From 77587333e2d91287f1191e4fa086cbd2836f79bc Mon Sep 17 00:00:00 2001
From: Daniel Micay <daniel.micay@grapheneos.org>
Date: Sat, 31 May 2025 18:55:08 -0400
Subject: [PATCH] expand our existing protection against CVE-2024-50089

---
 static/releases.html | 1 +
 1 file changed, 1 insertion(+)

diff --git a/static/releases.html b/static/releases.html
index 587113ec..a2da41d9 100644
--- a/static/releases.html
+++ b/static/releases.html
@@ -588,6 +588,7 @@
                     <p>Changes since the 2025052800 release:</p>
 
                     <ul>
+                        <li>Media Provider: expand our existing protection against CVE-2024-50089 which was rejected for the Linux kernel and still not fixed for Android in userspace (we added generic hardening in 2022 as a prerequisite for Storage Scopes which along with fixing information leaks blocked exploiting this issue for the common cases of not granting permissions, granting media permissions or using our Storage Scopes feature but we didn't fully cover "All files access" or the legacy API level equivalent)</li>
                         <li>kernel (6.6): update to latest GKI LTS branch revision including update to 6.6.92</li>
                         <li>Messaging: update to <a href="https://github.com/GrapheneOS/Messaging/releases/tag/8">version 8</a></li>
                     </ul>