android-security-13.0.0_r3 to android-security-13.0.0_r4 AOSP changelog

This only includes the Android Open Source Project changes and does not include any changes in any proprietary components included by Google or any hardware manufacturer. The raw log was generated using a modified version of this script written by JBQ and improved by Al Sutton.

Please do not copy this without attribution to this site and JBQ for the original script.

+- Project: platform/build

0189b7c92f : Version bump to TSV1.220628.033 [core/build_id.mk]
f900d0e88f : Version bump to TSV1.220628.032 [core/build_id.mk]
a066c8ff74 : Version bump to TSV1.220628.031 [core/build_id.mk]

+- Project: platform/build/soong

0a52c614e : Expose avb_hash_algorithm as a property.

+- Project: platform/external/angle

b652cb7b66 : Fix a bug when getting a gzip header extra field with inflate().

+- Project: platform/frameworks/av

770b45c3c1 : Revert "audio policy: fix sensor privacy listener"

+- Project: platform/frameworks/base

fcced3719a3d : [RESTRICT AUTOMERGE] Fix bypass BG-FGS and BAL via package manager APIs
5b2886ff893c : Fix bypass BAL via LocationManager.requestFlush
4c2c02733467 : Lower per-app NotificationChannelGroup limit.
491eadf82ac4 : [RESTRICT AUTOMERGE] Limit length of the name in <uses-permission>
d3a636a65f50 : DO NOT MERGE: Context#startInstrumentation could be started from SHELL only now.
75147ee5c359 : [RESTRICT AUTOMERGE] Strip part of the activity info of another uid if no privilege
a55c2ce734d6 : Encode Intent scheme when serializing to URI string RESTRICT AUTOMERGE
9b9e6fcefe45 : Fix checkKeyIntentParceledCorrectly's bypass
45d9e436bde5 : Checking if package belongs to UID before registering broadcast receiver
0e368fa0cf27 : Revert "Trim the activity info of another uid if no privilege"
6e0bdc08acff : Trim the activity info of another uid if no privilege

+- Project: platform/frameworks/native

4420a3ad0e : Mitigate the security vulnerability by sanitizing the transaction flags.

+- Project: platform/hardware/nxp/nfc

72cbba8 : OOBR in NxpMfcReader::SendIncDecRestoreCmdPart2
3fe994d : Revert "OOBR in NxpMfcReader::SendIncDecRestoreCmdPart2"
d89e72c : OOBR in NxpMfcReader::SendIncDecRestoreCmdPart2

+- Project: platform/packages/apps/Launcher3

cb4c26c20e : Prevent falling into OtherActivityInputConsumer when over lockscreen

+- Project: platform/packages/apps/Settings

997de10f3f : Only primary user is allowed to control secure nfc
742b97187e : Fix the security vulnerability issue in AppLocalePickerActivity

+- Project: platform/packages/modules/Bluetooth

7e5f89199d : Fix an OOB bug in register_notification_rsp
d44034fd1e : Add regression test for b/254774758
d24a07f5d3 : Add mocking support for now function in AttributionProcessor
6a2e3c8557 : Fix a use-after-free bug in AttributionProcessor::OnWakelockReleased
75e6645d94 : Fix an OOB read in avdt_scb_hdl_pkt_no_frag

+- Project: platform/packages/modules/Virtualization

f348cb9f : Set avb_hash_algorithm=sha256 for system & vendor img

+- Project: platform/packages/modules/Wifi

f34b753d19 : Revert "Revert "[DO NOT MERGE] wifi: remove certificates for network factory reset""

+- Project: platform/packages/providers/MediaProvider

dc9ecad5c : Canonicalise path before extracting relative path

+- Project: platform/packages/services/Telecomm

810757f06 : DO NOT MERGE do not process content uri in call Intents
a49777990 : Ensure service unbind when receiving a null call screening service in onBind.

+- Project: platform/system/nfc

c6cc1068 : OOBW in nci_snd_set_routing_cmd()