android-security-15.0.0_r6 to android-security-15.0.0_r7 AOSP changelog

This only includes the Android Open Source Project changes and does not include any changes in any proprietary components included by Google or any hardware manufacturer. The raw log was generated using a modified version of this script written by JBQ and improved by Al Sutton.

Please do not copy this without attribution to this site and JBQ for the original script.

+- Project: platform/build

242e086215 : Version bump to ASV1.240715.025 [core/build_id.mk]
cd7f355448 : Version bump to ASV1.240715.024 [core/build_id.mk]
6bac78fcdb : Version bump to ASV1.240715.023 [core/build_id.mk]
b04d7a9293 : Version bump to ASV1.240715.022 [core/build_id.mk]
5b09616b4a : Version bump to ASV1.240715.021 [core/build_id.mk]
4329894ffd : Version bump to ASV1.240715.020 [core/build_id.mk]
e6a482e145 : Version bump to ASV1.240715.019 [core/build_id.mk]

+- Project: platform/external/dng_sdk

bbed5f1 : Fail fast in dng sdk if an invalid tag count is seen

+- Project: platform/external/skia

a1c030a91f : [bmp] Fix swizzler initialization

+- Project: platform/frameworks/base

febc0a24abdc : Check cross user permissions for a given UID
c67b1b413b72 : Parse authority to separate userId and non-user parts of it
ee06440e9a71 : Revert "Check IsolatedOwner permissions for known isolated_compute_apps"
15472b00424c : Disable "Developer options" by default for managed profiles.
f60fc2258f63 : RemoteViews - Always load new ApplicationInfo from PackageManager.
d0c52fbde587 : DO NOT MERGE: Update ActivityRecordInputSink using the pending transaction
be02cee3a50c : Do not allow non-system apps to provide unverified attributions
8612a293fb4a : Check underlying intent as well as intent selector
161eb6100d6f : Add permissions check to isInSignificantPlace()
3b0704fd381a : Remove notification content from icon a11y
106d3165dc71 : Fix settings activity showing background bp when createConfirmDeviceCredentialIntent() API is used.
d028f03ea40a : Check sound Uri permission when creating a notification channel
567af706fd9d : BaseBundle: fix unparcel error logic
c4183cc97a18 : Fix: Block opening settings app on keyguard without user auth
ee65c97e3a19 : Verify that the caller has permissions for the icons it provided.

+- Project: platform/frameworks/native

1d896b3404 : Fix the input info missing for SurfaceView
46266c3dc6 : Include color layers in input list to fix tapjacking vulnerability

+- Project: platform/packages/apps/DocumentsUI

a9fe0826e : Fix for SAF loophole in the lastAccessedStack.

+- Project: platform/packages/apps/Settings

12a8312004b : Remove incorrect call to Window.addFlags with a system flag
9dba6f50302 : Check the permission of the callingUid instead of the calling package
32915818d78 : Set component name only for ConfirmDeviceCredentialActivity.

+- Project: platform/packages/modules/Bluetooth

0a4fd20189 : Fix type confusion in avdt_msg.cc
d33196b5d7 : Backport regression fixes for 288144143

+- Project: platform/packages/modules/IntentResolver

3e7b8f35 : Check underlying intent as well as intent selector

+- Project: platform/packages/modules/Permission

87fda0e3b0 : Role re-evaluation should respect ask every time choice by user

+- Project: platform/packages/services/Telecomm

d561c9052 : Revert "Resolve cross account user ringtone validation."
27b78eb22 : Resolve cross account user ringtone validation.
de7ae3057 : Ensure ScheduledExecutor is not shutdown before scheduling timeout cleanup.
1b081682e : Ensure connection is unbound on call redirection timeout.

+- Project: platform/packages/services/Telephony

81cc0fd56 : Prevent overlays on Telephony settings screen.