diff --git a/static/releases.html b/static/releases.html index f96a93db..ebf82f52 100644 --- a/static/releases.html +++ b/static/releases.html @@ -732,8 +732,8 @@
  • run full explicit GC in SystemUI and system_server after locking (this is already done after unlocking to purge the lock method and derived data, but it makes sense to do it after locking too)
  • kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Generic 5.10): update to latest GKI LTS branch revision including update to 5.10.209
  • kernel (Pixel 8, Pixel 8 Pro, Generic 5.15): update to latest GKI LTS branch revision including update to 5.15.148
    • -
  • kernel (Pixel 8, Pixel 8 Pro, Generic 5.15): enable both software Shadow Call Stack (SCS) and Pointer Authentication Code (PAC) protection for kernel return addresses instead of only using SCS when PAC is unavailable
    • -
  • kernel (Pixel 8, Pixel 8 Pro, Generic 5.15): enable Branch Target Identification (BTI) protection for the kernel in addition to Clang type-based CFI to provide coarse-grained CFI coverage for calls excluded from CFI
    • +
  • kernel (Pixel 8, Pixel 8 Pro, Generic 5.15, Generic 6.1): enable both software Shadow Call Stack (SCS) and Pointer Authentication Code (PAC) protection for kernel return addresses instead of only using SCS when PAC is unavailable
    • +
  • kernel (Pixel 8, Pixel 8 Pro, Generic 5.15, Generic 6.1): enable Branch Target Identification (BTI) protection for the kernel in addition to Clang type-based CFI to provide coarse-grained CFI coverage for calls excluded from CFI
  • kernel (Generic 6.1): apply sysrq hardening changes
  • kernel (Generic 6.1): update to latest GKI LTS branch revision including update to 6.1.74
  • Vanadium: update to version 121.0.6167.101.2