security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

clarify TLSv1.3-only enforcement

Browse Source
This commit is contained in:
Daniel Micay 2025-01-14 17:39:15 -05:00
parent c020cf99e9
commit 560226adae
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
static/releases.html
View File

@ -557,7 +557,7 @@
<li>kernel (Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold): enable hardware memory tagging for the main kernel allocators via the upstream Hardware Tag-Based KASAN implementation (which is intended for production usage, unlike the other KASAN modes)</li>
<li>kernel (Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold): switch KASAN fault handling from report to panic to use it as a hardening feature instead of only a bug finding tool</li>
<li>kernel (Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold): switch KASAN hardware memory tagging mode from synchronous to asymmetric for the initial deployment to reduce the performance cost and match our existing hardware memory tagging usage in userspace (synchronous mode is potentially more useful in the kernel than it is for userspace which is something we can investigate and potentially offer as an option)</li>
<li>Updater: require TLSv1.3 instead of TLSv1.2 or TLSv1.3</li>
<li>Updater: require TLSv1.3 instead of either TLSv1.2 or TLSv1.3</li>
<li>kernel (5.10): update to latest GKI LTS branch revision including update to 5.10.233</li>
<li>kernel (5.15): update to latest GKI LTS branch revision including update to 5.15.176</li>
<li>kernel (6.6): update to latest GKI LTS branch revision</li>