April Security update - Security Express
CalyxOS 4.8.0 (and 4.8.1) - April 2023 Security update is now available for Pixels, Fairphone 4, and SHIFT6mq
Released to stable on Friday, 14 April.
This update initially rolled out in our new Security Express update channel, which can be summarized in four words: Fastest updates, possible breakage.
Introducing Security Express
The Security Express channel allows us to achieve two major goals:
- Ship AOSP’s security updates faster, for users who want to receive security fixes as quickly as possible, even in the face of possible bugs.
- With your help, catch and fix more bugs that appear after merging security updates, before they reach the Stable channel.
Differences from Beta
Unlike the Beta channel, Security Express does not include large CalyxOS features or changes that are currently in testing, although updates may include other smaller fixes and improvements. Most of the time, Beta users and Security Express users will receive security updates at the same time; however, CalyxOS feature updates may occasionally require a longer testing period, in which case Security Express users will receive such updates earlier.
Updating via Security Express
Note: This channel selection is reset on reboot, but in the future, we plan for Security Express to be an option in our updater.
- Make sure your phone is running the latest stable CalyxOS, 4.7.5 at time of writing.
- Back up your data - you can use SeedVault, the included Backup app. This is optional, but it’s always recommended.
- Enable USB Debugging on your phone.
- From your computer:
adb shell setprop sys.update.channel security-express
- Then, on your phone: Settings -> System -> System update settings -> Check for updates
Devices on 4.7.x beta
This month, Beta users will receive the security update a little later so that their devices retain particular features and fixes added in 4.7.6 / 4.7.7 which have not yet reached the Stable channel.
Changelog
- CalyxOS 4.8.0
- April 2023 Security update
- Chromium: 112.0.5615.48 (latest stable)
- Restrict USB access at boot time when configured to only allow when unlocked
- Fix viewing app info dashboard of hidden work app
- Allow user to add/remove Quick Settings tiles with one click
- Paused work apps now remain paused after reboot (with fixes from beta)
- Messaging: Slight Material You design changes
- Update all included apps to latest
- SetupWizard: Don’t crash when you press next with no apps selected
- Keyboard: Fix spell check on sentence end
- F-Droid: 1.16.2
Pixel 7 series
- Fix VoWiFi (Wi-Fi Calling) for supported providers
Pixels 3-3a
- CalyxOS 4.8.1
Fairphone 4
- CalyxOS 4.8.1
- Linux 4.19.279
- Music (Eleven): Fix missing shuffle and repeat buttons
SHIFT6mq
- CalyxOS 4.8.1
- Add missing APN list from stock
- Enable call recording feature
- Fix A2DP issues with AAC codec
- Fix sdcard access on computer via USB (MTP)
- Switch to 64bit only mode
Note
- Over-the-air Updates: CalyxOS updates are delivered over-the-air (OTA) automatically, without any manual intervention needed. However, if you'd like to manually update your CalyxOS install, see OTA.
- Security Updates: The Pixel 8a, 8 Pro, 8, Fold, Tablet, 7a, 7 Pro, 7, 6a, 6 Pro, 6 contain the full security patch, as they are still being updated by Google.
- Security Updates: The Fairphone 4, 5, Motorola moto g32, moto g42, moto g52 stock OS follows a different security update release schedule, which usually lags behind by a month or two compared to Pixels. The CalyxOS releases for it only contain the latest fixes to the open source components, such as the OS code and the Linux kernel. Proprietary components such as the bootloader, modem firmware, and other firmware get updates as soon as the stock OS update is available.
- End-of-life: The Pixel 5a (5G), 4a (5G), 5, 4a, 4 XL, 4 are no longer being updated by the manufacturer, so the CalyxOS releases for these devices only contain the fixes to the open source components, such as the OS code and the Linux kernel. Proprietary components such as the bootloader, modem firmware, and other firmware no longer get updates.