GrapheneOS v2024020500: February Security Patch
GrapheneOS is an open-source, privacy and security-focused mobile operating system based on the Android Open Source Project (AOSP).
What's new
- full 2024-02-01 security patch level
- full 2024-02-05 security patch level
- rebased onto UQ1A.240205.004 Android Open Source Project release
- run full compacting garbage collection purging all regular Java heaps of dead objects in SystemUI and system_server after locking (this is already done after unlocking to purge data tied to the lock method and derived data, but it makes sense to do it after locking too)
- kernel (Pixel 4a (5G), Pixel 5, Pixel 5a): update to latest Android 14 QPR2 Beta release including additional security fixes
- kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Generic 5.10): update to latest GKI LTS branch revision including update to 5.10.209
- kernel (Pixel 8, Pixel 8 Pro, Generic 5.15): update to latest GKI LTS branch revision including update to 5.15.148
- kernel (Pixel 8, Pixel 8 Pro, Generic 5.15, Generic 6.1): enable both software Shadow Call Stack (SCS) and Pointer Authentication Code (PAC) protection for kernel return addresses instead of only using SCS when PAC is unavailable
- kernel (Pixel 8, Pixel 8 Pro, Generic 5.15, Generic 6.1): enable Branch Target Identification (BTI) protection for the kernel in addition to Clang type-based CFI to provide coarse-grained CFI coverage for indirect calls excluded from type-based CFI
- kernel (Generic 6.1): apply sysrq hardening changes
- kernel (Generic 6.1): update to latest GKI LTS branch revision including update to 6.1.74
- Settings: enable SIM deletion confirmation by default
- System Updater: clarify name of the notification channel for already being up to date
- Messaging: update MMS configuration database based on Google Messages 20240123_01_RC02
- Dialer: update visual voicemail (VVM) configuration database based on Google Phone 121.0.603393336
- Vanadium: update to version 121.0.6167.101.2
- Vanadium: update to version 121.0.6167.101.3
- Vanadium: update to version 121.0.6167.143.0
- Vanadium: update to version 121.0.6167.143.1
- Camera: update to version 65
- Camera: update to version 66
