HOW TO: Install Android Monthly Security Updates
Here are a few easy steps to safely install the latest Android security updates on your Nexus device. As you may know, OTA updates only work on a completely stock system. Use this method if you are rooted or using a custom recovery or kernel such as ElementalX. This method shouldn’t take more than ten minutes and goes very quickly once you get used to it.
With this method, you keep all your data and apps. If you are unencrypted, you will stay unencrypted.
- Get the factory image for your device:
https://developers.google.com/android/nexus/images - Open the zip and extract boot.img and system.img. If there is a vendor.img, extract that too.
- Reboot to bootloader
- Go to the folder where you extracted the images and flash them with the fastboot command:
fastboot flash boot boot.img
fastboot flash system system.img
And if your device has a vendor.img:
fastboot flash vendor vendor.img
- Reboot to recovery (this is very important if your data partition is unencrypted on newer devices)
- Flash the latest SuperSU (found here)
- Flash ElementalX
- Reboot to your security-patched Android!
Hi flar2, thanks for the writeup!
After step 5 I get into a TWRP that won’t let me install anything. It asks for a password.
I ran into the same problem, I figured out that you can adb sideload the zips through twrp.
what about bootloader and radio? should we not flash those images?
Usually with security patches, the radio and boot-loader are the same as before, so to answer your question no, you don’t need to flash the boat-loader and radio, just the things he mentioned.
My patch is still from april 2. I did something wrong. Can you help me?
Extracted files, boot, system and vendor placed in the (hidden) folder androidsdk/platformtools. 6p connected to laptop. Then adb reboot bootloader. Flash everything separately with no errors. 6p still connected laptop. Choose recovery on phone. Couldnt adb boot recovery. In TWRP first flashed SuperSu and ElementalX. No error. Disconnected from laptop and then reboot.
USB debugging on.
USB use for charge. Or should it be MTP?
Might want to add a note that this won’t work with custom ROMs.