
Twitter doesn't fall back to using the regular description meta tag, and other sites may be similar.
254 lines
14 KiB
HTML
254 lines
14 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en" prefix="og: http://ogp.me/ns#">
|
|
<head>
|
|
<meta charset="utf-8"/>
|
|
<title>Releases | GrapheneOS</title>
|
|
<meta name="description" content="Official releases of GrapheneOS, a security and privacy focused mobile OS with Android app compatibility."/>
|
|
<meta name="theme-color" content="#212121"/>
|
|
<meta name="viewport" content="width=device-width, initial-scale=1"/>
|
|
<meta property="og:title" content="GrapheneOS releases"/>
|
|
<meta property="og:description" content="Official releases of GrapheneOS, a security and privacy focused mobile OS with Android app compatibility."/>
|
|
<meta property="og:type" content="website"/>
|
|
<meta property="og:image" content="https://grapheneos.org/graphene.png"/>
|
|
<meta property="og:image:alt" content="GrapheneOS logo"/>
|
|
<meta property="og:url" content="https://grapheneos.org/releases"/>
|
|
<meta property="og:site_name" content="GrapheneOS"/>
|
|
<link rel="stylesheet" href="/grapheneos.css?4"/>
|
|
<link rel="manifest" href="/manifest.webmanifest"/>
|
|
<link rel="canonical" href="https://grapheneos.org/releases"/>
|
|
</head>
|
|
<body>
|
|
<nav>
|
|
<ul>
|
|
<li><a href="/">GrapheneOS</a></li>
|
|
<li><a href="/install">Install</a></li>
|
|
<li><a href="/build">Build</a></li>
|
|
<li><a href="/usage">Usage</a></li>
|
|
<li class="active"><a href="/releases">Releases</a></li>
|
|
<li><a href="/source">Source</a></li>
|
|
<li><a href="/donate">Donate</a></li>
|
|
<li><a href="/contact">Contact</a></li>
|
|
</ul>
|
|
</nav>
|
|
<div id="content">
|
|
<h1>Releases</h1>
|
|
<p>These releases are available as both tags in the source code repositories and
|
|
official builds.</p>
|
|
<p>The factory images are used for the initial installation and can be verified with
|
|
GPG. See the <a href="/install">installation guide</a> for details.</p>
|
|
<p>GrapheneOS uses automatic over-the-air updates, but full update packages are listed
|
|
below for uncommon use cases like never connecting the device to the internet. A full
|
|
update package can upgrade from any past version to the new version. The over-the-air
|
|
updates use delta update packages when available. Those aren't currently linked below
|
|
but may be in the future once they're being used more consistently. Update packages
|
|
are not for performing the initial installation and you should ignore incorrect guides
|
|
trying to use them to install the OS.</p>
|
|
<p>The update packages have a internal signature verified by the update client (or
|
|
recovery image when sideloading). Downgrade attacks are also prevented, and downgrades
|
|
cannot be done unless a special downgrade update package has been signed with the
|
|
release key. The internal payload for <code>update_engine</code> is also signed,
|
|
providing another layer of signature verification and downgrade protection. Verified
|
|
boot and the hardware-backed keystore also act as a final layer of protection.</p>
|
|
<p>Releases are tested by the developers and are then pushed out via the Beta channel.
|
|
The release is then pushed out via the Stable channel after being tested by some users
|
|
using the Beta channel. In some cases, problems are caught during Beta channel testing
|
|
and a new release is made via the Beta channel to replace the aborted one. In general,
|
|
it's not possible to downgrade unless a downgrade update package is generated, so use
|
|
the Stable channel if you cannot tolerate dealing with temporary issues while a new
|
|
release for the Beta channel is being created.</p>
|
|
|
|
<noscript><strong>JavaScript is required to fetch the current list of releases from
|
|
the update server.</strong></noscript>
|
|
|
|
<h2>Stable channel</h2>
|
|
|
|
<div id="crosshatch-stable">
|
|
<h3>Pixel 3 XL</h3>
|
|
<p>Version: loading...</p>
|
|
<a>Factory image url loading...</a><br/>
|
|
<a>Factory image signature loading...</a><br/>
|
|
<a>OTA update url loading...</a>
|
|
</div>
|
|
<div id="blueline-stable">
|
|
<h3>Pixel 3</h3>
|
|
<p>Version: loading...</p>
|
|
<a>Factory image url loading...</a><br/>
|
|
<a>Factory image signature loading...</a><br/>
|
|
<a>OTA update url loading...</a>
|
|
</div>
|
|
<div id="taimen-stable">
|
|
<h3>Pixel 2 XL</h3>
|
|
<p>Version: loading...</p>
|
|
<a>Factory image url loading...</a><br/>
|
|
<a>Factory image signature loading...</a><br/>
|
|
<a>OTA update url loading...</a>
|
|
</div>
|
|
<div id="walleye-stable">
|
|
<h3>Pixel 2</h3>
|
|
<p>Version: loading...</p>
|
|
<a>Factory image url loading...</a><br/>
|
|
<a>Factory image signature loading...</a><br/>
|
|
<a>OTA update url loading...</a>
|
|
</div>
|
|
<div id="marlin-stable">
|
|
<h3>Pixel XL (legacy)</h3>
|
|
<p>Version: loading...</p>
|
|
<a>Factory image url loading...</a><br/>
|
|
<a>Factory image signature loading...</a><br/>
|
|
<a>OTA update url loading...</a>
|
|
</div>
|
|
<div id="sailfish-stable">
|
|
<h3>Pixel (legacy)</h3>
|
|
<p>Version: loading...</p>
|
|
<a>Factory image url loading...</a><br/>
|
|
<a>Factory image signature loading...</a><br/>
|
|
<a>OTA update url loading...</a>
|
|
</div>
|
|
|
|
<h2>Beta channel</h2>
|
|
|
|
<div id="crosshatch-beta">
|
|
<h3>Pixel 3 XL</h3>
|
|
<p>Version: loading...</p>
|
|
<a>Factory image url loading...</a><br/>
|
|
<a>Factory image signature loading...</a><br/>
|
|
<a>OTA update url loading...</a>
|
|
</div>
|
|
<div id="blueline-beta">
|
|
<h3>Pixel 3</h3>
|
|
<p>Version: loading...</p>
|
|
<a>Factory image url loading...</a><br/>
|
|
<a>Factory image signature loading...</a><br/>
|
|
<a>OTA update url loading...</a>
|
|
</div>
|
|
<div id="taimen-beta">
|
|
<h3>Pixel 2 XL</h3>
|
|
<p>Version: loading...</p>
|
|
<a>Factory image url loading...</a><br/>
|
|
<a>Factory image signature loading...</a><br/>
|
|
<a>OTA update url loading...</a>
|
|
</div>
|
|
<div id="walleye-beta">
|
|
<h3>Pixel 2</h3>
|
|
<p>Version: loading...</p>
|
|
<a>Factory image url loading...</a><br/>
|
|
<a>Factory image signature loading...</a><br/>
|
|
<a>OTA update url loading...</a>
|
|
</div>
|
|
<div id="marlin-beta">
|
|
<h3>Pixel XL (legacy)</h3>
|
|
<p>Version: loading...</p>
|
|
<a>Factory image url loading...</a><br/>
|
|
<a>Factory image signature loading...</a><br/>
|
|
<a>OTA update url loading...</a>
|
|
</div>
|
|
<div id="sailfish-beta">
|
|
<h3>Pixel (legacy)</h3>
|
|
<p>Version: loading...</p>
|
|
<a>Factory image url loading...</a><br/>
|
|
<a>Factory image signature loading...</a><br/>
|
|
<a>OTA update url loading...</a>
|
|
</div>
|
|
|
|
<h2>Changelog</h2>
|
|
|
|
<p>List of tagged releases. Snapshot releases without tags such as early releases of
|
|
the project and early device support releases are not listed.</p>
|
|
|
|
<h3 id="2019.05.07.00">2019.05.07.00</h3>
|
|
|
|
<p>Tags:</p>
|
|
<ul>
|
|
<li><a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ3A.190505.001.2019.05.07.00">PQ3A.190505.001.2019.05.07.00</a> (Pixel, Pixel XL, Pixel 2, Pixel 2 XL)</li>
|
|
<li><a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ3A.190505.002.2019.05.07.00">PQ3A.190505.002.2019.05.07.00</a> (Pixel 3, Pixel 3 XL)</li>
|
|
</ul>
|
|
|
|
<p>Changes since the 2019.04.01.19 release:</p>
|
|
|
|
<ul>
|
|
<li>full 2019-05-01 security patch level</li>
|
|
<li>full 2019-05-05 security patch level</li>
|
|
<li>rebased onto PQ3A.190505.001/PQ3A.190505.002 releases</li>
|
|
<li>add Pixel and Pixel XL support including standard changes to kernel and device code</li>
|
|
<li>Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL: fix hw_random permissions</li>
|
|
<li>bundle Auditor (version 9)</li>
|
|
<li>Chromium: update to 74.0.3729.136</li>
|
|
<li>Chromium: enable strict site isolation by default</li>
|
|
<li>Chromium: initial rebranding to Vanadium including icon recolor</li>
|
|
<li>hardened_malloc: extensive work on refactoring, micro-optimization and documentation (see commits for details)</li>
|
|
<li>hardened_malloc: implement mallinfo and mallinfo extensions for Android</li>
|
|
<li>hardened_malloc: implement Android API for requesting purging</li>
|
|
<li>hardened_malloc: implement the option of large size classes (enabled by default)</li>
|
|
<li>hardened_malloc: support extended range of small size classes (enabled by default)</li>
|
|
<li>hardened_malloc: support for slabs with 1 slot for largest sizes</li>
|
|
<li>hardened_malloc: use round-robin assignment to arenas</li>
|
|
<li>hardened_malloc: disable current in-place growth code path</li>
|
|
<li>hardened_malloc: harden arena implementation</li>
|
|
<li>hardened_malloc: fix non-init size for malloc_object_size extension</li>
|
|
<li>hardened_malloc: shrink initial region table size to fit in 1 page</li>
|
|
<li>hardened_malloc (GrapheneOS only): expand workaround for Pixel 3 and Pixel 3 XL camera issues</li>
|
|
<li>Pixel 3, Pixel 3 XL: change SystemUIGoogle pinning to SystemUI</li>
|
|
</ul>
|
|
|
|
<p>Restoration of past features since the 2019.04.01.19 release:</p>
|
|
|
|
<ul>
|
|
<li>use -fwrapv when signed overflow checking is off</li>
|
|
<li>add exec-based spawning support (disabled by default for now)</li>
|
|
<li>require unlocking to use battery saver quick tile</li>
|
|
<li>require unlocking to use cellular quick tile</li>
|
|
<li>require unlocking to use hotspot quick tile</li>
|
|
<li>require unlocking to use data saver quick tile</li>
|
|
<li>require unlocking to use rotation lock quick tile</li>
|
|
<li>require unlocking to use wifi quick tile</li>
|
|
<li>require unlocking to use airplane mode quick tile</li>
|
|
<li>require unlocking to use bluetooth quick tile</li>
|
|
<li>require unlocking to use nfc quick tile</li>
|
|
<li>add support for kernels without module support enabled to the VTS and compatibility tests</li>
|
|
<li>Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL: disable slab merging</li>
|
|
<li>Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL: disable loadable kernel module support</li>
|
|
<li>Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL: mark qcedev data const</li>
|
|
<li>Pixel 2, Pixel 2 XL: disable unused ramdisk compression formats</li>
|
|
<li>SELinux policy: remove priv_app app_data_file execute</li>
|
|
<li>SELinux policy: remove dumpstate ashmem execute and execmem (GrapheneOS doesn't use the ART JIT compiler)</li>
|
|
<li>SELinux policy: remove healthd ashmem execute and execmem (GrapheneOS doesn't use the ART JIT compiler)</li>
|
|
<li>SELinux policy: auditallow app execmem (moving back towards an exception system)</li>
|
|
<li>SELinux policy: auditallow app ashmem execute (moving back towards an exception system)</li>
|
|
<li>SELinux policy: auditallow ephemeral_app app_data_file execute (moving back towards an exception system)</li>
|
|
<li>SELinux policy: auditallow untrusted_app_all execmod (moving back towards an exception system)</li>
|
|
<li>SELinux policy: auditallow untrusted_app_all app_data_file execute (moving back towards an exception system)</li>
|
|
<li>SELinux policy: auditallow untrusted_app_all app_data_file execute_no_trans (moving back towards an exception system)</li>
|
|
</ul>
|
|
|
|
<h3 id="2019.04.01.19">2019.04.01.19</h3>
|
|
|
|
<p>Tags:</p>
|
|
<ul>
|
|
<li><a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ2A.190405.003.2019.04.01.19">PQ2A.190405.003.2019.04.01.19</a> (Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL)</li>
|
|
</ul>
|
|
|
|
<p>Initial release of GrapheneOS. Detailed changelogs were not written at this
|
|
point.</p>
|
|
|
|
<h3 id="2019.03.05.03">2019.03.05.03</h3>
|
|
|
|
<p>Tags:</p>
|
|
<ul>
|
|
<li><a href="https://github.com/GrapheneOS/platform_manifest/releases/tag/PQ2A.190305.002.2019.03.05.03">PQ2A.190305.002.2019.03.05.03</a> (Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL)</li>
|
|
</ul>
|
|
|
|
<p>Final and only tagged release of the AndroidHardening project before it became
|
|
GrapheneOS. Earlier AndroidHardening releases were only snapshots and are not listed
|
|
here. Detailed changelogs were not written at this point.</p>
|
|
|
|
</div>
|
|
<footer>
|
|
<a href="/"><img src="https://grapheneos.org/graphene.png" width="697" height="599" alt=""/>GrapheneOS</a>
|
|
<div id="social">
|
|
<a href="https://twitter.com/GrapheneOS">Twitter</a>
|
|
</div>
|
|
</footer>
|
|
<script src="/releases.js?4"></script>
|
|
</body>
|
|
</html>
|