Every month the Google security team releases a batch of new patches for Android and every month manufacturers and operators to a greater or lesser extent successfully trying to release these updates on a target device.
This is a difficult and old problem. In the hands of the journalists of The Verge got confidential contracts, which require many producers to support on smartphones to date.
The obligation to regularly update smartphones and tablets based on Android for at least two years are hardcoded in the new contract with Google. Contract manufacturer shall, within one year since the launch of the smartphone to release at least four security updates. In the second year of updates is required, but their number is not spelled out in the contract.
These conditions apply to any products manufactured after January 31, 2018 and activated more than 100 thousand users. From July 31 to these requirements must meet 75% of the models of the manufacturer, as from 31 January 2019 — all devices that match the conditions.
At the end of each month the device must be protected from all vulnerabilities discovered over 90 days ago. That is, even without clear figures on the number of updates in the contract, smartphones should be updated regularly. The new model also needs to be protected.
All of these changes relate to smartphones for the European Union in the framework of the new licensing terms presented not so long ago Google in connection with the fine of 4.3 billion euros, which was imposed on Google by the European Commission in July 2018.