Any with packaged XXELKC or newer Kernel (Providing Kernel hasn't been replaced) (i9300)*
HydRx-D v2.2.1r1 (i9300 TW) or newer
CM 10.1 Nightly 20130109 (i9300 AOSP) or newer
Tamasek's Unofficial CM10.1 v32 (i9300 AOSP) or newer
ReVolt JB Nightly 20130111 (i9300 AOSP) or newer
These kernels include the update 7 fixes. If you are rooted with a custom Kernel that is older than (or doesn't match) the versions below, you are not considered "safe"
Perseus Alpha31+ (i9300 TW) or newer
Boeffla 2.6 Alpha1 (i9300 TW or newer
Speedmod K2-5 Test 1 )i9300 TW) or newer
Yank555.lu 3.0a (i9300 TW) or newer
Siyah 1.8.7 (i9300 TW & AOSP) or newer
Yank555.lu 1.4 (i9300 AOSP) or newer
Adam Kernel
Custom Recoveries:
Since the recovery uses a kernel too, to be "safe", the recovery's kernel must also be fixed.
PhilZ Touch 4.00-b04 (i9300)
Siyah 6.0.1.4 (Siyah Kernel users only)
TWRP 2.3.3.1
CF-auto-root (stock recovery supplied with this)