diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2022-12-27 09:45:56 -0500 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2022-12-27 09:45:56 -0500 |
| commit | 92e686b15a845cb919465e9a69e644b56928e6d8 (patch) | |
| tree | 5702e2e3a14379e0ccf60917b4b79ac978ede63c | |
| parent | 4176525a54aadb588d435566f7d1e3491992efd1 (diff) | |
system package update security improvements
| -rw-r--r-- | static/releases.html | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/static/releases.html b/static/releases.html index a9b44b23..71768f72 100644 --- a/static/releases.html +++ b/static/releases.html @@ -663,6 +663,8 @@ <ul> <li>fix upstream Android 13 QPR1 recent apps list bug mainly triggered after user profile switches</li> <li>kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Generic 5.10): update to latest GKI LTS branch revision which provides a proper fix for a backport mistake we discovered and reported</li> + <li>block updating system packages to versions with the same versionCode since system packages without releases outside the OS rarely have their versionCode increased when changes are made and therefore it makes it possible to downgrade them which is a security weakness in Android's approach</li> + <li>prefer package from OS image over equal version packages installed as an update to improve security by dropping potentially downgraded packages particularly for the verified boot security model, with the bonus of saving disk space by dropping out-of-band updates installed from our app repository once they're redundant</li> <li>TalkBack (screen reader): update base code to 13</li> <li>TalkBack (screen reader): update dependencies</li> </ul> |