diff options
| author | Daniel Micay <daniel.micay@grapheneos.org> | 2025-04-08 22:06:59 -0400 |
|---|---|---|
| committer | Daniel Micay <daniel.micay@grapheneos.org> | 2025-04-08 22:08:03 -0400 |
| commit | 1acf8e02890f498b425a39d593dc0fd0c7315246 (patch) | |
| tree | 316480aeeab346cbb55a3999dece7f5684177f88 | |
| parent | ea5e7bdee37167cca0cf3765379be506b112467b (diff) | |
fix upstream RecoverySystem.verifyPackage(...) vulnerability
| -rw-r--r-- | static/releases.html | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/static/releases.html b/static/releases.html index 42730d62..c2fe6522 100644 --- a/static/releases.html +++ b/static/releases.html @@ -576,6 +576,7 @@ <p>Changes since the 2025040700 release:</p> <ul> + <li>fix upstream RecoverySystem.verifyPackage(...) vulnerability (this was not directly exploitable due to there being 2 layers of update package signature verification and downgrade protection, but the first layer of protection should work properly to avoid a vulnerability in the 2nd layer being exploited)</li> <li>Vanadium: update to <a href="https://github.com/GrapheneOS/Vanadium/releases/tag/135.0.7049.79.0">version 135.0.7049.79.0</a></li> </ul> </article> |