GrapheneOS version 2026050400 released

GrapheneOS

GrapheneOS version 2026050400 released:

https://grapheneos.org/releases#2026050400

See the linked release notes for a summary of the improvements over the previous release.

n2gwtl

The VPN leak is news to me...

fid03

n2gwtl The VPN leak is news to me...

It's this one: https://lowlevel.fun/posts/tiny-udp-cannon-android-vpn-bypass/

Starky

"Sandboxed Google Play compatibility layer: add shim for BluetoothAdapter.ACTION_REQUEST_ENABLE"

Will this address/resolve the issue with the Bluetooth of an older vehicle not being able to connect to a Pixel running GOS?

phone-company

I'm testing right now on my 10a. All fine untill now

phone-company

phone-company without any errors untill now. Why is 10a still listed as experimental?

Grapha

The update tells me that I have the latest version which is: 2026042101
Is this normal?...

Johnnyloans

Grapha

https://grapheneos.org/releases

Go to this link, click your phone model, see if 2026050400 is in stable yet

Pocketstar

2026050401 appears stable on my P6a, P7, Pixel Tablet and P9Pxl, thank you!

tissue

fid03 Why would Android security team consider this not a security threat??

AtmosphericIgnition

No issues all day on my P8P.

GrapheneOS

tissue There's a high chance they misunderstood the report and the person filing it didn't push hard enough to get them to deal with it. Google doesn't care much about VPN leaks but they do usually acknowledge them as a low priority issue to fix.

iyanmv

After this update, the app Swisscard (com.swisscard.prod) crashes when opening. I have tried with the exploit protection compatibility mode on, and without blocking the Play Integrity API, and it still does not work. The app was updated recently (last week), but I think I have used the app after that last update and before GrapheneOS 2026050400.

type: crash
osVersion: google/shiba/shiba:16/BP4A.260205.001/2026050401:user/release-keys
package: com.swisscard.prod:2026042401, targetSdk 36
process: com.swisscard.prod
installer: com.android.vending

signal 11 (SIGSEGV), code 2 (SEGV_ACCERR), fault addr 0x0000d0461524d000 (read)

backtrace:
      #00 pc 000000000002960c  /data/app/~~HYUvIb3WAhUbZRe0CMm13g==/com.swisscard.prod-r7-BEdviCwTT-NIfNAZCdQ==/split_config.arm64_v8a.apk!libe382.so (offset 0x360000) (BuildId: 21c5cda32f494874)
      #01 pc 0000000000316900  /apex/com.android.art/lib64/libart.so (art_quick_generic_jni_trampoline+144) (BuildId: beb7fbd1d32b8638db451308cec29e5b)
      #02 pc 0000000000687de8  /apex/com.android.art/lib64/libart.so (nterp_helper+152) (BuildId: beb7fbd1d32b8638db451308cec29e5b)
      #03 pc 00000000000162d8  [anon:dalvik-DEX data] (com.entersekt.sdk.internal.setMultiChoiceModeListenerN20049.getChallenge+56)
      #04 pc 0000000000687d84  /apex/com.android.art/lib64/libart.so (nterp_helper+52) (BuildId: beb7fbd1d32b8638db451308cec29e5b)
      #05 pc 00000000000185d8  [anon:dalvik-DEX data] (com.entersekt.sdk.internal.setMultiChoiceModeListenerN20049.AppMultifactor+3028)
      #06 pc 0000000000687de8  /apex/com.android.art/lib64/libart.so (nterp_helper+152) (BuildId: beb7fbd1d32b8638db451308cec29e5b)
      #07 pc 00000000000189e6  [anon:dalvik-DEX data] (com.entersekt.sdk.internal.setMultiChoiceModeListenerN20049.getAuthId+18)
      #08 pc 0000000000687de8  /apex/com.android.art/lib64/libart.so (nterp_helper+152) (BuildId: beb7fbd1d32b8638db451308cec29e5b)
      #09 pc 000000000001886e  [anon:dalvik-DEX data] (com.entersekt.sdk.internal.setMultiChoiceModeListenerN20049.AppMultifactor+26)
      #10 pc 0000000000687de8  /apex/com.android.art/lib64/libart.so (nterp_helper+152) (BuildId: beb7fbd1d32b8638db451308cec29e5b)
      #11 pc 0000000000018b8e  [anon:dalvik-DEX data] (com.entersekt.sdk.internal.setMultiChoiceModeListenerN20049.getChallenge+26)
      #12 pc 00000000002ff860  /apex/com.android.art/lib64/libart.so (art_quick_invoke_static_stub+640) (BuildId: beb7fbd1d32b8638db451308cec29e5b)
      #13 pc 00000000002f576c  /apex/com.android.art/lib64/libart.so (_jobject* art::InvokeMethod<(art::PointerSize)8>(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jobject*, _jobject*, unsigned long)+556) (BuildId: beb7fbd1d32b8638db451308cec29e5b)
      #14 pc 00000000005c0844  /apex/com.android.art/lib64/libart.so (art::Method_invoke(_JNIEnv*, _jobject*, _jobject*, _jobjectArray*) (.__uniq.165753521025965369065708152063621506277)+36) (BuildId: beb7fbd1d32b8638db451308cec29e5b)
      #15 pc 00000000002e2bd4  /system/framework/arm64/boot.oat (art_jni_trampoline+116) (BuildId: 0d57c3515679f1b81dfee161f47cc1b8b833ebda)
      #16 pc 0000000001d144e4  /data/app/~~HYUvIb3WAhUbZRe0CMm13g==/com.swisscard.prod-r7-BEdviCwTT-NIfNAZCdQ==/oat/arm64/base.odex (com.entersekt.sdk.internal.cd.e+1460)
      #17 pc 0000000001d0bec8  /data/app/~~HYUvIb3WAhUbZRe0CMm13g==/com.swisscard.prod-r7-BEdviCwTT-NIfNAZCdQ==/oat/arm64/base.odex (com.entersekt.sdk.internal.v5.a+104)
      #18 pc 0000000001ca7534  /data/app/~~HYUvIb3WAhUbZRe0CMm13g==/com.swisscard.prod-r7-BEdviCwTT-NIfNAZCdQ==/oat/arm64/base.odex (com.entersekt.sdk.internal.P4.run+132)
      #19 pc 000000000021e24c  /system/framework/arm64/boot.oat (java.util.concurrent.ThreadPoolExecutor.runWorker+956) (BuildId: 0d57c3515679f1b81dfee161f47cc1b8b833ebda)
      #20 pc 0000000000222768  /system/framework/arm64/boot.oat (java.util.concurrent.ThreadPoolExecutor$Worker.run+56) (BuildId: 0d57c3515679f1b81dfee161f47cc1b8b833ebda)
      #21 pc 00000000000a95e0  /system/framework/arm64/boot.oat (java.lang.Thread.run+64) (BuildId: 0d57c3515679f1b81dfee161f47cc1b8b833ebda)
      #22 pc 00000000002ff594  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: beb7fbd1d32b8638db451308cec29e5b)
      #23 pc 00000000002711c0  /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+224) (BuildId: beb7fbd1d32b8638db451308cec29e5b)
      #24 pc 000000000049ce4c  /apex/com.android.art/lib64/libart.so (art::Thread::CreateCallback(void*)+1180) (BuildId: beb7fbd1d32b8638db451308cec29e5b)
      #25 pc 000000000049c99c  /apex/com.android.art/lib64/libart.so (art::Thread::CreateCallbackWithUffdGc(void*)+12) (BuildId: beb7fbd1d32b8638db451308cec29e5b)
      #26 pc 00000000000912c4  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*) (.__uniq.67847048707805468364044055584648682506)+180) (BuildId: e2d1e7cc63c204c21f69b03931dc077b)
      #27 pc 00000000000810d4  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+68) (BuildId: e2d1e7cc63c204c21f69b03931dc077b)

GrapheneOS

iyanmv It's caused by a flaw in the anti-tampering library used by some apps including banking apps. It's why the last release didn't reach the Stable channel and we've worked around it for today's release. You'll just need to wait until after the next release. The library used by these apps is reading /proc/self/maps and trying to access the first mapping it finds with a certain anonymous mapping name which broke due to an added guard page with the same name in this release. It's broken for their library to do be doing that but they must just accept that it's going to break with future Android updates and deal with it when it happens. It implies they don't care much about compatibility.

keycap_puller

Beyond the Internet connectivity checks and unknown vulnerabilities, does GOS guarantee protection against VPN leaks? I've heard of issues related to VoWiFi or GSM traffic being routed through WiFi, I don't recall, I might be wrong. Is there a way to prevent all VPN leaks in the future, perhaps by using a VM acting as a router within the phone?