[Galaxy Tab S2 Original Android Development] Deltadroid:
T813: lineage-14.1-20230611-NIGHTLY-gts210vewifi.zip

T713: lineage-14.1-20230612-NIGHTLY-gts28vewifi.zip

Security Patch Level: June 2023

Notes:

- Update ca-certificates to Google's master branch to

drop untrusted TrustCor certificates

- Fix two critical RCE (CVE-2023-21127 and CVE-2023-21108)

- Fix critical DoS in boringssl (CVE-2023-2650)

android

ae2c1ab (4 weeks ago) manifest: Track master for system/ca-certificates (syphyr)

build

662a3f7639 (20 hours ago) Bump Security String to 2023-06-05 (syphyr)

external/boringssl

a1ca26b9cf (20 minutes ago) Restrict the size of OBJECT IDENTIFIERs that OBJ_obj2txt will translate (Richard Levitte)
55e8534247 (20 minutes ago) x509: Handle ossl_policy_level_add_node errors (Clemens Lang)
9faf7a07e4 (20 minutes ago) x509: Fix possible use-after-free when OOM (Clemens Lang)
1ace264bd7 (5 weeks ago) Add negative integer check when using ASN1_BIT_STRING (mlitre)

external/chromium-webview/patches

d27d28f (20 hours ago) Update Chromium Webview to 114.0.5735.61 (Kevin F. Haggerty)

external/chromium-webview/prebuilt/arm64

b37ee1c (20 hours ago) Update Chromium Webview arm64 prebuilt to 114.0.5735.61 (Kevin F. Haggerty)

external/dnscrypt-proxy

4ceb878 (20 hours ago) Update blocked names list (syphyr)
679f602 (3 days ago) Update to golang 1.20.5 (syphyr)
3ef85e5 (13 days ago) Create README.md (Deltadroid)
5c0a9b4 (13 days ago) Update blocked names list (syphyr)
744c23d (13 days ago) Update dnscrypt binary, config, and resolvers (syphyr)
0ecd166 (4 weeks ago) Update crypto deps, blocked names and resolvers (syphyr)

frameworks/av

917a00b4a7 (23 hours ago) Fix NuMediaExtractor::readSampleData buffer Handling (Ray Essick)

frameworks/base

bdd42df47e6c (22 hours ago) Handle invalid data during job loading. (Kweku Adams)
63d69112a81e (22 hours ago) Check key intent for selectors and prohibited flags (Brian Lee)
9201422c6496 (22 hours ago) Prevent RemoteViews crashing SystemUi (Valentin Iftime)

kernel/samsung/msm8976

157e398a7f6dd (19 hours ago) selinux: don't use make's grouped targets feature yet (Paul Moore)
df117f1bafb01 (19 hours ago) udp6: Fix race condition in udp6_sendmsg & connect (Vladislav Efanov)
aa1dc98aaa81d (19 hours ago) ipv6: kill sk_dst_lock (Eric Dumazet)
0071bdce7b68e (19 hours ago) ipv6: remove useless spin_lock/spin_unlock (Duan Jiong)
a99e8e3a8e366 (19 hours ago) udp: ipv4: do not use sk_dst_lock from softirq context (Eric Dumazet)
0036d44975498 (19 hours ago) tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set (Cambda Zhu)
85a7465df2e87 (19 hours ago) af_packet: do not use READ_ONCE() in packet_bind() (Eric Dumazet)
665b1f6552a4d (19 hours ago) af_packet: Fix data-races of pkt_sk(sk)->num. (Kuniyuki Iwashima)
7fe59bd255440 (19 hours ago) ipv{4,6}/raw: fix output xfrm lookup wrt protocol (Nicolas Dichtel)
f9bd8133d3ffd (19 hours ago) ipv4: ipcm_cookie initializers (Willem de Bruijn)
8db01f4fbe382 (19 hours ago) Revert "icmp: avoid allocating large struct on stack" (Jesper Dangaard Brouer)
c6c24104fb592 (19 hours ago) ipv4: accept u8 in IP_TOS ancillary data (Eric Dumazet)
1c36338a1d96b (19 hours ago) ipv4: processing ancillary IP_TOS or IP_TTL (Francesco Fusco)
4592c7bf84abc (19 hours ago) ipv4: IP_TOS and IP_TTL can be specified as ancillary data (Francesco Fusco)
c5f60bc9a405f (19 hours ago) ASoC: msm-pcm-q6-v2: Add dsp buf check (Soumya Managoli)
de2e492a44e7b (19 hours ago) asoc: Update copy_to_user to requested buffer size (Laxminath Kasam)
c2f17108631a4 (19 hours ago) asoc: msm-pcm-q6-v2: Update memset for period size (Laxminath Kasam)
44e2569695f90 (19 hours ago) asoc: Reset the buffer if size is partial or zero (Laxminath Kasam)
805257323e28a (19 hours ago) ASoC: msm: Update the error handling when APR sends packet failed (Kuirong Wang)
18e3dc64b56db (19 hours ago) ASoC: msm: qdsp6v2: Copy multiple frames per msm-pcm-q6 copy (Ben Romberger)
e86244118f420 (6 days ago) qcacld-2.0: Fix OOB in wma_scan_roam.c (Nagalakshmi)
47492d74c8f8a (6 days ago) bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (Ruihan Li)
47e5ecb308804 (12 days ago) ipv6: Fix out-of-bounds access in ipv6_find_tlv() (Gavrilov Ilia)
59ac0834da768 (12 days ago) af_key: Reject optional tunnel/BEET mode templates in outbound policies (Tobias Brunner)
4d06ae03783f9 (2 weeks ago) usb-storage: fix deadlock when a scsi command timeouts more than once (Maxime Bizon)
7bd30e92d4060 (3 weeks ago) af_unix: Fix data races around sk->sk_shutdown. (Kuniyuki Iwashima)
4188d67216c1c (3 weeks ago) af_unix: Fix a data race of sk->sk_receive_queue->qlen. (Kuniyuki Iwashima)
f8cbb3b55ce79 (3 weeks ago) net: datagram: fix data-races in datagram_poll() (Eric Dumazet)
0d73f7ac76b6a (3 weeks ago) tcp: add annotations around sk->sk_shutdown accesses (Eric Dumazet)
10ae6f531efb7 (3 weeks ago) net: deal with most data-races in sk_wait_event() (Eric Dumazet)
e322cb567216f (3 weeks ago) net: annotate sk->sk_err write from do_recvmmsg() (Eric Dumazet)
8463fde7615b2 (3 weeks ago) netlink: annotate accesses to nlk->cb_running (Eric Dumazet)
5756eef714b6d (3 weeks ago) net: fix warnings in 'make htmldocs' by moving macro definition out of field declaration (Hannes Frederic Sowa)
f148976ddb3d1 (3 weeks ago) net: sock: move ->sk_shutdown out of bitfields. (Andrey Ryabinin)
82bb0886a46a4 (4 weeks ago) ext4: remove a BUG_ON in ext4_mb_release_group_pa() (Theodore Ts'o)
eca318b6edbba (4 weeks ago) ext4: bail out of ext4_xattr_ibody_get() fails for any reason (Theodore Ts'o)
275ba4f46f222 (4 weeks ago) ext4: add bounds checking in get_max_inline_xattr_value_size() (Theodore Ts'o)
8a46ad4fe3fc0 (4 weeks ago) ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus)
775f11c4d9c14 (4 weeks ago) perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong)
1ee100cb06e41 (4 weeks ago) net/packet: convert po->auxdata to an atomic flag (Eric Dumazet)
ee38791e44175 (4 weeks ago) net/packet: convert po->origdev to an atomic flag (Eric Dumazet)
299a4994f62b2 (4 weeks ago) selinux: ensure av_permissions.h is built when needed (Paul Moore)
6301b6a3b28b4 (4 weeks ago) selinux: fix Makefile dependencies of flask.h (Ondrej Mosnacek)
cbc2df356cdc1 (4 weeks ago) ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg)
9550ac7f555cb (4 weeks ago) netlink: Use copy_to_user() for optval in netlink_getsockopt(). (Kuniyuki Iwashima)
d3c47cca5e3b7 (4 weeks ago) ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan)

packages/apps/Settings

0f7729ad74 (22 hours ago) Convert argument to intent in AddAccountSettings. (Dmitry Dementyev)

packages/apps/TvSettings

7e176e6d8 (21 hours ago) Convert argument to intent in addAccount TvSettings. (Dmitry Dementyev)

system/bt

a4067bc07e (18 hours ago) Revert "Revert "Fix wrong BR/EDR link key downgrades (P_256->P_192)"" (Brian Delwiche)
201b013cd3 (18 hours ago) Revert "Revert "[RESTRICT AUTOMERGE] Validate buffer length in sdpu_build_uuid_seq"" (Brian Delwiche)
c9ef7eef4c (19 hours ago) Prevent use-after-free of HID reports (Brian Delwiche)

system/ca-certificates

4fac000 (4 weeks ago) Backport Android.mk from P (syphyr)
e302aa9 (4 months ago) (4 months ago) Merge "Drop TrustCor certificates" am: 4a6f8f62c1 (Miguel Aranda)
4a6f8f6 (4 months ago) (4 months ago) Merge "Drop TrustCor certificates" (Miguel Aranda)
2885477 (4 months ago) (4 months ago) Update m2crypto instructions to python3 am: 076515a4a4 (Daniel Zhang)
fb52147 (6 months ago) (6 months ago) Drop TrustCor certificates (Orion Hodson)
076515a (6 months ago) (6 months ago) Update m2crypto instructions to python3 (Daniel Zhang)