microg/GmsCore v0.3.17.252432

on GitHub

Security

This release fixes several security vulnerabilities, including high severity issues. All security fixes are also available as patches to the previous release, v0.3.16.252432, see v0.3.16.1.252432. To date, we are not aware of these security vulnerabilities being exploited in the wild. Thanks @Fs00, @SohelParashar and @p1gp1g for reporting these issues.

What's Changed

• Maps:
  • Improve location in Huawei Maps (#3700). Thanks @DaVinci9196.
  • Add support for tile overlays (#3685). Thanks @jonathanklee.
• Location:
  • Fix speed calculation for sub-second location updates (#3737). Thanks @DaVinci9196.
  • Fix Google location settings redirect (#3588). Thanks @DaVinci9196.
  • Fix geocode provider error message (#3730). Thanks @luk1337.
  • Fix security issues.
• Fido:
  • Accept lowercase hybrid QR URI scheme (#3636). Thanks @Jadeiin.
  • Fix screen-lock exclude credential check (#3752). Thanks @adamcparsons.
  • Fix security issues.
• DroidGuard: Fix service call proxy (#3711). Thanks @DaVinci9196.
• Play Integrity:
  • Fix interface definition (#3725). Thanks @jonathanklee.
  • Fix security issues.
• Phenotype: Update features (#3679, #3690). Thanks @DaVinci9196.
• Age Signals: Add dummy services (#3742). Thanks @DaVinci9196.
• Home: Add dummy service (#3712). Thanks @DaVinci9196.
• GCM: Fix security issues.
• Asset Modules: Fix security issues.
• SMS Retriever: Fix concurrency exception (#3626). Thanks @DaVinci9196.
• Settings: Read defaults from the bundled partition (#3394). Thanks @DaVinci9196.
• Auth:
  • Improve reauth handling when requesting auth tokens (#3448). Thanks @TheScarastic.
  • Fix security issues.
• In App Purchases:
  • Fix protocol issues (#3684). Thanks @DaVinci9196.
  • Fix callback issues (#3729). Thanks @DaVinci9196.
  • Fix payment card switching (#3649). Thanks. @DaVinci9196.
  • Fix security issues.
• Grant privileged service access to Google Passwords app (#3623). Thanks @DaVinci9196.
• New/Updated translations for Croatian, German, Burmese, Turkish, Hungarian, French, Chinese (Traditional), Arabic, Icelandic, Spanish, Finnish, Polish, Portuguese, Azerbaijani, Malay, Chinese (Simplified), Japanese, Uyghur. Thanks @marin-19, @Lamdarer, @mgminkh3nthyu, @oersen, @mdvhimself, @Atalanttore, @Mickmick21, @Sup-25498, @sveinki, @Arno313, @ciaparittolen-hub, @kolenda88, @rehork, @ReduxFlakes, @Jacob7179, @shuuji3, @AbduqadirAbliz, @tooclassyforthisworld and unnamed Weblate translators.
• Full Changelog: v0.3.16.252432...v0.3.17.252432

New Contributors

• @luk1337 made their first contribution in #3730
• @Jadeiin made their first contribution in #3636
• @muvaf made their first contribution in #3731
• @adamcparsons made their first contribution in #3752
• @abranson made their first contribution in #3394
• @TheScarastic made their first contribution in #3448

Release artifacts

• Users on devices with an aftermarket custom operating system ("Custom ROM") that supports microG should install com.google.android.gms-250932034.apk and com.android.vending-84022634.apk. These versions are also distributed through the microG F-Droid repository.
• Users on Huawei devices running original operating system (EMUI or HarmonyOS) that supports microG should install com.google.android.gms-250932034-hw.apk and com.android.vending-84022634-hw.apk. These versions are also distributed through Huawei AppGallery.
• org.microg.gms-250932034-user.apk is a development preview for special situations. Do not use it except if you know why.