#A15 #Unofficial #TD #GSI #LineageOS

Build Date: 2025 07 28
July Security Patch

LineageOS 22.2 2025.07.28

Changelog

July 2025 Security patch
Sync with latest sources of Treble Droid
sdcard is now mounted normally

Features

LineageOS
Android 15 QPR2
For a/b devices only
No inbuilt root
Fixes that will never be in aosp
Face unlock
Forced LTE_CA
EROFS(Requires kernel 5.4+, and the corresponding fstab entries)
All ext4 builds are fully rw
No fixes from me for specific devices
EROFS Version Features
EROFS is a read-only file system that is optimized for performance reads. With it, the system and system applications load and work faster than on ext4
In my GSI, EROFS is built using lz4hc compression, which greatly reduces the size of the system image
In the EROFS version, vndk 28 and 29 have been cut out. Since devices with these vndk

Known Issues

No Internet connection on some devices
No working FOD/UDFPS

Maintainer: MisterZtr
Download: LINK

@TrebleGsis_PrivacySecure_Chat
@TrebleGsis_PrivacySecure_Channel

🚨 CISA just confirmed active exploitation of a critical PaperCut bug (CVE-2023-2533) — attackers can hijack admin sessions to run code remotely.

It’s being used by ransomware gangs right now.

Patch before August 18 or risk breach.

Full details → https://thehackernews.com/2025/07/cisa-adds-papercut-ngmf-csrf.html

If someone needs to try Apple's Liquid Glass Interface on his Android, you may use this:

There's also a demo app available to try first.

https://github.com/Kyant0/AndroidLiquidGlass

Australian Competition & Consumer Commission Product Safety Recall - Google Pixel 6a smartphone
https://www.productsafety.gov.au/search-consumer-product-recalls/google-pixel-6a-smartphone

https://redd.it/1mbudmn
@reddit_android

Debugging the Pixel 8 kernel via KGDB
How to use GDB over a serial connection for debugging the kernel on a Pixel 8
https://xairy.io/articles/pixel-kgdb

RedHook: A New Android Banking Trojan Targeting Users in Vietnam
https://cyble.com/blog/redhook-new-android-banking-targeting-in-vietnam/

A Photonic SRAM with Embedded XOR Logic for Ultra-Fast In-Memory Computing
Article, Comments

SRAM Has No Chill: Exploiting Power Domain Separation to Steal On-Chip Secrets
Article, Comments

Google can review or read all user communications, including private messages
Article, Comments

The EU could be scanning your chats by October 2025
Article, Comments

EU Commission finds Temu in breach of online platform rules
Article, Comments

Note 15 Pro+ to be the first Redmi device introducing a new connectivity feature

https://ift.tt/5Rf4K7s

Oppo Find X9 Pro specs leak, it will have a huge battery

https://ift.tt/2epGi9m

vivo Y400 5G's launch date, design, and colors revealed

https://ift.tt/3Q7TZEc

https://github.com/programminghoch10/Lygisk

Lygisk

Lygisk is a Magisk fork correcting one of the few mistakes legendary @topjohnwu did not fix (yet).

Lygisk fixes the needed /data access in addon.d, which fails to reinstall Magisk during OTA if the device does not support FBE decryption in recovery (more details below).

Brought to you by @Linux4, @programminghoch10 and @binarynoise.

Thanks to @jesec for the initial work. Read more about this here.

Downloads

Get the latest stable here: Direct Download from GitHub

Any other variant can be downloaded by clicking its name below.
Variants

We supply you with four variants of Lygisk:

Stable: Stable and tested versions, which have been manually ported from Magisk stable and have been tested to work
Beta: Automated ci-builds from the latest magisk stable
Canary: Automated ci-builds from the latest magisk canary
Madness: Automated ci-builds from the latest magisk master

We recommend stable or beta for normal usage.

If you want any of the latest Magisk features you can try canary but we can't guarantee anything there. If you're a real madlad you can also use madness but only truly insane people would want to do that.

For canary or madness you need to add a custom update URL.

https://killedbygoogle.com/

Tombstone
Killed by Google

Killed by Google is the Google graveyard; a free and open source list of discontinued Google services, products, devices, and apps. We aim to be a source of factual information about the history surrounding Google's dead projects.

Contributors from around the world help compile, research, and maintain the information about dying and dead Google products. You can join the discussion on GitHub. A project by Cody Ogden.

Dimensity chips are now better at emulating PC games on Android

https://ift.tt/gucAsd0

ToxicPanda: The Android Banking Trojan Targeting Europe
https://www.bitsight.com/blog/toxicpanda-android-banking-malware-2025-study

🚨 100,000+ sites hacked in 2024’s biggest JavaScript injection attack.

Even React wasn’t safe — a trusted library was turned into a malware delivery system.

Here’s how modern JS threats are breaking your app → https://thehackernews.com/2025/07/why-react-didnt-kill-xss-new-javascript.html

🚨 A wave of mobile malware is sweeping Asia—targeting Android & iOS with fake apps, phishing, and spyware.

🔸 250+ fake dating & social apps (SarangTrap) stealing photos, contacts, SMS
🔸 Banking trojans like RedHook hijack devices in Vietnam
🔸 Fake Telegram & finance apps hit users in India, Korea, Bangladesh
🔸 Criminals now rent malware kits or buy access to infected phones

Cybercrime is now a business. Stay alert → https://thehackernews.com/2025/07/cybercriminals-use-fake-apps-to-steal.html

Xiaomi Redmi 15 5G's key specs, launch date, and design revealed

https://ift.tt/xGnZAX4