CyanogenMod 7.0.3 released [LWN.net]

The CyanogenMod 7.0.3 release is out. "This update contains a bug fix for our update notification system, as well as an important security fix. It is recommended that all users running a version of CyanogenMod prior to 7.0.3 update to this release." They don't seem to be talking about what security problem has actually been fixed at this time.

(Log in to post comments)

CyanogenMod 7.0.3 released

Posted May 6, 2011 14:13 UTC (Fri) by Celest (subscriber, #69372) [Link]

No they don't indeed. As DrMacinyasha says it: "security vulnerability can't be announced yet, but will be within a few weeks" [0].

[0] http://www.cyanogenmod.com/blog/cyanogenmod-7-0-3-release...

Who needs to update

Posted May 6, 2011 17:38 UTC (Fri) by marduk (subscriber, #3831) [Link]

The post says you should not update if you are using a recent nightly build... How much is "recent"?

Who needs to update

Posted May 6, 2011 18:58 UTC (Fri) by rfunk (subscriber, #4054) [Link]

http://twitter.com/#!/DrMacinyasha/status/66372460555157504
"The security patches that are in 7.0.3(.1) are in all nightly builds after March 3."

The nightly builds are now pre-CM7.1, based on Android 2.3.4. CM7.0.x is based on Android 2.3.3.

Who needs to update

Posted May 6, 2011 19:09 UTC (Fri) by rfunk (subscriber, #4054) [Link]

http://www.cyanogenmod.com/blog/cyanogenmod-7-0-3-release...
says this:
"Nightly 61 has the security patch."

I haven't been following the nightlies, so I don't know how recent that is.

Changelog

Posted May 6, 2011 18:07 UTC (Fri) by job (guest, #670) [Link]

I don't understand. Are these security fixes backported from Android 2.3.4? Or do we still need to wait for CM 7.1 to get those?

For an open source project it is all very opaque. Why is there not a changelog in sight?

Changelog

Posted May 6, 2011 19:05 UTC (Fri) by rfunk (subscriber, #4054) [Link]

FWIW, the project is on Guthub: https://github.com/CyanogenMod

And commit logs go to a Twitter feed: http://twitter.com/#!/cmsrc