Vendor security patches on a CMF Phone 1