Our security preview releases provide early access to Android Security Bulletin patches prior to the official disclosure. Our current security preview releases provide the current revision of the November 2025 and December 2025 patches for the Android Open Source Project. We recommend enabling this.
retiolus reshared this.
GrapheneOS
in reply to GrapheneOS • • •GrapheneOS
in reply to GrapheneOS • • •The delay for being able to publish the sources is why we're now going through the significant effort of building 2 variants of each release. Our most recent 3 releases have both a regular and security preview variant:
2025092500 and 2025092501
2025092700 and 2025092701
2025100300 and 2025100301
GrapheneOS
in reply to GrapheneOS • • •You can enable security preview releases via Settings > System > System update > Receive security preview releases.
Our plan is to keep it off-by-default with a new page added to the Setup Wizard which will have it toggled on as a recommendation. We'll prompt users on existing installs to choose.
GrapheneOS
in reply to GrapheneOS • • •GrapheneOS
in reply to GrapheneOS • • •xyhhx 🔻
in reply to GrapheneOS • • •Pietro395 🇮🇹
in reply to GrapheneOS • • •GrapheneOS
in reply to GrapheneOS • • •GrapheneOS
in reply to GrapheneOS • • •GrapheneOS
in reply to GrapheneOS • • •Felix
in reply to GrapheneOS • • •So what happens, if someone installs GrapheneOS, enables this option and request the source code for a GPLv2 licensed kernel patch? I mean, GPL forces you to provide the sources code.
Then you can either comply and hand out source code, which is still under an embargo, or your right to distribute Android kernels are void.
Both options seem to be bad.
GrapheneOS
in reply to Felix • • •GrapheneOS
in reply to GrapheneOS • • •GrapheneOS
in reply to GrapheneOS • • •@dideldum GrapheneOS closely follows along with the upstream Linux kernel.org LTS releases via the Android GKI LTS branches. You can see more of those regular updates in our latest regular release:
grapheneos.org/releases#202510…
Linux kernel patches don't come from the Android Security Bulletins. They do list a tiny subset of upstream Linux issues in the YYYY-MM-05 patch level we've always already patched months earlier.
Non-mainline Pixel kernel driver patches come from Pixel GPL source releases.
GrapheneOS releases
GrapheneOSGrapheneOS
in reply to GrapheneOS • • •@dideldum We don't get early access to new Pixel drivers or firmware. Those still come from the stock Pixel OS and AOSP releases. We get early access to the Android Security Bulletins. When the Android Security Bulletins reference core kernel patches, those are already publicly available either upstream or in the Android GKI repositories.
ASBs have a list of some vendor related patches for drivers, firmware, etc. but it's not distributed through it but rather through from the hardware vendors.
astroboy
in reply to GrapheneOS • • •GrapheneOS
in reply to astroboy • • •astroboy
in reply to GrapheneOS • • •distributed
in reply to GrapheneOS • • •ṫẎℭỚ◎ᾔ ṫ◎ℳ
in reply to GrapheneOS • • •GrapheneOS
in reply to ṫẎℭỚ◎ᾔ ṫ◎ℳ • • •@TycoonTom Added information on this to the thread:
grapheneos.social/@GrapheneOS/…
GrapheneOS
2025-10-04 15:59:40
ṫẎℭỚ◎ᾔ ṫ◎ℳ
in reply to GrapheneOS • • •freemind
in reply to GrapheneOS • • •jacquerie
in reply to GrapheneOS • • •GrapheneOS
in reply to jacquerie • • •