pull down to refresh

This release contains the latest security update, additional early security fixes, security enhancements for the kernel and quality of life improvements.

See the changes:

  • full 2024-02-01 security patch level
  • full 2024-02-05 security patch level
  • rebased onto UQ1A.240205.004 Android Open Source Project release
  • run full explicit GC in SystemUI and system_server after locking (this is already done after unlocking to purge data tied to the lock method and derived data, but it makes sense to do it after locking too)
  • kernel (Pixel 4a (5G), Pixel 5, Pixel 5a): update to latest Android 14 QPR2 Beta release including additional security fixes
  • kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Generic 5.10): update to latest GKI LTS branch revision including update to 5.10.209
  • kernel (Pixel 8, Pixel 8 Pro, Generic 5.15): update to latest GKI LTS branch revision including update to 5.15.148
  • kernel (Pixel 8, Pixel 8 Pro, Generic 5.15, Generic 6.1): enable both software Shadow Call Stack (SCS) and Pointer Authentication Code (PAC) protection for kernel return addresses instead of only using SCS when PAC is unavailable
  • kernel (Pixel 8, Pixel 8 Pro, Generic 5.15, Generic 6.1): enable Branch Target Identification (BTI) protection for the kernel in addition to Clang type-based CFI to provide coarse-grained CFI coverage for calls excluded from CFI
  • kernel (Generic 6.1): apply sysrq hardening changes
  • kernel (Generic 6.1): update to latest GKI LTS branch revision including update to 6.1.74
  • Settings: enable SIM deletion confirmation by default
  • System Updater: clarify notification for already being up to date
  • Messaging: update MMS configuration database based on Google Messages 20240123_01_RC02
  • Dialer: update visual voicemail (VVM) configuration database based on Google Phone 121.0.603393336
  • Vanadium: update to version 121.0.6167.143.1
  • Camera: update to version 66

Donations help support the GrapheneOS Project. Click here for more info.

Go update your Graphene OS as the race to be private and secure isn't easy and will be possible one patch at a time

reply