April Security update - Security Express
CalyxOS 4.8.0 (and 4.8.1) - April 2023 Security update is now available for Pixels, Fairphone 4, and SHIFT6mq
Released to stable on Friday, 14 April.
This update initially rolled out in our new Security Express update channel, which can be summarized in four words: Fastest updates, possible breakage.
Introducing Security Express
The Security Express channel allows us to achieve two major goals:
- Ship AOSP’s security updates faster, for users who want to receive security fixes as quickly as possible, even in the face of possible bugs.
- With your help, catch and fix more bugs that appear after merging security updates, before they reach the Stable channel.
Differences from Beta
Unlike the Beta channel, Security Express does not include large CalyxOS features or changes that are currently in testing, although updates may include other smaller fixes and improvements. Most of the time, Beta users and Security Express users will receive security updates at the same time; however, CalyxOS feature updates may occasionally require a longer testing period, in which case Security Express users will receive such updates earlier.
Updating via Security Express
Note: This channel selection is reset on reboot, but in the future, we plan for Security Express to be an option in our updater.
- Make sure your phone is running the latest stable CalyxOS, 4.7.5 at time of writing.
- Back up your data - you can use SeedVault, the included Backup app. This is optional, but it’s always recommended.
- Enable USB Debugging on your phone.
- From your computer:
adb shell setprop sys.update.channel security-express - Then, on your phone: Settings -> System -> System update settings -> Check for updates
Devices on 4.7.x beta
This month, Beta users will receive the security update a little later so that their devices retain particular features and fixes added in 4.7.6 / 4.7.7 which have not yet reached the Stable channel.
Changelog
- CalyxOS 4.8.0
- April 2023 Security update
- Chromium: 112.0.5615.48 (latest stable)
- Restrict USB access at boot time when configured to only allow when unlocked
- Fix viewing app info dashboard of hidden work app
- Allow user to add/remove Quick Settings tiles with one click
- Paused work apps now remain paused after reboot (with fixes from beta)
- Messaging: Slight Material You design changes
- Update all included apps to latest
- SetupWizard: Don’t crash when you press next with no apps selected
- Keyboard: Fix spell check on sentence end
- F-Droid: 1.16.2
Pixel 7 series
- Fix VoWiFi (Wi-Fi Calling) for supported providers
Pixels 3-3a
- CalyxOS 4.8.1
Fairphone 4
- CalyxOS 4.8.1
- Linux 4.19.279
- Music (Eleven): Fix missing shuffle and repeat buttons
SHIFT6mq
- CalyxOS 4.8.1
- Add missing APN list from stock
- Enable call recording feature
- Fix A2DP issues with AAC codec
- Fix sdcard access on computer via USB (MTP)
- Switch to 64bit only mode
Note
- Over-the-air(OTA) Updates: Starting from CalyxOS 7.2.2.0, CalyxOS updates resume automatically over the air. No manual install of updates needed. However, if you would like to manually update your CalyxOS device, see our OTA installation instructions.
- Security Updates for Pixel devices: The Pixel 9a, 9 Pro Fold, 9 Pro XL, 9 Pro, 9, 8a, 8 Pro, 8, Fold, Tablet, 7a, 7 Pro, 7, 6a, 6 Pro, and 6 stock OSes follow a monthly release schedule in direct alignment with the AOSP security bulletin. However, Google has stopped publishing the source code for AOSP QPR1 and QPR3 releases. As a result, CalyxOS is not able to timely include updates of the proprietary components, such as the bootloader, modem, and vendor firmware, for versions based on those specific QPR branches. The CalyxOS releases for the above models only contain the latest fixes to the open-source components, such as the operating system and the Linux kernel. Proprietary components get updates as soon as the corresponding AOSP source code becomes available.
- Security Updates for non-Pixel devices: The Fairphone 5, 4, Motorola moto g 5G 2024, moto g84 5G, moto g34 / g45 5G, and SHIFTphone 8 stock OSes follow a different security update release schedule, which is usually behind AOSP updates by a month or two. The CalyxOS releases for these devices only contain the latest fixes to the open-source components. Proprietary components get updates as soon as the stock OS update becomes available.
- End-of-life: The Motorola moto g52, moto g42, moto g32, Pixel 5a (5G), 4a (5G), and 5 are no longer being updated by the manufacturer, the CalyxOS updates for these devices only contain the fixes to the open-source components. Proprietary components no longer get updated.