android-security-15.0.0_r12 to android-security-15.0.0_r13 AOSP changelog

This only includes the Android Open Source Project changes and does not include any changes in any proprietary components included by Google or any hardware manufacturer. The raw log was generated using a modified version of this script written by JBQ and improved by Al Sutton.

Please do not copy this without attribution to this site and JBQ for the original script.

+- Project: platform/build

5fff1a7c52 : Version bump to ASV1.240715.041 [core/build_id.mk]
52c944a1b5 : Version bump to ASV1.240715.040 [core/build_id.mk]

+- Project: platform/build/release

90a5586f0 : Revert "Clean up sqlite flags in 24Q3"

+- Project: platform/external/dng_sdk

45da109 : Update to DNG SDK 1.7.1 2410

+- Project: platform/external/sqlite

1c73770 : Copy 24Q3 sqlite 3.44.5 into 3.44.3 directories
c78d3d4 : Revert "Install sqlite 3.44.5 source files"

+- Project: platform/frameworks/av

c8713a0652 : Fix vulnerability in drmserver

+- Project: platform/frameworks/base

65e7256522b4 : [UidMigration] fix update uninstallation with sharedUserMaxSdkVersion
a68f6e5719ce : Limit the number of services (NLSes, etc) that can be approved per user
ac82fd7cf68b : Block overriding satellite carrier config keys on user builds
595ed9805382 : MediaSession: Enforce max name length on broadcast receivers too
5ffc92d00244 : Be more strict about content types for message array
7aae5fe64fea : Prevent long press on profile notifs when locked
afbcbf8dd4dc : [PM] Check unknown sources for intent installation
0985478406c2 : Reapply "[PM] Check unknown sources user restriction for intent installation"
452f0beb15a9 : Apps clearing self data shouldn't get permissions restored
221ac26392cd : Explicitly unset INSTALL_FROM_MANAGED_USER_OR_PROFILE flag
3d502bcba495 : Update isSameApp check
04c368b5f527 : Prevent launchedFromPackage spoofing via FLAG_ACTIVITY_FORWARD_RESULT.
42b92b39e52c : Handle loadDescription OutOfMemoryError in DeviceAdminInfo
42ad31c95505 : Introduce InputMethodSubtypeSafeList
903125b03826 : Harden InputMethodInfo parsing against large metadata
f3ef4dd5056e : Sanitize a11y qs shortcut tile service name before using it
4fa32d4fef90 : Trim permission, permission group names
22d9cd12ef99 : Prohibit untrusted proxys from specifying proxied attribution tags
531f3ac25912 : Ensure sandboxed UIDs are treated as untrusted in Appops
679801a99ccd : [ENR] Only skip hide sensitive anim for showing public
a7b1a8a5df14 : RESTRICT AUTOMERGE Ignore pinned Windows (Consolidated fix)
df2a35dc2f8b : Revert "RESTRICT AUTOMERGE Ignore pinned Windows"
08abd0bc0451 : [RESTRICT AUTOMERGE] Stay in app pinned mode upon SystemUI crash
b10fde7507d7 : RESTRICT AUTOMERGE Ignore pinned Windows

+- Project: platform/frameworks/native

4deb93b739 : Clip to layer bounds when drawing blur regions
dc5f45bc98 : Truncate WindowInfo.name during parcelling.

+- Project: platform/hardware/st/nfc

ffe1607 : [NFC] Fix use-after-free in eventCallback

+- Project: platform/packages/apps/DocumentsUI

15f898d50 : Prevent a malicious selector from launching an arbitrary activity.

+- Project: platform/packages/apps/Settings

298fd46325a : Check permission of the calling package in multi-pane devices

+- Project: platform/packages/modules/Permission

e59337837c : Update RuntimePermissionsUpgradeController to accept null PermGroups
90a573dcd5 : V2 Merge all permissions in a shared UID for every package in that UID
d7a9ae275a : Add SystemGalleryRoleBehavior
d80e327745 : Revert^2 "Ensure Gallery always shows as system fixed"
eb32d6903f : Revert "Revert "Display the system gallery storage permission as..."
9ee0a4d5e1 : Revert "Ensure Gallery always shows as system fixed"
28b2059674 : Revert "Display the system gallery storage permission as system fixed"

+- Project: platform/packages/modules/Virtualization

fa7ca326d : vmbase,pvmfw: aarch64: Clean dcache to PoC not PoU

+- Project: platform/packages/providers/MediaProvider

56e6173dc : Throw exception on MediaStore createRequest for non-existent uri
77f9bd12a : Fix ACCESS_MEDIA_LOCATION bypass via SAF picker
3f72b6624 : Fix select button in preview for single-select
e7bcd6408 : Revert^2 "Fix: add confirmation step in single select mode."
6b652db8a : Store calling package uid of create bulk requests for permission checks
2a8f3f272 : Restore calling identity when exception is thrown
2f45f53ce : [security-aosp-24Q3-staging] Remove default ignoreable characters before regex checks

+- Project: platform/packages/providers/TelephonyProvider

32d881de : Fix SQL injection vulnerability in SMS/MMS providers
e40b30ca : Preventing deleting file that does not belong to parts directory.

+- Project: platform/packages/services/Telephony

6bbe10df6 : Block overriding satellite carrier config keys on user builds