[Galaxy Tab S2 Original Android Development] Deltadroid:
T813: lineage-14.1-20210619-NIGHTLY-gts210vewifi.zip

T713: lineage-14.1-20210619-NIGHTLY-gts28vewifi.zip

Security Patch Level: June 2021

Notes:

1) Fix qcacld-2.0 wifi fragmentation attacks https://www.fragattacks.com/

2) Update dnscrypt-proxy to 2.0.46 beta3 with ODoH support

3) Fix RCE in system Webview by updating to 91.0.4472.102

build

7b8c50576 (4 days ago) Bump Security String to 2021-06-05 (syphyr)

external/bromite-webview

01d0712 (8 days ago) Bromite System Webview 91.0.4472.102 (syphyr)

external/chromium-libpac

8cc9e86 (5 days ago) Fix a compiler warning in chromium-libpac. (Aurimas Liutikas)

external/dnscrypt-proxy

8014e00 (2 days ago) Update resolvers (syphyr)
cefabfc (7 days ago) Update binary to 2.0.46 beta3, blocked names and odoh list (syphyr)
e0733b2 (9 days ago) Add back default dns servers to tor config (syphyr)
6362ff2 (10 days ago) Adjust ODOH servers to use Tor node (syphyr)
5c2a80f (10 days ago) allowed-names: Allow another new torrent tracker (syphyr)
84cf6f4 (10 days ago) Remove odoh-crypto-sx from route when tor is enabled (syphyr)
1754fe9 (11 days ago) Enable onion services for Tor configuration (syphyr)
0b0452a (11 days ago) Enable ODOH support (syphyr)
caa5bd2 (11 days ago) Update binary to 2.0.46 beta2 (syphyr)
5f5e0f3 (12 days ago) Update binary to 2.0.46 beta1 (syphyr)
c8c2b31 (13 days ago) Update blocked names and resolvers (syphyr)
f8bc1bf (2 weeks ago) Update binary, blocked names, and resolvers (syphyr)
5773af4 (2 weeks ago) Update binary and blocked names (syphyr)
89656ec (2 weeks ago) Update binary, resolvers, and blocked names (syphyr)
a0fa4ef (5 weeks ago) Update binary, blocked names, and resolvers (syphyr)
79a457b (5 weeks ago) allowed-names: Add more trackers (syphyr)
4494194 (5 weeks ago) Update binary, blocked names, and resolvers (syphyr)

external/libavc

8c16926 (11 days ago) avcenc: Add bitstream overflow check during emulation prevention (Neelkamal Semwal)

external/wpa_supplicant_8

9bc0bf87a (11 days ago) P2P: Fix a corner case in peer addition based on PD Request (Hai Shalom)

frameworks/base

d35b80d77bf3 (11 days ago) Increase maximum allowed size for status bar icons (Beth Thibodeau)
f505a6979c54 (11 days ago) Limit maximum allowed size for a status bar icon (Beth Thibodeau)

kernel/samsung/msm8976

57f57adec46a3 (4 hours ago) ipv4: ip_forward: perform skb->pkt_type check at the beginning (Denis Kirjanov)
5370db8d43777 (5 hours ago) ip_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko)
51895a3707bfe (22 hours ago) ipv6: drop frames with attached skb->sk in forwarding (Hannes Frederic Sowa)
c48e8b838c00e (22 hours ago) ipv6: the entire IPv6 header chain must fit the first fragment (Paolo Abeni)
3d856acab401b (22 hours ago) xfrm: Generate blackhole routes only from route lookup functions (Steffen Klassert)
7e299105c9192 (22 hours ago) ipv6: introduce ip6_dst_mtu_forward and protect forwarding path with it (Hannes Frederic Sowa)
6ddd402cdfd08 (22 hours ago) ipv6: ip6_forward: perform skb->pkt_type check at the beginning (Li RongQing)
a7ec871ce78f1 (22 hours ago) ip6_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko)
567ab4be03965 (22 hours ago) ipv6: set skb->protocol on tcp, raw and ip6_append_data genereated skbs (Hannes Frederic Sowa)
f17a8528fa01c (22 hours ago) ipv6: consistent use of IP6_INC_STATS_BH() in ip6_forward() (Eric Dumazet)
6105db9f7d556 (3 days ago) ipv6: Fix dangling pointer when ipv6 fragment (Junwei Hu)
d442732ea77ec (3 days ago) Bluetooth: Fix decrementing reference count twice in releasing socket (Myungho Jung)
76168c6e1bd24 (4 days ago) lib/int_sqrt: optimize initial value compute (Peter Zijlstra)
6457fe8ca60d3 (13 days ago) wireguard: Update submodule to v1.0.20210606 (syphyr)
002463aff4058 (2 weeks ago) ALSA: rawmidi: Fix potential Spectre v1 vulnerability (Gustavo A. R. Silva)
83b64e4171223 (3 weeks ago) qcacld-2.0: Fix Static Analysis Issues (Gupta, Kapil)
f50ef10268688 (3 weeks ago) qcacld-2.0: Clear MC filters when more than max available (Sravan Kumar Kairam)
e0e24f2654a8a (3 weeks ago) qcacld-2.0: Enhance logging for MC address list (Sachin Ahuja)
d5a5aa740d629 (3 weeks ago) qcacld-2.0: Increase the ethernet MC address list size (Sravan Kumar Kairam)
2af92d31bb1aa (3 weeks ago) netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Vasily Averin)
0c900d0fcf68b (3 weeks ago) futex: Unbreak futex hashing (Thomas Gleixner)
180927f5efe5d (3 weeks ago) futex: Fix inode life-time issue (Peter Zijlstra)
ee46308e5d270 (3 weeks ago) futex: Acknowledge a new waiter in counter before plist (Davidlohr Bueso)
114a7f5d9e18a (3 weeks ago) futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Thomas Gleixner)
870269eb7f07b (3 weeks ago) futexes: Clean up various details (Jason Low)
8080b5aa9df0f (3 weeks ago) futex: Fix a race condition between REQUEUE_PI and task death (Brian Silverman)
8841cf8ce0e9e (3 weeks ago) futex: update documentation for ordering guarantees (Davidlohr Bueso)
5a2a9e0072776 (3 weeks ago) futex: avoid race between requeue and wake (Linus Torvalds)
62755899f2b38 (3 weeks ago) futex: revert back to the explicit waiter counting code (Linus Torvalds)
4415a9fefecb8 (3 weeks ago) futex: Ensure get_futex_key_refs() always implies a barrier (Catalin Marinas)
f62a588e66e5b (3 weeks ago) futexes: Avoid taking the hb->lock if there's nothing to wake up (Davidlohr Bueso)
45344e4528177 (3 weeks ago) futexes: Document multiprocessor ordering guarantees (Thomas Gleixner)
69f553f326ca6 (3 weeks ago) qcacld-2.0: Fix incorrect challenge text length (Will Huang)
5fe943697de0e (3 weeks ago) qcacld-2.0: Prioritize connection req frames in pe queue (gaurank kathpalia)
0695419449806 (3 weeks ago) qcacld-2.0: Drop same seq num auth frame only if retry bit is set (Yeshwanth Sriram Guntuka)
a0f56deaf4fb4 (3 weeks ago) qcacld-2.0: Save processed AUTH frames seq number in pe_session (Yeshwanth Sriram Guntuka)
f24e4ade75d9f (3 weeks ago) qcacld-2.0: Drop mcast and plaintext frags in protected network (Zhonglin Zhang)
b2dec2260230d (3 weeks ago) udplite: call proper backlog handlers (Eric Dumazet)
8735b3ef7816f (3 weeks ago) netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Jozsef Kadlecsik)
6685cda7378cf (3 weeks ago) netfilter: nfnetlink_log: just returns error for unknown command (Ken-ichirou MATSUZAWA)
66c7af80568be (3 weeks ago) netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES (Pablo Neira Ayuso)
b39d60e8432bb (4 weeks ago) fs/drop_caches.c: avoid softlockups in drop_pagecache_sb() (Jan Kara)
55b1813bc547c (4 weeks ago) qcacld-2.0: Fix SAP data tx block issue (Brandon Huang)
dd17794cc7a07 (4 weeks ago) qcacld-2.0: Add eapol checking for intra-bss fwd & indicate in IPA exc path (Tiger Yu)
330a803839b1b (4 weeks ago) qcacld-2.0: Add eapol sanity checking for intra-bss forwarding & indicate (Lihua Liu)
e663413b9609e (4 weeks ago) qcacld-2.0: Discard frag frames if the PN is not consecutive (Tiger Yu)
03d92b2d71876 (4 weeks ago) qcacld-2.0: Flush RX packets for peer after key installation (Tiger Yu)
8683335f3c90e (4 weeks ago) qcacld-2.0: Fix a compile error (lihual)
bd11c8baf5df7 (4 weeks ago) qcacld-2.0: Fix a potential overflow issue (Lihua Liu)
37241f7723cc0 (4 weeks ago) qcacld-2.0: Clear flag bssPersona when closing session (Lihua Liu)
de9c4813b0f02 (4 weeks ago) qcacld-2.0: Fix sdio mbox corruption on rome card (lifeng)
48204cafe8648 (4 weeks ago) qcacld-2.0: Avoid null pointer when STAUT connect to specific AP (c_zding)
7858f8dde6682 (4 weeks ago) qcacld-2.0: Reduce unnecessary logging in HL Datapath (Poddar, Siddarth)
491bf7c8e1f38 (4 weeks ago) ASoC: msm: qdsp6v2: Add mutex in afe_map_cal_data (Rohit Kumar)
e48f57633c230 (4 weeks ago) neighbour: Disregard DEAD dst in neigh_update (Tong Zhu)
2f6d9d0bbb23a (4 weeks ago) net: add SNMP counters tracking incoming ECN bits (Eric Dumazet)
ce5352d7dd842 (4 weeks ago) net: drop skb on failure in ip_check_defrag() (Cong Wang)
ffe9de69a3a33 (4 weeks ago) ipv6: defrag: drop non-last frags smaller than min mtu (Florian Westphal)
2093055648517 (4 weeks ago) ipv6: orphan skbs in reassembly unit (Eric Dumazet)
50ae241c89d26 (4 weeks ago) inet: frag: Always orphan skbs inside ip_defrag() (Joe Stringer)
15dedb43b175a (4 weeks ago) ipv6: split inet6_hash_frag for netfilter and initialize secrets with net_get_random_once (Hannes Frederic Sowa)
011ddf3c1e63d (4 weeks ago) net: fix pskb_trim_rcsum_slow() with odd trim offset (Dimitris Michailidis)
567f75886a6ba (4 weeks ago) net: pskb_trim_rcsum() and CHECKSUM_COMPLETE are friends (Eric Dumazet)
d1b57e72e1e20 (5 weeks ago) net: Add utility functions to clear rxhash (Tom Herbert)
e1feae7f9813e (5 weeks ago) ipv4: fix "conntrack zones" support for defrag user check in ip_expire (Vasily Averin)
3fec3023112b1 (5 weeks ago) ipv4: initialize ip4_frags hash secret as late as possible (Hannes Frederic Sowa)
c235f6923e9f7 (5 weeks ago) net: access page->private by using page_private (Sunghan Suh)
8b534820cd619 (5 weeks ago) skbuff: Unconditionally copy pfmemalloc in __skb_clone() (Stefano Brivio)
119cbbdf1282c (5 weeks ago) net: use kfree_skb_list() helper (Eric Dumazet)
e544df4504e19 (5 weeks ago) skbuff: skb_segment: orphan frags before copying (Michael S. Tsirkin)
a8a9531beee4e (5 weeks ago) skbuff: skb_segment: s/fskb/list_skb/ (Michael S. Tsirkin)
7510a36c222ab (5 weeks ago) skbuff: skb_segment: s/skb/head_skb/ (Michael S. Tsirkin)
787945fd46720 (5 weeks ago) skbuff: skb_segment: s/skb_frag/frag/ (Michael S. Tsirkin)
d4b773c81b892 (5 weeks ago) skbuff: skb_segment: s/frag/nskb_frag/ (Michael S. Tsirkin)
20ecc86119192 (5 weeks ago) gso: handle new frag_list of frags GRO packets (Herbert Xu)
d4b8147ecb93e (5 weeks ago) Revert "skbuff: skb_segment: orphan frags before copying" (syphyr)
18443a5e2b27e (5 weeks ago) net: gro: make sure skb->cb[] initial content has not to be zero (Eric Dumazet)
65924cba26993 (5 weeks ago) gro: fix aggregation for skb using frag_list (Eric Dumazet)
7fc3ce93657dc (5 weeks ago) net: gro: allow to build full sized skb (Eric Dumazet)
7f2ade28e235e (5 weeks ago) net: Unmap fragment page once iterator is done (Wedson Almeida Filho)
1d1727b645f8d (5 weeks ago) mm/page-writeback.c: don't break integrity writeback on ->writepage() error (Brian Foster)
e5415260bb9b3 (5 weeks ago) netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal)
c0de18a1cf71b (5 weeks ago) LSM: Check for NULL cred-security on free (James Morris)
cae99532e33c6 (5 weeks ago) net: tun: set tun->dev->addr_len during TUNSETLINK processing (Phillip Potter)
239da878a3a33 (5 weeks ago) ieee802154: add IEEE802154_EXTENDED_ADDR_LEN (Alexander Aring)

kernel/samsung/msm8976/net/wireguard

346316b (4 days ago) compat: Use utility functions to clear rxhash (syphyr)
50dda8c (5 days ago) compat: account for latest c8s backports (Jason A. Donenfeld)
d378f93 (2 weeks ago) version: bump (Jason A. Donenfeld)
fb4a0da (2 weeks ago) qemu: increase default dmesg log size (Jason A. Donenfeld)
8f4414d (2 weeks ago) qemu: add disgusting hacks for RHEL 8 (Jason A. Donenfeld)
fd7a462 (2 weeks ago) allowedips: add missing __rcu annotation to satisfy sparse (Jason A. Donenfeld)
383461d (2 weeks ago) allowedips: free empty intermediate nodes when removing single node (Jason A. Donenfeld)
03add82 (2 weeks ago) allowedips: allocate nodes in kmem_cache (Jason A. Donenfeld)
b56d48c (2 weeks ago) allowedips: remove nodes in O(1) (Jason A. Donenfeld)
3c14c4b (2 weeks ago) allowedips: initialize list head in selftest (Jason A. Donenfeld)
4d8b7ed (2 weeks ago) peer: allocate in kmem_cache (Jason A. Donenfeld)
6fbc0e6 (2 weeks ago) global: use synchronize_net rather than synchronize_rcu (Jason A. Donenfeld)
405caf0 (2 weeks ago) kbuild: do not use -O3 (Jason A. Donenfeld)
b50ef4d (2 weeks ago) netns: make sure rp_filter is disabled on vethc (Jason A. Donenfeld)

packages/apps/Settings

d94c5a73a8 (11 days ago) Hide non-system overlay window on ActivityPicker (Arc Wang)

system/bt

903cac18e (11 days ago) RESTRICT AUTOMERGE Contain avrc_ctrl_pars_vendor_cmd OOB write (Chris Manton)

system/sepolicy

11c3cf412 (9 days ago) sepolicy: Allow connections for dnscrypt-proxy (syphyr)