[Galaxy Tab 2 7" Android Development] Deltadroid:
P3110 ROM security updates for June, 2017 ,including commit to hide "su" from the system when root is disabled. This helps to protect system from malicious apps trying to access root privileges. This also allows system to pass safetynet check when root is disabled (disable root in developer settings and then clear play store data to obtain "certified" status in play store).

cm-11-20170613-NIGHTLY-p3110.zip

build

3b2cbb1 (2 days ago) Update Security String to 2017-06-01 (Dang Duy Son)

external/bluetooth/bluedroid

47dec84 (2 days ago) Check LE advertising data length before caching advertising records (Jack He)

external/libvpx

521365d (4 days ago) Limit vpx decoder to 4K frames (Marco Nelissen)

external/libxml2

762fc8c (2 days ago) DO NOT MERGE: Use correct limit for port values (Brian C. Young)
3f3e901 (4 days ago) DO NOT MERGE: Disallow namespace nodes in XPointer ranges (Brian C. Young)
092bc8b (4 days ago) DO NOT MERGE: Heap buffer overflow in xmlAddID (Brian C. Young)
48268ae (4 days ago) DO NOT MERGE: fix for the XPath nodeTab use-after-free bug from nmehta@ (Brian C. Young)
28203a3 (4 days ago) DO NOT MERGE: Add validation for eternal enities (Brian C. Young)
fdb2fe6 (4 days ago) DO NOT MERGE: Apply upstream Chromium patch for encoding changes (Brian C. Young)
6444789 (5 days ago) DO NOT MERGE: Fix XPointer paths beginning with range-to (Brian C. Young)

kernel/samsung/espresso10

4d7d586 (7 days ago) crypto: ahash - Fix EINPROGRESS notification callback (Herbert Xu)
8e91c84 (7 days ago) crypto: hash - Simplify the ahash_finup implementation (Marek Vasut)
d50b2ba (7 days ago) crypto: hash - Pull out the functions to save/restore request (Marek Vasut)
45ed1ce (7 days ago) crypto: hash - Fix the pointer voodoo in unaligned ahash (Marek Vasut)
1bdc536 (7 days ago) crypto: ahash - Fully restore ahash request before completing (Marek Vasut)
6ce2ba9 (7 days ago) xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Andy Whitcroft)
3a49129 (7 days ago) ALSA: seq: Fix link corruption by event error handling (Takashi Iwai)
e493057 (7 days ago) ALSA: ctxfi: Fallback DMA mask to 32bit (Takashi Iwai)
ef65762 (7 days ago) ALSA: timer: Reject user params with too small ticks (Takashi Iwai)
be8990b (7 days ago) net sched actions: decrement module reference count after table flush. (Roman Mashak)
c4d47bc (7 days ago) net/dccp: fix use after free in tw_timer_handler() (Andrey Ryabinin)
943da9cc (7 days ago) fuse: add missing FR_FORCE (Miklos Szeredi)
871ea8e (7 days ago) KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (Eric Biggers)
f7d4bad (7 days ago) KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells)
3d880b5 (7 days ago) KEYS: Reinstate EPERM for a key type name beginning with a '.' (David Howells)
4e59cda (7 days ago) KEYS: special dot prefixed keyring name bug fix (Mimi Zohar)
8ffba98 (7 days ago) ipv6/dccp: do not inherit ipv6_mc_list from parent (WANG Cong)
a6eef9b (7 days ago) sctp: do not inherit ipv6_{mc|ac|fl}_list from parent (Eric Dumazet)
97e0b90 (7 days ago) ipv6: Check ip6_find_1stfragopt() return value properly. (David S. Miller)
1adb759 (7 days ago) ipv6: Prevent overrun when parsing v6 header options (Craig Gallek)
0017e3c (7 days ago) dccp/tcp: do not inherit mc_list from parent (Eric Dumazet)
aff4e20 (7 days ago) n_tty: Fix n_tty_write crash when echoing in raw mode (Peter Hurley)
40fc890 (7 days ago) android: drivers: workaround debugfs race in binder (Riley Andrews)
c7fcc2d (7 days ago) Staging: android: binder: Add some tracepoints (Arve HjÃ¸nnevÃ¥g)
cc5a0e7 (7 days ago) Fix CVE-2014-3153 (Thomas Gleixner)
306da41 (7 days ago) ARM: 7419/1: vfp: fix VFP flushing regression on sigreturn path (Will Deacon)
e893b18 (7 days ago) ARM: 7400/1: vfp: clear fpscr length and stride bits on entry to sig handler (Will Deacon)
bc1d5f0 (7 days ago) ARM: 7399/1: vfp: move user vfp state save/restore code out of signal.c (Will Deacon)
344e26a (7 days ago) mm: reorder can_do_mlock to fix audit denial (Jeff Vander Stoep)
d663f46 (7 days ago) mnt: Only change user settable mount flags in remount (Eric W. Biederman)
19db01b (7 days ago) net/l2tp: don't fall back on UDP [get|set]sockopt (Sasha Levin)
633b2a7 (7 days ago) net: ipv4: current group_info should be put after using. (JP Abgrall)
8d9f766 (7 days ago) net: add length argument to skb_copy_and_csum_datagram_iovec (Sabrina Dubroca)
262e5bd (7 days ago) net: Fix skb csum races when peeking (Herbert Xu)
5bbca7f (7 days ago) bcmdhd wireless: Fix sprintf/sscanf format strings. (Christian NeumÃ¼ller)
b119984 (7 days ago) bcmdhd wireless: Fix more off by one errors. (Christian NeumÃ¼ller)
9aad3a9 (7 days ago) bcmdhd wireless: Fix off by one in initialization. (Christian NeumÃ¼ller)
3ed718f (2 weeks ago) kernel: Fix potential refcount leak in su check (Tom Marshall)
db7c544 (2 weeks ago) kernel: Only expose su when daemon is running (Tom Marshall)

packages/apps/Bluetooth

2cdf561 (2 days ago) OPP: Restrict file based URI access to external storage (Jack He)