[Galaxy Tab S2 Original Android Development] Deltadroid:
T813: lineage-14.1-20230809-NIGHTLY-gts210vewifi.zip

T713: lineage-14.1-20230810-NIGHTLY-gts28vewifi.zip

Security Patch Level: August 2023

Notes:

- Update freetype library using lineage-18.1 branch to fix critical RCE (CVE-2023-21287)

- Backport wireguard patches from 6.1.39 kernel

- Fix critical RCE in aac library (CVE-2023-21282)

- Fix additional cve in boringssl

build

cac7e7ece8 (26 hours ago) Bump Security String to 2023-08-05 (syphyr)

external/aac

153f169 (2 days ago) Increase patchParam array size by one and fix out-of-bounce write in resetLppTransposer(). (Fraunhofer IIS FDK)

external/boringssl

f839731456 (9 days ago) DH_check(): Do not try checking q properties if it is obviously invalid (Tomas Mraz)
b270891af4 (2 weeks ago) Make DH_check set some error bits in recently added error (Bernd Edlinger)
5438d1e058 (2 weeks ago) [BACKPORT] Fix DH_check() excessive time with over sized modulus (Matt Caswell)

external/chromium-webview/patches

8eef9e0 (6 days ago) Update Chromium Webview to 115.0.5790.166 (Kevin F. Haggerty)

external/chromium-webview/prebuilt/arm64

d80e3cd (4 days ago) Update Chromium Webview arm64 prebuilt to 115.0.5790.166 (Kevin F. Haggerty)

external/dnscrypt-proxy

5833727 (2 hours ago) Update quic-go to support go 1.21.0 (syphyr)
e84c8b0 (2 days ago) Update crypto deps and blocked names (syphyr)
e99f78c (8 days ago) Update to golang 1.20.7 (syphyr)
9f98558 (9 days ago) Update quic-go (syphyr)
987834a (9 days ago) Update blocked names list (syphyr)
d867969 (2 weeks ago) Update blocked names and sync configs (syphyr)
1a28e9b (3 weeks ago) Update quic-go (syphyr)
fcc6f73 (4 weeks ago) Add undelegated names (syphyr)
e3cf23a (4 weeks ago) Update to golang 1.20.6 (syphyr)
36207e8 (5 weeks ago) Fix quic-go and update deps (syphyr)

external/freetype

cae304774 (22 hours ago) Cherrypick following three changes (Seigo Nonaka)
4cbccba55 (22 hours ago) Add Android.mk for legacy builds (syphyr)
d3eab1b43 (5 weeks ago) Merge tag 'android-security-11.0.0_r69' of https://android.googlesource.com/platform/external/freetype into staging/lineage-18.1_merge_android-security-11.0.0_r69 (Kevin F. Haggerty)

frameworks/base

41af1a1e1cab (14 minutes ago) Resolve StatusHints image exploit across user. (Pranav Madapurmath)
2e3cb4c99731 (14 minutes ago) DO NOT MERGE: ActivityManager#killBackgroundProcesses can kill caller's own app only (Jing Ji)
bb9aa8204ef1 (77 minutes ago) Verify URI permissions in MediaMetadata (Michael Mikhail)
76e7c8d59c9c (24 hours ago) Use Settings.System.getIntForUser instead of getInt to make sure user specific settings are used (Chandru S)
75b63500a934 (24 hours ago) Ensure policy has no absurdly long strings (Pavel Grafov)

kernel/samsung/msm8976

a9ca954bfefd9 (6 days ago) tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith)
e05f600ac8d38 (10 days ago) tcp: annotate data-races around icsk->icsk_user_timeout (Eric Dumazet)
06c9c45098ceb (12 days ago) tcp: annotate data-races around icsk->icsk_syn_retries (Eric Dumazet)
bbee056324fe1 (12 days ago) tcp: annotate data-races around tp->keepalive_probes (Eric Dumazet)
99e1c8a2bcd8c (12 days ago) tcp: annotate data-races around tp->keepalive_intvl (Eric Dumazet)
34d5cbc1f2ae8 (12 days ago) tcp: annotate data-races around tp->keepalive_time (Eric Dumazet)
7c53cbbf5fa9c (12 days ago) tcp: Fix data-races around sysctl_tcp_syn(ack)?_retries. (Kuniyuki Iwashima)
0ac53d1ce6bf3 (12 days ago) tcp: Fix data-races around keepalive sysctl knobs. (Kuniyuki Iwashima)
990389bc41679 (13 days ago) tcp: annotate data-races around rskq_defer_accept (Eric Dumazet)
b78fb24822ddb (13 days ago) tcp: annotate data-races around tp->linger2 (Eric Dumazet)
4f6fc94979770 (13 days ago) tcp: Fix data-races around some timeout sysctl knobs. (Kuniyuki Iwashima)
0d727424ac827 (13 days ago) net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX (Cambda Zhu)
85967cd97aa47 (3 weeks ago) wireguard: Backport bug fixes from 6.1.39 (syphyr)

kernel/samsung/msm8976/net/wireguard

39bb781d (3 weeks ago) wireguard: netlink: send staged packets when setting initial private key (Jason A. Donenfeld)
67abbd0c (3 weeks ago) wireguard: queueing: use saner cpu selection wrapping (Jason A. Donenfeld)
4981b714 (3 weeks ago) wireguard: timers: cast enum limits members to int in prints (Jiri Slaby (SUSE))
84deecc9 (3 weeks ago) wireguard: ratelimiter: disable timings test by default (Jason A. Donenfeld)
f6a51c7f (3 weeks ago) wireguard: netlink: avoid variable-sized memcpy on sockaddr (Jason A. Donenfeld)
7c4aa253 (3 weeks ago) wireguard: ratelimiter: use hrtimer in selftest (Jason A. Donenfeld)
453844ad (3 weeks ago) wireguard: allowedips: don't corrupt stack when detecting overflow (Jason A. Donenfeld)

packages/providers/TelephonyProvider

6c18cffa (2 days ago) Update file permissions using canonical path (Aishwarya Mallampati)

packages/services/Telecomm

812150a40 (44 minutes ago) Resolve StatusHints image exploit across user. (Pranav Madapurmath)