GrapheneOS releases
grapheneos.org
Official releases of GrapheneOS, a security and privacy focused mobile OS with Android app compatibility.

Pixel 4a (5G) and Pixel 5 are end-of-life and shouldn’t be used anymore due to lack of security patches for firmware and drivers. We provide extended support for harm reduction.

Tags:

  • 2024020500-redfin (Pixel 4a (5G), Pixel 5)
  • 2024020500 (Pixel 5a, Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Pixel 8, Pixel 8 Pro, emulator, generic, other targets)

Changes since the 2024012600 release:

  • full 2024-02-01 security patch level
  • full 2024-02-05 security patch level
  • rebased onto UQ1A.240205.004 Android Open Source Project release
  • run full compacting garbage collection purging all regular Java heaps of dead objects in SystemUI and system_server after locking (this is already done after unlocking to purge data tied to the lock method and derived data, but it makes sense to do it after locking too)
  • kernel (Pixel 4a (5G), Pixel 5, Pixel 5a): update to latest Android 14 QPR2 Beta release including additional security fixes
  • kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Generic 5.10): update to latest GKI LTS branch revision including update to 5.10.209
  • kernel (Pixel 8, Pixel 8 Pro, Generic 5.15): update to latest GKI LTS branch revision including update to 5.15.148
  • kernel (Pixel 8, Pixel 8 Pro, Generic 5.15, Generic 6.1): enable both software Shadow Call Stack (SCS) and Pointer Authentication Code (PAC) protection for kernel return addresses instead of only using SCS when PAC is unavailable
  • kernel (Pixel 8, Pixel 8 Pro, Generic 5.15, Generic 6.1): enable Branch Target Identification (BTI) protection for the kernel in addition to Clang type-based CFI to provide coarse-grained CFI coverage for indirect calls excluded from type-based CFI
  • kernel (Generic 6.1): apply sysrq hardening changes
  • kernel (Generic 6.1): update to latest GKI LTS branch revision including update to 6.1.74
  • Settings: enable SIM deletion confirmation by default
  • System Updater: clarify name of the notification channel for already being up to date
  • Messaging: update MMS configuration database based on Google Messages 20240123_01_RC02
  • Dialer: update visual voicemail (VVM) configuration database based on Google Phone 121.0.603393336
  • Vanadium: update to version 121.0.6167.101.2
  • Vanadium: update to version 121.0.6167.101.3
  • Vanadium: update to version 121.0.6167.143.0
  • Vanadium: update to version 121.0.6167.143.1
  • Camera: update to version 65
  • Camera: update to version 66
  • Dr. WeskerEnglish
    5•9 months ago

    It’s in excellent shape, lived its whole life in a Unicorn Beetle case. Battery life is great. Unlocked, confirmed to work with T-Mobile. I’ll reach out in 2-3 weeks, to see if you’re still interested, after I find a replacement.