diff options
| -rw-r--r-- | static/releases.html | 110 |
1 files changed, 55 insertions, 55 deletions
diff --git a/static/releases.html b/static/releases.html index 2fbd16e6..bd1740f9 100644 --- a/static/releases.html +++ b/static/releases.html @@ -143,12 +143,12 @@ <a>OTA update url loading...</a> </div> - <h2>Changelog</h2> + <h2>Changelog</h2> <p>List of tagged releases. Snapshot releases without tags such as early releases of the project and early device support releases are not listed.</p> - <h3 id="2019.05.07.00">2019.05.07.00</h3> + <h3 id="2019.05.07.00">2019.05.07.00</h3> <p>Tags:</p> <ul> @@ -156,62 +156,62 @@ <li><a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ3A.190505.002.2019.05.07.00">PQ3A.190505.002.2019.05.07.00</a> (Pixel 3, Pixel 3 XL)</li> </ul> - <p>Changes since the 2019.04.01.19 release:</p> + <p>Changes since the 2019.04.01.19 release:</p> - <ul> - <li>full 2019-05-01 security patch level</li> - <li>full 2019-05-05 security patch level</li> - <li>rebased onto PQ3A.190505.001/PQ3A.190505.002 releases</li> - <li>add Pixel and Pixel XL support including standard changes to kernel and device code</li> - <li>Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL: fix hw_random permissions</li> - <li>bundle Auditor (version 9)</li> - <li>Chromium: update to 74.0.3729.136</li> - <li>Chromium: enable strict site isolation by default</li> - <li>Chromium: initial rebranding to Vanadium including icon recolor</li> - <li>hardened_malloc: extensive work on refactoring, micro-optimization and documentation (see commits for details)</li> - <li>hardened_malloc: implement mallinfo and mallinfo extensions for Android</li> - <li>hardened_malloc: implement Android API for requesting purging</li> - <li>hardened_malloc: implement the option of large size classes (enabled by default)</li> - <li>hardened_malloc: support extended range of small size classes (enabled by default)</li> - <li>hardened_malloc: support for slabs with 1 slot for largest sizes</li> - <li>hardened_malloc: use round-robin assignment to arenas</li> - <li>hardened_malloc: disable current in-place growth code path</li> - <li>hardened_malloc: harden arena implementation</li> - <li>hardened_malloc: fix non-init size for malloc_object_size extension</li> - <li>hardened_malloc: shrink initial region table size to fit in 1 page</li> - <li>hardened_malloc (GrapheneOS only): expand workaround for Pixel 3 and Pixel 3 XL camera issues</li> - <li>Pixel 3, Pixel 3 XL: change SystemUIGoogle pinning to SystemUI</li> - </ul> + <ul> + <li>full 2019-05-01 security patch level</li> + <li>full 2019-05-05 security patch level</li> + <li>rebased onto PQ3A.190505.001/PQ3A.190505.002 releases</li> + <li>add Pixel and Pixel XL support including standard changes to kernel and device code</li> + <li>Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL: fix hw_random permissions</li> + <li>bundle Auditor (version 9)</li> + <li>Chromium: update to 74.0.3729.136</li> + <li>Chromium: enable strict site isolation by default</li> + <li>Chromium: initial rebranding to Vanadium including icon recolor</li> + <li>hardened_malloc: extensive work on refactoring, micro-optimization and documentation (see commits for details)</li> + <li>hardened_malloc: implement mallinfo and mallinfo extensions for Android</li> + <li>hardened_malloc: implement Android API for requesting purging</li> + <li>hardened_malloc: implement the option of large size classes (enabled by default)</li> + <li>hardened_malloc: support extended range of small size classes (enabled by default)</li> + <li>hardened_malloc: support for slabs with 1 slot for largest sizes</li> + <li>hardened_malloc: use round-robin assignment to arenas</li> + <li>hardened_malloc: disable current in-place growth code path</li> + <li>hardened_malloc: harden arena implementation</li> + <li>hardened_malloc: fix non-init size for malloc_object_size extension</li> + <li>hardened_malloc: shrink initial region table size to fit in 1 page</li> + <li>hardened_malloc (GrapheneOS only): expand workaround for Pixel 3 and Pixel 3 XL camera issues</li> + <li>Pixel 3, Pixel 3 XL: change SystemUIGoogle pinning to SystemUI</li> + </ul> - <p>Restoration of past features since the 2019.04.01.19 release:</p> + <p>Restoration of past features since the 2019.04.01.19 release:</p> - <ul> - <li>use -fwrapv when signed overflow checking is off</li> - <li>add exec-based spawning support (disabled by default for now)</li> - <li>require unlocking to use battery saver quick tile</li> - <li>require unlocking to use cellular quick tile</li> - <li>require unlocking to use hotspot quick tile</li> - <li>require unlocking to use data saver quick tile</li> - <li>require unlocking to use rotation lock quick tile</li> - <li>require unlocking to use wifi quick tile</li> - <li>require unlocking to use airplane mode quick tile</li> - <li>require unlocking to use bluetooth quick tile</li> - <li>require unlocking to use nfc quick tile</li> - <li>add support for kernels without module support enabled to the VTS and compatibility tests</li> - <li>Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL: disable slab merging</li> - <li>Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL: disable loadable kernel module support</li> - <li>Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL: mark qcedev data const</li> - <li>Pixel 2, Pixel 2 XL: disable unused ramdisk compression formats</li> - <li>SELinux policy: remove priv_app app_data_file execute</li> - <li>SELinux policy: remove dumpstate ashmem execute and execmem (GrapheneOS doesn't use the ART JIT compiler)</li> - <li>SELinux policy: remove healthd ashmem execute and execmem (GrapheneOS doesn't use the ART JIT compiler)</li> - <li>SELinux policy: auditallow app execmem (moving back towards an exception system)</li> - <li>SELinux policy: auditallow app ashmem execute (moving back towards an exception system)</li> - <li>SELinux policy: auditallow ephemeral_app app_data_file execute (moving back towards an exception system)</li> - <li>SELinux policy: auditallow untrusted_app_all execmod (moving back towards an exception system)</li> - <li>SELinux policy: auditallow untrusted_app_all app_data_file execute (moving back towards an exception system)</li> - <li>SELinux policy: auditallow untrusted_app_all app_data_file execute_no_trans (moving back towards an exception system)</li> - </ul> + <ul> + <li>use -fwrapv when signed overflow checking is off</li> + <li>add exec-based spawning support (disabled by default for now)</li> + <li>require unlocking to use battery saver quick tile</li> + <li>require unlocking to use cellular quick tile</li> + <li>require unlocking to use hotspot quick tile</li> + <li>require unlocking to use data saver quick tile</li> + <li>require unlocking to use rotation lock quick tile</li> + <li>require unlocking to use wifi quick tile</li> + <li>require unlocking to use airplane mode quick tile</li> + <li>require unlocking to use bluetooth quick tile</li> + <li>require unlocking to use nfc quick tile</li> + <li>add support for kernels without module support enabled to the VTS and compatibility tests</li> + <li>Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL: disable slab merging</li> + <li>Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL: disable loadable kernel module support</li> + <li>Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL: mark qcedev data const</li> + <li>Pixel 2, Pixel 2 XL: disable unused ramdisk compression formats</li> + <li>SELinux policy: remove priv_app app_data_file execute</li> + <li>SELinux policy: remove dumpstate ashmem execute and execmem (GrapheneOS doesn't use the ART JIT compiler)</li> + <li>SELinux policy: remove healthd ashmem execute and execmem (GrapheneOS doesn't use the ART JIT compiler)</li> + <li>SELinux policy: auditallow app execmem (moving back towards an exception system)</li> + <li>SELinux policy: auditallow app ashmem execute (moving back towards an exception system)</li> + <li>SELinux policy: auditallow ephemeral_app app_data_file execute (moving back towards an exception system)</li> + <li>SELinux policy: auditallow untrusted_app_all execmod (moving back towards an exception system)</li> + <li>SELinux policy: auditallow untrusted_app_all app_data_file execute (moving back towards an exception system)</li> + <li>SELinux policy: auditallow untrusted_app_all app_data_file execute_no_trans (moving back towards an exception system)</li> + </ul> <h3 id="2019.04.01.19">2019.04.01.19</h3> |