14 DAY TRIAL // BlackBerry has just announced that its own version of March security patch is going live for all compatible devices beginning this week. The update will be rolled out in stages to BlackBerry Priv, DTEK50 and DTEK60, but carrier-branded models are likely to receive it slightly later.
Since BlackBerry has already published the changelog for the March security update, we're now able to provide you with all the necessary details. At first glance, this seems like the most consistent security update released by BlackBerry until now, as it contains a bucket-load of fixes.
There are more than 70 vulnerabilities that have been addressed in this patch, some of them related to Qualcomm components.
The most important ones mentioned in the changelog refer to remote code execution vulnerabilities found in OpenSSL, BoringSSL, and Mediaserver.
According to BlackBerry, “a remote code execution vulnerability in OpenSSL and BoringSSL could enable an attacker using a specially crafted file to cause memory corruption during file and data processing” has been addressed in this patch.
Also, as mentioned earlier, the patch should also fix some “remote code execution vulnerabilities in mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing.”
Although the Canadian company claims the updated software version containing this patch is available immediately for BlackBerry powered by Android smartphones, which have been purchase from ShopBlackBerry, it might take a while until it propagates to all devices.
Also, the update may also be available from other retailers and carriers, dependent on their deployment schedules. If you own an Android-powered BlackBerry smartphone, you should check for the update by going to Settings / About phone.
The update has been tagged as “March 5, 2017,” so if you find that it's available, then you should go ahead and download it immediately.