summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDaniel Micay <daniel.micay@grapheneos.org>2025-05-31 18:55:08 -0400
committerDaniel Micay <daniel.micay@grapheneos.org>2025-05-31 19:10:01 -0400
commit77587333e2d91287f1191e4fa086cbd2836f79bc (patch)
tree95ccb3bff7b65e463f946b02af069ebd59386503
parentffb07a1c9ac1774cca1fed795f14b02a36af62c9 (diff)
expand our existing protection against CVE-2024-50089
-rw-r--r--static/releases.html1
1 files changed, 1 insertions, 0 deletions
diff --git a/static/releases.html b/static/releases.html
index 587113ec..a2da41d9 100644
--- a/static/releases.html
+++ b/static/releases.html
@@ -588,6 +588,7 @@
<p>Changes since the 2025052800 release:</p>
<ul>
+ <li>Media Provider: expand our existing protection against CVE-2024-50089 which was rejected for the Linux kernel and still not fixed for Android in userspace (we added generic hardening in 2022 as a prerequisite for Storage Scopes which along with fixing information leaks blocked exploiting this issue for the common cases of not granting permissions, granting media permissions or using our Storage Scopes feature but we didn't fully cover "All files access" or the legacy API level equivalent)</li>
<li>kernel (6.6): update to latest GKI LTS branch revision including update to 6.6.92</li>
<li>Messaging: update to <a href="https://github.com/GrapheneOS/Messaging/releases/tag/8">version 8</a></li>
</ul>