[Galaxy Tab S2 Original Android Development] Deltadroid:
T813: lineage-14.1-20231108-NIGHTLY-gts210vewifi.zip

T713: lineage-14.1-20231108-NIGHTLY-gts28vewifi.zip

Security Patch Level: November 2023

Notes:

- Remove E-Tugra root certificate which is currently under investigation

- Fixed more ffmpeg and kernel cve

android

5b4dfad (23 hours ago) manifest: Track android-security-12.0.0_r53 for system/ca-certificates (syphyr)

build

7ab049cb6c (2 days ago) Bump Security String to 2023-11-05 (syphyr)

external/chromium-webview/patches

9cf51c5 (9 days ago) Update Chromium Webview to 118.0.5993.111 (Kevin F. Haggerty)

external/chromium-webview/prebuilt/arm64

ce2275e (9 days ago) Update Chromium Webview arm64 prebuilt to 118.0.5993.111 (Kevin F. Haggerty)

external/dnscrypt-proxy

a6d6f6b (23 hours ago) Update to golang 1.21.4 (syphyr)
1d0f4ac (3 weeks ago) Update blocked names list (syphyr)
b8d4619 (4 weeks ago) Update deps and blocked names list (syphyr)
82d023d (4 weeks ago) Update to golang 1.21.3 (syphyr)
cd48557 (5 weeks ago) Update to golang 1.21.2 (syphyr)

external/ffmpeg

dbc158d78e (8 days ago) avformat/matroskadec: Fix declaration-after-statement warnings (Andreas Rheinhardt)
4275787f21 (8 days ago) avformat/rtsp: Use rtsp_st->stream_index (Michael Niedermayer)
2ecab0af25 (8 days ago) avcodec/jpeg2000dec: Check image offset (Michael Niedermayer)
0f8d9f1a0b (3 weeks ago) avcodec/pngdec: Do not pass AVFrame into global header decode (Michael Niedermayer)
d24a45700d (3 weeks ago) avcodec/mlpdec: Check max matrix instead of max channel in noise check (Michael Niedermayer)
858d3e95c0 (3 weeks ago) avcodec/xvididct: Make c* unsigned to avoid undefined overflows (Michael Niedermayer)
51dca6d928 (3 weeks ago) avformat/tmv: Check video chunk size (Michael Niedermayer)
bb151c0290 (3 weeks ago) avformat/matroskadec: Check prebuffered_ns for overflow (Michael Niedermayer)
15f766052d (3 weeks ago) avformat/wavdec: Check left avio_tell for overflow (Michael Niedermayer)
8e01a9eb5b (3 weeks ago) avformat/tta: Better totalframes check (Michael Niedermayer)
d7171fb820 (3 weeks ago) avformat/rpl: Check for number_of_chunks overflow (Michael Niedermayer)
82d12a33a9 (3 weeks ago) avformat/jacosubdec: Check timeres (Michael Niedermayer)
45e6e15f25 (3 weeks ago) avcodec/escape124: Do not return random numbers (Michael Niedermayer)
f2726bef4c (3 weeks ago) avformat/avs: Check if return code is representable (Michael Niedermayer)
ea026487ab (3 weeks ago) avcodec/lcldec: Make PNG filter addressing match the code afterwards (Michael Niedermayer)
5206c291dc (3 weeks ago) avformat/westwood_vqa: Check chunk size (Michael Niedermayer)
c5a3b83254 (3 weeks ago) avformat/sbgdec: Check for period overflow (Michael Niedermayer)
2b59d2aebf (3 weeks ago) avcodec/xvididct: Fix integer overflow in idct_row() (Michael Niedermayer)
9d0e7f9c93 (3 weeks ago) avcodec/celp_math: avoid overflow in shift (Michael Niedermayer)
25a1464ac3 (3 weeks ago) avformat/format: Stop reading data at EOF during probing (Michael Niedermayer)
287154bf28 (3 weeks ago) avcodec/huffyuvdec: avoid undefined behavior with get_vlc2() failure (Michael Niedermayer)
9519ec4e5f (3 weeks ago) avcodec/mpeg4videodec: more unsigned in amv computation (Michael Niedermayer)
80aa66c2a7 (3 weeks ago) avcodec/tta: fix signed overflow in decorrelate (Michael Niedermayer)
d9d84eab02 (3 weeks ago) avcodec/xvididct: Fix integer overflow in idct_row() (Michael Niedermayer)
8eeb18399c (3 weeks ago) avcodec/jpeg2000dec: Check for reduction factor and image offset (Michael Niedermayer)
9aeb3a3c96 (3 weeks ago) avutil/softfloat: Basic documentation for av_sincos_sf() (Michael Niedermayer)
3a1357e454 (3 weeks ago) avutil/softfloat: fix av_sincos_sf() (Michael Niedermayer)
ebffd7ee75 (3 weeks ago) avcodec/utils: fix 2 integer overflows in get_audio_frame_duration() (Michael Niedermayer)
850700c798 (3 weeks ago) avcodec/hevcdec: Avoid null pointer dereferences in MC (Michael Niedermayer)
cf71fc9ddf (3 weeks ago) avcodec: Ignoring errors is only possible before the input end (Michael Niedermayer)
a13f6dcfd4 (4 weeks ago) avformat/avienc: add deinit function (James Almer)
f76278597e (4 weeks ago) avformat/avienc: add reserve_index_space option (Tobias Rapp)
33bffe8139 (4 weeks ago) avfilter/f_reverse: fix memory leaks (Paul B Mahol)
19369b61c5 (4 weeks ago) avformat/mpegenc: Fix memleaks and return values (Andreas Rheinhardt)
c2f5132ab7 (4 weeks ago) avfilter/vf_tile: fix memory leak (Paul B Mahol)
d4bba05fc5 (4 weeks ago) avfilter/vf_tile: add overlap option (Paul B Mahol)

frameworks/av

fbdd11435a (2 days ago) Fix for heap buffer overflow issue flagged by fuzzer test. (Shruti Bihani)

frameworks/base

d8846dd41c67 (2 days ago) Use type safe API of readParcelableArray (kumarashishg)
ab6b5bd7f3de (2 days ago) [SettingsProvider] verify ringtone URI before setting (Songchun Fan)

kernel/samsung/msm8976

a78953344a43a (10 minutes ago) kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai)
96241d0ae4cb0 (10 minutes ago) kobject: Replace strncpy with memcpy (Guenter Roeck)
901419f12accf (2 days ago) pinctrl: avoid unsafe code pattern in find_pinctrl() (Dmitry Torokhov)
f73568303d494 (2 days ago) ASoC: msm-pcm-voip: Avoid integer underflow (Soumya Managoli)
c7b91c4625bf4 (2 days ago) ASoC: msm-pcm-host-voice: Address buffer overflow in hpcm capture copy (Soumya Managoli)
db62629c6c8e5 (2 weeks ago) wifi: cfg80211: avoid leaking stack data into trace (Benjamin Berg)
3fa13c9c4fb0e (4 weeks ago) tcp: fix delayed ACKs for MSS boundary condition (Neal Cardwell)
926b136f50e8c (4 weeks ago) ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells)
e7534f4ea6036 (4 weeks ago) ring-buffer: Avoid softlockup in ring_buffer_resize() (Zheng Yejian)

system/ca-certificates

8ad05ef (23 hours ago) Remove E-Tugra certificates. (Miguel)