Hi all, This is an important one. If the software team could maybe do a one-off emergency release with just this patch that would be a really good thing. I’m considering whether it’s safe to run my FF3 in the meantime. https://source.android.com/security/bulletin/2021-11-01

Can’t we all just get along? And of course we all support sustainable technology. Right? So we should support the notion of our favourite sustainable technology provider being widely used. To get there we need the certification, and to get the certification we need timely security updates. We’re …

[image] Mark_Jaroski: the software team could maybe do a one-off emergency release with just this patch that would be a really good thing Not going to happen. Pretty much every monthly patch from Google contains critical patches. The only way to make sure that you receive those in a timely ma…

Looks like the required update is available for the FP2 now!

Just wondering if authors here have read [image] Software Update: 3.A.0129.20210805 (unknown caller and zero brightness bugs) Some of you have asked why we could not release the fix earlier. We found the root cause, but it is modem related, so the release process is more complex. We needed to do…

What makes you think that update is related?

Well… since I can’t just post a quote, here’s a sentence too! [image] FP2: Fairphone OS and Fairphone Open 21.10.0-rel.2 Update to security patch level 2021-11-05¹ from the Android Security Bulletin—October 2021 : CVE-2020-24588, CVE-2020-26139, CVE-2020-29660, CVE-2021-0651, CVE-2021-0652, C…

Thanks. It was the link. I just looked at the post. You could go back and edit the link to remove the 3 at the end :slight_smile: It may be that the FOS A9 which is an in-house build, doesn’t require the same google certification, hence can be rolled out once the update has been accomplished. The…

[image] anon9989719: It may be that the FOS A9 which is an in-house build, doesn’t require the same google certification, hence can be rolled out once the update has been accomplished. For what it’s worth, the corresponding topic in the Beta category mentioned "fixes required for Google appro…

each “official” Android OS has to go through google certification (therefore custom ROM updates can be published more often and faster). However for the FP2 there is no Network provider related rollout and that seem to make it a lot easier and its therefore also directly available to everyone.

Hi everyone. Thanks @Mark_Jaroski for flagging this. Our team is already aware. The build is ready and we are starting the cycle certification process. I’ll keep you all updated once we have more info to share.

CVE-2021-1048 Critical Zero-Day exploit. Patches available from Google

Discuss The Products

RSpliet November 9, 2021, 6:02pm 42

Well… since I can’t just post a quote, here’s a sentence too!