android-security-16.0.0_r6 to android-security-16.0.0_r7 AOSP changelog

This only includes the Android Open Source Project changes and does not include any changes in any proprietary components included by Google or any hardware manufacturer. The raw log was generated using a modified version of this script written by JBQ and improved by Al Sutton.

Please do not copy this without attribution to this site and JBQ for the original script.

+- Project: platform/build

e780ae3280 : Version bump to BP2A.250805.034 [core/build_id.mk]
1b5aa87d12 : Version bump to BP2A.250805.033 [core/build_id.mk]
40c0ed4135 : Version bump to BP2A.250805.032 [core/build_id.mk]
dbea83afc2 : Version bump to BP2A.250805.031 [core/build_id.mk]
7c9b262108 : Version bump to BP2A.250805.021.A2 [core/build_id.mk]
0a6e0c451a : Version bump to BP2A.250805.021.A1 [core/build_id.mk]

+- Project: platform/build/release

b93595a1f : Revert "Select sqlite 3.44.5 on ap3a"
32de53b8e : Select sqlite 3.44.5 on ap3a

+- Project: platform/external/dng_sdk

b0d9d2a : Update dng_sdk to 1.7.1 2471
74a5a91 : Replace ubsan-minimal with throw

+- Project: platform/external/libpng

2cafeca8c : Rearchitect the fix to the buffer overflow in `png_image_finish_read`
960064fdb : Fix a buffer overflow in `png_image_finish_read`
2113a245b : Fix a buffer overflow in `png_init_read_transformations`
93147074a : Fix a buffer overflow in `png_do_quantize`
3f148ea68 : Fix a memory leak in function `png_set_quantize`; refactor
2ccc385b1 : Fix a heap buffer overflow in `png_write_image_8bit`

+- Project: platform/external/sqlite

abfa25c : Revert "Install sqlite 3.44.5 source files"
0074281 : Install sqlite 3.44.5 source files

+- Project: platform/frameworks/base

9bef8bf1eee4 : DO NOT MERGE: Enforce suspend restrictions in startOp and noteOp paths
48c17df8bdc4 : Enforce package name length limits in PackagePolicy setters.
80828212c318 : Skip serialization of huge vibration effects in NotificationChannel
d9ad94e69f4e : Block adding toast windows to non-empty tokens.
ca855338abcf : [res] Validate package ID range in LoadedArsc
2e3d71d027b0 : Compare period character as well during wildcard matching
40c30bb5613e : Map animation delegate to the transition instead of plumbing it
50cbf4422ac8 : Validate max proxy string length for proxySpec and exclusionList using PolicySizeVerifier.
6ed9e0385c8b : Remove enabled flag use_visible_requested_for_process_tracker
a91d16a02b51 : [res] Make sure we properly validate the XML attr size
66c209d1f65f : RESTRICT AUTOMERGE Require to be bound with non-pinned visible window
1d2269c1014c : On face auth success, verify the face auth'd user is the current user
62ec466efd80 : Add StorageManager.convert() check earlier in the stack so the command fails early instead of crashing system later.
a8f3c0ccb472 : Quick fix for WCLS security vulnerability.
d5a52f737cab : Validate ResStringPool_header.styleCount
dc3785a739bc : Don't allow hiding critical apps.
4abc0b8da1e9 : Allow default per-thread and per-process OnHeaderDecodedListeners
ffdfa5c70fca : Remove multi user flag reference
678475b0c23c : Fix Tapjacking caused by touch slipping out of letterbox
02fc7472ebb2 : Checking userId in com.android.server.pm.ComputerEngine#resolveContentProvider
36a774d72399 : Hide non system overlay window immediately if it is animating exit
4518f78f8b34 : Apply visibility policy to window state surface
04814cb8a86e : Start a new transition to ignore split-enter from a malformed transition
10b748dbc348 : Fix bugs caused on package update events
614c201252f9 : Catch uncaught IllegalStateException
283bef4b2546 : NotificationHistory validate position value

+- Project: platform/packages/apps/CertInstaller

c935d8d : Use loadSafeLabel to prevent UI spoofing in CertInstaller

+- Project: platform/packages/apps/DocumentsUI

0c8b7870e : Use signature-based trust for package name overrides

+- Project: platform/packages/apps/KeyChain

b8d3fe7 : Sanitize app label in KeyChainActivity to prevent UI injection.

+- Project: platform/packages/apps/Launcher3

8c33391368 : Introduce LauncherProcessImageListener for downscaling images in Launcher.

+- Project: platform/packages/apps/Settings

32c6cb147d3 : Update enable ANGLE warning message
24b35b078f3 : Fix app label injection in ForgetDeviceDialogFragment
88ab2340c25 : Fix vulnerability in RequestManageCredentials
46ddb9d440c : Revert^2 "[nfc] Fix string injection in default payment app selector"
f2babe193c7 : Revert "[nfc] Fix string injection in default payment app selector"
94c4cecfe4a : [nfc] Fix default payment app selection
9666d567fd5 : Import translations. DO NOT MERGE ANYWHERE
dc00e06e9bb : Add a warning asking user to backup device data
bd2167e785e : nfc: Do not let guest user disable secure nfc
ead2c0a04ff : Allow multi-user to control secure nfc

+- Project: platform/packages/modules/Bluetooth

abc8b696b6 : Avoid buffer overflow
ce76f82dac : Handle LE Secure Connections Passkey Display/Notification
94566a29d0 : sdp: Validate buffer length in sdpu_build_attrib_seq
d0f7d128d4 : Revoke permissions on rebond attempt
2ad8e1e0e0 : RFCOMM MUX connection request must not start bonding

+- Project: platform/packages/modules/Nfc

477d0eb9f : Fix permanent BAL grant via onServiceConnected race
127162a9e : Add onNullBinding and onBindingDied implemention to HostApduService
cb3646381 : Load the Secure NFC setting when the current user is changed upon query
a90c62ca6 : nfc: Unbind from previously set foreground pref service
26d0a996c : NFC Security Vulnerability in Multi-User Mode
8e1d8fa6b : nfc: Modify Secure NFC restoration to use the corresponding userId

+- Project: platform/packages/modules/Permission

cf13611fd9 : Revert^2 "Ensure Gallery always shows as system fixed"
e65f1a06f6 : Revert "Revert "Display the system gallery storage permission as..."
cef3f2606b : Revert "Display the system gallery storage permission as system fixed"
3badcd33b0 : Revert "Ensure Gallery always shows as system fixed"

+- Project: platform/packages/providers/ContactsProvider

bb9f36b3 : Fix side channel attacks in CP2
0d925d76 : Fix size check bypass for case-mismatched columns

+- Project: platform/packages/providers/MediaProvider

b98082da0 : feat(selection): Add size method to Selection interface

+- Project: platform/packages/services/Telecomm

510bcce16 : Fix issue initiating calls from the work profile.

+- Project: platform/packages/services/Telephony

a34053ac6 : Disallow shell to change CarrierRestrictionRules

+- Project: platform/system/apex

117f34be : Move feature under the sysconfig folder to make it accessible by the device.