Nexus owners are about to get a surprise OTA update, but it's not Android 5.0 Lemon Drop Sunshine. It's another build of KitKat, specifically 4.4.4 with build number KTU84P (branch kitkat-mr2.1-release). Sprint has posted the Nexus 5 changelog on its community forums, and it's apparently a security fix.


Our first suspicion was Towelroot, but it looks like 4.4.4 is mainly fixing something else. According to a Googler, the security fix in question is related to CVE-2014-0224, which is an OpenSSL bug allowing a man-in-the-middle attack. It's actually a fairly serious bug, and distinct from Heartbleed (fixed in 4.4.3). There are other tweaks, but we'll have to wait and see what the official word is. An AOSP push should show up soon and we can see what was addressed. Update: We've confirmed Towelroot is not affected by 4.4.4.


The Nexus 5 seems to be the only device with an OTA on the books, but 4.4.4 binaries and images for Nexus devices are already live on Google's site. You can expect the OTAs to begin flowing soon, or just flash the factory image (instructions on doing so) if you're impatient.

[Sprint, Nexus Images, Nexus Binaries]

Ryan Whitwam
Ryan is a tech/science writer, skeptic, lover of all things electronic, and Android fan. In his spare time he reads golden-age sci-fi and sleeps, but rarely at the same time. His wife tolerates him as few would.

He's the author of a sci-fi novel called The Crooked City, which is available on Amazon and Google Play. http://goo.gl/WQIXBM

  • Daniel Antón García

    LOL that was fast....

  • Sam Del Valle
    • Captain Canada

      I'm not sure why, this is Android Police. These guys are effing lunatics. All love.

      Edit: Oh. 4.4.4. Ofcourse you meant 4.4.4.

  • Sean Stone

    There's a new N5 radio included too http://goo.gl/LTpqjO

  • Blendi Krasniqi

    Can you imagine the guys at other OEMs that just started to work on 4.4.3 haha

    • http://www.standupforkids.org blackroseMD1

      Sucks for HTC, who already had 4.4.3 integrated with Sense 6.

      • http://www.androidpolice.com/ Cameron Summerson

        It really shouldn't be that difficult for any manufacturer to incorporate .4 at this point.

        • http://www.standupforkids.org blackroseMD1

          Yeah, just noticed that it was a very small update. Good news for manufacturers and end users.

    • Thomas’

      4.4.4 is a really small update (~3mb), this should be an easy merge. Also, updates of size don't need carrier approval.

      • Peter

        how do you know its only 3mb? do you have ota link?

        • Thomas’

          I received it today in the morning.

          • Simon Belmont

            Wow. Guess it's already rolling out to a select few.

            Hopefully it rolls out quick, since it's such a small update. Thanks for the information.

          • Tdcmystere

            I just receive Ota update in belgium, 2, 5 me. And Yes, no need career approuval for updates of this size

      • joser116

        How do you know it doesn't need carrier approval?

    • jamaall

      Like Motorola who delayed their droid update and is moving straight the "the latest" 4.4.3

  • rmkilc

    My Nexus 7 LTE is now TWO versions behind!!!

    • Evan Anderson

      Blame Verizon

      • rmkilc

        Yep. Verizon shouldn't be messing with a device using open GSM/LTE standards.

        • Gonza

          What's the thing with Verizon? I have the N7 with Tmobile and haven't received the update either. And the factory images aren't posted. I understand it's the same device, and not CDMA capable. So why would Verizon have anything to do with this?

          • Evan Anderson

            Google worked with Verizon to support their LTE on deb (Nexus 7 LTE). Verizon is more than likely holding up the update with whatever they're doing to approve it. Google can't target the OTA to non-verizon users, so everyone has to wait. CDMA is irrelevant, it's an LTE only device.

          • Gonza

            That's what i meant...being LTE only (and not CDMA) it has nothing specific that Verizon would need to approve , that the other carriers don't. It's the same for all of them. Well then I guess Verizon think they should be special..go figure... Thanks man

          • ekerazha

            I can buy a Nexus 7 LTE from the italian Play Store, I don't even know what "Verizon" is. LTE is a standard.

          • Ian M

            Google does have the ability to target users not on Verizon by the Sim card, same way they did before when only Verizon users got the KVT49L update. Look at the last entry on google's factory image page. It can't be Verizon.

          • Evan Anderson

            Incorrect, all deb owners received that ota. It is labeled as Verizon on the factory images page to avoid confusion since it didn't increase the version number.

          • Ian M

            I don't want to be rude but that just isn't right. Here is a screenshot of the nexus 7 ota URL thread where oldblue910 specificly says there will be 2 updates, one for deb users on KOT49H and one for Verizon users on KVT49L. I don't know what the holdup is, but it just can't be Verizon.

          • Evan Anderson


            All devices got the OTA. It included a new radio as well as miscellaneous bug fixes. Once again it was labeled Verizon to avoid confusion and because that build was the one that Verizon shipped with.

          • Ian M

            They do have the ability to control which devices get it by Sim card

          • Guest

            Sorry, forgot the screenshot.

          • Zanthamos

            It cannot be an LTE only device as LTE only supports data right now and not voice. When you make a voice call it rolls back to CDMA which is why Verizon and Sprint cannot do both voice and data at the same time. CDMA does not support both at the same time like GSM does. Eventually when LTE supports voice all networks will be able to support both voice and data at the same time.

          • Evan Anderson

            It's a tablet, it doesn't need voice. The nexus 7 does not support CDMA. Furthermore, Verizon does support SvLTE on their devices. SvLTE/SVDO is dependent on the device antenna configuration.

      • Danny Holyoake

        Verizon has literally nothing to do with this. Blame whoever makes the blobs for the radios inside the N7 Mobile. If it was just Verizon, Google would have put the factory images up on the site for the millions of people not on Verizon. They didn't, meaning the update is being delayed for another reason.

        • Evan Anderson

          They can't put up the factory images because Verizon doesn't want them to release anything until they're done approvingthe update. The binaries are certainly not the holdup because every other device has Qualcomm radios and they were all updated. In addition, flo received the update and it's hardware is identical with the exception of the mobile radio.

    • Kevin Kuo

      Flash a custom rom.

      • rmkilc

        That's not the point.

        • Kevin Kuo

          I know, but that'll solve the problem. I learned that getting updates from the carrier is a bad idea.

          • rmkilc

            We are talking about a Nexus device. The updates come from Google. Google advertised it as Verizon capable (it has the proper LTE band), and then Verizon insists on getting their dirty hands involved. Google needs to kick Verizon to the curb. No other carriers do this. This tablet does not have any of Verizon's proprietary CDMA capabilities.

          • Kevin Kuo

            I know you are. I flashed 4.0.0 toro as soon as I got my Gnex. Carriers do nothing but mess up Nexus updates.

          • grumpyfuzz

            why not take advantage of the fact you own a nexus device? it's so easy to flash a custom rom and be on the latest version, same thing happened for the vzw gnex.

          • rmkilc

            A custom ROM will only have the binaries and radios from the most recent build from Google. 4.4.2.

            This is not the same as the Verizon Galaxy Nexus debacle. The Verizon Galaxy Nexus was hardware specific to Verizon, and had Verizon's proprietary CDMA technology. The Nexus 7 LTE on the other hand, is a universal GSM/LTE device. From a technological standpoint, there is no reason at all for Verizon to be involved.

          • grumpyfuzz

            I agree with you on verizon being involved. And I know the custom rom will still have the radios and binaries from 4.4.2, but it will still be the updated android version, which was my point.

      • Fatal1ty_93_RUS

        Make one then, let's see how you can do it without sources because 4.4.3 and 4.4.4 do not exist for this tablet

        • Churchill

          Well, buy another then

        • Kevin Kuo

          Here you go.

          4.4.4 coming soon

          See? A Google search wasn't that bad.

          • rmkilc

            That is going to have 4.4.2 baseband etc etc.

          • Fatal1ty_93_RUS

            Oh... I guess now I'm an idiot aren't I

  • Ronnie

    People start to demand for 4.4.4 custom roms in 3...2...1...

    • http://nopenopenope.nope Ryuuie

      Fuck that.

      6.01 custom ROMs. NOW! >:(

      • http://www.about.me/kendallseabury Kendall Seabury

        No love for 6.6.6?

        • Kevin Kuo

          Nah. 13.13.13

          • Zyre


          • Jeanne William


            ✒✒✒ �✒✒✒ ✒✒✒ ✒✒✒ ✒�✒✒

          • truth

            Do people ever actually fall for this crap anymore?

          • Kevin Kuo

            Hey. Your account got hacked.

        • http://twitter.com/yo2boy_ yo2boy


      • http://www.standupforkids.org blackroseMD1

        This is the internet. You misspelled "nao!"

    • Crispin Swickard

      According to a tweet from CM they already added the SSL fixes as of the June 6th build. They might bump the version number, but as far as what this update addresses they have already done so.

    • BigTimmay

      Still waiting for lollipop for my droid x O_o

    • Serge Cebrian

      3 2 1.. 4.4.4 custom rom for my nexus 7 lte

  • Ali

    pressing the "check now" button like crazy :P

    • Kevin Kuo

      Press HARDER!!!

      • Ian Santopietro


    • Simon Belmont

      I'm guessing this one will be pushed out pretty fast. It's a security update.

      Also, it's only 3MB in size, apparently. A teeny tiny update to finish off KitKat.

  • Churchill

    Im not updating

    • http://www.standupforkids.org blackroseMD1

      I like burritos.

      • Brick

        I love lamp

        • http://www.standupforkids.org blackroseMD1

          But how do you feel about desk?

  • Cesar

    Why does the Verizon Moto X not have the update yet???!!! CURSE YOU, LENOVO!!!

    • jonathan3579

      Irrelevant post is irrelevant.

      • Greyhame

        Brought to you by the Department of Redundancy Department.

        • jonathan3579

          Looks like we're both guilty here, friend.

  • lololo


    • dgsfdgdrfgd


      • olololo

        Indeed it is. Must be voted.

  • Nuno Guerreiro

    There's a new radio, this has more than a simple security fix.. I hope they also addressed the LTE problem (95% of the time only 3G) on N5...

    • Simon Belmont

      FWIW, my Nexus 5 has experienced the data drop issue a lot less since Android 4.4.3. But, it does still happen once in a while.

      I also noticed better signal strength on Android 4.4.3. But, your mileage may vary.

      • Ian Santopietro

        Is the Data Drop problem where it drops all data connectivity and asks you to reboot because it thinks the SIM was removed?

        • Rudy Ballesteros

          I had that issue too. It happened right after I updated to 4.4.3

        • Simon Belmont

          No. At least not for me.

          It's when it shows that it's connected to LTE (and I have signal bars), but there's no throughput. I have to toggle airplane mode on and off to get it back.

  • heat361

    Lmao at Lemon Drop Sunshin😂

  • Evan Anderson
  • Fatal1ty_93_RUS

    Bwahahaha, somehow I knew Google would end the 4.4 releases with a 4.4.4 build lol

    Oh, and I even see all the actual devices already have their respective factory images available there... Except for Nexus 7.??

    No, not the 2012 model, it's the 2013 one...specifically an LTE variant....


  • James Alexander

    I hope this also has something to do with Wideband LTE! at least the radio.

  • Simon Belmont

    Whoa. Totally unexpected.

    Here I thought it was them getting a jump on I/O. Hahaha.

  • RadarJammer

    I honestly expected from the start of 4.4 KitKat that at the end the final digit will be a .4, too. Everything else would not fit the 4-bar image of the original product.

  • Chad McKenzie

    Baseband is different on 4.4.4. My Nexus 5 has

    • Simon Belmont

      Yeah. Maybe this will fix the data drop outs once and for all.

      Android 4.4.3 minimized them, but didn't completely eliminate them. I'd love to see that bug squashed.

      • Evan Anderson

        The radio sure doesn't fix it as I'm using it now. It's possible it could be fixed by the blobs update, but I'm not getting my hopes up.

    • Candido

      That is the baseband in 4.4.3. I think you meant to say that 4.4.4 packs

      • Chad McKenzie

        Yes it is, and that's because I'm still on 4.4.3. Check the screenshot in the article and you'll see a different baseband with 4.4.4.

  • http://turbofool.com Jarrett Lennon Kaufman

    Wonder if this fixes all the issues I've been been having since 4.4.3. I read all these complaints that users on 4.4.2 were having random restarts, constant Bluetooth disconnects, and slow Bluetooth audio control responsiveness. I had none of these issues... until 4.4.3, which was believed to fix them all. Now I'm having them to an excessive degree.

    • Simon Belmont

      The biggest complaint I've had with Android 4.4.3, on my Nexus 5, has been really inconsistent battery life. I can have a night where it drains 2-3% and the next night it'll be 15-20% for no particular reason.

      I've checked around and I'm not the only one. A reboot seems to (temporarily) cure the issue for a day or two. It's weird because it's not showing up as a wakelock either. It's just phantom battery drain.

      • andre

        The moto g has a bug like that since at least 4.4 and it only shows up after GPS usage and is only fixable with a reboot. Probably not related to your, but the symptoms are the same. No wakelocks, nothing... Just the accelerated drain.

        • Simon Belmont

          Ha! I was actually in a Moto G thread at XDA yesterday reading up on that bug because it sounded so similar.

          I think it may be related to GPS, too, but I can't prove it yet. I wouldn't be surprised if they are similar problems!

      • duse

        I've experienced this as well, even before 4.4.3. The N5 has always had inconsistent battery life or some driver issues it seems. I probably won't actually miss Nexus all too much...great price but quality is such a crapshoot.

        • Simon Belmont

          Yeah. My N5 would have CONSISTENTLY good battery life, IF I rebooted it every time I took it off the charger, prior to Android 4.4.3.

          After Android 4.4.3, it doesn't matter what I do. The battery life will be all over the place, and a reboot (doesn't matter if it's after taking it off the charger or anything anymore), is only a temporary fix now. Either way, it's annoying. Something I hope is solved in Android 4.5 or 5.0 or whatever shows up next week.

          • duse

            Yeah, but that's the problem isn't it. Each new version we never know what new thing will break. Even having to reboot it every day prior to 4.4.3 like you said is ridiculous.

          • Simon Belmont

            I agree. It's annoying and it shouldn't be how it works.

            This kind of stuff should be fixed before it ships to end users. I love my Nexus 5, but sometimes I wish Google would try harder with the software quality assurance. I think they put too much onto their plate and it hurts the ability to turn out a completely reliable product sometimes. These issues aren't deal breakers for me because my N5 is still a great daily driver, but they certainly are irksome after a while.

          • duse

            I agree, the N5 has overall been a good phone especially for the price, but Google does need to improve their QA. Sometimes these problems are more than just irksome and really cause a lot of frustration and waste your time.

  • dontsh00tmesanta

    HTC one m8 gpe in 4 days

  • MG

    New Nexus5 radio for sure. Only a few revision points... but it's different

  • James Alexander
  • Nicolas S.

    This had to be posted:


    • the best

      lol at your clock....

    • krazyfrog

      Check again at 4:44.

  • redsmith

    5.0 Lemon Drop Sunshine confirmed.

  • Stanley C.
  • David Dudovitz

    I didn't believe Lemon Drop Sunshine was a real food product. I was wrong.

  • Rúben Silva

    Nexus 4 4.4.3 to 4.4.4 when?

  • gonza

    Why aren't we getting the factory image or OTAs for the Nexus 7 2013 LTE ? Not even 4.4.3. Anybody knows? Thanks

  • Guest
  • http://Ryan.Morash.me Ryan Morash

    This update got rid of TWRP on my Nexus 5.

  • Daldain
    • Simon Belmont

      Thanks. Just updated my N5. ;)

      Wow. Second time in two weeks I've done that. :)

  • NickFe
  • hp420

    Oh come on!!! I literally haven't even had 4.4.3 for 12 hours yet...I just found time to flash the factory image this afternoon!!! Quick updates are great, but damn, Google....give a guy a break!! lol

  • Andrew Dodd

    I'm kind of surprised they patched CCS Injection but not futex memory corruption (towelroot).

    The actual impact of CCS injection is pretty low - it requires an attacker to insert themselves fully into the TCP stream between you and the server (sniffing alone or out-of-band packet injection isn't enough), and, more importantly, it requires BOTH the client and server to be vulnerable - and nearly all servers are patched already. (It's easier to patch servers than clients in most cases...) (As an FYI, this bug has existed for 15 years on the client side, but was unexploitable until an unrelated server bug fix unmasked this bug on the server side.)

    More info: https://www.imperialviolet.org/2014/06/05/earlyccs.html

    Meanwhile, futex memory corruption (towelroot) allows any malicious app to gain root access to your device.

  • Serge Cebrian

    buhh my nexus 5 got 2 updates and my N7 Lte got Zero ...
    my tablet feels forgotten :P

    • Fatal1ty_93_RUS

      you're not alone on this

  • osm0sis
  • Steph Horvath

    Got it ota earlier today.

    • Larizard

      Did the OTA break your root?

      • Steph Horvath

        I don't root. Don't feel the need with pure android. I have NEVER had any problem with this phone.

  • Rohit Sharma

    How to get update of KitKat 4.4.4 automatically without booting. I am using Nexus 5. Please help if anyone knows how to get this fixed

  • Rohit Sharma

    How to get update of KitKat 4.4.4 automatically without booting. I am using Nexus 5