diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2022-10-25 05:06:03 -0400 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2022-10-25 05:06:03 -0400 |
| commit | f5fc28dd6b7e6ecd82fcbb9f577e7263c4c0d0cf (patch) | |
| tree | a36a3de173b4814b3032f7f3c8485a0e2d7ce412 | |
| parent | 53683e13829970880f6035a704133295d883e919 (diff) | |
specific details on LTS status for current devices
| -rw-r--r-- | static/features.html | 20 |
1 files changed, 14 insertions, 6 deletions
diff --git a/static/features.html b/static/features.html index 6e9b4081..b28cdf99 100644 --- a/static/features.html +++ b/static/features.html @@ -383,12 +383,20 @@ <section id="more-complete-patching"> <h3><a href="#more-complete-patching">More complete patching</a></h3> - <p>GrapheneOS includes fixes for many vulnerabilities not yet fixed in - Android. On modern devices with Generic Kernel Image (GKI) support, we - update the kernel to the latest stable GKI release many months before the stock OS - gets the update. This means we're shipping hundreds of fixes not included in - the stock OS including many security fixes. We also backport more fixes on top - of this for the kernel and for other components too.</p> + <p>GrapheneOS includes fixes for a large number of vulnerabilities not yet + fixed in Android.</p> + + <p>We're able to quickly and safely ship the latest Linux kernel LTS point + releases on devices with GKI (Generic Kernel Image) support including the 6th + and 7th generation Pixel phones. At the time of writing on 2022-10-25, + GrapheneOS is using the latest Linux 5.10 LTS release (5.10.149) from + 2022-10-17 for 6th and 7th generation Pixel phones. The stock Pixel OS is on + Linux 5.10.107 from 2022-03-19 with a small number of patches from between the + 2022-03-19 and 2022-08-01 backported. This means GrapheneOS provides hundreds + of relevant kernel patches including many security patches not yet included in + the stock OS. It's possible for us to stay several months ahead due to their + approach of moving to new LTS releases only in quarterly releases after a long + freeze and testing process.</p> <p>We often find new vulnerabilities ourselves and report them upstream. We've reported dozens of vulnerabilities for both the generic Android codebase and |