android-security-15.0.0_r3 to android-security-15.0.0

This only includes the Android Open Source Project changes and does not include any changes in any proprietary components included by Google or any hardware manufacturer. The raw log was generated using a modified version of this script written by JBQ and improved by Al Sutton.

Please do not copy this without attribution to this site and JBQ for the original script.

+- Project: platform/build

9065727680 : Version bump to ASV1.240715.016 [core/build_id.mk]
1dd087c27e : Version bump to ASV1.240715.015 [core/build_id.mk]

+- Project: platform/external/giflib

b3aea8d : Fix potential overflow when calculating ImageSize

+- Project: platform/frameworks/base

3b2be226f1b9 : Always show all approved apps
076a97aa3249 : [CDM] Check if it's system UID for hidden Perm Sync APIs
4b2a235c895c : Pass SafeActivityOptions with actual caller for startActivityInTF
047bc1ce62f8 : Enforce hard limits on hosts per package and widgets per host.
5018e2273cb3 : Update checkKeyIntent
b8a1a5d47c39 : Inline SECURE_ALLOWLIST_TOKEN
f1fd60bb80f9 : Ensure group summary (and any notifications added directly by NMS) have the correct token
bcb1316835dc : enforce limits for VisualVoicemailSmsFilterSettings properties
a44beb0ca3f7 : Limit the size of vibration effects stored on a NotificationChannel

+- Project: platform/frameworks/native

49eb0ea081 : libbinder: Parcel: validate read data before write
df99a39030 : libbinder: Parcel: grow rejects large data pos
b3cdb06ab9 : binder: fix FD handling in continueWrite

+- Project: platform/packages/apps/Settings

334323abd57 : [CDM][NLS] Check if the NLS service has an intent-filter

+- Project: platform/packages/modules/Connectivity

ad57b42bc6 : Skip adding ingress discard rule to OEM VPN
feaac56e41 : Skip adding ingress discard rule to legacy VPN

+- Project: platform/packages/services/Telephony

b1ab472f0 : enforce the calling package is the default dialer for VisualVoicemail