Next release of #GrapheneOS will add support to opt-in for Security Preview releases. These will be separate release channels for users to receive security patches that have source code and vulnerability information under an embargo.
The next security preview contains early patches for 1 Critical vulnerability, and 54 High vulnerabilities.
Login to reply
Replies (8)
When smooth migration from device a to b? π€
Hi guys, please check out my Geyser ππ» itβs for my son ππ»
View quoted note β
That's a real shitty situation we're in. How long is the embargo?
Interesting. Is there any reason one would not opt into this? Seems like a no brainer to opt in and get the latest security patches... right?
Security Preview has embargoed code. They are made to be released and disclosed later, you can't release the patches' source codes or details under said embargo.
BUT, you are allowed to release compiled binaries. It's silly.
You can reverse engineer them. In fact, that's kind of why this is being done. It wouldn't be hard for people to reverse the patches from a binary-only release and turn them into source code patches.
Source code patches made by others outside GrapheneOS could then be shipped in our main branch.
There's still monthly security patches that go outside the embargo, don't worry.
These are embargoed code for patches in the next four months. Some December patch level stuff in here.
Amazing! Thanks
Thanks! So from a user perspective, I'm definitely gonna sign up because I get the latest security updates... what a weird system of embargoes, I truly don't understand what google is doing lately