| commit | 64ee30920d5b7d8d70b09fbcc48cadaab29b07ed | [log] [tgz] |
|---|---|---|
| author | Daniel Micay <daniel.micay@grapheneos.org> | Tue Apr 08 22:04:15 2025 -0400 |
| committer | Jackeagle <jackeagle102@gmail.com> | Tue May 27 23:55:02 2025 -0400 |
| tree | c410e487fe98763aa3b6cd23e44df905cccb43e8 | |
| parent | b6bf3b6202666cf2dd2466dd42a2328d8664931d [diff] |
fix upstream RecoverySystem.verifyPackage vulnerability This was not directly exploitable due to there being 2 layers of update package signature verification and downgrade protection, but the first layer of protection should work properly to avoid a vulnerability in the 2nd layer being exploited. Signed-off-by: Jackeagle <jackeagle102@gmail.com>