mandate security updates for two years for popular phones in new Android contract

Google, every month releases security patches for Android and this becomes tedious for carriers and manufacturers to get them installed on actual phones. However, that might soon change. According to confidential contracts, many manufacturers now have explicit obligations to keep their phones updated written into their contract with Google. The contract requires Android device makers to regularly install updates for any popular phone or tablet for at least two years. Google’s contract with Android partners stipulates that they must provide “at least four security updates” within one year of the phone’s launch. While the security updates are mandatory in the second year as well, there is no specific count to the number of releases. David Kleidermacher, Google’s head of Android security, referred to these terms earlier this year during Google I/O. He further said that Google has added provision into the agreements with partners to roll out regular security updates. These terms cover any device launched after January 31st, 2018 that’s been activated by more than 100,000 users. Starting July 31st, the patching requirements were applied to 75 percent of a manufacturer’s “security mandatory models.” Starting on January 31st, 2019, Google will require that all security mandatory devices receive these updates. Android manufacturers need to patch the flaws ...