diff options
| author | Daniel Micay <daniel.micay@grapheneos.org> | 2023-12-04 18:11:51 -0500 |
|---|---|---|
| committer | Daniel Micay <daniel.micay@grapheneos.org> | 2023-12-04 18:19:11 -0500 |
| commit | c275f417548206a854e72858aa42f9ddeedaf978 (patch) | |
| tree | 1fce8736efdc8ee2063222179b4e700d3f02c744 /static | |
| parent | df8d5428705ca6ca24b651d38a8cebf8394de5ef (diff) | |
early December security patch
Diffstat (limited to 'static')
| -rw-r--r-- | static/releases.html | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/static/releases.html b/static/releases.html index f7cabec0..155c7d61 100644 --- a/static/releases.html +++ b/static/releases.html @@ -705,6 +705,23 @@ <article id="2023112900"> <h3><a href="#2023112900">2023112900</a></h3> + <p>The December release of the Android Open Source Project and stock Pixel OS + will be the first quarterly release of Android 14. It will likely be available + this week, but hasn't been published yet. Since there hasn't been a release + yet this month, we're publishing an early December security update based on + the AOSP backports to Android 14.</p> + + <p>It's unclear if 6th/7th generation Pixels received a specific Mali GPU + kernel driver patch so we aren't raising the patch level for these until the + official December release is available. We often backport these patches early + but we don't know which patch corresponds to which CVE ID so we can't raise + the claimed patch level. ARM covers up the details publicly and only releases + tarballs for each major revision without the Git commit history or individual + security patch backports they make available to partners, despite partners + being allowed to apply those in public Git repositories. We can often figure + out the patch corresponding to a CVE ID or vice versa through ARM partners + publishing it, but we haven't been able to in this case.</p> + <p>Pixel 4, Pixel 4 XL and Pixel 4a are end-of-life and shouldn't be used anymore due to lack of most security patches for firmware and drivers. We're currently supporting them via a legacy Android 13 branch separate from these @@ -721,6 +738,7 @@ <p>Changes since the 2023112900 release:</p> <ul> + <li>full 2023-12-01 security patch level (6th/7th generation Pixels may be missing a 2023-11-05 Mali GPU patch so we've frozen the patch level string until the official December update)</li> <li>Pixel 8, Pixel 8 Pro: use more modern target CPU configuration</li> <li>System Updater: enable non-low battery requirement for the update job by default</li> <li>kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Generic 5.10): update to latest GKI LTS branch revision</li> |