Current security patch level? - Galaxy Tab S2 Q&A, Help & Troubleshooting

What is the current security patch level for the SM-T815?

Related

(rom)ale-l21c432b603

ALE-L21C432B603 (single sim)download >>>>>http://update.hicloud.com:8180/TDS/data/files/p3/s15/G1084/g104/v88493/f1/full/update.zip
changelog: improved security google patches

Build G960FXXS1ARD1 has been released! (April security patch)

It seems a new build has been pushed to Germany, on April the 17th. Other unlocked phones should follow in the next days. The OTA update size is a little over 60MB.
https://www.sammobile.com/firmwares/SM-G960F/DBT/download/G960FXXS1ARD1/215642/
Model: SM-G960F
Changelist: 13138374
Build date: Tue, 10 Apr 2018 01:48:02 +0000
Security patch level: 2018-04-01
Product code: DBT
PDA: G960FXXS1ARD1
CSC: G960FOXM1ARCA
Click to expand...
Click to collapse
Only security patches this time around, according to Samsung, unlike the older builds which featured stability improvements (camera, call, face unlock): http://doc.samsungmobile.com/SM-G960F/DBT/doc.html
Build number: G960FXXS1ARD1
Android version: Oreo (Android 8.0.0)
Release date: 2018-04-17
· The security of your device has been improved.
Click to expand...
Click to collapse
I'll try to announce every new firmware version, as it becomes available, from now on.
:highfive:

Build G960FXXU2BRG6 has been released! (July security patches + general fixes)

This build was released today, July 18th, in India. The OTA size is around 250MB.
Links for the firmware release can be found here: https://www.sammobile.com/firmwares/galaxy-s9/SM-G960F/INS/download/G960FXXU2BRG6/225558/
Model name: SM-G960F
Changelist: 13951170
Build date: Thu, 12 Jul 2018 09:06:21 +0000
Security Patch Level: 2018-07-01
Product code: INS
PDA: G960FXXU2BRG6
CSC: G960FOXM2BRG4
Click to expand...
Click to collapse
The build features security patches + fixes related to AR Emoji and Super Slow Recording: http://doc.samsungmobile.com/SM-G960F/DBT/doc.html
Build Number: G960FXXU2BRG6
Android version: Oreo (Android 8.0.0)
Release Date: 2018-07-18
· The stability of AR EMOJI has been improved;
· The stability of Super slow has been improved;
· The stability of Device has been improved;
· The security of your device has been improved.
Click to expand...
Click to collapse

[ROM][T-815]LineageOS 14.1 Samsung Galaxy Tab S2 LTE

The Samsung Galaxy Tab S2 LTE (aka SM-T815, gts210ltexx) is not maintained officially any longer by LineageOS (see e.g. here). Meanwhile, LineageOS has also discontinued to deliver official 14.1 builds in the course of providing LineageOS 16.0 builds. The LineageOS 14.1 tree however will continue to be maintained for security patches by the community (I am one of these contibutors, btw).
This thread aims at continuing to provide regular updates with Security patches.
The provided build provides in addition to the device-independent security patches taken from LineageOS the following:
Kernel security patches, when applicable
microG-patch (no impact on flashing Gapps - simply allows to install microG for those willing to do so)
OTA Support
Download with May 2023 Custom build release:
https://sourceforge.net/projects/lin14-mgoms/files/gts210ltexx/lineage-14.1-20230622-UNOFFICIAL-gts210ltexx.zip/download
Source code links:
LineageOS: https://github.com/LineageOS
Kernel: https://github.com/lin14-mGoms/android_kernel_samsung_gts2/tree/mse_v4
microG patches:
(1) https://github.com/microg/android_p...aster/patches/android_frameworks_base-N.patch
(2) https://github.com/microg/android_p...aster/patches/android_frameworks_base-N.patch
local manifest: https://github.com/lin14-mGoms/local_manifests
Installation instructions
First things first:
YOU ARE SOLELY RESPONSIBLE YOURSELF FOR ANY ACTIONS YOU DO WITH YOUR DEVICE. WHATEVER YOU DO, YOU DO IT AT YOUR OWN RISK!
The official instructions on how to install LineageOS on the Samsung Galaxy Tab S2 9.7 LTE can be found here. When I had installed LineageOS' predecessor CyanogenMod more than two years ago on my device, I went through some pain, so I think it makes sense to add some important additional information here, to avoid any frustration:
The only way out of the 'Download mode' is the same way, you got in: [Home]+[Vol.Down]+[Power]
The download link to the Heimdall software leads to an outdated version: Version 1.4.1 does not work for this device. Either use 'Odin' or try to get version 1.4.2 somewhere - I have built Heimdall 1.4.2 for Linux from the publicly available source code on GitLab, you can download it here.
UPDATE: The LineageOS instructions now also provide a link to a modernized version of heimdall.
If you have still have Android 5.x as Samsung Stock firmware, you must fist upgrade the Android version to 6.x or 7.0 Stock firmware - otherwise, you will end-up in a boot loop after flashing the ROM! Best is to let the 5.x Stock ROM offer you to upgrade. If you don't get an upgrade offered or if you are already at the boot loop stage, the solution is the same: Find an Android 6.x or 7.0 Stock firmware image in the net, go to Download mode and flash the image using Odin or Heimdall 1.4.2 - you don't need the specific carrier version, just use a fitting 'non-branded' image.
The way to boot into TWRP after flashing it in 'Download mode' is [Home]+[Vol.Down+]Power] until the screen turns black and then immediately [Home]+[Vol.Up+]Power] - some finger coordination required
GApps or microG?
You have the choice:
a. Use microG - 'microG' is installed simply by installing the respective apps, no flashing necessary.
b. Flash GApps - If you wish to have GApps, they need to be flashed together with the ROM (see LineageOS build instructions).
c. Neither of those (obviously, you cannot combine those options!)
The 'microG patch' in this ROM has no impact on installing Gapps.
Why still Android 7.1 (LineageOS 14.1) ?​My aim is to provide stable, daily-driver capable builds. There are XDA threads offering up to Android 11 (LineageOS 18.1) for this device. I truly admire and appreciate the effort of the devs bringing up the device, which is something, I definitely would not have been able to achieve myself.
Nevertheless, those builds come without SELinux! (It is not only switched off or set to permissive, it is entirely carved out of the kernel.)
This is a KO criterion for me: Without enforcing SELinux, one could even argue whether it would make sense at all to apply security patches - normally, when bringing up a device, you start with permissive SELInux and then there is some "slave-work" to fulfill to manage the 'last mile' to an enforcing SELinux. I admit, that I myself am not really willing to invest this huge amount of work to get SELinux properly set up, by taking the work of those devs as a base (Further, the used kernel of the mentioned builds is quite outdated, it mostly contains "feature commits" to make this device work and not really sec. patches - it also contains many "squash" commits, which makes analyzing cherry-pick conflicts extremely difficult, when trying to apply sec. patches - again something I am not willing/able to comprehend).
Well, there we go - that is why I continue with LineageOS 14.1 - with enforcing SELinux and a frequently patched kernel with security/CVE patching (the 3.10 kernel is quite aged, but there is still room to apply CVE patches).
XDA:DevDB Information
[ROM][T-815]LineageOS 14.1 Samsung Galaxy Tab S2, ROM for the Samsung Galaxy Tab S2
Contributors
MSe1969
Source Code: https://github.com/lin14-mGoms/local_manifests
ROM OS Version: 7.x Nougat
ROM Kernel: Linux 3.10.x
Based On: LineageOS
Version Information
Status: Stable
Stable Release Date: 2023-06-22
Created 2018-12-08
Last Updated 2023-06-22
Tips & tricks
microG installation
The ROM is patched for the use of microG, but it does not contain the microG system components.
The best way to obtain them is to install the F-Droid store as app store and to include the microG repository as described on the microG Download page, where you will also find links for the direct download of the .apk files.
Please refer to the official installation instructions. However, there are three pieces of information, which are explained on the microG pages, but unfortunately not directly in the installation instructions, so I would like to point them out here:
Download the latest 'unstable' Gms Core version to avoid "outdated play services" warnings
The Location Provider functionality is included in Gms Core, but also available as separate application. I recommend Gms Core - however, the explanation is not included in Gms Core, but only here
To grant the signature spoofing permission, go to Settings - Apps - Advanced (the 'gear' icon) - App Permissions - Spoof package signature; it is not possible when you enter the individual app's permissions menu
Root
The most popular options are:
Official LineageOS su addon (use 'addonsu-14.1-arm-signed.zip')
Magisk (please search XDA on your own)
SuperSU
Note that I cannot and will not support any issues related to Magisk and/or SuperSU
Heimdall 1.4.2
If you use Linux and don't want to mess around with MS Windows only for Odin, download it here
Bootloop
In rare cases, you may experience a boot loop after flashing an update (seems to be a bug in TWRP). The fix for that is to re-enter TWRP, choose "Delete", "Advanced Delete" and you select "Dalvik / ART" and "Cache" and wipe (do not wipe anything else), afterwards, reboot.
Change log
June 22nd, 2023
Custom build release June 2023
System Webview 114.0.5735.131
May 13th, 2023
Custom build release May 2023
System Webview 113.0.5672.77
April 26th, 2023
Custom build release April 2023
System Webview 112.0.5615.136
March 25th, 2023
Custom build release March 2023
System Webview 111.0.5563.58
February 21st, 2023
Custom build release February 2023
System Webview 109.0.5414.118
January 8th, 2023
Custom build release January 2023
System Webview 108.0.5359.128
December 15th, 2022
Custom build release December 2022
System Webview 108.0.5359.79
November 14th, 2022
Custom build release November 2022
System Webview 107.0.5304.105
Suppress "kernel not SEAndroid enforcing" boot message
October 18th, 2022
Custom build release October 2022
System Webview 106.0.5249.79
September 12th, 2022
Custom build release September 2022
System Webview 105.0.5195.79
August 13th, 2022
Custom build release August 2022
System Webview 103.0.5060.71
July 16th, 2022
Custom build release July 2022
June 18th, 2022
Custom build release June 2022
System Webview 102.0.5005.78
May 12, 2022
Custom build release May 2022
System Webview 100.0.4896.127
April 16th, 2022
April 2022 custom build release
System Webview updated to 100.0.4896.58
February 22nd, 2022
Custom build release February 2022
System Webview 98.0.4758.101
December 23rd, 2021
Custom buld release December 2021
System Webview 96.0.4664.104
November 16th, 2021
Show again "official" Sec. string same as LineageOS (2021-06-05)
Additional Custom build release property to indicate backport status
System Webview 95.0.4638.50
November 2021 custom build release
September 18th, 2021
Security string 2021-09-05
August 11th, 2021
Security string 2021-08-05
System Webview on 91.0.4472.164
July 16th, 2021
Security string 2021-07-05
June 18th, 2021
Security string 2021-06-05
System Webview on 91.0.4472.101
May 13th, 2021
Security string 2021-05-05
System Webview on 90.0.4430.82
Updated ffmpeg to 3.0.12
April 13th, 2021
Security string 2021-04-05
System Webview on 89.0.4389.105
March 12th, 2021
Security string 2021-03-05
February 13th, 2021
Security string 2021-02-05
System Webview M88
January 20th, 2021
Security string 2021-01-01
December 20th, 2020
Security string 2020-12-05
System Webview M87
November 14th, 2020
Sec. string 2020-11-05
Additional fix for CVE-2020-15999
Fix of AOSP E-Mail widget
System Webview M86
October 14th, 2020
Sec. string 2020-10-05
September 14th, 2020
Sec. string 2020-09-05
System Webview M85
August 11th, 2020
Sec. string 2020-08-05
System Webview M84
July 12th, 2020
Sec. string 2020-07-05
June 12th, 2020
Sec. string 2020-06-05
May 8th, 2020
Sec. string 2020-05-05
System Webview M81
April 11th, 2020
Sec. string 2020-04-05
Fix for CVE-2020-8597 (external/ppp)
Kernel: CVE-2019-10638 siphash 128bit for IP generation
March 16th, 2020
Sec. string 2020-03-01
System Webview M80
February 19th, 2020
Sec. string 2020-02-05
February 07th, 2020
Sec. string 2020-02-01
January 21st, 2020
Sec. string 2020-01-05
System Webview M79
December 7th, 2019
Sec. string 2019-12-05
System Webview M78
Updated iptables and netd
November 10th, 2019
Sec. string 2019-11-05
October 18th, 2019
Sec. string 2019-10-06
System Webview M77
Kernel: Switched to slightly upstreamed 'mse_v4'-branch
September 13th, 2019
Sec. string 2019-09-05
System Webview M76
August 12th, 2019
Sec. string 2019-08-05
OTA Support
July 10th, 2019
Sec. string 2019-07-05
System Webview M75
June 14th, 2019
Sec. string 2019-06-05
May 08th, 2019
Sec. string 2019-05-05
System Webview M74
April 05th, 2019
Sec. string 2019-04-05
March 12th, 2019
Sec. string 2019-03-05
System Webview M72 (includes CVE-2019-5786)
February 8th, 2019
Sec. string 2019-02-05
January 18th, 2019
Sec. string 2019-01-05
System Webview M71
microG patch included
Kernel: applied some additional Spectre v1 mitigations
Timezone data updated
December 8th, 2018
Initial upload
Sec. string 2018-12-05
System Webview M69
Working right now on 'upstreaming' the kernel . . .
New build with January 2019 ASB patches available
Hi all,
a new build with January security patches is available for download here:
Sec. string 2019-01-05
System Webview M71
microG patch added (no impact on Gapps at all)
Kernel: applied some additional Spectre v1 mitigations
Timezone data updated
Regards, M.
Is everything working properly? Also does tablet manage to get into deep sleep ok?
Meakii said:
Is everything working properly? Also does tablet manage to get into deep sleep ok?
Click to expand...
Click to collapse
I am using my tablet all the time and I don't have issues. As far as I know, the deep sleep issue is specific to the various attempts to get LineageOS 15.1 properly working on this device, but not to 14.1, which runs very stable.
I have this device, will try your build. I am tester for los15.1 I have stock rooted CQI5 bootloader, so hopefully I won't need to downgrade
tripLr said:
I have this device, will try your build. I am tester for los15.1 I have stock rooted CQI5 bootloader, so hopefully I won't need to downgrade
Click to expand...
Click to collapse
Good luck, pls. let me know. As you will flash 'Nougat over Nougat' I don't think it is an issue...
February Build
A new build with February 2019 security patches is available for download here
Happy flashing, M.
MSe1969 said:
A new build with February 2019 security patches is available for download here
Happy flashing, M.
Click to expand...
Click to collapse
Can u post your roomservice please ?
I want to try some kernel fixes. Thanks
tripLr said:
Can u post your roomservice please ?
I want to try some kernel fixes. Thanks
Click to expand...
Click to collapse
??? - Source code link in the OP points to the local_manifests repo . . .
As announced here, LineageOS has discontinued to deliver official 14.1 builds in the course of providing LineageOS 16.0 builds.
The 14.1 tree however will continue to be maintained for security patches by the community (I am one of these contibutors, btw).
So this build will normally continue.
New build with March sec. patches
New build ready for download:
https://www.androidfilehost.com/?fid=1395089523397916389
- ASB March 2019 patches (sec. string 2019-03-05)
- Android System Webview updated to 72.0.3626.121 (includes CVE-2019-5786)
New build with April 2019 ASB
New build with April Security patches available for download.
MSe1969 said:
New build with April Security patches available for download.
Click to expand...
Click to collapse
No mirrors found
tripLr said:
No mirrors found
Click to expand...
Click to collapse
Keep trying, AFH sometimes is "funny"
New build with May sec. patches
New build ready for download:
https://www.androidfilehost.com/?fid=1395089523397962204
- ASB May 2019 patches (sec. string 2019-05-05)
- Android System Webview updated to 74.0.3729.112
Happy flashing, M.
Thank you for your work.
Is battery drain better than in the other roms with the deep sleep problem?
Homuncoloss said:
Thank you for your work.
Is battery drain better than in the other roms with the deep sleep problem?
Click to expand...
Click to collapse
Can't judge on other ROMs, but the deep-sleep issue seems related to Oreo ROMs, not to Nougat.
At least regarding my own experience with this ROM, it seems OK.

Question How to avoid crash that happens when using ACTION_WIFI_ADD_NETWORKS intent in the android 11 devices

We are using ACTION_WIFI_ADD_NETWORKS intent to add our network into the Saved Networks. For reference, we are using this link https://developer.android.com/guide/topics/connectivity/wifi-save-network-passpoint-config
We noticed that the issue got fixed in the 5th Feb 2021 security patch release in Pixel devices. So in our codes, we implemented a workaround of checking if the Security Patch Level of the device is greater than the ValidPatch which is 2021-02-05 and then we proceeded with calling the intent. But this check failed in a Oneplus Nord CE 5G device with Android version 11 and Android Security update 2021-07-01
Please provide some information on when the Android security patch will be updated such that the crash will not happen anymore?

Categories

Resources