Related
@Elephone1 Stagefright Detector has detected several CVE incorrect with the latest directives in security bulletin
@Elephone1 I second this. There are official Android upstream fixes so please fix the ROM!
BlueFlame4 said:
@Elephone1 I second this. There are official Android upstream fixes so please fix the ROM!
Click to expand...
Click to collapse
sorry, what do you mean about this, can you give me more details?
Elephone1 said:
sorry, what do you mean about this, can you give me more details?
Click to expand...
Click to collapse
I'm talking about the stagefright exploit that is basically a buffer overflow in the stagefright framework that can lead to privilege escalation and that can be used remotely (read: It's the most serious security vulnerability in Android so far). It should be your absolute priority to fix this to protect your customers. Can you comment on that please?
More: http://m.androidcentral.com/stagefright
i9505 LineageOS (former CyanogenMod) 11.0 - ABANDONED
LineageOS (as well as CM did until December 2016) still maintains the cm11.0 / 4.4.4 sources to keep pace with 'The Android Security Bulletin' (ASB).
https://source.android.com/security/bulletin/index.html.
Patches for security issues are released at least once a month to the Android Open Source Project (AOSP) repository.
Patches for Android 4.4.4 are not provided by ASB anymore.
This means, security wise Android 4.4.4 is formally dead.
Nevertheless there are a few enthusiasts, still backporting security patches from recent Android versions to 4.4.4.
You should know, such backports are no formal ASB security patches.
Therefore the security patch level of this ROM is named: Unofficial Security Backport "December 2019".
Despite of implementing these security patches by the LineageOS team to its own repository https://github.com/LineageOS,
LineageOS does not provide cm11 builds anymore.
Since I personally like 4.4.4. more than later versions, I build it myself unofficially and would like to share it.
The build is made from LineageOS "Branch: cm-11.0" PLUS ASB security patches, even if they are not yet approved by LineageOS.
Instructions:
Code:
#include <std_disclaimer.h>
/*
* Your warranty is now void.
* I'm not responsible for bricked devices, dead SD cards,
* thermonuclear war, or you getting fired because the alarm app failed. Please
* do some research if you have any concerns about features included in this ROM
* before flashing it!
*/
First time flashing cm11.0 your device, or coming from another ROM
- download the zip
- install a compatible recovery
- perform a recovery backup of your current ROM
- wipe data & cache partitions of your device
- flash ROM
- optional: install the Google Apps addon package
Download Link:
<< latest 2019/12/24 >> Unofficial Security Backport "December 2019"
Android File Host
Included:
LineageOS per 2019-12-24 status merged at LineageOS
LineageOS per 2019-12-24 status open at LineageOS topics asb-2019.12-cm11
Note
The stock browser is removed from this ROM due to severe security issues, which cannot get fixed.
Get a state of art browser (like firefox) from play store instead.
Older Downloads
Known Issues:
a) xposed not supported
Update 2017/08/27:
A fix is provided by Lenny Bard, see instructions at post here.
Be aware, this fix will revert/break some security patches.
b) stock camera HDR mode is unstable
c) In case of xposed, one could experience issues with gesture typing.
Fix provided by lamuzi: https://forum.xda-developers.com/showpost.php?p=76504202&postcount=199
Extra Kernels:
#1: LOS 14.1 Kernel for the LOS ROM 11.0 S4
It turned out (thanks to side), the LOS 14.1 kernel works in conjunction with LOS 11.0.
Just a small modification to its ramdisk was needed.
Benefit: Security wise the LOS 14.1 kernel is much more advanced compared to the LOS 11.0 kernel.
https://www.androidfilehost.com/?fid=889764386195915686
#2: 14.1 SideCore Kernel by Lenny Bard modified to work in conjunction with this LOS 11.0 ROM
See Forum Post provided by Lenny Bard
Credits:
LineageOS
xpduyson - ASB patches
Tim Schumacher - ASB patches + KRACK fix patches
MSe1969 - ASB patches + KRACK fix patches
Android-Andy - security patches
syphyr - security patches
WHOAAAAAAAAAAA i love that concept!!!!i will definately try mate
Screen mirroring is not working for me.
Sent from my GT-I9505 using XDA-Developers Legacy app
gphg said:
Screen mirroring is not working for me.
Sent from my GT-I9505 using XDA-Developers Legacy app
Click to expand...
Click to collapse
With what cm11 version did it work for you?
Link provided in the first post.
Cromecast is not working.
Sent from my SM-A9000 using XDA-Developers mobile app
gphg said:
Link provided in the first post.
Cromecast is not working.
Sent from my SM-A9000 using XDA-Developers mobile app
Click to expand...
Click to collapse
Confirmed:
Chromecast screen mirror works well with latest official CM build cm-11-10160815-NIGHTLY-jflte.zip,
but it doesn't work with the version provided in the OP.
Thank your for your feedback, I'm going to add a warning regarding this issue.
Two choices:
a) I screwed it up with my local build.
b) One of the patches between August 2016 till now did it.
Either way not easy to find out, at least not for me. Let's see.
How's the variant support on this (CDMA in particular)?
BeastMode6 said:
How's the variant support on this (CDMA in particular)?
Click to expand...
Click to collapse
It is not available, sorry.
Will the project develop further? If so, whether different from the original CM11?
How are the battery life in KitKat version for lineage os ?
its so funny guys...u are asking questions about rom and just waiting for answer...
dont u respect the dev who spend some hours to build/upload ?
Just give a try to the rom...thats the "thank you" he want from u....come on!
yarrou said:
Will the project develop further? If so, whether different from the original CM11?
Click to expand...
Click to collapse
The only development will be "mostly" security patches.
"mostly" means: Recently the LineageOS team started to rebrand some naming in the sources.
But other than this, I'm pretty sure there will be no feature development.
Therefore, only the above mentioned patches will make the difference to original CM11.
kxymm said:
How are the battery life in KitKat version for lineage os ?
Click to expand...
Click to collapse
Chances are low, that the security patches will screw it up.
I didn't notice any difference.
grzwolf said:
The only development will be "mostly" security patches.
"mostly" means: Recently the LineageOS team started to rebrand some naming in the sources.
But other than this, I'm pretty sure there will be no feature development.
Therefore, only the above mentioned patches will make the difference to original CM11.
Chances are low, that the security patches will screw it up.
I didn't notice any difference.
Click to expand...
Click to collapse
i buy a s4 this year(my last phone are stolen) and i never tested the cm11 and i don't know how are battery life in kitkat hahahahha
Try the rom. Give the dev feedback.
This is the only way things progress.
Respect to @grzwolf
Of course it is clear that there will be development of 4.4.4, but you do not plan to add in the way of new features or modifications?
Написан с GT-I9505. Работает на XDA Forums PRO
yarrou said:
Of course it is clear that there will be development of 4.4.4, but you do not plan to add in the way of new features or modifications?
Написан с GT-I9505. Работает на XDA Forums PRO
Click to expand...
Click to collapse
I'm strictly going to build the ROM using pristine sources from LineageOS.
So you are correct, I do not plan to add new features or modifications.
Even if I could find a fix for the screen mirroring issue, I would go the regular way thru Gerrit https://review.lineageos.org/#/q/statuspen+branch:cm-11.0
ost Preview:
I THINK THIS IS THE FIRST LINEAGE OS 11 , Congratulations , I will test it , great that you made it for one of the phones I own .
Thumbs up GrzWolf , see you in the Video -
Regards
Puck Channel48
---------- Post added at 03:56 PM ---------- Previous post was at 03:49 PM ----------
side said:
its so funny guys...u are asking questions about rom and just waiting for answer...
dont u respect the dev who spend some hours to build/upload ?
Just give a try to the rom...thats the "thank you" he want from u....come on!
Click to expand...
Click to collapse
Hello Side is this YOU bro ?
Made a great video of your Lineage OS of Jan 7 for this phone
Thanks again brother from another mother ..
Best regards
Puck
channel48 said:
ost Preview:
I THINK THIS IS THE FIRST LINEAGE OS 11 , Congratulations , I will test it , great that you made it for one of the phones I own .
Thumbs up GrzWolf , see you in the Video -
Regards
Puck Channel48
---------- Post added at 03:56 PM ---------- Previous post was at 03:49 PM ----------
Hello Side is this YOU bro ?
Made a great video of your Lineage OS of Jan 7 for this phone
Thanks again brother from another mother ..
Best regards
Puck
Click to expand...
Click to collapse
yes its me mate.can i watch that ?
side said:
yes its me mate.can i watch that ?
Click to expand...
Click to collapse
I,m so happy I found you bro , i,m BIG FAN from you
https://www.youtube.com/watch?v=fW7nvDpu8-g
Stay safe and many great works
Puck:good:
channel48 said:
I,m so happy I found you bro , i,m BIG FAN from you
https://www.youtube.com/watch?v=fW7nvDpu8-g
Stay safe and many great works
Puck:good:
Click to expand...
Click to collapse
ahahaha thanks.i know you!
i love that face!!hahaha u r a DUDE
Since the Xperia M aka nicki is no longer maintained I decided to start my own build and I thought I share it with the community.
Full Disclosure: I am not a developer. If there are bugs in any build, I cannot solve them. So always do a backup before flashing.
Also if you do not know how to flash: leave it be. I will not help with flashing problems.
I will try to keep it up-to-date.
You can download it here: https://drive.google.com/file/d/0B7J1cVOauuana0l0NG1GWmE1aWc/view?usp=sharing
Android: 7.1.2
Security Patches: May 2017
Komapatient said:
Since the Xperia M aka nicki is no longer maintained I decided to start my own build and I thought I share it with the community.
Full Disclosure: I am not a developer. If there are bugs in any build, I cannot solve them. So do always a backup before flashing.
Also if you do not know how to flash: leave it be. I will not help with flashing problems.
I will try to keep it up-to-date.
You can download it here: https://drive.google.com/file/d/0B7J1cVOauuana0l0NG1GWmE1aWc/view?usp=sharing
Click to expand...
Click to collapse
Thank you bro for sharing and keeping the device alive ?
Btw you should consider posting this in android development forum so that people know abt it
Adarsh Dubey said:
Btw you should consider posting this in android development forum so that people know abt it
Click to expand...
Click to collapse
I intentionally posted not in the development section, since I am not developing but only building.
Komapatient said:
I intentionally posted not in the development section, since I am not developing but only building.
Click to expand...
Click to collapse
Bro you shouldn't post it in original development but you can post it in Android development as you are building the rom for the device and many of the people port roms they also don't develop nor fix bugs but post it in Android development as they are building the rom for the device
sir @Komapatient , can you please share the source kernel or ROM?
Nicklas Van Dam said:
sir @Komapatient , can you please share the source kernel or ROM?
Click to expand...
Click to collapse
Hi,
I don't understand your request. I pulled the sources from LinOS Git. There is nothing done on the source.
Komapatient said:
Hi,
I don't understand your request. I pulled the sources from LinOS Git. There is nothing done on the source.
Click to expand...
Click to collapse
Ok, it's neccesary for now. Can you please to keep update on this ROM?
Komapatient said:
Since the Xperia M aka nicki is no longer maintained I decided to start my own build and I thought I share it with the community.
Full Disclosure: I am not a developer. If there are bugs in any build, I cannot solve them. So always do a backup before flashing.
Also if you do not know how to flash: leave it be. I will not help with flashing problems.
I will try to keep it up-to-date.
You can download it here: https://drive.google.com/file/d/0B7J1cVOauuana0l0NG1GWmE1aWc/view?usp=sharing
Android: 7.1.2
Security Patches: May 2017
Click to expand...
Click to collapse
So basically you're keeping the ROM updated with latest changes from lineage OS source code , I mean bug fixes and security patches etc.
matrixex said:
So basically you're keeping the ROM updated with latest changes from lineage OS source code , I mean bug fixes and security patches etc.
Click to expand...
Click to collapse
Yes. As a courtesy to the people who cannot compile their own ROM and to give s.th. back to the community who helped me a lot of times.
Hi @Komapatient,
Glad to see you once again around here, think we last talked when you were using the Xperia V on LineageOS.
Happy to see nicki is not fully dead and that its users can benefit from newer builds.
However there's a big concern here, I pushed the Nicki official removal for two important reasons :
- Device sources are no longer updated. If there's no real issue it's fine, but might appear.
> Issues like autobrightness flashing in a weird way upon device wake/unlock is among the biggest issue fixed / wip since the changes stopped.
> Checked in my huashan sources to find common relevant things for nicki, I just pushed an overlay cleanup and fix for MMS non-Data use.
- Kernel sources are highly outdated. To put this in a easy way, we can judge the security status
> to be around December 2016 and February 2017. Therefore the security version you share here is only the ROM sources,
> though a good portion of the security patches are actually to be worked upon for each kernel.
You can find our internal CVEs vulnerabilities tracker concerning the nicki 8x27 kernel here : https://cve.lineageos.org/android_kernel_sony_msm8x27
Someone should at some point stand up and start looking at them one by one,
fixing the ones related to the kernel version by cherry-picking, testing then pushing to gerrit.
You can take my sony_msm8960t kernel as reference if you wish, only the most recent CVEs are a work in progress,
and you should therefore easily see which CVEs concern your 3.4 kernel and find the commits in my history.
I'd gladly merge commits uploaded to gerrit if they are valid and properly authored / clean.
Hope this makes the current status of Nicki a bit more clear.
Bye.
@AdrianDC
Thank you for your clarification. The kernel sources are indeed a bummer, but as my coding skills are below zero. Sadly I am not able to help here out.
Komapatient said:
@AdrianDC
Thank you for your clarification. The kernel sources are indeed a bummer, but as my coding skills are below zero. Sadly I am not able to help here out.
Click to expand...
Click to collapse
Trying to "steal" my commits from sony_msm8960t would be a good start,
you can also check the commits tags on Gerrit to see the CVE 20xx-xxxx related numbers
when the information was set as topic, helps clearing the list too.
Since the work is already done on our side, it shouldn't be a giant work to do,
and would be a good place to start with + bring back some security updates to the device.
Please try to update this rom
please try update this rom, ,
With this recent scare regarding the wpa2 vulnerability I was wondering if the fix would be in firmware or software.
Obviously for rooted devices without ota and Samsung possibly not interested (conveniently) in updating these 1st gen devices we could be stuck with this vulnerability. I'd be Interested in the thoughts of other owners.
You gotta be kidding me. Of course, Samsung has already washed its hands of this tablet. If we stand a chance of patching this problem, it's from the open source community.
All of the tab s varients do not have security patch updates, and no plans ever to introduce.
Here is the list of Samsung devices with quarterly or monthly updates
https://security.samsungmobile.com/workScope.smsb
AOSP/LIN should be applying security updates when available. But this is only for their current projects, they don't seem to maintain "stale" branches.
Is there an effective patch available ? MS claim to have patched, but remains to be seen, as has been stated its a deep vunrability.
I am waiting to see the patch war that will follow, if its a true problem in the wpa standard we will get a series of software firmware patches, each being breached in turn, untill everyone is forced to switch to a new standard. Anyone remember WEP? Lol.
If its not a real standards issue, we will see an effective patch within a month, Google are only behind the Linux kernel project in their responsiveness, and that's a compliment.
The sad reality is that Google itself hasn't made a coherent statement regarding what is it that needs to be patched. Is this a package that's part of the Android OS, the Linux kernel, or is this something that can be pushed through Play Store updates? According to the security advisories, a whole lot of Linux distributions deal with this security problem by updating the wpa_supplicant package. This package being open source clearly can be updated with root. So all we need is a flashable zip file, or just plain binaries that can be put in place.
As an update to last post
Its not that searious at all, not embedded in the standard, will not require hardware or firmware updates. A simple software patch will do.
Google have already patched it on 16th October, omnirom on the 23rd. Google released patch in Nov 6 security patch level update.
https://www.kb.cert.org/vuls/byvendor?searchview&Query=FIELD+Reference=228519&SearchOrder=4
So that means Linage should also be patched if they merge security patches monthly.
For my Fenris Rom project I am desperately trying to port large sections of the tab s 2 refresh frameworks and binaries, which does get monthly security updates. Not an easy job, and that's going to be for the T705 only.
I'm not responsible for any damage to your device of any sort.
By flashing this you take responsibility of anything that happens.
Process at your own risk!
This firmware was developed for the p905. It doesn't apply to the p905v at this time because it's bootloader locked and a custom recovery isn't possible.
If you want to check firmware - please make backup. Better to store all partitions, at least efs and may be modem.
Instructions
1. Install custom recovery
2. Download the zip(s) - firmware and Google Apps additional package (optional)
3. Backup all partitions (it least efs) and store somewhere - it need to do - because you can loose imei
4. Full wipe all
5. Flash firmware and gapps
Work
almost all
Known Issues
-
Links
18. 20210419: april security patch: https://drive.google.com/file/d/1ngw-Ac6JN16L5ZF5NfiVOzgFhrSnO-GZ/view?usp=sharing
17. 20201220: december security patch: https://drive.google.com/file/d/1sSJTq3EmkrF4e-JFgCHNHrN2ArxZn7vO/view?usp=sharing
16. 20200815: august security patch: https://drive.google.com/file/d/1CLna2ZCjwn6excJ48zEORQRs6KEYfwPS/view?usp=sharing
15. 20200724: july security patch: https://drive.google.com/file/d/1nfyXJKb_X4bspfzCEP1PU8TDbvg8CDZf/view?usp=sharing
14. 20200614: june security patch: https://drive.google.com/file/d/1OytkLQnOP_KMzsD52STQWG5QAd-zz_Y4/view?usp=sharing
13. 20200523: may security patch: https://drive.google.com/file/d/1-fNVsac004wNSMspGgJlJaOwFj51MAnV/view?usp=sharing
12. 20200411: april security patch, kernel update: https://drive.google.com/file/d/1yjI9j4dZmOY34AwdGNKv24hcaBg6ObPN/view?usp=sharing
11. 20200212: latest sources, February security patch: https://drive.google.com/file/d/1g4jjvW6u1hiJy2m81QKmyZ-gc1rmeTgB/view?usp=sharing
10. 20200113: latest sources, January security patch: https://drive.google.com/file/d/1oxURZhtzFKu7MlI7VD1QQKwjavVJtBUJ/view?usp=sharing
9. 20191224: https://drive.google.com/file/d/1W0mQdKscN4qiaa6q3uUliTry5n6anPgz/view?usp=sharing
8. 20191215: fix internal speaker, bt calls: https://drive.google.com/file/d/1fXg0qVz7oARO9EkNZ04x8ZIsFejWfcDc/view?usp=sharing
7. 20191210: mobile data: https://drive.google.com/file/d/1fHycuBYogxuQOJuHG_pXHZdh0DnloPPc/view?usp=sharing
6. 20191116: november security patch: https://drive.google.com/file/d/1eexCgGG-vj0c6mEOboP56b4YzeK9WxOl/view?usp=sharing
5. 20191114: https://drive.google.com/file/d/1OuyEPQRMyxikHGjwHSke34cLintfOPnH/view?usp=sharing
4. 20191027: latest code, small cleanup, disable Codec2.0 components (long delay on start youtube) (thanks @followmsi): https://drive.google.com/file/d/1QYe1yi-q_pioLKVaR7EzdS7cqYnPjbs7/view?usp=sharing
3. 20191013: https://drive.google.com/file/d/1Q7DTLmy1HR7H_HJvEvWXyntpGUXpJXOD/view?usp=sharing
2. 20191007: https://drive.google.com/file/d/18SICwdnJqDJpytbCw0z3DgqBPf9_kXCU/view?usp=sharing
1. 20191006: https://drive.google.com/file/d/1NulGtfJV8Zq5F0JUPYwKW8d-AhhhOrLn/view?usp=sharing
Gapps
https://opengapps.org
Platform: ARM
Android: 10.0
Root
Install latest magisk (20.1+) from canary channel: https://forum.xda-developers.com/apps/magisk/dev-magisk-canary-channel-bleeding-edge-t3839337
Recovery
Use official 3.0.2-0 version from: https://twrp.me/samsung/samsunggalaxynotepro122qcom.html
or use my twrp version: https://forum.xda-developers.com/galaxy-note-pro-12/development/recovery-twrp-3-1-1-0-t3684802
Sources
Sources: https://github.com/lineageos
Device: https://github.com/Valera1978/android_device_samsung_viennalte
Kernel: https://github.com/Valera1978/android_kernel_samsung_msm8974
Vendor: https://github.com/Valera1978/android_vendor_samsung_viennalte
Thanks
Thanks to LineageOS team
I'm glad to run a new version of android for note pro 12.2.
Of course we are still at the beginning, the system is at an early stage, there are not even official gapps.
But already a lot of stuff work.
It's great to see that it goes with Lineage 17 for the P905. Thanks a lot Valera1978
Valera1978 said:
I'm glad to run a new version of android for note pro 12.2.
Of course we are still at the beginning, the system is at an early stage, there are not even official gapps.
But already a lot of stuff work.
Click to expand...
Click to collapse
Thank you, Valera!
Really thank you Valera! I'm very happy to see this. I sue this tablet to take notes at university so I have to reporter that palm rejection doesn't work. I hope in the next builds. Keep up the good work and thank you again!
The issue mobil data means, it doesn't work at all?
Dirty install over LineageOS 16.0 did not work. Could boot, but no login possible.
Clean install did work. Got message "Your device has an internal fault. Please contact the manufacturer". But could acknowledge and login. Working using the GApps from the first link (BiTGApps).
Could not get Magisk (19.4) to work. Could flash but Magiskmanager shows not installed and no root.
mad0701 said:
The issue mobil data means, it doesn't work at all?
Click to expand...
Click to collapse
for now - no mobile data at all
pantau said:
Dirty install over LineageOS 16.0 did not work. Could boot, but no login possible.
Clean install did work. Got message "Your device has an internal fault. Please contact the manufacturer". But could acknowledge and login. Working using the GApps from the first link (BiTGApps).
Could not get Magisk (19.4) to work. Could flash but Magiskmanager shows not installed and no root.
Click to expand...
Click to collapse
Right now "Your device has an internal fault. Please contact the manufacturer" message present on all lineage 17 firmwaresю
Magisk workaround is ready, see first post.
Valera1978 said:
Right now "Your device has an internal fault. Please contact the manufacturer" message present on all lineage 17 firmwaresю
Magisk workaround is ready, see first post.
Click to expand...
Click to collapse
Magisk does work now. Thanks a lot!
Thanks so much Valera
Thanks so much Valera, you have been helping us keep our Note Pro alive.
The only point I see need for more attention would be with palm rejection, as this is essential for using s-pen.
Gratitude for your work Valera, God bless you.
Palm rejection fixed?
Does this version fix the palm rejection issue? The last version working I think was Lineage 14.0. I really would like to use the S-Pen again for note-taking.
mnemonic-de said:
Does this version fix the palm rejection issue? The last version working I think was Lineage 14.0. I really would like to use the S-Pen again for note-taking.
Click to expand...
Click to collapse
No one?
dannyt84 said:
No one?
Click to expand...
Click to collapse
You mean that you can lay your hand on the screen while writing with the pen ? I will try to test it once I get the rom working.
dannyt84 said:
No one?
Click to expand...
Click to collapse
No not working
Will this work for the P900 or is it only the P905? Since the only difference is a mobile radio (to my understanding) I don't see why I can't but I don't see it mentioned specifically so figured I'd ask.
Ist only for P905... Processor and other Hardware are different...
Did anyone get safetynet to pass with magisk 20 or canary channel ?
Although i can not enjoy the fruits of your labour cos i have the sm-p900 i was think maybe if its possible to change my motherboard from p900 to the p905 board. i found one on ebay. I have 4 of these tablets i have purchased over the years as i keep dropping them and crack the screen. If anyone knows more if swapping the boards will work please let us know as this could be another way of upgrading and using the big lovely screen with Android 10
Did anyone test if Edxposed is working? Which version? I tried with Beta YAHFA and Sandhook, but did not booting (automatically always Download Mode)...