[Q] Master Key security patch for official CM7. - Defy Q&A, Help & Troubleshooting

Since it's been a while since this exploit has been known, and I know the CM team officially patched the current versions of their ROMs, but does anyone (CM team or not) know if all CM versions will be patched? I'm currently using the official nightly 3/1/2013 CM7 (http://get.cm/?device=jordan), and would really like to be safe from this exploit. I know it's an older version of CM, but it's the best ROM for me, and I really don't want to change ROMs just for a patch.

Well since nobody seems to care, or just didn't get to this thread yet, I did some searching. It seems like the CM team will eventually patch it, but in the meantime if you use CM7 you can use Maniac's version which has the patch built in. Here's some info for both versions:
http://www.cyanogenmod.org/blog/this-week-in-cm-july-12-2013
"We will likely do a legacy release to CM7 to address these in the future as well, but for now, users of legacy releases of CM 9 and 10.0 are encouraged to update to the latest nightlies available; as always, stay vigilant and safe."
http://forum.xda-developers.com/showthread.php?t=2359305
http://translate.google.com/transla...genmod-7-android-2-3-7-a-707.html#post6064392
Enjoy.

Related

Newer Android Versions

What is the likelihood that updated versions of Android will be available for the Touch (official or homebrew) ? It would be superfly if we could get a CyanogenMod release for it but I don't know how feasible that would be.
At some point, a sticky needs to be created saying that no custom roms are being developed at the moment, and won't be for a while.

[Q] Are you intend to release stable release sometime?

Are you intend to release stable release sometime?
Hi!
According to OmniROM's official website:
We also recognise how people use Custom ROMs – we’re all custom ROM users and developers ourselves – the argument that “nightlies are not for end users” is over-used, and no longer valid. We’ve found that the vast majority of users want to get nightly updates to their ROM. For that reason, nightlies aren’t a playground – nightlies are for new features that are finished. You should be able to expect the same stability and reliability from a nightly as you would from a “release” ROM, and can report any bugs that prevent this from happening.
We know not everyone wants to update their ROM daily, and you are free to update as frequently or infrequently as you like. Omni is about flexibility and giving users what they expect – and we are excited to see where the community goes with it.
Click to expand...
Click to collapse
Based on this extract from official website, I would say that you should not wait for any "OmniROM 1.0" version any time soon at all. The "stable version" is the nightly build available from Omni's website.

Note 3 N9005: is there a ROM with latest security patch level available?

Coming from a Note 1 (N7000), I'm quite satisfied with the work of XDA developer bauner . He set his focus on providing a stable CyanogenMod based ROM wich is always updated with the latest security patch level - no fancy, just stable and secure. He is even working on a CM14.1 ROM.
I got an old Note 3 from my son. I'm not sure, if I should keep it, despite it's way better hardware wise than my Note 1 from 2011. I keep some business related data on my phone, so my focus is on security.
From looking around, I found several ROMs for the N9005 which haven't been updated for months. I found some other ROMs (based on Note 7 stuff) which are updated frequently, but seem to focus on fancy stuff, nice features, but never mention any security related update.
So I'm wondering: is there really no ROM for N9005 with focus on security? Or did I miss one?
I'm sure most of the CM13 roms comes with the latest security updates. Trader is still updating temaseks cm13 with security upgrades for example. You can also go go ahead and try out one of the two CM 14.1 roms here on the forum.
The CMs are constantly updated. If you want 6.0, there is Temasek's. Otherwise, there are also the CM14.1 builds from trader418 and christer12, even if the first one seems to be more stable
still can't find a suitable ROM
Thanks for your response.
Reading your comments, I was continuing searching all XDA ROM threads for Cyanogen ROMs. Google is pushing security updates on a monthly base. So I was looking for a ROM which follows this path. I would even pay a monthly fee for it.
From what I've read so far, I got the impression that the work on Temasek CM13 ceased in favor of the CM14 builds (which are not stable enough for my personal use case). From android-hilfe.de (German forum)
Is there anybody working on this ROM? - No, work on CM13 stopped
Click to expand...
Click to collapse
Looking at the Temasek thread I can see under "current info"
Android Version: 6.0.1_r30
Click to expand...
Click to collapse
A quick google search shows this version is from April 2016. Looking at his repository, Temasek stopped his commits in August and I wasn't able to find another repo which is still maintained. Trader is developing CM14 and he is supporting CM13 for Verizon. There's a Temasek 12.2 from October, also build by Trader, but I don't know the patch level. Looking at his Twitter account, Trader is busy with university stuff at the moment, so he had to reduce work on the ROMs - he omitted at least two patch levels (or even more).
Looking at Purify, the last version is also from October (hmm, does he depend on the work of Trader?). And finally Christer closed his threads CM threads for unknown reasons. Maybe because he was not providing his kernel sources, like the XDA guidelines demand for GPL stuff.
So, which CM based ROM did I miss? Is there one I'm not aware off? It seems I still can't find any CM13 ROM which is actively maintained on a regular basis.
Snoere said:
Thanks for your response.
Reading your comments, I was continuing searching all XDA ROM threads for Cyanogen ROMs. Google is pushing security updates on a monthly base. So I was looking for a ROM which follows this path. I would even pay a monthly fee for it.
From what I've read so far, I got the impression that the work on Temasek CM13 ceased in favor of the CM14 builds (which are not stable enough for my personal use case). From android-hilfe.de (German forum)
Looking at the Temasek thread I can see under "current info"
A quick google search shows this version is from April 2016. Looking at his repository, Temasek stopped his commits in August and I wasn't able to find another repo which is still maintained. Trader is developing CM14 and he is supporting CM13 for Verizon. There's a Temasek 12.2 from October, also build by Trader, but I don't know the patch level. Looking at his Twitter account, Trader is busy with university stuff at the moment, so he had to reduce work on the ROMs - he omitted at least two patch levels (or even more).
Looking at Purify, the last version is also from October (hmm, does he depend on the work of Trader?). And finally Christer closed his threads CM threads for unknown reasons. Maybe because he was not providing his kernel sources, like the XDA guidelines demand for GPL stuff.
So, which CM based ROM did I miss? Is there one I'm not aware off? It seems I still can't find any CM13 ROM which is actively maintained on a regular basis.
Click to expand...
Click to collapse
My fork of temaseks cm13 is found at GitHub.com/trader418. I'll upload an update later today with the latest security patch. I aim for a monthly update at the least however uni work had been getting on top of me. But now I'm finished for Christmas I have more time.

Are there any main custom roms with Nougat Blobs integrated yet?

If you want to know my reason, it's in a previous post I made about Wifi Authentication.
Regardless, are there any maintained custom roms that have the Official Nougat source integrated yet? I know that it usually takes a couple months for that sort of thing to happen with LOS (and the experimental build has some issues). I just want to know if anyone other than HashBang has been working on this because he's been preoccupied with getting LOS15 on Nexus 9 (I think).
Since there likely aren't any, I'll attach this link so we can watch LOS development happen.
Patience is key!

official build for Potter (G5 Plus)

Hey guys! Some very talented developers have been working on unofficial releases for a while already, and I am unsure whether to go for their takes or wait until an Official version is released. Any predictions on when this might happen? Or should I just void my warranty and go for Vache's build? Thanks!!!
I might also like this. While Motorola says they will release Oreo for Potter, they seemingly haven't provided any timetable for that. I am a bit hesitant to install a LineageOS nightly on my daily driver, but I would love having the option, especially if it turns out that Motorola botches the Oreo upgrade.
jtull89 said:
I might also like this. While Motorola says they will release Oreo for Potter, they seemingly haven't provided any timetable for that. I am a bit hesitant to install a LineageOS nightly on my daily driver, but I would love having the option, especially if it turns out that Motorola botches the Oreo upgrade.
Click to expand...
Click to collapse
I have been using Vache's/fAIyaZ 7.1.2 build for some days now. Only found one bug, Skype wouldn't manage to access the camera for video-chatting, but I found a solution for it (activating Camera 2 API from this thread: https://forum.xda-developers.com/g5-plus/themes/potentially-google-camera-port-t3684264 ). Other than that, everything works perfectly (and a lot better than the Moto built-in tracking suite they ship the phone with).
Applying an unofficial fix to an unofficial port sounds a bit problematic. Do you think it would be possible for Vache/fAlyaZ to fix this in their port somehow? Or would it be more of a gapps thing? Or neither?
It seems so insane to me that there is no official LineageOS for Potter yet? I couldn't have even imagined that it wouldn't be released quickly when I bought the Moto G5 Plus - I though it is such a popular phone, so well reviewed for the price, able to be unlocked, etc. How can it no be better supported by the LineageOS team?
Sorry to necro this thread, but Oreo has now been officially released for Potter, after seemingly forever. What are the chances of getting an official 15.1 build for Potter any time soon?
I know Vache's unofficial build is much loved on here, and I think there's a 16.0 unofficial build I've seen flowing around as well, but some of us would rather go with an official build if one is available.
Don't mean to be a d*ck, but just follow the trending topics on the forum and you'll see where everyone has flocked to. At the moment I believe there's no need to program Lineage for Pie, when we have one extremely good AOSP based version online. Install the Pie version of the system that can be shot from a bow and never look back... Vache did a great job for as long as he did it, and a couple of other contributors too, so <3 thank you
now everyone seems to be somewhere else, that's how it goes
all the previous versions and knowledge gained from them kept being passed forward to ports from the next version of Android as well, so you'd have to look at Lineage Pie. Lineage16 seems to still be too raw for Potter, which means you likely won't see any official version soon. With Pie out, everyone's efforts turn to it, so you can see also that the 15.1 thread is pretty much dead.

Categories

Resources