android-security-13.0.0_r7 to android-security-13.0.0_r8 AOSP changelog

This only includes the Android Open Source Project changes and does not include any changes in any proprietary components included by Google or any hardware manufacturer. The raw log was generated using a modified version of this script written by JBQ and improved by Al Sutton.

Please do not copy this without attribution to this site and JBQ for the original script.

+- Project: platform/build

c252d86dff : Version bump to TSV1.220628.040 [core/build_id.mk]

+- Project: platform/external/aac

4242f97 : Increase patchParam array size by one and fix out-of-bounce write in resetLppTransposer().

+- Project: platform/external/freetype

a79e80a25 : Cherrypick following three changes

+- Project: platform/frameworks/base

e17fd149c0a2 : Merge "Resolve StatusHints image exploit across user." into sc-v2-dev am: e371b3018f
1272eec833fb : Remove unnecessary padding code
badb243574d7 : Use Settings.System.getIntForUser instead of getInt to make sure user specific settings are used
0c3b7ec3377e : DO NOT MERGE Verify URI permissions in MediaMetadata
9b58aee2a452 : Visit URIs in themed remoteviews icons.
155b14600fb1 : Check URIs in sized remote views.
70ec64dc5a2a : Update Pip launches to not enter pinned task if in background.
49773f9d871d : Fix PrivacyChip not visible issue
06e772e05514 : Validate ComponentName for MediaButtonBroadcastReceiver
a65429742caf : Implement visitUris for RemoteViews ViewGroupActionAdd.
726247f4f53e : Check URIs in notification public version.
e7ccba6da2c3 : Preserve flags for non-runtime permissions upon package update.
d18d8b350756 : On device lockdown, always show the keyguard
ed3f25b7222d : Ensure policy has no absurdly long strings
cb6282e8970f : Verify URI permissions for notification shortcutIcon.
7a5e51c918b7 : Do not load drawable for wallet card if the card image icon iscreated with content URI.
d10b27e539f7 : ActivityManagerService: Allow openContentUri from vendor/system/product.
5b7edbf2ba07 : DO NOT MERGE: ActivityManager#killBackgroundProcesses can kill caller's own app only

+- Project: platform/packages/apps/ManagedProvisioning

8277a2a9 : Remove factory-reset logic from post-suw syncauth

+- Project: platform/packages/modules/NeuralNetworks

e44e1064c : Fix OOB read in parseInputs in ShimPreparedModel.cpp
2bffd7f5e : Fix OOB Read in setOperandValue

+- Project: platform/packages/modules/Permission

0679e4f35 : RESTRICT AUTOMERGE Finish ManagePermissionsActivity if device is not provisioned

+- Project: platform/packages/providers/TelephonyProvider

ca4c9a19 : Update file permissions using canonical path

+- Project: platform/packages/services/Telecomm

9b41a963f : [conflict] Resolve StatusHints image exploit across user. am: a853f6ba61

+- Project: platform/system/ca-certificates

6065b4a : Drop TrustCor certificates