[6/6T as well] OnePlus 5/5T April security patch rolling out via latest Open Beta update

New updates are being added at the bottom of this story…….

Back in March, OnePlus rolled out two set of Open Beta builds for OnePlus 5/5T and OnePlus 6/6T. The first one brought March Security patch update along with along with a set of under the hood changes.

oneplus_5_5t_march_open_beta_ota_changelog
OnePlus 5/5T March First Open Beta Changelog

With the second wave of Open Beta builds, the Chinese OEM updated plethora of stock applications – such as the Gallery, Launcher, OnePlus Switch and more.

oneplus_6_open_beta_15_ota_changelog
OnePlus 6/6T March Second Open Beta Changelog

Meanwhile, OnePlus 3/3T users are still waiting for the public beta/stable of the Android 9.0 Pie update. The team has recently started a bug bash round in China, although no ETA of the next update has been given.

oneplus_3_pie_h2os_error_log
OnePlus 3/3T Pie update bug bash announcement

Prominent OnePlus community member Funk Wizard yesterday gave us some hints about upcoming Open Beta updates for OnePlus 6/6T.

New Beta should be rolling soon

Stay tuned

Thanks to their bi-monthly security patch distribution model, OnePlus skipped February patches altogether and directly jumped from January to March security patch level.

Following the same pattern, we expect that the Shenzhen based OEM will probably roll out a generic beta build with older patch level.

In a surprise turn of events, OnePlus has started the distribution of the new beta builds few hours ago and the builds are bundled with April security patches!

oneplus_5_5t_april_first_open_beta_ota_changelog
Changelog for OnePlus 5/5T along with incremental OTA

The changelog for the latest Open Beta 30 (OnePlus 5) and Open Beta 28 (OnePlus 5T) are as follows:

System

– Updated Android security patch to 2019.04

– Improved network speed display

– Supported shortcuts to access corresponding interfaces in Quick Settings

Quick reply in landscape

– Supported quick reply in the notification bar

Launcher

– Added tutorial in shelf

– Added Parking location feature

– Improved page Indicator to mirror Icon pack

On the other hand, OnePlus 6 (Open Beta 16) and 6T (Open Beta 8) updates are not up yet, but we expect that OnePlus will push the red button for them as soon as possible.

The official announcement threads for the updates are now partially live – the first one for OnePlus 5/5T was originally made by Manu J. yesterday. It became live merely hours ago.

oneplus_5_5t_april_first_open_beta_ota_forum

The OnePlus 6 and 6T thread is not visible right now. Judging from the previous incidents, once the first wave of OTA update zips starting to reach the phones, the thread will be unhidden.

Our collaboration with Oxygen Updater helps us to grab the download links of the full update zips as well. Without further ado, here are they:

  • Open Beta 30 for OnePlus 5: Download (MD5: ddf7688bfda0a48a863cb660a453c29e)
  • Open Beta 28 for OnePlus 5T: Download (MD5: ea6f45b93dc737cfab1a077213c5bbc0)
  • Open Beta 16 for OnePlus 6: Download (MD5: 95c7dffff9eca1fe3ced3099b6a0d569)
  • Open Beta 8 for OnePlus 6T: Download (MD5: 4bd36ba7e8f882dc99e7b2dbe34b33fd)

The full zips weight about ~1.6-1.8 GB, so you may prefer not to download them over mobile data. OnePlus also provides smaller incremental OTA zips, but we prefer not to share them for the sake of clarity.

Referring to the changelog, we did see the references of the Parking location feature of the OnePlus Launcher before. This Google Maps-esque functionality is now integrated with the stock OOS launcher.

oneplus_launcher_parking_location

It’s nice to see OnePlus bringing innovative features via the beta channel. However, it would be better to deliver the app updates (even beta) via Google Play to reduce the overhead.

Manu also mentioned the integration between the Feedback tool and the Community app:

We have integrated the Feedback tool into Community App and you can report bugs and share Logs directly to our bug hunters via the Community App.

As a matter of fact, this change was already announced with the beta release of the Community app. It will eventually make its way to the stable channel.

To get your hands on this function, on top of upgrading to Community App 2.4.0, the log-tool integrated into the system is also required. The integrated log-tool only exists in the latest open beta for 5/5T & 6/6T for now. It will also be available in next round of officially stable OTAs.

(Source)

OnePlus is reportedly shipping a new privacy policy with this update:

oneplus_privacy_policy_update_april_open_beta

FYI, the April security patches fix a number of security vulnerabilities, including a very critical media framework related issue.

The most severe of these issues is a critical security vulnerability in the media framework that could enable a remote attacker using a specially crafted file to execute arbitrary code within the context of a privileged process.

The severity assessment is based on the effect that exploiting the vulnerability would possibly have on an affected device, assuming the platform and service mitigations are turned off for development purposes or if successfully bypassed.

Do you prefer to run Open Beta variant of OxygenOS for faster updates? Let us know.

Update 1 (April 16)

OnePlus 6 and 6T users are now getting the Open Beta 16 and Open Beta 8 updates respectively. The changelogs are exactly same as that of OnePlus 5/5T.

oneplus_6_open_beta_16_ota

The announcement thread has been made unhidden as well.

Update 2 (April 17)

OnePlus silently patched the security vulnerability related to GPS XTRA data downloading, which was discovered by Team PiunikaWeb, in this Open Beta release. The current gps.conf looks like the following:

oneplus_gps.conf_april_2019
Click/Tap to zoom

For more details, see here.

PiunikaWeb is a unique initiative that mainly focuses on investigative journalism. This means we do a lot of hard work to come up with news stories that are either ‘exclusive,’ ‘breaking,’ or ‘curated’ in nature. Perhaps that’s the reason our work has been picked by the likes of Forbes, Foxnews, Gizmodo, TechCrunch, Engadget, The Verge, Macrumors, and more. Do take a tour of our website to get a feel of our work. And if you like what we do, stay connected with us on Twitter (@PiunikaWeb) and other social media channels to receive timely updates on stories we publish.

Want to work for PiunikaWeb and enjoy best-in-industry compensation & benefits? You'll be glad to know we're hiring experienced candidates.

Tags :

Kingshuk De

I came from a mixed background of Statistics and Computer Science. My research domains included embedded computer systems, mobile computing and delay tolerant networks in post-disaster scenarios. Apart from tinkering with gadgets or building hackintosh, I like to hop on various subreddits and forums like MyDigitalLife and XDA.