[Google Pixel XL Guides, News, & Discussion] xdatastic:
In case anyone is interested, here are the AOSP commits for 7.1.2_r8\N2G47O to 7.1.2_r17\NJH47B:

project build/
a34a38b Version bump to NJH47B
53ddb2a Version bump to NJH34C
798a617 [DO NOT MERGE] Update Security String to 2017-06-05 for nyc-dev
64eb925 [DO NOT MERGE] Update Security String to 2017-06-05 for nyc-dev
91a67a1 N2G47W
cf99a68 Version bump to NJH21D
56ac9db [DO NOT MERGE] Update Security String to 2017-06-05 for nyc-dev
98eb156 [DO NOT MERGE] Update Security String to 2017-06-01 for nyc-dev
43e4406 [DO NOT MERGE] Update Security String to 2017-06-01 for nyc-dev
d2daf11 N2G47V
63b920f [DO NOT MERGE] Update Security String to 2017-06-05 for nyc-dev
3dad5c6 [DO NOT MERGE] Update Security String to 2017-06-01 for nyc-dev
c68500f N2G47U
828d4f8 N2G47T
c1cc1db NHG47L
b382cfe Update Security String to 2017-05-05 on nyc-dev
e5dd8a4 Update Security String to 2017-05-01 on nyc-dev
cee5f07 N2G47S
189e63d N2G47R
765dc24 N2G47Q
5bcb8ef NHG47K
47991df N2G47P
4f4cd2e NHG47J

project device/google/marlin/
6223abb DTAG: Use hos apn for supl with bearer 18
6fe3c69 DTAT: Combine internet.telekom apn.

project device/huawei/angler/
e0a57bd angler: thermal: limit cpu and gpu core temperature

project external/libgdx/
1135533 Fix heap overflow when loading a PSD. bug 36368305
a3b3f74 Fix heap overflow when loading a PSD. bug 36368305

project external/libhevc/
9d0b579 Correct Tiles rows and cols check
5e35abd Check only allocated mv bufs for releasing from reference
8851805 Set current slice ctb x and y to fill prev incomplete slice
3d8d296 Correct Tiles rows and cols check
a100ab9 Check only allocated mv bufs for releasing from reference
cd22e2c Set current slice ctb x and y to fill prev incomplete slice
ab14d63 Return error from cabac init if offset is greater than range
e7cd9a6 Handle error return from ref list in slice hdr parsing
ac4084f Return error if SPS parsing reads more bytes than the nal length

project external/libvpx/
c2f8373 Limit vpx decoder to 4K frames
66892a9 Limit vpx decoder to 4K frames

project external/libxml2/
6a2e63d DO NOT MERGE: Disallow namespace nodes in XPointer ranges
39ef221 DO NOT MERGE: Add validation for eternal enities
c48bd30 DO NOT MERGE: Fix XPointer paths beginning with range-to
4f0685a DO NOT MERGE: Use correct limit for port values
a0b742c DO NOT MERGE: Heap buffer overflow in xmlAddID
87b8586 DO NOT MERGE: fix for the XPath nodeTab use-after-free bug from nmehta@
508faa0 DO NOT MERGE: Apply upstream Chromium patch for encoding changes
db3d77a DO NOT MERGE: Heap buffer overflow in xmlAddID
d0e0d76 DO NOT MERGE: fix for the XPath nodeTab use-after-free bug from nmehta@
0d47c4c DO NOT MERGE: Apply upstream Chromium patch for encoding changes
c93a895 DO NOT MERGE: Disallow namespace nodes in XPointer ranges
233cf5c DO NOT MERGE: Use correct limit for port values
58e494f DO NOT MERGE: Add validation for eternal enities
66212ee DO NOT MERGE: Fix XPointer paths beginning with range-to

project frameworks/base/
b716a25 Remove bg_non_interactive cgroup [ DO NOT MERGE ]
cd248ac Remove bg_non_interactive cgroup [ DO NOT MERGE ]
a09cb5d Remove bg_non_interactive cgroup [ DO NOT MERGE ]
9fa33e7 [DO NOT MERGE] Don't allow permission change to runtime
413ebd1 [DO NOT MERGE] Throw exception if slot has invalid offset
f76189e [DO NOT MERGE] Check bounds in offsetToPtr
6aa2723 Fix issue with saving admins before finishing loading.
eea3ed2 resolve merge conflicts of ad4aa1ce7d3d to nyc-mr1-dev fix conflict in nyc-mr2-release Change-Id: I97ef31536cd06495a08a3f94f81df2d1376186e0 (cherry picked from commit f806d65e615b942c268a5f68d44bde9d55634972)
4fc5d98 Protect Bluetooth OPP ACCEPT and DECLINE broadcast

project frameworks/native/
d01fe0a binder: remove cgroup interactions [ DO NOT MERGE ]
4fb3386 binder: remove cgroup interactions [ DO NOT MERGE ]
a7dbb27 binder: remove cgroup interactions [ DO NOT MERGE ]

project libcore/
92a7b90 Reject ftp URLConnection containing /r/n in user info.
7ef1f06 Test for rejection of ftp URL with /r/n in userinfo

project packages/apps/Bluetooth/
877e9be Prevent OPP from opening files that aren't sent over Bluetooth
ad46f6a OPP: Restrict file based URI access to external storage
8175764 Prevent OPP from opening files that aren't sent over Bluetooth
0ed24c4 OPP: Restrict file based URI access to external storage

project system/bt/
0bbd5c6 Check LE advertising data length before caching advertising records
9421015 Check LE advertising data length before caching advertising records
74a7a01 resolve merge conflicts of a3ee2e35 to nyc-dev

project system/core/
31f78dd libcutils: remove schedgroup fds [DO NOT MERGE]
f388bab init.rc: remove bg_non_interactive cgroup [ DO NOT MERGE ]
783a787 libcutils: only change cgroup when fd is initialized [ DO NOT MERGE ]
278ee6b libcutils: remove schedgroup fds [DO NOT MERGE]
2997bad libcutils: remove schedgroup fds [DO NOT MERGE]
d3f10b9 libcutils: remove schedgroup fds [DO NOT MERGE]
2dec628 Fix out of bound read in libziparchive
6617398 libcutils: only change cgroup when fd is initialized [ DO NOT MERGE ]
1dbaa17 init.rc: remove bg_non_interactive cgroup [ DO NOT MERGE ]
fd1574b Fix out of bound read in libziparchive
ba75641 init.rc: remove bg_non_interactive cgroup [ DO NOT MERGE ]
e0b4ead libcutils: only change cgroup when fd is initialized [ DO NOT MERGE ]
3d6a431 Fix out of bound read in libziparchive
9418157 libcutils: remove schedgroup fds [DO NOT MERGE]