How often should I update Lineage OS? (Don't need features, just security) - LineageOS Questions & Answers

I updated my new Lineage OS device for the first time yesterday to the May 9th build and I had to redo my Tingle patch (which I use to prevent having to use Google crap on my phone).
I don't really care about new features (unless its a theming engine), so should I continue to update my phone weekly, or just check the release notes to see if any security patches are pushed?
If I hold off on updating, will it make it more difficult to get updates OTA in the future?
(I realize this is a major noob question, this is my first Android device.)

z0m8i3 said:
I updated my new Lineage OS device for the first time yesterday to the May 9th build and I had to redo my Tingle patch (which I use to prevent having to use Google crap on my phone).
I don't really care about new features (unless its a theming engine), so should I continue to update my phone weekly, or just check the release notes to see if any security patches are pushed?
If I hold off on updating, will it make it more difficult to get updates OTA in the future?
(I realize this is a major noob question, this is my first Android device.)
Click to expand...
Click to collapse
Can be more changes than just the android security patch level that affects security. I've seen stuff in change logs that indicates replacing the old built-in browser to some new webview based browser, encryption related changes and stuff.
If you don't have any serious issues you could use LOS Changelog or Lineage Downloader for downloading and review changelogs before updating. That could help with knowing if a new build is good for you or if you could skip it without losing out on important changes.
Sent from my XT1650-03 using Tapatalk

z0m8i3 said:
If I hold off on updating, will it make it more difficult to get updates OTA in the future?
Click to expand...
Click to collapse
No

Related

Possible to install security updates without upgrading OS?

Is it possible to install security updates without upgrading to Nougat (currently on 6.0.1)? Before anyone suggests just upgrading to Nougat, I have some Xposed modules that are only stable in M and they are very important to my workflow.
Thanks
illBelief said:
Is it possible to install security updates without upgrading to Nougat (currently on 6.0.1)? Before anyone suggests just upgrading to Nougat, I have some Xposed modules that are only stable in M and they are very important to my workflow.
Thanks
Click to expand...
Click to collapse
Simple answer, possibly, if you use a custom ROM that's on andoid 6 it might merge in the security fixes. But other than that, no.
Answer to your question would be sultanxda rom for op3 which is regularly updated but if you want to remain on oxygen os then I don't think it's possible
I am also thinking about this option too, lots of phone company only have update their ROM for 1 year, that makes every android cell phone is not trustful after 1 year.
Johndawolf said:
Simple answer, possibly, if you use a custom ROM that's on andoid 6 it might merge in the security fixes. But other than that, no.
Click to expand...
Click to collapse
I do, I'm actually on Resurrection Remix but they moved to N quite a few patches ago. Are security updates something only the ROM dev's can include in their patches or is there a zip or apk I can flash in recovery?
illBelief said:
I do, I'm actually on Resurrection Remix but they moved to N quite a few patches ago. Are security updates something only the ROM dev's can include in their patches or is there a zip or apk I can flash in recovery?
Click to expand...
Click to collapse
Not that I'm aware of. It might be theoretically possible, but there's no way I know of to do it.
You can update your kernel to a custom version including further security fixes and update all your applications via Google Play, but there are some components of the ROM you can never update without a newer OS.
With time the small security holes will escalate to major bugs as cyber criminals take advantage of those to steal private data.

[ROM][P905][UNOFFICIAL] LineageOS 15.1 | Android 8.1 Oreo 20180708

I'm not responsible for any damage to your device of any sort.
By flashing this you take responsibility of anything that happens.
Process at your own risk!
This firmware was developed for the p905. It doesn't apply to the p905v at this time because it's bootloader locked and a custom recovery isn't possible.
If you want to check firmware - please make backup. Better to store all partitions, at least efs and may be modem.
I'm using nano gapps.
Instructions
1. Install custom recovery
2. Download the zip(s) - firmware and Google Apps additional package (optional)
3. Backup all partitions (it least efs) and store somewhere - it need to do - because you can loose imei
4. Full wipe all
5. Flash firmware and gapps
Work
All
Known Issues
Links
LineageOS Builds:
6. 20180708: fix crash in RealVnc app: https://drive.google.com/file/d/1autEPJKDlBhsSFfuvMqsdQm9bGLB9WNm/view?usp=sharing
5. 20180707: gps, IR, drm: https://drive.google.com/file/d/1nB-PiNsB-cF2D7wFHxz4Y-QMkQp_Sz-i/view?usp=sharing
4. 20180706: https://drive.google.com/file/d/1oSVWlUHhwhWui4sAwhUir0Xyk_coKMmO/view?usp=sharing
3. 20180103: ril (calls + mobile data), small fixes: https://drive.google.com/file/d/1vATLmjfSkTNnl8iojOE0dwTc8XyAOY-S/view?usp=sharing
2. 20171231: 15.1 (8.1): https://drive.google.com/file/d/18SWSyNfkqgyr-P5rD2gdyqBCbgAQK4oP/view?usp=sharing
1. 20170929: 15.0 (8.0): https://drive.google.com/file/d/0B-6nm7Jks0W5OHF1T2ttR3Bzbk0/view?usp=sharing
Gapps
https://opengapps.org
Recovery:
Use official 3.0.2-0 version from: https://twrp.me/samsung/samsunggalaxynotepro122qcom.html
or use my twrp version: https://forum.xda-developers.com/galaxy-note-pro-12/development/recovery-twrp-3-1-1-0-t3684802
Sources
Sources: https://github.com/Lineageos/
Device: https://github.com/Valera1978/android_device_samsung_viennalte
Kernel: https://github.com/Valera1978/android_kernel_samsung_msm8974
Vendor: https://github.com/Valera1978/android_vendor_samsung_viennalte
Thanks
Thanks to LineageOS team
Thanks to davidmueller13 for help with the config and initial run.
@Valera1978: That sounds very interesting. Thank you for your work.
Installed as a test, which went fine. Unfortunate is does not recognize my sim card
I do get the message insert sim card. Removed and reinserted, but still does not see it.
Further testing g to be done.
Ralph
@Valera1978
Hey my friend, really awesome to see you back with such outstanding rom!
Thank you very much for such amazing work!
I have tested this ROM for a few days.
When starting the device it gives a message system process stopped.
Next error I get insert sim, does not look to be recognized yet.
Further I did not get issues, with the basic programs.
Looks promising
Thank you for all the work on this!
Ralph
@Valera1978
Thanks for the releasing Oreo for the P905. It is sad that there is still no new 12" Note tablet on the market that take it's place. Especially because of that we all appreciate your work so we are not forced to abandon the device.
However I sincerly hope that you continue to release 14.1 versions until this rom is out of alpha. I and presumably others use that version as a daily driver. You skipped september security updates, I presume you couldn't find the time, so I hope for an october release. It is sad that android now needs monthly security updates but it seems it's the way things flow these days.
Kind regards,
mnemonic-de
mnemonic-de said:
@Valera1978
Thanks for the releasing Oreo for the P905. It is sad that there is still no new 12" Note tablet on the market that take it's place. Especially because of that we all appreciate your work so we are not forced to abandon the device.
However I sincerly hope that you continue to release 14.1 versions until this rom is out of alpha. I and presumably others use that version as a daily driver. You skipped september security updates, I presume you couldn't find the time, so I hope for an october release. It is sad that android now needs monthly security updates but it seems it's the way things flow these days.
Kind regards,
mnemonic-de
Click to expand...
Click to collapse
I'm sorry, all september worked with a oreo. I do not forget the lineage 14, I did several test builds, and fixed the pressing of the left button with the s-pen (tasks switching). There is yesterday's build - publish it or wait a couple of days and post a september security update?
In any case, I will continue to work with lineage 14, I really do not like consumption in standbye mode, I want to try another kernel. Also, there is still a problem with adjusting the volume during calls.
@Valera1978,
thanks for clarifying that. I think everybody who uses your rom understands that this is a one man show and your time is limited. Regarding publishing, of cause I can't speak for anybody than myself I presume that people would agree to skip the september updates. The october updates are already available and regarding security I think digital, either everything known is patched and you are secure as far as it possible or your are not. I don't think it makes much of a difference if you have more or less vulnerabilites.
One thing that might interest other people in regards of security update is blueborne. I'm curently not sure on which level this must be patched. If it's the driver level than things might get difficult for devices that went out of support. Your last rom 0823 shows vulnerability regarding that bug collection.
Thanks for your continued work on that rom.
Kind regards,
mnemonic-de
Dont know if this is a known bug but after installing this version i have problems playing videos. Both in the facebook app and on websites with integrated video
@Valera1978 are you using the same Lineage 14.1 kernel? The work needs improvements (in the part of the calls mainly) but for an alpha version is very good. Thank you!
Just curious
Is this rom being developed actively or was it more "Proof of concept" right now.
Asking because i have some issues that i could live with for a while, while it is being developed, but as i see no updates i am thinking of going back to 14.1
I don't use sim card therefore wi-fi only. From the remarks it looks like this alpha is working well except for the mobile functionality. I think I will give it a go if the basics of Google calendar and email are working via Wi-Fi.
Early experience :
Issues
- being used wi-fi only
- does not play videos at all. Some apps think they can play videos but don't initiate and stand still at time=0. Others seem to be smarter and give message video can't be played. I tried YouTube, Chrome, VLC, and Plex
- developers rights enabled but missing nifty reboot menu to boot into other options such as recovery. BTW this does work my Los 15 mido phone
- camera not working with any camera app I tried.
The good :
- seems to be faster.
- battery life also seems to be better, although not hugely so
- S-pen is working. Experience in Squid is good which is this tablet's main use
- Oreo's feature set is very nice once you get used to it. Interactive notifications are hard to miss.
- magisk works perfectly.
Could this possibly work for the T900? Being y'all say Wi-Fi works.
For p900 please
Any development for P900
The P900 has a different SoC iirc so you are most likely going to find a version for that in a different thread.
The p900 is officially supported by lineage so you could probably get it directly from the source! Nevermind not released just yet, probably soon though!
I tried the first version, released in September but it was not good because video playback (Facebook, youtube, dailymotion, etc.) was not working.
Has anyone tried the latest version and if you, can you confirm if the video playback works.
I have used this a couple of days now. For the purposes I do use it , all works fine.
Earlier question on video playback, I use vlc and this works.

rolling release android

hi guys,
i have a question about android. can i switch my rom to rolling release? thank you for your reply.
Need some more information here...
Unless I missed something idk what rolling release means?
"In software development, a rolling release, rolling update, or continuous delivery is the concept of frequently delivering updates to applications. This is in contrast to a standard or point release development model which uses software versions that must be reinstalled over the previous version."
sorry i dont know enough word to explain in english so i copied a bit and pasted. if you use a linux distro like arch linux, you just update packages like when you get play store updates and never get major updates like on ubuntu.
hajking said:
"In software development, a rolling release, rolling update, or continuous delivery is the concept of frequently delivering updates to applications. This is in contrast to a standard or point release development model which uses software versions that must be reinstalled over the previous version."
sorry i dont know enough word to explain in english so i copied a bit and pasted. if you use a linux distro like arch linux, you just update packages like when you get play store updates and never get major updates like on ubuntu.
Click to expand...
Click to collapse
Just install the alpha and beta version of the rom/firmware you would like for frequent updates.
But sadly it doesn't work like that on mobile, you get a huge update once a year and patches every month (if you are on "stable")
AWESOME1092387456 said:
Just install the alpha and beta version of the rom/firmware you would like for frequent updates.
But sadly it doesn't work like that on mobile, you get a huge update once a year and patches every month (if you are on "stable")
Click to expand...
Click to collapse
yeah im on latest miui tr and i get update every week but there must be a way i think.
hajking said:
yeah im on latest miui tr and i get update every week but there must be a way i think.
Click to expand...
Click to collapse
if our devices supported Project Treble we would be able to receive system-less updates, which are possible due to treble's A/B partition scheme (as far as i konw but i am not entirely sure)
AWESOME1092387456 said:
if our devices supported Project Treble we would be able to receive system-less updates, which are possible due to treble's A/B partition scheme (as far as i konw but i am not entirely sure)
Click to expand...
Click to collapse
thanx dude
AWESOME1092387456 said:
if our devices supported Project Treble we would be able to receive system-less updates, which are possible due to treble's A/B partition scheme (as far as i konw but i am not entirely sure)
Click to expand...
Click to collapse
Firstly, what's that "system-less" but still the updating of the "system"? Learn before talking and know what you're saying (no personal offense, btw).
Then again you're wrong as mi 6 doesn't have that a/b partition scheme (even though it's not that hard to repartition the device storage to have two boot and system partitions, you'll need to have or compile a new kernel that supports that partition and booting scheme - and we don't have that yet).
Treble will only let you to update your system without touching the separated vendor partition.
ccelik97 said:
Firstly, what's that "system-less" but still the updating of the "system"? Learn before talking and know what you're saying (no personal offense, btw).
Then again you're wrong as mi 6 doesn't have that a/b partition scheme (even though it's not that hard to repartition the device storage to have two boot and system partitions, you'll need to have or compile a new kernel that supports that partition and booting scheme - and we don't have that yet).
Treble will only let you to update your system without touching the separated vendor partition.
Click to expand...
Click to collapse
What i meant is we could update the phone without needing to do a full restart and i said "IF OUR DEVICE SUPPORTED PROJECT TREBLE" didn't you read the "IF"? And with "system-less" i meant mostly bugfixes that can be installed without the need of restarting the whole device as that particular service would for example shutdown and then start again and in this way we could receive security patches and minor stability updates, not full android releases or another version of miui (from v9 to v10) these kinds of upsates should still need to be performed through recovery, please next time read a response carefully before responding and i personally stated that i am not that sure either at the end of my response so don't just look for some keywords and then go bashing others for no reason.
AWESOME1092387456 said:
What i meant is we could update the phone without needing to do a full restart and i said "IF OUR DEVICE SUPPORTED PROJECT TREBLE" didn't you read the "IF"? And with "system-less" i meant mostly bugfixes that can be installed without the need of restarting the whole device as that particular service would for example shutdown and then start again and in this way we could receive security patches and minor stability updates, not full android releases or another version of miui (from v9 to v10) these kinds of upsates should still need to be performed through recovery, please next time read a response carefully before responding and i personally stated that i am not that sure either at the end of my response so don't just look for some keywords and then go bashing others for no reason.
Click to expand...
Click to collapse
Sorry my bad on that "if" part you're right.
But still, that's not a "system-less" solution but a "recovery-less" updating way as with the a/b partitioning what we get is not having to use anything other than the currently running system to apply the updates (and the ability to roll back to that very currently running system, is something goes wrong with the new)

Any updates yet? Still on March Security patch

As anyone received an update to May's security patch? Even Samsung devices are more up to date, I thought by getting a Pixel this would be guaranteed... It seems there are issues with updates for this phone, I mean, pulling this device from the beta program, for the Android Q and no updates so far, strange...
Would like to see if anyone knows what could be causing this delay.
Yes we all know. June you'll get everything. Probably on the 3rd. It's been announced over and over. Google search for Pixel 3a security update shows this:
https://9to5google.com/2019/05/10/pixel-3a-security-patch-old/
You could have done that yourself in less time it took to post this.
Without waiting until June when they issue patches for this device, the only way to update your security level at this time is by manually flashing the Q beta from the full factory images (you can only do this if your device is bootloader-unlocked).
Otherwise, as the other user stated, updates will start in June, including Q beta OTA enrollment.

General Poco F3 Android Security Update Query

Hi and apologies for the newbie question, Im not very techinical but need some help/advice please. I have a Poco F3 bought new not long ago. Its Running :-
MIU Global 14.07.0 (TKHEUXM)
Andoird Version 13 TKQ1.220829.002
Android Security Update 2023-02-01
The issue I have is that lots of my work apps (Outlook, Teams mainly) wont run becuase security at work requires that I am on at least the March Android Security Update. However my phone doesnt see these update. I dont particularly want to have to buy a new phone (work wont pay for one!) as I only bought it recently. Do any of you kind people know of a way that I can update my version of Android or at least get a newer security update installed on my current phone please.
Thanks for reading and your time in advance.
Strange. Why would apps require you to have such recent of a system update? Most Android phones don't get updated quickly.
Are you sure of this? Where did you read that? Ideally please provide some screenshots to see
Edit: It is possible for you to get a newer security patch, but you'll have to unlock your phone's bootloader and flash a Custom OS on it, which will be too much work (and has caveats), just for getting apps to work.
Second and preferred option is to just wait for Xiaomi to release a system update with updated security patch, but I can't tell you how long they'll take
charliev7 said:
Hi and apologies for the newbie question, Im not very techinical but need some help/advice please. I have a Poco F3 bought new not long ago. Its Running :-
MIU Global 14.07.0 (TKHEUXM)
Andoird Version 13 TKQ1.220829.002
Android Security Update 2023-02-01
The issue I have is that lots of my work apps (Outlook, Teams mainly) wont run becuase security at work requires that I am on at least the March Android Security Update. However my phone doesnt see these update. I dont particularly want to have to buy a new phone (work wont pay for one!) as I only bought it recently. Do any of you kind people know of a way that I can update my version of Android or at least get a newer security update installed on my current phone please.
Thanks for reading and your time in advance.
Click to expand...
Click to collapse
I heard xiaomi dropped support for poco f3 so it won't be getting updates anymore (not sure about security updates). If security updates are your main concern, i would suggest buying an iphone instead as its updates are pushed on every model no matter how old it is. Pixel phones get speedy updates as well. Also, I've used teams and outlook on old android versions myself. I dont see how it's possible for them to enforce a specific security patch. As the user above stated, a screenshot would be very helpful. Also i know its not my place to say this but if your company somehow made outlook and teams enforce security patches, they should sponsor an appropriate phone to their employees as well.
Disregard
Thanks for replying. The screenshot below is what I get when I try Outlook/Teams. Interesting I didnt realise support for the POCO F3 had stopped,, Its the android security update thats the issue. The org is attempting to pass cyberessentials and this is part of the aftermath of locking security on devices. The enforcment is being done by enrolling your device into a policy. If you dont enroll you cant access company data using your phone, if you do enroll then the policy kicks in and requires your device is compliant.
charliev7 said:
Thanks for replying. The screenshot below is what I get when I try Outlook/Teams. Interesting I didnt realise support for the POCO F3 had stopped,, Its the android security update thats the issue. The org is attempting to pass cyberessentials and this is part of the aftermath of locking security on devices. The enforcment is being done by enrolling your device into a policy. If you dont enroll you cant access company data using your phone, if you do enroll then the policy kicks in and requires your device is compliant.
Click to expand...
Click to collapse
You can try asking your organisation to adjust their Microsoft Intune Enrollment Settings, to loosen Android Security Patch Requirement from March to February (your current security patch), or if they can somehow accept your device anyway.
I'm very sure Poco F3 will continue to get Security Patches for the timebeing, only the OS Update to Android 14 is uncertain. It will definitely still get the OS Update to Android 13.1 tho.
Yeah tried both asking for a bit of leniancy and exclusion but no luck. I hope you are right about the security patches, wish they were a bit more timely. It's so convenient to have access via mobile. It's tough luck for my boss and team though as I do a lot of stuff out of hours via phone which I won't do now unless I/they find a solution. I'm certainly not buying a new phone myself. I really appreciate all your replies and for those taking the time to read my query. Thank You.
cyanGalaxy said:
You can try asking your organisation to adjust their Microsoft Intune Enrollment Settings, to loosen Android Security Patch Requirement from March to February (your current security patch), or if they can somehow accept your device anyway.
I'm very sure Poco F3 will continue to get Security Patches for the timebeing, only the OS Update to Android 14 is uncertain. It will definitely still get the OS Update to Android 13.1 tho.
Click to expand...
Click to collapse
ApexPrime said:
I heard xiaomi dropped support for poco f3 so it won't be getting updates anymore (not sure about security updates). If security updates are your main concern, i would suggest buying an iphone instead as its updates are pushed on every model no matter how old it is. Pixel phones get speedy updates as well. Also, I've used teams and outlook on old android versions myself. I dont see how it's possible for them to enforce a specific security patch. As the user above stated, a screenshot would be very helpful. Also i know its not my place to say this but if your company somehow made outlook and teams enforce security patches, they should sponsor an appropriate phone to their employees as well.
Click to expand...
Click to collapse
It will still receive security patch at least for 1 year

Categories

Resources