Google has apparently patched this security hole server-side, so apparently no update will be required for any device.