GrapheneOS version 2024100800 released

This is an early October security update release based on the October 2024 security patch backports since a monthly Android Open Source Project and stock Pixel OS release based on Android 14 QPR3 hasn't been published yet. Android 15 is scheduled for release around October 15th and they may not have a monthly release based on Android 14 QPR3 before then.

Pixel 4a (5G), Pixel 5 and Pixel 5a are end-of-life and shouldn't be used anymore due to lack of security patches for firmware and drivers. We provide extended support for harm reduction.

Tags:

• 2024100800-redfin (Pixel 4a (5G), Pixel 5)
• 2024100800 (Pixel 5a, Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Pixel 8, Pixel 8 Pro, Pixel 8a, emulator, generic, other targets)
• 2024100800-caimito (Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold)

Changes since the 2024092900 release:

• full 2024-10-01 security patch level
• overhaul the implementation of our USB-C port control feature to improve robustness and error reporting
• fix an upstream Android Bluetooth use-after-free bug uncovered by GrapheneOS hardware memory tagging that's triggered when obtaining internet access from another device via Bluetooth
• fix an upstream Android race condition bug in handling of system error files to avoid using the wrong timestamps for system errors and then reporting them as new errors after reboot
• work around an upstream Android bug causing our Log Viewer feature to stop working after system_server restarts
• add handling for early boot-time system journal notifications
• kernel (5.10, 5.15, 6.1, 6.6): backport upstream patch fixing a hole in SELinux W^X enforcement
• kernel (5.10): update to latest GKI LTS branch revision including update to 5.10.226
• kernel (5.15): update to latest GKI LTS branch revision including update to 5.15.167
• kernel (6.1): update to latest GKI LTS branch revision including update to 6.1.112
• kernel (6.6): update to latest GKI LTS branch revision including update to 6.6.53
• TalkBack (screen reader): update dependencies
• Vanadium: update to version 129.0.6668.81.0
• GmsCompatConfig: update to version 140