android-security-15.0.0_r11 to android-security-15.0.0_r12 AOSP changelog

This only includes the Android Open Source Project changes and does not include any changes in any proprietary components included by Google or any hardware manufacturer. The raw log was generated using a modified version of this script written by JBQ and improved by Al Sutton.

Please do not copy this without attribution to this site and JBQ for the original script.

+- Project: platform/build

40b666df1b : Version bump to ASV1.240715.039 [core/build_id.mk]
f7a24d09db : Version bump to ASV1.240715.038 [core/build_id.mk]
b0d1e2362e : Version bump to ASV1.240715.037 [core/build_id.mk]
51312b6ee4 : Version bump to ASV1.240715.036 [core/build_id.mk]

+- Project: platform/build/release

df01bf9a7 : Clean up sqlite flags in 24Q3

+- Project: platform/cts

586f75b10a3 : Track DNG SDK 1.7.1 API changes

+- Project: platform/external/dng_sdk

c210ca6 : Crude DNG SDK 1.7.1 upgrade

+- Project: platform/external/skia

e729c3f74b : Backport DNG SDK 1.7.1 support in SkRawCodec

+- Project: platform/external/sqlite

e0f74ad : Install sqlite 3.44.5 source files

+- Project: platform/frameworks/av

9d74d91a39 : C2SoftDav1dDec: configure decoder to output only one layer in SVC mode

+- Project: platform/frameworks/base

294a98e56fd5 : Revert "RESTRICT AUTOMERGE Ignore pinned Windows"
cd69ad804443 : Fix broken WmTests
e72cdc5c770d : Validate displayName for AssociationRequest
dc0e5049d23f : Add missing import in test
d8faf81970e4 : Don't allow 3p apps to become voice recognizer automatically
ed9af8192664 : Prevent accidental creation of PackagePreferences for non-existing packages
b645abd5b328 : Enforce a hard limit for the size of images to be decoded
e74b3376e899 : Get all accounts no matter the visibility
a54ba90ae134 : Sanitize window private flags based on caller permissions.
3723e843b659 : print: Prevent cross-user icon access
99f89bb4fdd0 : Add onKeyEvent, to support KEYCODE_HOME
06e697583c87 : RESTRICT AUTOMERGE: Backport Cut max duration for default transition to 1500
e623c490905c : Don't allow read truncation or appending for file operations.
0925826a6ad8 : Allow resetting the voice recognition service if its package uninstalled
8f8c16cee29b : Check length of MBR component name properties
aa4b01792c25 : Disallow factory reset while in DSU mode
9adff3df0285 : Check the strongAuthTracker for lockdown instead of LockPatternUtils
82af7e1a1844 : Protect shell overriding the carrier config
2114590c98f3 : Use ParceledListSlice to paginate response from getPackagesForOpsForDevice binder API
67769a49e360 : Ensure exit animations are canceled prior to user switch
3540361264df : Remove all pending keyguard exits on SHOW
e7824e85ad70 : Validate IME metadata before parsing
cfcef3f38c2f : GRANT TRUSTED_OVERLAY after PiP is entered
5e77a2d12a25 : Update broken tests
9c8c99ba63bb : Make sure to disassociate all the packages with shared UID
30812fb5ba23 : [CDM] Limit NLS revoke to applicable roles.
529f24023e15 : Remove exception for Q- apps from app op validation
e086bd9b0fa8 : RESTRICT AUTOMERGE Limit usages sent to safety center by user
fccd4c6bc347 : Add check to prevent resetting VPN always-on setting in safe mode
ea0fc122e4df : Check sound Uri permission when creating a notification channel
5475e757915a : Revert "Check sound Uri permission when creating a notification channel"
26f25bbc2ae8 : Do not recycle Parcel when lazy value is used
2588609ffab9 : Add flag to exclude capability propagation when connecting MediaBrowser
345b6f2a6900 : Delete updateNotificationChannelGroupFromPrivilegedListener
3b6cc0893907 : Validate user on biometric auth and keyguard done
e6e8c87c3c99 : Use provided calling uid/pid for checking intercept-global-drag flag
739ece18a63a : Add WIU/BFSL allowlisting to MediaButtonReceiverHolder.send
c88cb354b7fa : Do not propagate WIU/BFSL for MediaController.sendCommand
bf9e58d7edb5 : Add resolveActivityAsUserForExplicitType api to pm
bec2efb2d714 : Update user switching processes
3ca035e4cdf3 : [RESTRICT AUTOMERGE] Fix Autofill Inflating as User 0
eba8dce96baa : Systemservice change to propagate userId to MMSService

+- Project: platform/frameworks/native

e4d2d212c5 : Add each blur region as a separate request
51f89fddd0 : RESTRICT AUTOMERGE: When an opaque window has alpha < 0.5, don't let it receive touches.
de36dac706 : Set mDataSize properly in appendFrom

+- Project: platform/frameworks/opt/telephony

8e7b0146d5 : [Telephony][Security Fix] Launch Browser only if device is unlocked.

+- Project: platform/packages/apps/CertInstaller

b24bef7 : Prevent settings impostors from installing CA certs

+- Project: platform/packages/apps/Launcher3

db81464732 : Send KEYCODE_HOME for home button instead of startActivity directly

+- Project: platform/packages/apps/Settings

c5beb708454 : Import translations. DO NOT MERGE ANYWHERE
6a6a1f7f54a : Backport BT pairing dialog changes
adac3d79c0f : [nfc] Fix string injection in default payment app selector
0db1143041a : Hide sensistive content from locked profiles
11b11215aa1 : Prevent SettingsSliceProvider from accessing unused packages

+- Project: platform/packages/modules/Bluetooth

d259085c61 : Save peer CSRK after ltk generation
7f8dd23dae : [Reland] Backport regression fixes for 288144143
b2f37c9983 : Revert "Backport regression fixes for 288144143"

+- Project: platform/packages/modules/IntentResolver

c6bc214f : Verify caller access rights for the additional content URI.
dcb671e0 : Use the new packageManager API to forward intents

+- Project: platform/packages/services/Mms

ad9bf77 : Verify calling user on mms downloads
7b12d89 : Propagating callingUserId from messaging app to the RADIO process

+- Project: platform/packages/services/Telecomm

362331236 : Catch IllegalArgumentException when unbinding CallRedirectionServiceConnection

+- Project: platform/packages/services/Telephony

d4e077185 : Restricting UserBuild from presistent carrierConfig Override
a746643a1 : Protect shell overriding the carrier config
e4124fa76 : fix: Use permission check for contact URI validation