From c275f417548206a854e72858aa42f9ddeedaf978 Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Mon, 4 Dec 2023 18:11:51 -0500 Subject: [PATCH] early December security patch --- static/releases.html | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/static/releases.html b/static/releases.html index f7cabec0..155c7d61 100644 --- a/static/releases.html +++ b/static/releases.html @@ -705,6 +705,23 @@

2023112900

+

The December release of the Android Open Source Project and stock Pixel OS + will be the first quarterly release of Android 14. It will likely be available + this week, but hasn't been published yet. Since there hasn't been a release + yet this month, we're publishing an early December security update based on + the AOSP backports to Android 14.

+ +

It's unclear if 6th/7th generation Pixels received a specific Mali GPU + kernel driver patch so we aren't raising the patch level for these until the + official December release is available. We often backport these patches early + but we don't know which patch corresponds to which CVE ID so we can't raise + the claimed patch level. ARM covers up the details publicly and only releases + tarballs for each major revision without the Git commit history or individual + security patch backports they make available to partners, despite partners + being allowed to apply those in public Git repositories. We can often figure + out the patch corresponding to a CVE ID or vice versa through ARM partners + publishing it, but we haven't been able to in this case.

+

Pixel 4, Pixel 4 XL and Pixel 4a are end-of-life and shouldn't be used anymore due to lack of most security patches for firmware and drivers. We're currently supporting them via a legacy Android 13 branch separate from these @@ -721,6 +738,7 @@

Changes since the 2023112900 release: