final [GrapheneOS] 📱👁️🗨️ on Nostr: GM! ⭐ New #GrapheneOS release v2024020500 with the latest security update, ...
GM! ⭐ New #GrapheneOS release v2024020500 with the latest security update, additional early security fixes, security enhancements for the kernel and quality of life improvements.
See the changes:
- full 2024-02-01 security patch level
- full 2024-02-05 security patch level
- rebased onto UQ1A.240205.004 Android Open Source Project release
- run full explicit GC in SystemUI and system_server after locking (this is already done after unlocking to purge data tied to the lock method and derived data, but it makes sense to do it after locking too)
- kernel (Pixel 4a (5G), Pixel 5, Pixel 5a): update to latest Android 14 QPR2 Beta release including additional security fixes
- kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Generic 5.10): update to latest GKI LTS branch revision including update to 5.10.209
- kernel (Pixel 8, Pixel 8 Pro, Generic 5.15): update to latest GKI LTS branch revision including update to 5.15.148
- kernel (Pixel 8, Pixel 8 Pro, Generic 5.15, Generic 6.1): enable both software Shadow Call Stack (SCS) and Pointer Authentication Code (PAC) protection for kernel return addresses instead of only using SCS when PAC is unavailable
- kernel (Pixel 8, Pixel 8 Pro, Generic 5.15, Generic 6.1): enable Branch Target Identification (BTI) protection for the kernel in addition to Clang type-based CFI to provide coarse-grained CFI coverage for calls excluded from CFI
- kernel (Generic 6.1): apply sysrq hardening changes
- kernel (Generic 6.1): update to latest GKI LTS branch revision including update to 6.1.74
- Settings: enable SIM deletion confirmation by default
- System Updater: clarify notification for already being up to date
- Messaging: update MMS configuration database based on Google Messages 20240123_01_RC02
- Dialer: update visual voicemail (VVM) configuration database based on Google Phone 121.0.603393336
- Vanadium: update to version 121.0.6167.143.1
- Camera: update to version 66
https://grapheneos.org/releases#2024020500
See the changes:
- full 2024-02-01 security patch level
- full 2024-02-05 security patch level
- rebased onto UQ1A.240205.004 Android Open Source Project release
- run full explicit GC in SystemUI and system_server after locking (this is already done after unlocking to purge data tied to the lock method and derived data, but it makes sense to do it after locking too)
- kernel (Pixel 4a (5G), Pixel 5, Pixel 5a): update to latest Android 14 QPR2 Beta release including additional security fixes
- kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Generic 5.10): update to latest GKI LTS branch revision including update to 5.10.209
- kernel (Pixel 8, Pixel 8 Pro, Generic 5.15): update to latest GKI LTS branch revision including update to 5.15.148
- kernel (Pixel 8, Pixel 8 Pro, Generic 5.15, Generic 6.1): enable both software Shadow Call Stack (SCS) and Pointer Authentication Code (PAC) protection for kernel return addresses instead of only using SCS when PAC is unavailable
- kernel (Pixel 8, Pixel 8 Pro, Generic 5.15, Generic 6.1): enable Branch Target Identification (BTI) protection for the kernel in addition to Clang type-based CFI to provide coarse-grained CFI coverage for calls excluded from CFI
- kernel (Generic 6.1): apply sysrq hardening changes
- kernel (Generic 6.1): update to latest GKI LTS branch revision including update to 6.1.74
- Settings: enable SIM deletion confirmation by default
- System Updater: clarify notification for already being up to date
- Messaging: update MMS configuration database based on Google Messages 20240123_01_RC02
- Dialer: update visual voicemail (VVM) configuration database based on Google Phone 121.0.603393336
- Vanadium: update to version 121.0.6167.143.1
- Camera: update to version 66
https://grapheneos.org/releases#2024020500