From 6fd56371dfde34f4a444981f6b121489e7f104b4 Mon Sep 17 00:00:00 2001
From: Daniel Micay
Date: Sun, 23 Oct 2022 15:04:48 -0400
Subject: [PATCH] publish new release notes
---
static/releases.html | 22 +++++++++++++++++++---
1 file changed, 19 insertions(+), 3 deletions(-)
diff --git a/static/releases.html b/static/releases.html
index a751bd70..df62608f 100644
--- a/static/releases.html
+++ b/static/releases.html
@@ -101,7 +101,7 @@
Changelog
+
@@ -641,7 +658,7 @@
GmsCompatConfig: disable CAST_CONNECTION_NOTIFY popup dialogs
GmsCompatConfig: fix crash in FastPair service
kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro): update GKI to Linux 5.10.149
- kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro): replace upstream default of sha1 with sha256 for module signing (GKI devices rely on verified boot for vendor modules and only use module signing for GKI modules of which there are currently 0, but it should be using a secure hash in case there are ever GKI modules and for when we extend it to vendor modules as a lower level 2nd layer of security not depending on userspace)
+ kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro): replace upstream default of sha1 with sha256 for module signing (GKI devices rely on verified boot for vendor modules and only use module signing for GKI modules of which there are currently 0, but it should be using a secure hash in case there are ever GKI modules and for when we extend it to vendor modules as a lower level 2nd layer of security not depending on userspace)
kernel (Pixel 4, Pixel 4 XL, Pixel 4a, Pixel 4a (5G), Pixel 5, Pixel 5a): enable forced kernel module signing with a per-build signing key (RSA 4096 / sha256) as an additional lower level layer of security beyond the verification already provided by dm-verity and SELinux
kernel (Pixel 4a, Pixel 4a (5G), Pixel 5, Pixel 5a): disable IP_SCTP
kernel (Pixel 4a): enable REFCOUNT_FULL
@@ -650,7 +667,6 @@
Auditor (Pixel 7, Pixel 7 Pro): update to version 64 (update was not released in time to be bundled with older devices)
- -->