security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

April monthly update

Browse Source
This commit is contained in:
Daniel Micay 2025-04-10 14:51:51 -04:00
parent cd284345d2
commit eae4a20822
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
static/releases.html
View File

@ -576,6 +576,8 @@
<p>Changes since the 2025040700 release:</p>
<ul>
<li>full 2025-04-05 security patch level</li>
<li>rebased onto BP1A.250405.007 Android Open Source Project release</li>
<li>remove code for Qualcomm XTRA (PSDS) privacy improvements since we no longer have any devices with Qualcomm GNSS and we can add it back in the future if we need it again rather than porting it forward under the assumption we'll be using it</li>
<li>fix upstream RecoverySystem.verifyPackage(...) vulnerability (this was not directly exploitable due to there being 2 layers of update package signature verification and downgrade protection, but the first layer of protection should work properly to avoid a vulnerability in the 2nd layer being exploited)</li>
<li>Seedvault: update to 15-5.5 (will be replaced with a better backup implementation in the future)</li>