Add June 2024 security changelogs

mikeNG · Jun 3, 2024 · c6a888d · c6a888d
1 parent f4589f1
commit c6a888d
Show file tree

Hide file tree

Showing 4 changed files with 369 additions and 0 deletions.
diff --git a/android-security-12.0.0_r59-to-android-security-12.0.0_r60.html b/android-security-12.0.0_r59-to-android-security-12.0.0_r60.html
@@ -0,0 +1,119 @@
+<!DOCTYPE HTML>
+<html>
+<head>
+<meta http-equiv="X-UA-Compatible" content="IE=edge">
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<link href="https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css" rel="stylesheet" integrity="sha384-wvfXpqpZZVQGK6TAh5PVlGOfQNHSoD2xbE+QkPxCAFlNEevoEH3Sl0sibVcOQVnN" crossorigin="anonymous">
+<link href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">
+<link rel="stylesheet" type="text/css" href="./assets/style.css" >
+<script async src="https://ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js"></script>
+<script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js" integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa" crossorigin="anonymous"></script>
+
+<link rel="icon" href="./assets/favicon.svg" type="image/svg">
+<link rel="shortcut icon" href="./assets/favicon.ico" type="image/x-icon">
+
+<title>android-security-12.0.0_r59 to android-security-12.0.0_r60 AOSP changelog</title>
+
+<script>
+function show(sectionId) {
+	if (document.getElementById(sectionId)) {
+		document.getElementById(sectionId+'-show').style.display = 'none';
+		document.getElementById(sectionId+'-hide').style.display = 'inline';
+		document.getElementById(sectionId).style.display = 'block';
+	}
+}
+
+function hide(sectionId) {
+	if (document.getElementById(sectionId)) {
+		document.getElementById(sectionId+'-show').style.display = 'inline';
+		document.getElementById(sectionId+'-hide').style.display = 'none';
+		document.getElementById(sectionId).style.display = 'none';
+	}
+}
+</script>
+</head>
+<body>
+<div class="navbar navbar-default navbar-fixed-top">
+  <div class="container">
+    <div class="navbar-header">
+      <button type="button" class="navbar-toggle" data-toggle="collapse" data-target=".navbar-collapse">
+        <span class="icon-bar"></span>
+        <span class="icon-bar"></span>
+        <span class="icon-bar"></span>
+      </button>
+      <a class="navbar-brand" href="./index.html">AOSP Changelogs</a>
+    </div>
+    <div class="navbar-collapse collapse">
+      <ul class="nav navbar-nav">
+      </ul>
+    </div>
+  </div>
+</div>
+<div class="container card">
+<div class="row">
+    <div class="col-md-12">
+        <h1>android-security-12.0.0_r59 to android-security-12.0.0_r60 AOSP changelog</h1>
+    </div>
+</div>
+
+<div class="row">
+    <div class="col-md-12">
+<p>This only includes the Android Open Source Project changes and does not include any changes
+in any proprietary components included by Google or any hardware manufacturer. The raw log was 
+generated using a modified version of <a href="https://groups.google.com/d/msg/android-building/0DtsHawjs4k/And8o3Dni_UJ">this script</a> written by JBQ and improved by Al Sutton.</p>
+
+<p><strong>Please do not copy this without attribution to this site and JBQ for the original script.</strong></p>
+    </div>
+</div>
+<div class="row">
+    <div class="col-md-12">
+        <div id="changes">
+<p><h2><a href="#" id="platform_build-show" class="showLink" onclick="show('platform_build');return false;">+</a><a href="#" id="platform_build-hide" class="hideLink" onclick="hide('platform_build');return false;">-</a>&nbsp;<a name="platform_build" class="nonLink">Project:</a> <a href="https://android.googlesource.com/platform/build">platform/build</a></h2>
+<div id="platform_build"><a href="https://android.googlesource.com/platform/build/+/581ceefc15">581ceefc15</a> :  Version bump to SSV1.210916.090 [core/build_id.mk]<br />
+</div></p>
+
+<p><h2><a href="#" id="platform_frameworks_base-show" class="showLink" onclick="show('platform_frameworks_base');return false;">+</a><a href="#" id="platform_frameworks_base-hide" class="hideLink" onclick="hide('platform_frameworks_base');return false;">-</a>&nbsp;<a name="platform_frameworks_base" class="nonLink">Project:</a> <a href="https://android.googlesource.com/platform/frameworks/base">platform/frameworks/base</a></h2>
+<div id="platform_frameworks_base"><a href="https://android.googlesource.com/platform/frameworks/base/+/b68b257d56a8">b68b257d56a8</a> :  [CDM][CMD] Check permissions for CDM shell commands<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/748055291460">748055291460</a> :  Update media visibility on lock screen<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/86b747d725d6">86b747d725d6</a> :  [RESTRICT AUTOMERGE] AccessibilityManagerService: remove uninstalled services from enabled list after service update.<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/9fcd2070f22c">9fcd2070f22c</a> :  Resolve message/conversation image Uris with the correct user id<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/e25a0e394bbf">e25a0e394bbf</a> :  Check hidden API exemptions<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/74afbb05ca08">74afbb05ca08</a> :  [DO NOT MERGE][Autofill Framework] Add in check for intent filter when setting/updating service<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/df49e0e3083b">df49e0e3083b</a> :  [DO NOT MERGE][CDM] Fix a security issue that allow 3p apps to skip prompt by setSkipPrompt<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/3457d82f8e26">3457d82f8e26</a> :  Add more checkKeyIntent checks to AccountManagerService.<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/cfbd69256459">cfbd69256459</a> :  Fix vulnerability in AttributionSource due to incorrect Binder call<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/6835cb679511">6835cb679511</a> :  Fix error handling for non-dynamic permissions<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/f16cc1135b41">f16cc1135b41</a> :  Hide window immediately if itself doesn't run hide animation<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/a9ee27930682">a9ee27930682</a> :  Check for NLS bind permission when rebinding services<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/c0d5f75e0130">c0d5f75e0130</a> :  Added throttle when reporting shortcut usage<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/3cc021bf608f">3cc021bf608f</a> :  Verify URI permission for channel sound update from NotificationListenerService<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/de4998f0e646">de4998f0e646</a> :  DO NOT MERGE: Fix ActivityManager#killBackgroundProcesses permissions<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/64ddf442eb06">64ddf442eb06</a> :  DO NOT MERGE: ActivityManager#killBackgroundProcesses can kill caller's own app only<br />
+</div></p>
+
+<p><h2><a href="#" id="platform_packages_modules_StatsD-show" class="showLink" onclick="show('platform_packages_modules_StatsD');return false;">+</a><a href="#" id="platform_packages_modules_StatsD-hide" class="hideLink" onclick="hide('platform_packages_modules_StatsD');return false;">-</a>&nbsp;<a name="platform_packages_modules_StatsD" class="nonLink">Project:</a> <a href="https://android.googlesource.com/platform/packages/modules/StatsD">platform/packages/modules/StatsD</a></h2>
+<div id="platform_packages_modules_StatsD"><a href="https://android.googlesource.com/platform/packages/modules/StatsD/+/b6aab6c0">b6aab6c0</a> :  [libstatssocket] Added validation for adding new data into StatsEvent<br />
+</div></p>
+
+<p><h2><a href="#" id="platform_system_libfmq-show" class="showLink" onclick="show('platform_system_libfmq');return false;">+</a><a href="#" id="platform_system_libfmq-hide" class="hideLink" onclick="hide('platform_system_libfmq');return false;">-</a>&nbsp;<a name="platform_system_libfmq" class="nonLink">Project:</a> <a href="https://android.googlesource.com/platform/system/libfmq">platform/system/libfmq</a></h2>
+<div id="platform_system_libfmq"><a href="https://android.googlesource.com/platform/system/libfmq/+/79bbf4a">79bbf4a</a> :  Use the values of the ptrs that we check<br />
+</div></p>
+
+
+        </div>
+    </div>
+</div>
+</div>
+
+<div id="footer">
+    <div class="container">
+        <div class="row">
+            <div class="col-md-6">
+                <p class="text-muted">&copy; Copyright 20[0-9]{2} The LineageOS Project</p>
+            </div>
+        </div>
+    </div>
+</div>
+</body>
+</html>
diff --git a/android-security-13.0.0_r17-to-android-security-13.0.0_r18.html b/android-security-13.0.0_r17-to-android-security-13.0.0_r18.html
@@ -0,0 +1,126 @@
+<!DOCTYPE HTML>
+<html>
+<head>
+<meta http-equiv="X-UA-Compatible" content="IE=edge">
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<link href="https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css" rel="stylesheet" integrity="sha384-wvfXpqpZZVQGK6TAh5PVlGOfQNHSoD2xbE+QkPxCAFlNEevoEH3Sl0sibVcOQVnN" crossorigin="anonymous">
+<link href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">
+<link rel="stylesheet" type="text/css" href="./assets/style.css" >
+<script async src="https://ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js"></script>
+<script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js" integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa" crossorigin="anonymous"></script>
+
+<link rel="icon" href="./assets/favicon.svg" type="image/svg">
+<link rel="shortcut icon" href="./assets/favicon.ico" type="image/x-icon">
+
+<title>android-security-13.0.0_r17 to android-security-13.0.0_r18 AOSP changelog</title>
+
+<script>
+function show(sectionId) {
+	if (document.getElementById(sectionId)) {
+		document.getElementById(sectionId+'-show').style.display = 'none';
+		document.getElementById(sectionId+'-hide').style.display = 'inline';
+		document.getElementById(sectionId).style.display = 'block';
+	}
+}
+
+function hide(sectionId) {
+	if (document.getElementById(sectionId)) {
+		document.getElementById(sectionId+'-show').style.display = 'inline';
+		document.getElementById(sectionId+'-hide').style.display = 'none';
+		document.getElementById(sectionId).style.display = 'none';
+	}
+}
+</script>
+</head>
+<body>
+<div class="navbar navbar-default navbar-fixed-top">
+  <div class="container">
+    <div class="navbar-header">
+      <button type="button" class="navbar-toggle" data-toggle="collapse" data-target=".navbar-collapse">
+        <span class="icon-bar"></span>
+        <span class="icon-bar"></span>
+        <span class="icon-bar"></span>
+      </button>
+      <a class="navbar-brand" href="./index.html">AOSP Changelogs</a>
+    </div>
+    <div class="navbar-collapse collapse">
+      <ul class="nav navbar-nav">
+      </ul>
+    </div>
+  </div>
+</div>
+<div class="container card">
+<div class="row">
+    <div class="col-md-12">
+        <h1>android-security-13.0.0_r17 to android-security-13.0.0_r18 AOSP changelog</h1>
+    </div>
+</div>
+
+<div class="row">
+    <div class="col-md-12">
+<p>This only includes the Android Open Source Project changes and does not include any changes
+in any proprietary components included by Google or any hardware manufacturer. The raw log was 
+generated using a modified version of <a href="https://groups.google.com/d/msg/android-building/0DtsHawjs4k/And8o3Dni_UJ">this script</a> written by JBQ and improved by Al Sutton.</p>
+
+<p><strong>Please do not copy this without attribution to this site and JBQ for the original script.</strong></p>
+    </div>
+</div>
+<div class="row">
+    <div class="col-md-12">
+        <div id="changes">
+<p><h2><a href="#" id="platform_build-show" class="showLink" onclick="show('platform_build');return false;">+</a><a href="#" id="platform_build-hide" class="hideLink" onclick="hide('platform_build');return false;">-</a>&nbsp;<a name="platform_build" class="nonLink">Project:</a> <a href="https://android.googlesource.com/platform/build">platform/build</a></h2>
+<div id="platform_build"><a href="https://android.googlesource.com/platform/build/+/a22acce7a8">a22acce7a8</a> :  Version bump to TSV1.220628.062 [core/build_id.mk]<br />
+</div></p>
+
+<p><h2><a href="#" id="platform_build_soong-show" class="showLink" onclick="show('platform_build_soong');return false;">+</a><a href="#" id="platform_build_soong-hide" class="hideLink" onclick="hide('platform_build_soong');return false;">-</a>&nbsp;<a name="platform_build_soong" class="nonLink">Project:</a> <a href="https://android.googlesource.com/platform/build/soong">platform/build/soong</a></h2>
+<div id="platform_build_soong"><a href="https://android.googlesource.com/platform/build/soong/+/e7b7f0833">e7b7f0833</a> :  java_sdk_library_import: Copy all prebuilt properties to child modules<br />
+</div></p>
+
+<p><h2><a href="#" id="platform_frameworks_base-show" class="showLink" onclick="show('platform_frameworks_base');return false;">+</a><a href="#" id="platform_frameworks_base-hide" class="hideLink" onclick="hide('platform_frameworks_base');return false;">-</a>&nbsp;<a name="platform_frameworks_base" class="nonLink">Project:</a> <a href="https://android.googlesource.com/platform/frameworks/base">platform/frameworks/base</a></h2>
+<div id="platform_frameworks_base"><a href="https://android.googlesource.com/platform/frameworks/base/+/7f4ba31349b0">7f4ba31349b0</a> :  [RESTRICT AUTOMERGE] AccessibilityManagerService: remove uninstalled services from enabled list after service update.<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/0cf33ab14bdb">0cf33ab14bdb</a> :  Resolve message/conversation image Uris with the correct user id<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/e0d80b74e0da">e0d80b74e0da</a> :  [CDM][CMD] Check permissions for CDM shell commands<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/685953953bc9">685953953bc9</a> :  Check hidden API exemptions<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/51eecc38dfe6">51eecc38dfe6</a> :  Update media visibility on lock screen<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/0c171d31dd58">0c171d31dd58</a> :  [DO NOT MERGE][Autofill Framework] Add in check for intent filter when setting/updating service<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/f49d74346d13">f49d74346d13</a> :  Add more checkKeyIntent checks to AccountManagerService.<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/b75bb48b125d">b75bb48b125d</a> :  Hide window immediately if itself doesn't run hide animation<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/17dd11248a66">17dd11248a66</a> :  Fix vulnerability in AttributionSource due to incorrect Binder call<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/a7245613009e">a7245613009e</a> :  Fix error handling for non-dynamic permissions<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/91909627abdd">91909627abdd</a> :  Check for NLS bind permission when rebinding services<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/c469a0d68df1">c469a0d68df1</a> :  Verify URI permission for channel sound update from NotificationListenerService<br />
+<a href="https://android.googlesource.com/platform/frameworks/base/+/2bc89d48e74f">2bc89d48e74f</a> :  Added throttle when reporting shortcut usage<br />
+</div></p>
+
+<p><h2><a href="#" id="platform_packages_modules_StatsD-show" class="showLink" onclick="show('platform_packages_modules_StatsD');return false;">+</a><a href="#" id="platform_packages_modules_StatsD-hide" class="hideLink" onclick="hide('platform_packages_modules_StatsD');return false;">-</a>&nbsp;<a name="platform_packages_modules_StatsD" class="nonLink">Project:</a> <a href="https://android.googlesource.com/platform/packages/modules/StatsD">platform/packages/modules/StatsD</a></h2>
+<div id="platform_packages_modules_StatsD"><a href="https://android.googlesource.com/platform/packages/modules/StatsD/+/cda160da">cda160da</a> :  [libstatssocket] Added validation for adding new data into StatsEvent<br />
+</div></p>
+
+<p><h2><a href="#" id="platform_packages_modules_Wifi-show" class="showLink" onclick="show('platform_packages_modules_Wifi');return false;">+</a><a href="#" id="platform_packages_modules_Wifi-hide" class="hideLink" onclick="hide('platform_packages_modules_Wifi');return false;">-</a>&nbsp;<a name="platform_packages_modules_Wifi" class="nonLink">Project:</a> <a href="https://android.googlesource.com/platform/packages/modules/Wifi">platform/packages/modules/Wifi</a></h2>
+<div id="platform_packages_modules_Wifi"><a href="https://android.googlesource.com/platform/packages/modules/Wifi/+/e6ca0c0317">e6ca0c0317</a> :  Fix AttributionSource usage in WifiRtt<br />
+<a href="https://android.googlesource.com/platform/packages/modules/Wifi/+/f39ed05291">f39ed05291</a> :  Avoid Unparcelling AttributionSource in WifiP2p handler thread<br />
+<a href="https://android.googlesource.com/platform/packages/modules/Wifi/+/f88a2294f5">f88a2294f5</a> :  Fix AttributionSource usage in WifiAware<br />
+</div></p>
+
+<p><h2><a href="#" id="platform_system_libfmq-show" class="showLink" onclick="show('platform_system_libfmq');return false;">+</a><a href="#" id="platform_system_libfmq-hide" class="hideLink" onclick="hide('platform_system_libfmq');return false;">-</a>&nbsp;<a name="platform_system_libfmq" class="nonLink">Project:</a> <a href="https://android.googlesource.com/platform/system/libfmq">platform/system/libfmq</a></h2>
+<div id="platform_system_libfmq"><a href="https://android.googlesource.com/platform/system/libfmq/+/b9ef436">b9ef436</a> :  Use the values of the ptrs that we check<br />
+</div></p>
+
+
+        </div>
+    </div>
+</div>
+</div>
+
+<div id="footer">
+    <div class="container">
+        <div class="row">
+            <div class="col-md-6">
+                <p class="text-muted">&copy; Copyright 20[0-9]{2} The LineageOS Project</p>
+            </div>
+        </div>
+    </div>
+</div>
+</body>
+</html>