Google has this morning released their monthly security update for Android as well as releasing Factory Images and OTA updates for Nexus devices.
The release this month comes in two parts with a July 1st and July 5th level security releases. The 1st of July bulletin includes 2 critical, 11 high and 9 moderate vulnerabilities listed by their Common Vulnerability and Exposures ID (CVE), while the 5th of July bulletin includes 7 critical, 18 high and 7 moderate vulnerabilities. You can of course get a complete run down on the vulnerabilities this month on the Android Security Bulletin site.
Regarding which of the two updates you will receive, it’s up to the manufacturer (Nexus will of course get the July 5th patch). But it seems the July 1st update is a little more important. Google says of the updates:
Devices that use the security patch level of July 5, 2016 or newer must include all applicable patches in this (and previous) security bulletins.
Devices that use the July 1, 2016 security patch level must include all issues associated with that security patch level, as well as fixes for all issues reported in previous security bulletins. Devices that use July 1, 2016 security patch level may also include a subset of fixes associated with the July 5, 2016 security patch level.
As per usual, Google is quick off the mark posting the factory images for Nexus devices still supported – but the Pixel C factory image has not yet appeared.
The Nexus 7 2013 3G & WiFi models, Nexus 9 LTE & WiFi models, Nexus Player and Nexus 5 have build MOB30P available to download while the Nexus 5X gets MTC19Z and the 6P gets MTC19X. The Nexus 6 gets two builds this month with MMB30K and MOB30O now available to download.
OTA updates are available for all the Nexus devices and the Pixel C will get its OTA link once the factory image is added.
All the updates will be pushed to your Nexus in the coming week so you could flash the updates, or just wait for Google to deliver them to you.