This was just posted in the Google+ Project Fi group. Justine works for Google.
UPDATE: OTA rolling out to address Stagefright vulnerability
Hi folks,
An OTA will be available to address the Stagefright vulnerability that was surfaced last week, and you should receive this OTA in the next few days.
What is the Stagefright vulnerability?
This was a vulnerability identified in a laboratory setting on older Android devices, and as far as we know, no one has been affected. As soon as we were made aware of the vulnerability we took immediate action and sent a fix to our partners to protect users.
The roll out started Wednesday morning for Nexus 4, Nexus 5, Nexus 6, Nexus 7, Nexus 9, Nexus 10, and Nexus Player.
How is Project Fi affected?
We’re rolling out an OTA since Wednesday that should be available to you in the next few days, if you haven't received it already.
If you have a Nexus 6 through Project Fi, you’ll receive OTA LVY48E; all other Nexus 6s will receive OTA LMY48I.
Both OTAs have the same effect: it will provide you an important security update for Android to provide further safeguards to make your Nexus 6 more secure. This security update will affect everyone on Nexus 6, as well as older Android devices.
You’ll be able to download and install the OTA soon, and for those interested in more background, you can read more here: https://plus.google.com/+AdrianLudwig/posts/V9bestUnUNk.
Thanks all,
Justine
Project Fi Community Manager