AOSP Changelogs

android-security-13.0.0_r11 to android-security-13.0.0_r12 AOSP changelog

This only includes the Android Open Source Project changes and does not include any changes in any proprietary components included by Google or any hardware manufacturer. The raw log was generated using a modified version of this script written by JBQ and improved by Al Sutton.

Please do not copy this without attribution to this site and JBQ for the original script.

+- Project: platform/build

eaceebd397 : Version bump to TSV1.220628.053 [core/build_id.mk]
385e4fd924 : Version bump to TSV1.220628.052 [core/build_id.mk]

+- Project: platform/cts

0dca028ba4f : Change open jpeg folder name

+- Project: platform/external/pdfium

ab028b491 : Update pdfium to Chrome 114.0.5735.130 pdfium

+- Project: platform/frameworks/av

3cc4024ac7 : Revert "NdkMedia: fix android.mediav2.cts.CodecEncoderSurfaceTest failed."
099906c5eb : NdkMedia: fix android.mediav2.cts.CodecEncoderSurfaceTest failed.
5f401fc9f2 : Condition background record restriction on Sdk
148aeea373 : Correct attribution source for MMAP thread
58fd993a89 : httplive: fix use-after-free

+- Project: platform/frameworks/base

1a42ae537926 : Check URI permissions for resumable media artwork
f4644b55d36a : Stop using deprecated getParcelable method in AccountManagerService.
b0f6558fb36e : Move startWatchingModeWithFlags to the native supported binder calls
17f0869707bc : Updated: always show the keyguard on device lockdown
9e0c05e36afe : Adding in verification of calling UID in onShellCommand
2510373ed5e4 : Revert "On device lockdown, always show the keyguard"
a5e55363e69b : Validate userId when publishing shortcuts
0ec7b119d41a : Use readUniqueFileDescriptor in incidentd service
ae768fbb9975 : Restrict number of shortcuts can be added through addDynamicShortcuts
1120bc7e5117 : Require permission to unlock keyguard
d21ffbe8a2ee : Disable priority conversation widget for secondary users
f229f0e55b07 : Validate URI-based shortcut icon at creation time.
40e4ea759743 : RESTRICT AUTOMERGE: Drop invalid data.
fe6fef4f9c1f : Visit Uris related to Notification style extras
d98abeef8f87 : Fix bypass BAL via `requestGeofence`
b7bd7df91740 : Visit Uris added by WearableExtender

+- Project: platform/frameworks/native

9ddecd3d2b : Add AppOps overload to be able to watch foreground changes.

+- Project: platform/packages/apps/Launcher3

6c9a41117d : Fix permission bypass in legacy shortcut

+- Project: platform/packages/modules/Bluetooth

495417bd06 : Fix timing attack in BTM_BleVerifySignature
5bfd817719 : Fix UAF in ~CallbackEnv
243fdf1c0d : Add bounds checks in btif_avrcp_audio_track.cc
a218e5be5e : Fix an OOB bug in parse_gap_data
ea81185c89 : Factor out duplicate code for parsing gap data
5673b3c6bb : Enforce authentication if encryption is required
9194524a92 : Reorganize the code for checking auth requirement
a99edb35d6 : Reject access to secure service authenticated from a temp bonding [3]
f4e439c223 : Reject access to secure services authenticated from temp bonding [2]
25a7d9aace : Reject access to secure service authenticated from a temp bonding [1]
7b30443dac : Fix multiple OOB bugs in btm_ble_gap.cc

+- Project: platform/packages/services/Telecomm

68dca6203 : Resolve account image icon profile boundary exploit.

+- Project: platform/system/netd

1b8bddd9 : Fix Heap-use-after-free in MDnsSdListener::Monitor::run