android-security-15.0.0_r11 to android-security-15.0.0_r12 AOSP changelog

This only includes the Android Open Source Project changes and does not include any changes in any proprietary components included by Google or any hardware manufacturer. The raw log was generated using a modified version of this script written by JBQ and improved by Al Sutton.

Please do not copy this without attribution to this site and JBQ for the original script.

+- Project: platform/build

40b666df1b : Version bump to ASV1.240715.039 [core/build_id.mk] f7a24d09db : Version bump to ASV1.240715.038 [core/build_id.mk] b0d1e2362e : Version bump to ASV1.240715.037 [core/build_id.mk] 51312b6ee4 : Version bump to ASV1.240715.036 [core/build_id.mk]

+- Project: platform/build/release

df01bf9a7 : Clean up sqlite flags in 24Q3

+- Project: platform/cts

586f75b10a3 : Track DNG SDK 1.7.1 API changes

+- Project: platform/external/dng_sdk

c210ca6 : Crude DNG SDK 1.7.1 upgrade

+- Project: platform/external/skia

e729c3f74b : Backport DNG SDK 1.7.1 support in SkRawCodec

+- Project: platform/external/sqlite

e0f74ad : Install sqlite 3.44.5 source files

+- Project: platform/frameworks/av

9d74d91a39 : C2SoftDav1dDec: configure decoder to output only one layer in SVC mode

+- Project: platform/frameworks/base

294a98e56fd5 : Revert "RESTRICT AUTOMERGE Ignore pinned Windows" cd69ad804443 : Fix broken WmTests e72cdc5c770d : Validate displayName for AssociationRequest dc0e5049d23f : Add missing import in test d8faf81970e4 : Don't allow 3p apps to become voice recognizer automatically ed9af8192664 : Prevent accidental creation of PackagePreferences for non-existing packages b645abd5b328 : Enforce a hard limit for the size of images to be decoded e74b3376e899 : Get all accounts no matter the visibility a54ba90ae134 : Sanitize window private flags based on caller permissions. 3723e843b659 : print: Prevent cross-user icon access 99f89bb4fdd0 : Add onKeyEvent, to support KEYCODE_HOME 06e697583c87 : RESTRICT AUTOMERGE: Backport Cut max duration for default transition to 1500 e623c490905c : Don't allow read truncation or appending for file operations. 0925826a6ad8 : Allow resetting the voice recognition service if its package uninstalled 8f8c16cee29b : Check length of MBR component name properties aa4b01792c25 : Disallow factory reset while in DSU mode 9adff3df0285 : Check the strongAuthTracker for lockdown instead of LockPatternUtils 82af7e1a1844 : Protect shell overriding the carrier config 2114590c98f3 : Use ParceledListSlice to paginate response from getPackagesForOpsForDevice binder API 67769a49e360 : Ensure exit animations are canceled prior to user switch 3540361264df : Remove all pending keyguard exits on SHOW e7824e85ad70 : Validate IME metadata before parsing cfcef3f38c2f : GRANT TRUSTED_OVERLAY after PiP is entered 5e77a2d12a25 : Update broken tests 9c8c99ba63bb : Make sure to disassociate all the packages with shared UID 30812fb5ba23 : [CDM] Limit NLS revoke to applicable roles. 529f24023e15 : Remove exception for Q- apps from app op validation e086bd9b0fa8 : RESTRICT AUTOMERGE Limit usages sent to safety center by user fccd4c6bc347 : Add check to prevent resetting VPN always-on setting in safe mode ea0fc122e4df : Check sound Uri permission when creating a notification channel 5475e757915a : Revert "Check sound Uri permission when creating a notification channel" 26f25bbc2ae8 : Do not recycle Parcel when lazy value is used 2588609ffab9 : Add flag to exclude capability propagation when connecting MediaBrowser 345b6f2a6900 : Delete updateNotificationChannelGroupFromPrivilegedListener 3b6cc0893907 : Validate user on biometric auth and keyguard done e6e8c87c3c99 : Use provided calling uid/pid for checking intercept-global-drag flag 739ece18a63a : Add WIU/BFSL allowlisting to MediaButtonReceiverHolder.send c88cb354b7fa : Do not propagate WIU/BFSL for MediaController.sendCommand bf9e58d7edb5 : Add resolveActivityAsUserForExplicitType api to pm bec2efb2d714 : Update user switching processes 3ca035e4cdf3 : [RESTRICT AUTOMERGE] Fix Autofill Inflating as User 0 eba8dce96baa : Systemservice change to propagate userId to MMSService

+- Project: platform/frameworks/native

e4d2d212c5 : Add each blur region as a separate request 51f89fddd0 : RESTRICT AUTOMERGE: When an opaque window has alpha < 0.5, don't let it receive touches. de36dac706 : Set mDataSize properly in appendFrom

+- Project: platform/frameworks/opt/telephony

8e7b0146d5 : [Telephony][Security Fix] Launch Browser only if device is unlocked.

+- Project: platform/packages/apps/CertInstaller

b24bef7 : Prevent settings impostors from installing CA certs

+- Project: platform/packages/apps/Launcher3

db81464732 : Send KEYCODE_HOME for home button instead of startActivity directly

+- Project: platform/packages/apps/Settings

c5beb708454 : Import translations. DO NOT MERGE ANYWHERE 6a6a1f7f54a : Backport BT pairing dialog changes adac3d79c0f : [nfc] Fix string injection in default payment app selector 0db1143041a : Hide sensistive content from locked profiles 11b11215aa1 : Prevent SettingsSliceProvider from accessing unused packages

+- Project: platform/packages/modules/Bluetooth

d259085c61 : Save peer CSRK after ltk generation 7f8dd23dae : [Reland] Backport regression fixes for 288144143 b2f37c9983 : Revert "Backport regression fixes for 288144143"

+- Project: platform/packages/modules/IntentResolver

c6bc214f : Verify caller access rights for the additional content URI. dcb671e0 : Use the new packageManager API to forward intents

+- Project: platform/packages/services/Mms

ad9bf77 : Verify calling user on mms downloads 7b12d89 : Propagating callingUserId from messaging app to the RADIO process

+- Project: platform/packages/services/Telecomm

362331236 : Catch IllegalArgumentException when unbinding CallRedirectionServiceConnection

+- Project: platform/packages/services/Telephony

d4e077185 : Restricting UserBuild from presistent carrierConfig Override a746643a1 : Protect shell overriding the carrier config e4124fa76 : fix: Use permission check for contact URI validation