Patches for CVE security issues are released at least once a month to the Android Open Source Project (AOSP) repository.
Patches for Android 4.4.4 are not provided by ASB anymore.
This means, security wise Android 4.4.4 is formally dead.
Nevertheless there are a few enthusiasts, still backporting security patches from recent Android versions to 4.4.4.
You should know, such backports are no formal ASB security patches.
Therefore the security patch level of this ROM is named: Unofficial Security Backport "December 2019".
Despite of implementing these security patches by the LineageOS team to its own repository https://github.com/LineageOS, LineageOS does not provide cm11 builds anymore.
Since I personally like 4.4.4. more than later versions, I build it myself unofficially and would like to share it.
The build is made from LineageOS "Branch: cm-11.0" PLUS ASB security patches, even if they are not yet approved by LineageOS.
The main goal of this ROM is to provide up to date builds in terms of ASB security patches, not development.
#include <std_disclaimer.h> /* * Your warranty is now void. * I'm not responsible for bricked devices, dead SD cards, * thermonuclear war, or you getting fired because the alarm app failed. Please * do some research if you have any concerns about features included in this ROM * before flashing it! */
- download the zip
- install a compatible recovery (TWRP 3.1.0, cwm 22.214.171.124 are ok)
- perform a recovery backup of your current ROM
- flash ROM
- wipe data & cache partitions of your device
- optional: install the Google Apps addon package
Install lineage-11 on i9100 coming from any ROM (long way) =============================================== 0 Downloads AFH folder with all downloads ~~~~~~~~~~~ phone USB drivers "SAMSUNG_USB_Driver_for_Mobile_Phones.exe" odin "Odin3 v3.13.1.exe" Stock-ROM JB "I9100XWLST_I9100ODDLSE_I9100DDLS9_HOME.tar.md 5" Heimdall "heimdall-suite-1.4.0-win32.zip" 'ROM lineage-11 for i9100' "lineage-11-20190714-UNOFFICIAL-i9100.zip" or any other lineage-11 ROM TWRP for i9100 "twrp-3.1.0-0-i9100.img" NOTE: more recent versions of TWRP won't work in step 3 1 Install Stock-ROM JB ~~~~~~~~~~~~~~~~~~~~~~ Installing Stock-ROM JB shall ensure a clean start. 1.1 PC install drivers "SAMSUNG_USB_Driver_for_Mobile_Phones.exe" 1.2 Phone * boot to BootLoader (hold: Vol-Down + Home + Power) * confirm with Vol-Up * connect to PC 1.3 PC execute "Odin3 v3.13.1.exe" * in 'Log' you must see a device * select checkbox AP * select file "I9100XWLST_I9100ODDLSE_I9100DDLS9_HOME.tar.md 5" * Start * watch progress until success 1.4 Phone In the highly probable case of a bootloop on 1st start: * boot to recovery (hold: Vol-Down + Home + Power) * execute factory reset * reboot system Now Stock-ROM JB should be installed and working. 1.5 Phone for later usage copy "lineage-11-20190714-UNOFFICIAL-i9100.zip" to Download folder 2 Install Heimdall ~~~~~~~~~~~~~~~~~~ 2.2 Phone * boot to BootLoader (hold: Vol-Down + Home + Power) * confirm with Vol-Up * connect to PC 2.2 PC * extract "heimdall-suite-1.4.0-win32.zip" & navigate to the location of 'heimdall.exe' Remark: use a folder on the PC's HDD, it didn't work for me when using a USB-Drive * follow 'Driver Installation Instructions' in README.TXT (switches USB driver with zadig.exe) * check connection to phone via 'heindall.exe detect' --> must show 'Device detected' 3 Install TWRP & LOS ~~~~~~~~~~~~~~~~~~~~ 3.1 PC * extract 'ROM lineage-11 for i9100' * copy 'boot.img' to the folder containing 'heimdall.exe' * copy "twrp-3.1.0-0-i9100.img" to the folder containing 'heimdall.exe' * open cmd.exe in the folder containing 'heimdall.exe' * execute "D:\S2\Heimdall\build\bin>heimdall flash --KERNEL boot.img --RECOVERY twrp-3.1.0-0-i9100.img --no-reboot" * watch progress until 'Releasing device interface...' 3.2 Phone * pull out the USB cable * hold the power button until screen is off (> 8s) * boot to Recovery (hold: Vol-Up + Home + Power) * goto Wipe * goto Advanced wipe --> select Dalvik, Cache, System, Data * swipe to Wipe * goto TWRP Install * navigate to Download folder from 1.5 * select "lineage-11-20190714-UNOFFICIAL-i9100.zip" Remark: Do not install gapps together with ROM, SUW will crash and ROM is not usable. * swipe to confirm flash * reboot System * configure the just installed ROM * Optional install gapps: reboot to recovery install gapps reboot system
<< latest 2019/12/24 >> Unofficial Security Backport "December 2019"
LineageOS per 2019-12-24 status merged at LineageOS
LineageOS per 2019-12-24 status open at LineageOS topics asb-2019.12-cm11
The stock browser is removed from this ROM due to severe security issues, which cannot get fixed.
Get a state of art browser (like firefox) from play store instead.
xposed not supported
1) A fix is provided by Lenny Bard, see instructions at post here.
2) Fix by lee.wp14. See post https://forum.xda-developers.com/sho...&postcount=243.
Be aware, these two fixes might break some security patches.
video in browser fix, thanks to TriboDoP:
Paddy's found out, that latest gapps may cause trouble.
xpduyson - ASB patches
Tim Schumacher - ASB patches + KRACK patches
mse1969 - ASB patches
Android-Andi - security patches
syphyr - security patches