Another March update

CalyxOS 4.7 - March 2023 Quarterly Platform Release and Security update is now available for the Pixels and the Fairphone 4

We test all builds before release, however we cannot test every single thing on every single device, it’d take too much time. That’s why we release the builds to beta first, and then to stable afterwards.

Unfortunately, due to a mistake we accidentally released a buggy update to stable for Pixel 6 Pro. A fixed build has since been made available. Our apologies for the incovenience.

Releases and devices

4.7.0

Initial 4.7 release for Pixel 3, 3a, 4a (5g), 5, 5a, 7, FP4
Stable as of 17 March, Friday

4.7.1

Initial 4.7 release for Pixel 6, 6 Pro, 6a
Kept in beta for Pixel 6 and 6a due to the issues reported
Accidentially released to stable for Pixel 6 Pro
Fixed in 4.7.3

4.7.2

Initial 4.7 release for Pixel 4
Update kernel with some security patches for Pixel 3, 3a
Stable as of 18 March, Saturday

4.7.3

Fix video playback and recording for Pixel 6, 6 Pro and 6a
Stable as of 18 March, Saturday

4.7.4

March 2023 Security update for Pixel 6, 6 Pro, and 6a
Google finally released the March 2023 Security update for these devices
That has been integrated into this build
Stable as of 20 March, Monday

Vulnerabilities

Exynos Modems

Remote Code Execution exploits found in Exynos modems, including ones in Pixel 6 and 7
For technical details see Multiple Internet to Baseband Remote Code Execution Vulnerabilities in Exynos Modems

Pixel 7, 7 Pro

Fixed
CalyxOS 4.7.0 includes March 2023 Security update which contains the fix
If you’re running an older version, please update

Pixel 6, 6 Pro, 6a

Fixed
CalyxOS 4.7.4 includes March 2023 Security update which contains the fix

All other devices

Not vulnerable, since this only affects Exynos modems found in certain devices

Acropalypse

Not Vulnerable
A vulnerability in Pixel’s Markup tool lets you recover the original photo from an edited screenshot
This only affects the propreitary Google Markup app, which CalyxOS has never included
For details see linked tweet.

Changelog

Pixel 6, 6 Pro, 6a

CalyxOS 4.7.4
Google finally released the March 2023 Security update for these devices
That has been integrated into this build

Pixel 4, 4 XL

CalyxOS 4.7.2
Initial 4.7 (March) release

Pixel 3, 3 XL, 3a, 3a XL

CalyxOS 4.7.2
Update kernel with some security patches

All other devices

Please see March update for full changelog

Note

Over-the-air(OTA) Updates: Starting from CalyxOS 7.2.2.0, CalyxOS updates resume automatically over the air. No manual install of updates needed. However, if you would like to manually update your CalyxOS device, see our OTA installation instructions.
Security Updates for Pixel devices: The Pixel 9a, 9 Pro Fold, 9 Pro XL, 9 Pro, 9, 8a, 8 Pro, 8, Fold, Tablet, 7a, 7 Pro, 7, 6a, 6 Pro, and 6 stock OSes follow a monthly release schedule in direct alignment with the AOSP security bulletin. However, Google has stopped publishing the source code for AOSP QPR1 and QPR3 releases. As a result, CalyxOS is not able to timely include updates of the proprietary components, such as the bootloader, modem, and vendor firmware, for versions based on those specific QPR branches. The CalyxOS releases for the above models only contain the latest fixes to the open-source components, such as the operating system and the Linux kernel. Proprietary components get updates as soon as the corresponding AOSP source code becomes available.
Security Updates for non-Pixel devices: The Fairphone 5, 4, Motorola moto g 5G 2024, moto g84 5G, moto g34 / g45 5G, and SHIFTphone 8 stock OSes follow a different security update release schedule, which is usually behind AOSP updates by a month or two. The CalyxOS releases for these devices only contain the latest fixes to the open-source components. Proprietary components get updates as soon as the stock OS update becomes available.
End-of-life: The Motorola moto g52, moto g42, moto g32, Pixel 5a (5G), 4a (5G), and 5 are no longer being updated by the manufacturer, the CalyxOS updates for these devices only contain the fixes to the open-source components. Proprietary components no longer get updated.