[Galaxy Tab S2 Original Android Development] Deltadroid:
T813: lineage-14.1-20231003-NIGHTLY-gts210vewifi.zip

T713: lineage-14.1-20231004-NIGHTLY-gts28vewifi.zip

Security Patch Level: October 2023

Notes:

Fix for Critical RCE in libvpx (CVE-2023-5217)

Fixed CVE-2017-6888 CVE-2020-0499 CVE-2021-0561 in libflac

Fixed another critical RCE in webp (CVE-2023-4863)

Backported ffmpeg 3.4 CVE to cm-14.1 branch

build

226869fcb3 (3 minutes ago) Bump Security String to 2023-10-05 (syphyr)

external/chromium-webview/patches

cb3cf4a (3 days ago) Update Chromium Webview to 117.0.5938.140 (Kevin F. Haggerty)
a4b0104 (2 weeks ago) Update Chromium Webview to 117.0.5938.60 (Kevin F. Haggerty)

external/chromium-webview/prebuilt/arm64

798fe58 (3 days ago) Update Chromium Webview arm64 prebuilt to 117.0.5938.140 (Kevin F. Haggerty)
f0bcd13 (2 weeks ago) Update Chromium Webview arm64 prebuilt to 117.0.5938.60 (Kevin F. Haggerty)

external/dnscrypt-proxy

b6e5583 (14 minutes ago) Update blocked names list (syphyr)
984b5a6 (5 days ago) Update blocked names list (syphyr)
635dfba (9 days ago) only copy nofilter flag for ODoH relays (syphyr)
95c97ee (10 days ago) Omit DNSSEC flag for relays (syphyr)
86ffb50 (11 days ago) Update blocked names list (syphyr)
059b1fc (2 weeks ago) Update deps and blocked names (syphyr)
e75d395 (4 weeks ago) Update to golang 1.21.1 (syphyr)

external/ffmpeg

db17b279a8 (2 days ago) avcodec/vorbisdec: fix FASTDIV usage for vr_type == 2 (Michael Niedermayer)
9c7a1684bb (2 days ago) avcodec/vorbisdec: Check get_vlc2() failure (Michael Niedermayer)
f88cbb0d3c (2 days ago) avcodec/vorbisdec: Implement vr->classifications = 1 (Michael Niedermayer)
9e47df236e (2 days ago) avcodec/vorbisdec: Check parameters in vorbis_floor0_decode() before divide (Michael Niedermayer)
74965d16d1 (2 days ago) avcodec/vorbisdec: Check vlc for floor0 dec vector offset (Michael Niedermayer)
4f9b2ec34a (2 days ago) avcodec/vorbisdec: amplitude bits can be more than 25 bits (Michael Niedermayer)
63872a9a53 (2 days ago) avcodec/wavpackenc: Fix undefined shifts (Andreas Rheinhardt)
0b2355e372 (2 days ago) avcodec/wavpack: Change wp_log2() to unsigned (Michael Niedermayer)
fcd20c9bc0 (2 days ago) avcodec/wavpack: Fix runtime error: shift exponent 137 is too large for 32-bit type 'int' (Michael Niedermayer)
2d4d74cd6d (2 days ago) avcodec/wavpack: Check value before shift in wp_exp2() (Michael Niedermayer)
7d636959de (2 days ago) avcodec/wavpack: Fix integer overflow in wv_unpack_stereo() (Michael Niedermayer)
47bbc6fa6e (2 days ago) avcodec/wavpack: Fix runtime error: signed integer overflow: -1386217472 * 4 cannot be represented in type 'int' (Michael Niedermayer)
c55ea69352 (2 days ago) avcodec/wavpack: Fix runtime error: left shift of negative value -1 (Michael Niedermayer)
c8a4fe11e5 (2 days ago) avcodec/wavpack: Fix: runtime error: signed integer overflow: 3 * -2147483648 cannot be represented in type 'int' (Michael Niedermayer)
889dfd1bb7 (2 days ago) avcodec/wavpack: Fix integer overflows in wv_unpack_stereo / mono (Michael Niedermayer)
d0ea8a75a4 (2 days ago) avcodec/wavpack: Fix multiple runtime error: signed integer overflow: 548 * -2147483648 cannot be represented in type 'int' (Michael Niedermayer)
377e3dddbd (2 days ago) avcodec/wavpack: Fix runtime error: signed integer overflow: 2147483642 + 512 cannot be represented in type 'int' (Michael Niedermayer)
370baf68d9 (2 days ago) avcodec/wavpack: Fix runtime error: signed integer overflow: 2081021665 - -130689706 cannot be represented in type 'int' (Michael Niedermayer)
3170a9835f (2 days ago) avcodec/wavpack: Fix signed integer overflow: 1285114081 * 2 cannot be represented in type 'int' (Michael Niedermayer)
5d8fa42fc7 (2 days ago) avcodec/wavpack: Fix invalid shift and integer overflow (Michael Niedermayer)
76316c2be8 (2 days ago) avcodec/wavpack: Fix runtime error: left shift of negative value -14778 (Michael Niedermayer)
c32111ea3f (2 days ago) avcodec/wavpack: Treat the first block coding too many channels as an error (Michael Niedermayer)
8bae27e05c (2 days ago) avcodec/wavpack: Check shift (Michael Niedermayer)
091d2c7261 (2 days ago) avcodec/wavpack: Check post_shift (Michael Niedermayer)
d055405c86 (2 days ago) avcodec/wavpack: Fix multiple integer overflows (Michael Niedermayer)
3dd1a570f1 (2 days ago) avcodec/wavpack: Fix 280:22: runtime error: left shift of negative value -1 (Michael Niedermayer)
91d55c4400 (2 days ago) avcodec/wavpack: Check bitrate_acc for overflow (Michael Niedermayer)
ca1f70c17f (2 days ago) avcodec/mlpdec: Insuffient typo (Michael Niedermayer)
428d9c87ad (2 days ago) avcodec/pngdec: Check that previous_picture has same w/h/format (Michael Niedermayer)
64d51fe5a5 (2 days ago) avcodec/pngdec: Check compression method (Michael Niedermayer)
8453979c40 (2 days ago) avformat/wavdec: Check that smv block fits in available space (Michael Niedermayer)
c3b5cfb3d5 (2 days ago) avcodec/tak: Check remaining bits in ff_tak_decode_frame_header() (Michael Niedermayer)
9caf722330 (2 days ago) avcodec/utils: the IFF_ILBM implementation assumes that there are a multiple of 16 allocated (Michael Niedermayer)
d551b5a298 (2 days ago) avcodec/vorbisdec: Check codebook float values to be finite (Michael Niedermayer)
88aa7a27cf (2 days ago) avcodec/g2meet: Replace fake allocation avoidance for framebuf (Michael Niedermayer)
54f0b5ce34 (2 days ago) avcodec/lcldec: More space for rgb24 (Michael Niedermayer)
e563f27ca8 (2 days ago) avcodec/lcldec: Support 4:1:1 and 4:2:2 with odd width (Michael Niedermayer)
4899f764b0 (2 days ago) libavcodec/lcldec: width and height should not be unsigned (Michael Niedermayer)
b781b79843 (2 days ago) avcodec/escape124: Check that blocks are allocated before use (Michael Niedermayer)
eeeb004bf2 (2 days ago) avcodec/huffyuvdec: Fix undefined behavior with shift (Michael Niedermayer)
fab3079bfc (2 days ago) avcodec/j2kenc: fix 5/3 DWT identifer (Michael Niedermayer)
14aa2efb79 (2 days ago) avcodec/vp3: Check width to avoid assertion failure (Michael Niedermayer)
7741870113 (2 days ago) avcodec/g729postfilter: Limit shift in long term filter (Michael Niedermayer)
c9e6c025ef (2 days ago) configure: update copyright year (Lynne)
963fcbbc43 (2 days ago) avcodec/snowenc: Fix visual weight calculation (Michael Niedermayer)
a3dd9dcd9b (2 days ago) avcodec/escape124: Fix some return codes (Michael Niedermayer)
41e77fc158 (2 days ago) avcodec/escape124: fix signdness of end of input check (Michael Niedermayer)
af94ddc6d4 (2 days ago) Use https for repository links (Michael Niedermayer)
9ea6254526 (2 days ago) avcodec/motionpixels: Mask pixels to valid values (Michael Niedermayer)
866e74fb6a (2 days ago) avcodec/bink: Avoid undefined out of array end pointers in binkb_decode_plane() (Michael Niedermayer)
bdf2e887b7 (2 days ago) avcodec/bink: Fix off by 1 error in ref end (Michael Niedermayer)
3488574283 (2 days ago) avcodec/utils: Ensure linesize for SVQ3 (Michael Niedermayer)
e07fc76d5c (2 days ago) avcodec/utils: allocate a line more for VC1 and WMV3 (Michael Niedermayer)
4419947f5f (2 days ago) avcodec/videodsp_template: Adjust pointers to avoid undefined pointer things (Michael Niedermayer)
ccd419b24a (2 days ago) avcodec/pngdec: Check deloco index more exactly (Michael Niedermayer)
5c748ab4c7 (2 days ago) avcodec/ffv1dec: Check that num h/v slices is supported (Michael Niedermayer)
4af854f4c4 (2 days ago) avformat/mov: Check samplesize and offset to avoid integer overflow (Michael Niedermayer)
2c27d9564c (2 days ago) avcodec/pictordec: Remove mid exit branch (Michael Niedermayer)
66561f6c14 (2 days ago) avcodec/eac3dec: avoid float noise in fixed mode addition to overflow (Michael Niedermayer)
f05e94b8bd (2 days ago) avcodec/utils: use 32pixel alignment for bink (Michael Niedermayer)
7ba4b3ce79 (2 days ago) avcodec/012v: Order operations for odd size handling (Michael Niedermayer)
e20b80646d (2 days ago) avcodec/eatgq: : Check index increments in tgq_decode_block() (Michael Niedermayer)
7a32c8092e (2 days ago) avcodec/sunrast: Fix maplength check (Michael Niedermayer)
d12b6441a7 (2 days ago) avcodec/sunrast: Check that the input is large enough for the maximally compressed image (Michael Niedermayer)
bd60fb758b (2 days ago) avcodec/sunrast: Check for availability of maplength before allocating image (Michael Niedermayer)
6f59965ece (2 days ago) avcodec/wavpack: Avoid undefined shift in get_tail() (Michael Niedermayer)
c5121c012d (2 days ago) avformat/id3v2: Check taglen in read_uslt() (Michael Niedermayer)
27fe5abe57 (2 days ago) avcodec/ffv1dec: restructure slice coordinate reading a bit (Michael Niedermayer)
255fccdba7 (2 days ago) swscale/input: Use more unsigned intermediates (Michael Niedermayer)
c1775981cc (2 days ago) avcodec/alsdec: The minimal block is at least 7 bits (Michael Niedermayer)
a6d0751e0c (2 days ago) avformat/replaygain: avoid undefined / negative abs (Michael Niedermayer)
8c4e84d8f5 (2 days ago) swscale/output: Bias 16bps output calculations to improve non overflowing range (Michael Niedermayer)
d167554cf5 (2 days ago) avcodec/ffv1dec: Fail earlier if prior context is corrupted (Michael Niedermayer)

external/flac

3c73deb (11 days ago) libFlac: Exit at EOS in verify mode (Neelkamal Semwal)
821a88a (11 days ago) libFLAC/bitreader.c: Fix out-of-bounds read (Erik de Castro Lopo)
709038e (11 days ago) stream_decoder.c: Fix a memory leak (Erik de Castro Lopo)

external/libvpx

e2d21c2 (5 days ago) VP8: disallow thread count changes (James Zern)

external/libxml2

229e0f86 (17 hours ago) malloc-fail: Fix OOB read after xmlRegGetCounter (Nick Wellnhofer)

external/webp

85d6903 (2 weeks ago) Bring back Android.mk (Vasyl Gello)
d3421a7 (2 weeks ago) Fix OOB write in BuildHuffmanTable. (Vincent Rabaud)

frameworks/base

3bf9d03c05da (17 hours ago) Fix KCM key mapping cloning (Josep del Rio)
e47bec9c0f73 (17 hours ago) Do not share key mappings with JNI object (Josep del Rio)
53ad5603acc1 (17 hours ago) Fixing DatabaseUtils to detect malformed UTF-16 strings (Kunal Malhotra)
c04cc7532837 (17 hours ago) RingtoneManager: verify default ringtone is audio (Jean-Michel Trivi)

kernel/samsung/msm8976

51f8829329a80 (8 days ago) security: keys: perform capable check only on privileged operations (Christian GÃ¶ttsche)
44bb2a11f2915 (8 days ago) igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet)
882b11f021fb2 (8 days ago) ipv6: mld: fix add_grhead skb_over_panic for devs with large MTUs (Daniel Borkmann)
3483811ce1a85 (8 days ago) ipv4, ipv6: send igmpv3/mld packets with TC_PRIO_CONTROL (Hannes Frederic Sowa)
fbfb45d7de5a3 (8 days ago) ipv4: annotate data-races around fi->fib_dead (Eric Dumazet)
427d402d670e4 (2 weeks ago) af_unix: Fix data race around sk->sk_err. (Kuniyuki Iwashima)
fe5c4de7e0cbd (2 weeks ago) af_unix: annotate lockless accesses to sk->sk_err (Eric Dumazet)
2c645e229b4f9 (2 weeks ago) af_unix: Fix data-races around sk->sk_shutdown. (Kuniyuki Iwashima)
d26bed50a3cfd (2 weeks ago) af_unix: Fix data-race around unix_tot_inflight. (Kuniyuki Iwashima)
8dc2984716223 (2 weeks ago) af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (Eric Dumazet)
ac220d425d9c8 (2 weeks ago) af_unix: Fix data-races around user->unix_inflight. (Kuniyuki Iwashima)
1272a775f0f2f (2 weeks ago) audit: fix possible soft lockup in __audit_inode_child() (Gaosheng Cui)

packages/apps/Settings

759e51f236 (19 minutes ago) [RESTRICT AUTOMERGE] Restrict ApnEditor settings (Weng Su)