Ubuntu Touch is the privacy and freedom-respecting mobile operating system by UBports. Ubuntu Touch 20.04 OTA-7, is an un-scheduled OTA security fix for Ubuntu Touch 20.04. Ubuntu Touch 20.04 OTA-7 will become available for the following supported Ubuntu Touch devices over the next days:
* Asus Zenfone Max Pro M1
* F(x)tec Pro1 X
* Fairphone 3 and 3+
* Fairphone 4
* Google Pixel 3a and 3a XL
* JingPad A1
* Oneplus 5 and 5T
* OnePlus 6 and 6T
* OnePlus Nord N10 5G
* OnePlus Nord N100
* Sony Xperia X
* Vollaphone
* Vollaphone X
* Vollaphone 22
* Vollaphone X23
* Xiaomi Poco X3 NFC / X3
We're going to release Ubuntu Touch 20.04 OTA-7 earlier than schedule to fix a number of security issues affecting Pulseaudio, our audio server. One of the issue affects privacy of Ubuntu Touch users, and thus we've decided to release an out-of-schedule update.
The issues are as follow:
- Confined applications can remove the Trust Store permission system module from Pulseaudio, allowing such applications to access the phone's microphone without user knowing, amongst a number of privileged actions.
- Confined applications are able to crash Pulseaudio by performing a volume control on a specific virtual device when a Bluetooth headset is connected.
Both of the issues are specific to the way Ubuntu Touch patches and uses Pulseaudio. However, the second issue has a potential to affect some Ubuntu 16.04 installations running non-default configuration (newer versions are not affected). As such, we've coordinated with Canonical on the timing before making this announcement.
Due to the way our release pipeline works, Ubuntu Touch 20.04 OTA-7 will also contain a number of fixes which are not related to the aforementioned issues. Thus, we'll release an RC for 20.04 OTA-7 in upcoming days and we'll announce a call-for-testing. We plan to release Ubuntu Touch 20.04 OTA-7 on Friday 29 November 2024.
How to get OTA-7
Existing Ubuntu Touch users
Existing users of Ubuntu Touch on Stable channel (which is selected by default in the UBports Installer) will receive the OTA-6 upgrade by using the Updates screen of System Settings. Devices will randomly be allocated the update from today through. This spread is to give us a breathing space to stop the roll out of any bad update (should that ever become necessary), and is not to accommodate any bandwidth restrictions.
There is also the system update broadcast facility, which will send each online device a trigger message. If the device can find its update, it will be downloaded for you and when everything is ready, a notification will pop up and you can install right away. This only works if you have set up that updates can be downloaded automatically.
If however you would like to receive the update immediately, connect your device to a computer, open a terminal, turn on ADB access and issue the following command over adb shell :
sudo system-image-cli -v -p 0 --progress dots
Your device should then download the update and install it. This process may take a while, depending on your download speed.
New Ubuntu Touch users
You will find instructions for installing Ubuntu Touch on your device at https://devices.ubuntu-touch.io .
"I found an issue!"
Have you found a bug? We want to know! Quickly!
You can follow our Bug Reporting document to learn how to present the information we'll need to confirm and fix your issue. Every bit helps. The best way to improve Ubuntu Touch is to use it and then tell us about the experience.
You should always check to see whether your bug has already been reported, from now on at ubports/ubuntu-touch on Gitlab ! Browsing open bugs is worth doing, even if you have nothing to report. This ensures that you can watch for any of the open issues and help fix them by providing more information." -> Feel free to browse open issues and help fixing them by providing additional information.
Changelog OTA-7
Changelog of libgbinder since 2024-11-04:
* d/patches: adjust stability field patch to apply to Android 12 only, use aidl3 sm variant on Android 11 (@peat-psuwit)
Changelog of lomiri-system-settings since 2024-11-04:
* plugins/printing: Show panel if CUPS socket is found (@fredldotme)
Changelog of mir-android2-platform since 2024-11-04:
* Finish display hotplugging implementation & fix external monitor reconnection (@fredldotme)
Changelog of morph-browser since 2024-11-04:
* doc/: correct QML module version (0.2 -> 0.1) (@peat-psuwit)
Changelog of pulseaudio since 2024-11-04:
* Merge security fixes for pulseaudio#5 and pulseaudio#6 (@peat-psuwit)
Stay tuned ...