[Galaxy Tab S2 Original Android Development] Deltadroid:
T813: lineage-14.1-20230314-NIGHTLY-gts210vewifi.zip

T713: lineage-14.1-20230314-NIGHTLY-gts28vewifi.zip

Security Patch Level: March 2023

Notes:

AOSP webview release is now the default system webview, but support is also now included for Mulch webview and Bromite webview (which can be activated in the developer options after separate download and installation). Mulch webview includes many privacy and de-Googled commits. Mulch webview's source code is found here: https://gitlab.com/divested-mobile/mulch. A list of the latest Mulch webview releases along with the number of security fixes included is found here: https://divestos.org/misc/ch-dates.txt. Mulch webview can be automatically updated via F-Droid by adding its repository from here: https://divestos.org/pages/our_apps#repos. Because of security reasons, it is currently recommended to use AOSP webview or Mulch webview, at least until an updated version of Bromite webview becomes available. Thanks to @SkewedZeppelin for providing updated Mulch webview releases.

Several critical RCE have also been fixed in BoringSSL and Bluetooth.

android

a0d9c4a (22 hours ago) lineage: Disable unused webview projects to save space (syphyr)
51d25ce (22 hours ago) lineage: Convert webview repo from gitlab to lfs (syphyr)
1af9c3c (3 weeks ago) lineage: Use the new webview projects (Kevin F. Haggerty)

build

ee85e7dbd5 (83 minutes ago) Bump Security String to 2023-03-05 (syphyr)

external/boringssl

b10ddf5a (2 weeks ago) Fix a UAF resulting from a bug in BIO_new_NDEF (Matt Caswell)
82bd7145 (2 weeks ago) [BACKPORT] Don't use strcasecmp and strncasecmp for IA5 strings (Matt Caswell)
48d65701 (2 weeks ago) CVE-2023-0286: Fix GENERAL_NAME_cmp for x400Address (1.1.1) (Hugo Landau)
a4b2efcf (2 weeks ago) Fix possible infinite loop in BN_mod_sqrt() (Tomas Mraz)
707b6eb6 (2 weeks ago) Fix EDIPartyName parsing and GENERAL_NAME_cmp. (Pete Bentley)
754c9cd9 (2 weeks ago) Fix the name constraints code to not assume NUL terminated strings (Matt Caswell)
5895e888 (2 weeks ago) Fix append_ia5 function to not assume NUL terminated strings (Matt Caswell)
faecbd15 (2 weeks ago) Fix printing of PROXY_CERT_INFO_EXTENSION to not assume NUL terminated strings (Matt Caswell)
a76dac90 (2 weeks ago) Fix POLICYINFO printing to not assume NUL terminated strings (Matt Caswell)
dd9821ca (2 weeks ago) Fix i2v_GENERAL_NAME to not assume NUL terminated strings (Matt Caswell)
240d35aa (2 weeks ago) Fix Null pointer deref in X509_issuer_and_serial_hash() (Matt Caswell)
b9257db4 (2 weeks ago) Ensure bn_cmp_words can handle the case where n == 0 (Matt Caswell)
ffed49af (2 weeks ago) bn/asm/rsaz-avx2.pl: fix digit correction bug in rsaz_1024_mul_avx2. (Andy Polyakov)
6370b81f (2 weeks ago) Fix some error path logic in i2v_AUTHORITY_INFO_ACCESS and i2v_GENERAL_NAME (Matt Caswell)

external/chromium-webview/patches

ca03b97 (5 days ago) Update Chromium Webview to 111.0.5563.58 (Kevin F. Haggerty)

external/chromium-webview/prebuilt/arm64

51c2e16 (21 minutes ago) Notes on using and setting up git-lfs (syphyr)
8b850a5 (9 hours ago) Update Chromium Webview arm64 prebuilt to 111.0.5563.58 (Kevin F. Haggerty)
9bd56e2 (4 days ago) Import Chromium Webview arm64 prebuilt 109.0.5414.118 (Chirayu Desai)
d158282 (4 days ago) Set up lfs (Michael Bestas)
91aa269 (4 days ago) Initial empty repository (Michael Bestas)

external/dnscrypt-proxy

bae461c (2 minutes ago) Update blocked names (syphyr)
73258a3 (6 days ago) Update to golang 1.20.2 (syphyr)
450792e (11 days ago) Update blocked names (syphyr)
dab7435 (2 weeks ago) Update quic-go (syphyr)
94fe372 (2 weeks ago) Use crypto_rand everywhere (syphyr)
f51bdd4 (3 weeks ago) Update blocked names list (syphyr)
52c997c (4 weeks ago) Update to golang 1.20.1 (syphyr)
93e8584 (5 weeks ago) Update x/net and x/crypto deps (syphyr)

external/zlib

a58f28c (2 hours ago) Fix a bug when getting a gzip header extra field with inflate(). (Sadaf Ebrahimi)

kernel/samsung/msm8976

e2a3e80663925 (2 days ago) Bluetooth: hci_sock: purge socket queues in the destruct() callback (Nguyen Dinh Phi)
098bfaf0d029b (2 days ago) Bluetooth: Fix race condition in hci_release_sock() (Dan Carpenter)
5e877ce4d7956 (2 days ago) crypto: seqiv - Handle EBUSY correctly (Herbert Xu)
1e80747f6b4c2 (7 days ago) fbmem: Check virtual screen sizes in fb_set_var() (Helge Deller)
4d3c98f8219ba (3 weeks ago) mmc: sdio: fix possible resource leaks in some error paths (Yang Yingliang)
915cec4c33262 (3 weeks ago) lockdep: Do not break user-visible string (Borislav Petkov)
bbead5e0132b2 (3 weeks ago) locking/lockdep: Remove hard coded array size dependency (George Beshers)
9f1d5071f2d91 (3 weeks ago) dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. (Kuniyuki Iwashima)
c9fb9f15e7fa5 (3 weeks ago) tcp: suppress too verbose messages in tcp_send_ack() (Eric Dumazet)
7d42f89218bbd (3 weeks ago) net: constify sk_gfp_atomic() sock argument (Eric Dumazet)
214d7ab509869 (3 weeks ago) usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (Udipto Goswami)

packages/apps/Jelly

3e02bb4 (4 days ago) Make Accent Color to material blue instead of stock pink (The-Demon12)
85df26c (4 days ago) Jelly: Fix Baidu Search Suggestion Provider (Ricky Cheung)
e9284b7 (4 days ago) Jelly: Fix infinite immersive mode prompt (Rushab Shah)

system/bt

894f49fc28 (2 hours ago) Fix an OOB write in SDP_AddAttribute (Hui Peng)
2ac15d0043 (3 hours ago) Fix an OOB Write bug in gatt_check_write_long_terminate (Hui Peng)
2af77b4cb4 (7 days ago) AVRCP: Fix potential buffer overflow (Rocky Liao)

vendor/cm

7c997b44 (3 weeks ago) Webview Overlay: Add Mulch WebView (syphyr)
0b9b7d43 (3 weeks ago) Make AOSP WebView default again (syphyr)