[Galaxy Tab S2 Original Android Development] Deltadroid:
T813: lineage-14.1-20240106-NIGHTLY-gts210vewifi.zip

T713: lineage-14.1-20240107-NIGHTLY-gts28vewifi.zip

Security Patch Level: January 2024

Notes:

Update Android TZDB to 2023d.

Make Cromite webview the default

Fix bug in TCP protocol to mitigate blind data injection

Backport several new upstream kernel cve

bionic

375acd1b9 (2 hours ago) Update Android TZDB from 2023c to 2023d. [N-MR2] (Vasyl Gello)

build

7789f1b02d (3 days ago) Bump Security String to 2024-01-05 (syphyr)

external/cromite-webview

90ed44f (2 hours ago) Update Cromite Webview arm64 prebuilt to 120.0.6099.199 (syphyr)
6ed9e97 (2 weeks ago) Remove ignore list (syphyr)
25c55ba (3 weeks ago) Add initial files (syphyr)

external/dnscrypt-proxy

bcf542f (2 days ago) Update blocked names list (syphyr)
a16d561 (12 days ago) Update blocked names list (syphyr)
206a5ff (2 weeks ago) Update crypto deps (syphyr)
7283346 (3 weeks ago) Add torrent tracker to allow list (syphyr)
2b8aba3 (3 weeks ago) Support server refresh concurrency (syphyr)
a66bdd9 (3 weeks ago) Optimize CaptivePortalHandler (syphyr)
d94877f (3 weeks ago) Update deps and blocked names (syphyr)
8d0386d (4 weeks ago) Add timeout for udp and tcp dialer (syphyr)
8f55f8d (4 weeks ago) Allow access to transfer.sh (syphyr)
e6a3848 (4 weeks ago) Update blocked names list (syphyr)

external/icu

ae77a05ba (2 hours ago) Update Android TZDB from 2023c to 2023d. [N-MR2] (Vasyl Gello)

frameworks/base

44cbd9cba3f9 (3 days ago) DO NOT MERGE: Fix ActivityManager#killBackgroundProcesses permissions (Jing Ji)
a56adc78aab7 (3 days ago) Fix vulnerability that allowed attackers to start arbitary activities (Will Leshner)
c34b6821e510 (3 days ago) Truncate user data to a limit of 500 characters (Tetiana Meronyk)
8b40cec54614 (13 days ago) BACKPORT: Require permission to unlock keyguard (Marzia Favaro)

kernel/samsung/msm8976

43e696b611376 (23 minutes ago) Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg (Hyunwoo Kim)
3f1564b835fa7 (30 minutes ago) Bluetooth: L2CAP: Send reject on command corrupted request (FrÃ©dÃ©ric Danis)
dfb0c12985d84 (52 minutes ago) Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent (Luiz Augusto von Dentz)
13800c33797ed (3 days ago) dsp: q6lsm: Address use after free for mmap handle (Sandhya Mutha Naga Venkata)
587342ff06ec1 (3 days ago) ASoC: msm-pcm-host-voice: Check validity of session idx (Soumya Managoli)
4781e0992fcc3 (11 days ago) [BACKPORT] msm: adsprpc: Handle UAF in fastrpc internal munmap (Vamsi Krishna Gattupalli)
8ccf4ca93f031 (11 days ago) [BACKPORT] msm: ADSPRPC: Protect global remote heap maps (Tharun Kumar Merugu)
e11641bc04d77 (11 days ago) [BACKPORT] msm: adsprpc: Avoid race condition during map creation and free (Tharun Kumar Merugu)
fd2d2de8a14b6 (11 days ago) [BACKPORT] msm:ADSPRPC :Fix to avoid Use after free in fastrpc_internal_munmap (Vamsi krishna Gattupalli)
ce70350ce6604 (11 days ago) adsprpc: update mmap list nodes before mmap free (Tharun Kumar Merugu)
b051c3f1c7cf3 (11 days ago) [BACKPORT] msm: adsprpc: Fix integer overflow in refcount of map (c_mtharu)
5c502d8cba709 (11 days ago) msm: ADSPRPC: Enable session restart with remote heap (Sathish Ambley)
907de3eddde68 (2 weeks ago) net: Remove acked SYN flag from packet in the transmit queue correctly (Dong Chenchen)
61ac1bffd6228 (3 weeks ago) packet: Move reference count in packet_sock to atomic_long_t (Daniel Borkmann)
5fe0af8be7e32 (3 weeks ago) ALSA: pcm: fix out-of-bounds in snd_pcm_state_names (Jason Zhang)
0ade688dcd55e (3 weeks ago) tcp: do not accept ACK of bytes we never sent (Eric Dumazet)
ad04ffd138f52 (3 weeks ago) [BACKPORT] tcp: Reset bytes_acked and bytes_received when disconnecting (Christoph Paasch)
89f005d72045f (3 weeks ago) [BACKPORT] tcp: beware of alignments in tcp_get_info() (Eric Dumazet)
c502de1e1c241 (3 weeks ago) tcp: fix a potential deadlock in tcp_get_info() (Eric Dumazet)
8049965dfe220 (3 weeks ago) tcp: add tcpi_bytes_acked to tcp_info (Eric Dumazet)
e551946d919ee (3 weeks ago) net: Replace u64_stats_fetch_begin_bh to u64_stats_fetch_begin_irq (Eric W. Biederman)
8954280b6ffe7 (3 weeks ago) [BACKPORT] net: Explicitly initialize u64_stats_sync structures for lockdep (John Stultz)
cf49c894d20b7 (4 weeks ago) ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao)
63e2853965569 (4 weeks ago) pinctrl: avoid reload of p state in list iteration (Maria Yu)
11ec2a4c27da1 (4 weeks ago) ipv4: Correct/silence an endian warning in __ip_do_redirect (Kunwu Chan)

system/bt

6a0d93410f (25 hours ago) [BACKPORT] Fix some OOB errors in BTM parsing (Brian Delwiche)
cdecb9246d (25 hours ago) [BACKPORT] LE Advertising Report parsing enhancements (Jakub Pawlowski)
a0da70989e (25 hours ago) Simplify LE Advertising Report Event processing (Jakub Pawlowski)
568d57ea46 (25 hours ago) Simplify btm_ble_resolve_random_addr (Jakub Pawlowski)
a636d1067c (25 hours ago) Separate the definition of BTM layer types from control blocks (Jakub Pawlowski)

vendor/cm

4a829647 (2 weeks ago) Add Cromite Webview (syphyr)
d56b0047 (2 weeks ago) Make Cromite the default webview (syphyr)
d675813e (4 weeks ago) Webview Overlay: Add Cromite WebView (syphyr)