GrapheneOS [Unofficial]

2291 readers

3 users here now

Welcome to the GrapheneOS (Unofficial) community

This feed is currently only used for announcements and news.

Official support available on our forum and matrix chat rooms

GrapheneOS is a privacy and security focused mobile OS with Android app compatibility.

Links

More Site links

Social Media

This is a community based around the GrapheneOS projects including the hardened Android Open Source Project fork, Auditor, AttestationServer, the hardened malloc implementation and other projects.

founded 4 years ago

MODERATORS

KindnessInfinity@lemmy.ml

maade@lemmy.ml

akc3n@lemmy.ml

treequell@lemmy.world

GrapheneOS version 2025041100 released (grapheneos.org)

submitted 3 weeks ago by KindnessInfinity@lemmy.ml to c/grapheneos@lemmy.ml

6 comments fedilink hide all child comments

Tags:

2025041100 (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold, emulator, generic, other targets)

Changes since the 2025040700 release:

full 2025-04-05 security patch level
rebased onto BP1A.250405.007.D1 Android Open Source Project release
remove code for Qualcomm XTRA (PSDS) privacy improvements since we no longer have any devices with Qualcomm GNSS and we can add it back in the future if we need it again rather than porting it forward under the assumption we'll be using it
fix upstream RecoverySystem.verifyPackage(...) vulnerability (this was not directly exploitable due to there being 2 layers of update package signature verification and downgrade protection, but the first layer of protection should work properly to avoid a vulnerability in the 2nd layer being exploited)
Android Debug Bridge: more complete fix for upstream use-after-free bug for network-based connections which is being caught by our always enabled hardware memory tagging support for the base OS in hardened_malloc
kernel (6.1): update to latest GKI LTS branch revision
kernel (6.6): update to latest GKI LTS branch revision including update to 6.6.83
Seedvault: update to 15-5.5 (will be replaced with a better backup implementation in the future)
Vanadium: update to version 135.0.7049.79.0
Auditor: update to version 88
PDF Viewer: update to version 27
PDF Viewer: update to version 28

all 7 comments

sorted by: hot top controversial new old

[–] jet@hackertalks.com 11 points 3 weeks ago (2 children)

Thank you for posting the release notes. It's convenient

[–] iturnedintoanewt@lemm.ee 5 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

Yeah. A lot more than receiving a random notification "ah btw your phone updated and stuff. Go figure out elsewhere whatever we just did".

[–] Upcoming7284@lemm.ee 1 points 3 weeks ago (1 children)

You can always check the Info app...

[–] iturnedintoanewt@lemm.ee 1 points 3 weeks ago (2 children)

Yes...and hope/assume that the installed update is the latest one on the list. Because again there's no indication of this on the notification about what your phone just did. Again, the way grapheneos communicates it just ran an update is about the worst I've seen on any OS/distro of any kind. Maybe PS4 and their 'system stability' non-information might be even worse, but at least that's something you could check on the spot within the update itself. There's a complete disconnection between what your phone does and what the information about what it just did might be. You need to go find it and hope you find the correct one.

[–] KindnessInfinity@lemmy.ml 3 points 3 weeks ago

The update app scroll automatically to the latest update that is installed on your device, so you can read the release notes.

[–] KindnessInfinity@lemmy.ml 3 points 3 weeks ago

Thank you for your kind comment. :)