android-security-16.0.0_r2 to android-security-16.0.0_r3 AOSP changelog

This only includes the Android Open Source Project changes and does not include any changes in any proprietary components included by Google or any hardware manufacturer. The raw log was generated using a modified version of this script written by JBQ and improved by Al Sutton.

Please do not copy this without attribution to this site and JBQ for the original script.

+- Project: platform/build

25c5cd26aa : Version bump to BP2A.250805.014 [core/build_id.mk]
19cfb62183 : Version bump to BP2A.250805.013 [core/build_id.mk]
286b49cb8d : Version bump to BP2A.250805.012 [core/build_id.mk]
7c8b119f3d : Version bump to BP2A.250805.011 [core/build_id.mk]

+- Project: platform/build/release

b11607ea3 : Select sqlite 3.44.5 on ap3a

+- Project: platform/cts

1bcf948f5e5 : Track DNG SDK 1.7.1 API changes

+- Project: device/amlogic/yukawa-kernel

97d8b55 : yukawa-kernel: Add kernel version 6.1.1 am: d234730f2c am: ea897dd10d
d8a1758 : yukawa-kernel: Update kernel version to 5.15.74 and enable WAKELOCKS am: d96b07b109 am: 4741251530 am: 4d83ad55b3

+- Project: device/google/common/etm

6fc3df5 : Snap for 12704449 from e1a542245d4e5332cee41cb256820c728cd5acca to 25Q2-release

+- Project: device/google/cuttlefish_prebuilts

6c98253 : Snap for 13204655 from 85f55e17354c524c5095cdbd9bdc2d53ffc6f252 to 25Q2-release

+- Project: device/google/cuttlefish_vmm

dec7332 : Snap for 13241370 from c261e36e1b21b028514b327c7781d7b6174fd8da to 25Q2-release

+- Project: device/google/trout

75e5877 : Snap for 13210474 from edc9f3216fec89d303ce23caaccf9e02914fe59d to 25Q2-release

+- Project: device/linaro/dragonboard-kernel

8c2626c : Snap for 12829911 from ecd09da0790736a38646f88a76216ddff8129eb6 to 25Q2-release

+- Project: device/linaro/hikey-kernel

f836f34 : [automerger skipped] Merge Android 14 QPR1 am: 09d1d59a3e -s ours am: c186543820 -s ours am: 189b83b39a -s ours

+- Project: platform/external/chromium-webview

57206b6 : Snap for 13190096 from 104ff684529a8048505ce63e0b24898c5be88cb1 to 25Q2-release

+- Project: platform/external/chromiumos-config

ecb65ad : Snap for 13221802 from bb934edb483abf4c4edc83be1ad2cb8d5a81a06b to 25Q2-release

+- Project: platform/external/dng_sdk

de700ad : Crude DNG SDK 1.7.1 upgrade

+- Project: platform/external/linux-kselftest

2e21443 : Snap for 13256841 from c691669f6298418e503b69f5575decb02dc8d681 to 25Q2-release

+- Project: platform/external/skia

40c3f0a50f : Backport DNG SDK 1.7.1 support in SkRawCodec

+- Project: platform/external/sqlite

cbebed3 : Install sqlite 3.44.5 source files

+- Project: platform/external/subsampling-scale-image-view

7c166c4 : Snap for 12704449 from c1f2ae5a70a28653cd5500963619c527a8eaefc7 to 25Q2-release

+- Project: platform/external/timezone-boundary-builder

a5fcb74 : Update OWNERS file to remove nfuller@ am: b772132222
f0df979 : Android additions to timezone-boundary-builder am: 4fd94cfcf9 am: 1d4954a75e am: 416012905c am: 82d8ad561d

+- Project: platform/frameworks/av

8febdebcb5 : C2SoftDav1dDec: configure decoder to output only one layer in SVC mode

+- Project: platform/frameworks/base

4d488a6a05ab : Revert "Fix build failure in release branch"
7dd276c1cf34 : Revert "Ignore pinned Windows"
de27b16b1af8 : Validate displayName for AssociationRequest
0f3e248787d8 : Add missing import in test
84dd2b90f4a2 : Don't allow 3p apps to become voice recognizer automatically
d6df825fda3a : Enforce a hard limit for the size of images to be decoded
d00bcda9f42d : Get all accounts no matter the visibility
d550a457e65c : Sanitize window private flags based on caller permissions.
9489a5dcd3cd : print: Prevent cross-user icon access
9fb37191609f : Add onKeyEvent, to support KEYCODE_HOME
70ab82c4546a : Do not use BIND_INCLUDE_CAPABILITIES when bind PrintService
6d1697c96c5c : RESTRICT AUTOMERGE: Backport Cut max duration for default transition to 1500
31e77d73c5e6 : Don't allow read truncation or appending for file operations.
db86972777c8 : Allow resetting the voice recognition service if its package uninstalled
a5795fc0cf1f : Check length of MBR component name properties
ec0c32ea736b : Disallow factory reset while in DSU mode
aa9fbb1b74eb : Check the strongAuthTracker for lockdown instead of LockPatternUtils
2ae33e496027 : Protect shell overriding the carrier config
03d704069914 : Use ParceledListSlice to paginate response from getPackagesForOpsForDevice binder API
c69e16c3efda : Ensure exit animations are canceled prior to user switch
93629e575f69 : Prevent accidental creation of PackagePreferences for non-existing packages
b4c6786312a2 : Validate IME metadata before parsing
de2cbccd1070 : Remove all pending keyguard exits on SHOW
68170bad5225 : GRANT TRUSTED_OVERLAY after PiP is entered
ea2bcc665342 : Make sure to disassociate all the packages with shared UID
5ec1cdae1805 : [CDM] Limit NLS revoke to applicable roles.
848f94492175 : Remove exception for Q- apps from app op validation
2aeba76a58c1 : Limit usages sent to safety center by user
02751bc65824 : Do not recycle Parcel when lazy value is used
08a0766708db : Cap the number of channels that an NLS can create for other packages
b812baa1463c : Delete updateNotificationChannelGroupFromPrivilegedListener
78760f098fab : Validate user on biometric auth and keyguard done
eb19b27ed8ab : Add flag to exclude capability propagation when connecting MediaBrowser
1cfd8237b5a8 : Use provided calling uid/pid for checking intercept-global-drag flag
e707f6600330 : Add WIU/BFSL allowlisting to MediaButtonReceiverHolder.send
039030a6b0e7 : Do not propagate WIU/BFSL for MediaController.sendCommand
28579dff4305 : Add resolveActivityAsUserForExplicitType api to pm
fb8f76eca907 : Check sound Uri permission when creating a notification channel
31989869759e : [CDM] Revoke NLS when all associations are removed.

+- Project: platform/frameworks/native

de59cf7083 : Add each blur region as a separate request
cc34c7b416 : RESTRICT AUTOMERGE: Backport When an opaque window has alpha < 0.5, don't let it receive touches.
6ffdde944d : Set mDataSize properly in appendFrom

+- Project: platform/frameworks/opt/telephony

fee68bcdcf : [Telephony][Security Fix] Launch Browser only if device is unlocked.

+- Project: kernel/prebuilts/6.1/arm64

45f90b2 : Update kernel to builds 12109370 am: 8b66e0b639 am: 2e6bdd9dbd

+- Project: kernel/prebuilts/6.1/x86-64

4d8767b : Update kernel to builds 12109370 am: 21a19614cd am: bb2082554f

+- Project: kernel/prebuilts/6.12/arm64

0af9965 : Snap for 13264465 from 6abb5ba9fe2bdb66f0a0dfa1ba3e9a834ff0d3b3 to 25Q2-release

+- Project: kernel/prebuilts/6.12/x86-64

0cbffc1 : Snap for 13264465 from 34b03c542a18040c4330deb8fdf5d8b544bea849 to 25Q2-release

+- Project: kernel/prebuilts/6.6/arm64

8103088 : Snap for 13003345 from c5d8462ef8267f3097ea091d8c0dab930095f530 to 25Q2-release

+- Project: kernel/prebuilts/6.6/x86-64

88d6379 : Snap for 13003345 from fddeecb1e9b6f5311ba3e38a9520e8c336641bf5 to 25Q2-release

+- Project: kernel/prebuilts/common-modules/trusty/6.12/arm64

0343e6f : Snap for 13204655 from 0bcb3e4e3a6ce5eb4ac56e2a54e380d995f2eebf to 25Q2-release

+- Project: kernel/prebuilts/common-modules/trusty/6.6/arm64

60e4a7e : Snap for 12525705 from 8dabfec8672d6097db7a355137cd005c117b7fc6 to 25Q2-release

+- Project: kernel/prebuilts/common-modules/virtual-device/6.1/arm64

4d32a49 : Update kernel to builds 12109370 am: a78a61842b am: 7aa3aaebc6

+- Project: kernel/prebuilts/common-modules/virtual-device/6.1/x86-64

8da1ee1 : Update kernel to builds 12109370 am: a97cc45e93 am: b4eb18a288

+- Project: kernel/prebuilts/common-modules/virtual-device/6.12/arm64

999ed1c : Snap for 13264465 from e2069c5f3b1256a8633e321d24d3ef07613474e1 to 25Q2-release

+- Project: kernel/prebuilts/common-modules/virtual-device/6.12/x86-64

6f3058f : Snap for 13264465 from bdb1acfb0e6a0431a3b605b2f706cb213c2ab0c4 to 25Q2-release

+- Project: kernel/prebuilts/common-modules/virtual-device/6.6/arm64

359e60a : Snap for 13003345 from 5d091941c9e16a32ab9c25f742c4c10db26946f2 to 25Q2-release

+- Project: kernel/prebuilts/common-modules/virtual-device/6.6/x86-64

b29a09b : Snap for 13003345 from 6d94173fbf542e6a4947e8ed65be8c09c0fe535c to 25Q2-release

+- Project: kernel/prebuilts/common-modules/virtual-device/mainline/arm64

c1b6f17 : [automerger skipped] Empty Merge Android U (ab/10368041) am: 79b9e0dc36 -s ours am: a550da44ae -s ours am: 3a1cb446e6 -s ours am: 1d5dd322a3 -s ours

+- Project: kernel/prebuilts/common-modules/virtual-device/mainline/x86-64

8686f19 : Update kernel to builds 8548111 am: ccb6ca3ffe am: 6a32abb3fb am: 375d168905 am: d30b4e66c0 am: 4015491110

+- Project: kernel/prebuilts/mainline/arm64

49cdfc2 : Update kernel to builds 10710438 am: 597e8872a3 am: f873c5d3d9 am: 69ed05ac06 am: cca228517e am: 04f898e666

+- Project: kernel/prebuilts/mainline/x86-64

51a4241 : Update kernel to builds 8548111 am: f70133d6d1 am: 8143c99639 am: c9c947bf0d am: 681b388c58 am: 3874b05bbf

+- Project: platform/packages/apps/CertInstaller

d688ebd : Prevent settings impostors from installing CA certs

+- Project: platform/packages/apps/Launcher3

7628af9bf7 : Send KEYCODE_HOME for home button instead of startActivity directly

+- Project: platform/packages/apps/Settings

e62ac1ecd3a : Import translations. DO NOT MERGE ANYWHERE
8ec6581ae70 : Backport BT pairing dialog changes
aa744e8988f : [nfc] Fix string injection in default payment app selector
83447688f8e : Add check to prevent privilege escalation from trampoline added in change Ie469c47005afb941f5646a2f790736362c23c697.
596c7b9911f : Hide sensistive content from locked profiles
586f8dedd8e : Prevent SettingsSliceProvider from accessing unused packages

+- Project: platform/packages/modules/ArtPrebuilt

bee62ee : Updated SDK snapshot path. am: 41cd632081 am: 3c180d0112 am: 6d17a42fce am: 0aa2c7adbe am: 3f5d78bb6b

+- Project: platform/packages/modules/Bluetooth

769a3dea80 : Remove flag save_peer_csrk_after_ltk_gen
7ccb456f6d : Remove flag bonded_device_smp_failure_handling

+- Project: platform/packages/modules/IntentResolver

bbe2dc3f : Verify caller access rights for the additional content URI.
4e6cf528 : Use the new packageManager API to forward intents

+- Project: platform/packages/services/Mms

c60a828 : Verify calling user on mms downloads

+- Project: platform/packages/services/Telecomm

a43a880be : Catch IllegalArgumentException when unbinding CallRedirectionServiceConnection

+- Project: platform/packages/services/Telephony

2afec5750 : Restricting UserBuild from presistent carrierConfig Override
2f0eeeee7 : Protect shell overriding the carrier config
851fc787e : fix: Use permission check for contact URI validation

+- Project: platform/prebuilts/abi-dumps/ndk

49480b5 : Snap for 13190096 from c19181376c4abb8f8650eddd38fb3ad5a6950cdf to 25Q2-release

+- Project: platform/prebuilts/abi-dumps/platform

2b2389d : Snap for 13190096 from e8c8c12f9fafa626fffa00b787b54b68b37718ea to 25Q2-release

+- Project: platform/prebuilts/abi-dumps/vndk

c560a9e : Snap for 13190096 from 8b5756a44b17ecb41c82c58640d6b4f291d7ffd8 to 25Q2-release

+- Project: platform/prebuilts/android-emulator

0015ef3 : Snap for 13143403 from bc397b98bf7e8c44eb40fac6628b7c3f7d4920e1 to 25Q2-release

+- Project: platform/prebuilts/asuite

13d8ac2 : Snap for 13241370 from 0c4bd0895d69ab8701daad83597bd2bb28560a54 to 25Q2-release

+- Project: platform/prebuilts/bazel/common

e24e8ba : [automerger skipped] Empty merge of Android 24Q2 Release (ab/11526283) to aosp-main-future am: 129f2136e3 -s ours

+- Project: platform/prebuilts/bazel/linux-x86_64

5c92123 : linux changes for 1e02f4 release am: 4c41a32375 am: 47e7a71df9 am: 16ed588086 am: 071c2799a1 am: 7a1bb74817

+- Project: platform/prebuilts/build-tools

8c01d80 : Snap for 13222886 from 39bd2eafa4dbe46fe1895730818b9ac403d2bb8e to 25Q2-release

+- Project: platform/prebuilts/bundletool

4d55b55 : [automerger skipped] Update bundletool am: 6e468659d4 am: 516e89e885 am: 6fef60ecff am: a01721af95 am: 7c0b35ad39 -s ours

+- Project: platform/prebuilts/checkcolor

47d4cfb : Update checkcolor.py hashbang to Python 3 am: ee59816895 am: 8b7e6cc073 am: 4f8c37e10d am: 383d3e0bf1

+- Project: platform/prebuilts/checkstyle

cad97af : Snap for 13129673 from 7579e17ab9e51adeb180e00be9ff222777613670 to 25Q2-release

+- Project: platform/prebuilts/clang-tools

a458ad6 : Snap for 13219462 from 79be9f34f374b14003b5e0e8ea7703f6f28385a2 to 25Q2-release

+- Project: platform/prebuilts/clang/host/linux-x86

2d4dcbff : Merge cherrypicks of ['googleplex-android-review.googlesource.com/32808771'] into 25Q2-release.

+- Project: platform/prebuilts/cmake/linux-x86

e57c88d : Add ctest prebuilt definition am: 2b43ce5452 am: b29ed51838

+- Project: platform/prebuilts/cmdline-tools

b5b2dcb : Snap for 12399304 from 1c17e1076d3100642c9a266ab53ae03456cd2216 to 25Q2-release

+- Project: platform/prebuilts/devtools

4bfccde : [automerger skipped] Mark ab/11976889 as merged in aosp-main-future am: e011901b1d -s ours

+- Project: platform/prebuilts/gcc/linux-x86/host/x86_64-linux-glibc2.17-4.8

ed661b6 : Snap for 13264465 from ec65c460baf4c4694c3698e97b1d68600a1f352f to 25Q2-release

+- Project: platform/prebuilts/gcc/linux-x86/host/x86_64-w64-mingw32-4.8

5170435 : Snap for 13264465 from a6c64a6502e0a89ee8ad3e3f8be97223a69e5bd7 to 25Q2-release

+- Project: platform/prebuilts/go/linux-x86

f88af64a : Snap for 12896565 from ed0315e2a72296bd40e11edf5c112dec349ab5e1 to 25Q2-release

+- Project: platform/prebuilts/gradle-plugin

1165e66 : Snap for 13190096 from 68b137aad0a2cfdf247ef2f30a4a27e889731bb0 to 25Q2-release

+- Project: platform/prebuilts/jdk/jdk21

9b7eccf : Snap for 12525705 from ef5bcc92586b839ae3dbacc154127092fa4002ec to 25Q2-release

+- Project: platform/prebuilts/jdk/jdk8

6cd518b : Manual BUILD file in jdk8 to access custom host bootclasspath jars am: 94bbc6ab3d am: 1b33495ae5 am: 0d3ca787bb am: 18a3321911 am: 4455a9832e

+- Project: platform/prebuilts/ktlint

433550a : Snap for 12955189 from a67606f967ef3008f31333fd965db1fb635420f4 to 25Q2-release

+- Project: platform/prebuilts/manifest-merger

002531c : Snap for 12770256 from 93603b6f7483f14666f74f67977794a3a8fc1594 to 25Q2-release

+- Project: platform/prebuilts/maven_repo/bumptech

5fa5ea9 : Snap for 12858568 from 509a65c09c81464e0d1a29d9d7d6d0ab3cec8655 to 25Q2-release

+- Project: platform/prebuilts/misc

6e84ee6 : Snap for 13264465 from 1d76094652c446386489b86c7d9f06d3da06aa63 to 25Q2-release

+- Project: platform/prebuilts/module_sdk/AdServices

5d4cbf4 : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34047680'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/AppSearch

6929268 : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34040735'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/Bluetooth

87d4475 : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34047934'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/ConfigInfrastructure

5ccc136 : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34047681'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/Connectivity

702872c : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34047858'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/CrashRecovery

6596816 : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34047913'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/DeviceLock

99cf7be : Snap for 13054324 from ed1623ca7f20e2840760409aa1323ff1cc15dbf0 to 25Q2-release

+- Project: platform/prebuilts/module_sdk/HealthFitness

31fdcae : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34046266'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/IPsec

88f5bdc : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34048072'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/Media

f590335 : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34048271'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/MediaProvider

ffbcc89 : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34047717'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/Nfc

223babb : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34048074'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/OnDevicePersonalization

e531203 : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34047915'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/Permission

988b71e : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34046268'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/Profiling

19e93ce : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34047935'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/RemoteKeyProvisioning

89ee650 : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34048017'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/Scheduling

4fc6af6 : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34047857'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/SdkExtensions

ae94f8b : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34047682'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/StatsD

8210656 : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34047718'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/Uwb

90533ac : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34048075'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/Wifi

874c92b : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34047862'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/art

b0f1924 : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34048012'] into 25Q2-release.

+- Project: platform/prebuilts/module_sdk/conscrypt

d63318e : Merge cherrypicks of ['googleplex-android-review.googlesource.com/34047557'] into 25Q2-release.

+- Project: platform/prebuilts/ndk

e0e58e6 : Merge changes from topic "reland-ndk-libcxx" into main am: 679207bd3a am: e8014b49a3

+- Project: platform/prebuilts/qemu-kernel

3303bfa : Snap for 13143403 from d777222e766c0c08cfed24853d36506e44fdd4e7 to 25Q2-release

+- Project: platform/prebuilts/r8

318c3c8 : Snap for 13264465 from e2effac3b07898a00bd9f86efb925fe1414f2c18 to 25Q2-release

+- Project: platform/prebuilts/remoteexecution-client

6bcf0cc : Snap for 13182071 from 4197abda58f5801abc9a7dec2d28d18bb0ee908f to 25Q2-release

+- Project: platform/prebuilts/runtime

224a138 : Snap for 13190096 from 18e0dee2457eecc37b1fb436d878746a3e8e8f7a to 25Q2-release

+- Project: platform/prebuilts/rust

3807eb5 : Snap for 13174046 from b5ed2fb308906fd8e08bebf82890cdaac056c31c to 25Q2-release

+- Project: platform/prebuilts/sdk

3b7daadc : Merge cherrypicks of ['googleplex-android-review.googlesource.com/33130782'] into 25Q2-release.

+- Project: platform/prebuilts/tools

8ee19a8 : Snap for 13248265 from 384a8f5b451294ba2f795dfdda5573a3ac0dfd9e to 25Q2-release

+- Project: platform/prebuilts/vndk/v30

5f9884a : Remove duplicate paths in module definitions am: 3c2127b117 am: fe5e402e0f

+- Project: platform/prebuilts/vndk/v31

1a059a5 : [automerger skipped] Update VNDK snapshot v31 to build 9442954. am: f9035fa514 am: 26b7a4a77c am: 8a69ac327f am: 55da2580fd -s ours am: 96365bc4f4 -s ours

+- Project: platform/prebuilts/vndk/v32

e1ba804 : [automerger skipped] Update VNDK snapshot v32 to build 9372951. am: e6afb84e95 am: 7cd5efa2ba am: 4e2af32e90 -s ours am: aa5efc256d -s ours

+- Project: platform/prebuilts/vndk/v33

d79ad87 : [automerger skipped] Update VNDK snapshot v33 to build 10954093. am: ed7ede1344 -s ours am: 9a090f5656 -s ours am: 8d94fd2e18 -s ours

+- Project: platform/prebuilts/vndk/v34

c8a125b : Update VNDK snapshot v34 to build 11542983. am: dc6c455e38 am: f5bdfcccb2

+- Project: toolchain/pgo-profiles

17fc8d3 : Merge cherrypicks of ['googleplex-android-review.googlesource.com/32872852'] into 25Q2-release.

+- Project: platform/tools/tradefederation/prebuilts

c7dd9fd : Merge cherrypicks of ['googleplex-android-review.googlesource.com/33126726'] into 25Q2-release.