android-security-14.0.0_r24 to android-security-14.0.0_r25 AOSP changelog

This only includes the Android Open Source Project changes and does not include any changes in any proprietary components included by Google or any hardware manufacturer. The raw log was generated using a modified version of this script written by JBQ and improved by Al Sutton.

Please do not copy this without attribution to this site and JBQ for the original script.

+- Project: platform/build

bae596836b : Version bump to USV1.230808.049 [core/build_id.mk]
4b26d9fa12 : Version bump to USV1.230808.048 [core/build_id.mk]

+- Project: platform/external/dng_sdk

d0bfe8e : Update to DNG SDK 1.7.1 2410

+- Project: platform/external/sqlite

3b55568 : Update sqlite to 3.42.1
db53e52 : Upgrade SQLite to version 3.42.0
ba40d84 : Revert "Update sqlite to 3.39.6"

+- Project: platform/frameworks/av

8bf16f1ae9 : Fix vulnerability in drmserver

+- Project: platform/frameworks/base

77d8e59a1af6 : [UidMigration] fix update uninstallation with sharedUserMaxSdkVersion
cb1ce8020b43 : Limit the number of services (NLSes, etc) that can be approved per user
00fd75533614 : Cleanup user-set NLS list on package removed
e20813dba23a : MediaSession: Enforce max name length on broadcast receivers too
d02a81da9715 : RESTRICT AUTOMERGE: Validate the position value for UsageEvent
5e1623a880d2 : Be more strict about content types for message array
6a3e551a7d3f : Prevent long press on profile notifs when locked
c1f49d2c2cac : RESTRICT AUTOMERGE Apps clearing self data shouldn't get permissions restored
a9550d0a75d0 : Explicitly unset INSTALL_FROM_MANAGED_USER_OR_PROFILE flag
699e4677367e : Update isSameApp check
ad0b8a7b63ac : Prevent launchedFromPackage spoofing via FLAG_ACTIVITY_FORWARD_RESULT.
ecf88469d44f : Handle loadDescription OutOfMemoryError in DeviceAdminInfo
bc52aa800354 : Introduce InputMethodSubtypeSafeList
558ee85e1d4a : Harden InputMethodInfo parsing against large metadata
b9455ddd2a42 : Introduce InputMethodInfoSafeList
d7a73fb8bfc2 : RESTRICT AUTOMERGE Trim permission, permission group names
a404da3cbbc6 : RESTRICT AUTOMERGE Prohibit untrusted proxys from specifying proxied attribution tags
7320b5316d76 : Ensure sandboxed UIDs are treated as untrusted in Appops
334c15a0ebee : [ENR] Only skip hide sensitive anim for showing public
0c21f3c990cd : RESTRICT AUTOMERGE Ignore pinned Windows (Consolidated fix)
4e7b14350ece : Revert "RESTRICT AUTOMERGE Ignore pinned Windows"
36e65fce2d51 : Prevent activity token leaked to another process
9ff1c081e9f7 : [RESTRICT AUTOMERGE] Stay in app pinned mode upon SystemUI crash
75ca85729ad3 : RESTRICT AUTOMERGE Ignore pinned Windows

+- Project: platform/frameworks/native

6906658b06 : Clip to layer bounds when drawing blur regions
dab4de0e4b : Truncate WindowInfo.name during parcelling.

+- Project: platform/hardware/st/nfc

502f180 : [NFC] Fix use-after-free in eventCallback

+- Project: platform/packages/apps/DocumentsUI

a48245c5b : Prevent a malicious selector from launching an arbitrary activity.

+- Project: platform/packages/apps/Settings

19171d5c31a : Check permission of the calling package in multi-pane devices

+- Project: platform/packages/modules/Permission

e45172ad90 : RESTRICT AUTOMERGE Update RuntimePermissionsUpgradeController to accept null PermGroups
35b4e29a41 : RESTRICT AUTOMERGE V2 Merge all permissions in a shared UID for every package in that UID
1b3339bc22 : RESTRICT AUTOMERGE Add SystemGalleryRoleBehavior
d935a1e0b1 : Revert^2 "Ensure Gallery always shows as system fixed"
49053e04e1 : Revert "Revert "Display the system gallery storage permission as..."
c88f7c2d9f : Revert "Display the system gallery storage permission as system fixed"
08781ef6be : Revert "Ensure Gallery always shows as system fixed"

+- Project: platform/packages/modules/Virtualization

ed2818f83 : vmbase,pvmfw: aarch64: Clean dcache to PoC not PoU

+- Project: platform/packages/providers/MediaProvider

003dd5514 : Throw exception on MediaStore createRequest for non-existent uri
50387ce9d : Fix ACCESS_MEDIA_LOCATION bypass via SAF picker
45db544a1 : Store calling package uid of create bulk requests for permission checks
12fbdbc6b : Restore calling identity when exception is thrown
e599e8d93 : [security-aosp-udc-staging] Remove default ignoreable characters before regex checks

+- Project: platform/packages/providers/TelephonyProvider

d3b6d700 : Fix SQL injection vulnerability in SMS/MMS providers
1552b677 : Preventing deleting file that does not belong to parts directory.