View Issue Details

IDProjectCategoryView StatusLast Update
0002033T99X171.00 SKB EagleSWpublic2026-04-02 16:33
Reporter(ALTech) Younkwang Jung Assigned To(ALTech) Younkwang Jung Due Date2025-06-06 11:41
PrioritynormalSeveritys4-minorReproducibilityN/A
Status closedResolutionreopened 
Summary0002033: [Smart3][OS12] jira id to be used for 2025 Security patch
DescriptionHi Kinbay

Please use the JIRA ID below when applying the security patch to Smart3 OS12

BPM-42390 [Smart3][BFX-AT100][Google Certification] Security Patch 2025-01
BPM-42391 [Smart3][BFX-AT100][Google Certification] Security Patch 2025-02
BPM-42392 [Smart3][BFX-AT100][Google Certification] Security Patch 2025-03

When security patching is required, I will request it including the branch name

Thank you
YK.Jung
TagsNo tags attached.
Attach Tags

Users monitoring this issue

Activities

(ALTech) Jong-Hwa JUNG

2025-02-21 11:58

developer   ~0017349

Last edited: 2025-02-21 12:10

Dear Kinbay

Please apply Security patch 2025-01.
=> BPM-42390 [Smart3][BFX-AT100][Google Certification] Security Patch 2025-01

If there is no problem at BFX-AT100_5.4.3 , push it to BFX-AT100_5.4.3
When it was done, please inform to us.

Thank you
JONGHWA/JUNG

(PM) Sheila Tu

2025-02-21 13:40

developer   ~0017351

Hi JongWha,

Regarding the Smart3 2025 maintenance scope, we need to finalize the conclusion with the ALT business team in advance.
Once all parties reach an agreement, Fii RD will follow up accordingly. Thank you.

(ALTech) Jong-Hwa JUNG

2025-02-21 15:08

developer   ~0017352

Last edited: 2025-02-21 15:11

Dear Kinbay,

Thank you for your feedback.
I understand your concerns.
However, even if we have not yet finalized a maintenance agreement, may I kindly ask if it would be possible for you to provide just the security patch lists of "2024-12" and "2025-01" first ?
This would greatly help us, because we have to report security patche list to SKB, even if we applied security patch later.

Thank you. Best regards

(SW) Willin Deng

2025-02-26 16:43    private

developer   ~0017360

Last edited: 2025-02-26 17:21

the ATV 10 Security patches for 202412,202501,202502,202503
202412-TV(RVC).zip (13,294 bytes)

(SW) Willin Deng

2025-02-26 17:29

developer   ~0017361

Hi JongWha,
update the the ATV Security patches for 202412,202501,202502,202503.
unzip and select the dir of "android-12.0.0_r1"

Thank you. Best regards

(ALTech) Younkwang Jung

2025-04-22 10:44

developer   ~0017496

Last edited: 2025-04-22 10:46

View 2 revisions

Hi Willin

Please share the security patch 2025-04 patch files that will be applied to Smart3 OS12.

Thank you
YK.Jung

(SW) Willin Deng

2025-04-22 11:51

developer   ~0017497

Last edited: 2025-04-22 11:51

Hi YK,
     here is the security patch 2025-04 for Android SC (Android version 12, API level 31) .

Thank you.

(ALTech) JunGyu Kim

2025-05-14 19:28

developer   ~0017543

Hi Willin,

We are applying the security patch 2025-04 that you sent us.
While applying, if you check the contents of the 0001-Verify-that-the-caller-has-permissions-for-the-icons-it-provided.bulletin.patch file in frameworks/base, it saved as follow, so build error is occurring.

+<<<<<<< HEAD (7b6940 Merge "Import translations. DO NOT MERGE ANYWHERE" into sc-t)
+=======

...

+>>>>>> CHANGE (e73bb6 Verify that the caller has permissions for the icons it prov)

Please check it is correct to apply this patch.

Thank you.
Kim
image.png (306,343 bytes)

(SW) Willin Deng

2025-05-15 09:15

developer   ~0017544

Hi Kim,
Google released a new patch (v.15) for 202503 ,name "2025-03-android-bulletin-partner-preview_v1.5-patches.zip"
Compared to the patch of v1.3 , the v1.5 removed the patch : "patches/android-12.0.0_r1/platform/frameworks/base/0007-RESTRICT-AUTOMERGE-PM-Fix-the-profile-issue-in-UninstallerActi.bulletin.patch" , as the Screenshot.

It is recommended to first roll back the three patches from version v1.3 ("2025-03-android-bulletin-partner-preview_v1.3-patches.zip"), then apply the patch from version v1.5 ("2025-03-android-bulletin-partner-preview_v1.5-patches.zip"), and finally apply the April 2025 patch "SC-20250422T034710Z-001.zip".

Thank you.

(ALTech) JunGyu Kim

2025-05-15 13:51

developer   ~0017545

Hi Willin,
I proceeded as follows with reference to the information you provided.

1. roll back 2025-03 v1.3 security patch as below
  - frameworks/base
    0001-DO-NOT-MERGE-Hide-Android-data-obb-sanbox-on-shared-storage.bulletin.patch
  - package/apps/Bluetooth
    0001-backport-opp-validate-that-content-uri-belongs-to-current-user.bulletin.patch
    0002-Reset-permissions-for-not-bonded-device.bulletin.patch

2. apply 2025-03 v1.5 security patch as below
  - package/apps/Bluetooth
    0001-Reset-permissions-for-not-bonded-device.bulletin.patch

3. apply 2025-04 security patch

After apply as above, when I try build, still getting build errors.
The patch you mentioned in 2025-03 v1.5 that was removed from frameworks/base and the problematic patch in 2025-04 are not the same files contents.
Please double check if I missed anything or made a mistake.

Thank you.
Kim
image-2.png (140,794 bytes)   
image-2.png (140,794 bytes)   

(SW) Willin Deng

2025-05-15 14:59

developer   ~0017546

Hi Kim,
      I downloaded the 202504 patch again, and found no differences from the one provided in April 22.
      The error message in the screenshot appears some special characters within the JAVA codes.
      my codebase is still downloading , cannot be built at the moment, and certain operations can be tested local :
1. roll back 2025-04 security patches first.
2. edit the patch file: "SC/platform/frameworks/base/0001-Verify-that-the-caller-has-permissions-for-the-icons-it-provided.bulletin.patch",
 add Java comment symbols to the following line numbers :61,62,110, then save the patch. (as the attach image)
3.apply the 2025-04 security patches and build again

Thank you.

(ALTech) Younkwang Jung

2025-05-28 14:17

developer   ~0017564

Hi Willin

Please share the security patch 2025-05 patch files that will be applied to Smart3 OS12.

Thank you
YK.Jung

(SW) Willin Deng

2025-05-28 15:25

developer   ~0017565

Hi YK,
     here is the patch of 2025-05:SC-20250528T070121Z-1-001.zip (size:25.8KB).
     by the way, we found that patch 2025-04 has been updated, google remove 2 private functions and comments (see screenshot: 0001-Verify-that-the-caller-has-permissions-for-the-icons-it-provided.bulletin.patch).
     the package of 2025-04 patches: SC-20250528T070036Z-1-001.zip (69.1KB). please check.

Thank you.

(ALTech) JunGyu Kim

2025-07-17 08:41

developer   ~0017611

Hi Willin,

Please share the security patch 2025-06 files for smart3 OS12.

Thank you.
Kim

(SW) Vangie Liang

2025-07-17 10:06

developer   ~0017612

Hi Kim,
      Here is the security patch 2025-06 for Android SC (Android version 12) .

Thank you.
vangie

(ALTech) JunGyu Kim

2025-08-26 09:46

developer   ~0017642

Hi Vangie Liang,

Please share the security patch 2025-07, 2025-08 files for smart3 OS12.

Thank you.
Kim

(SW) Vangie Liang

2025-08-26 16:19

developer   ~0017643

Hi JunGyu Kim,
      I found that there were no security patches in 2025-07, but there were security patches in 2025-08.
     
      Here is the security patch 2025-08 for Android SC (Android version 12) .

Thank you.
vangie

(ALTech) JunGyu Kim

2025-09-30 18:15

developer   ~0017662

Hi Vangie Liang,

Please share the security patch 2025-09 files for smart3 OS12.

Thank you.
Kim

(SW) Willin Deng

2025-10-07 08:58

developer   ~0017665

Hi JunGyu,
     Here is the security patch 2025-09 for Android TV SC (Android version 12) .

BR.
Willin

(ALTech) JunGyu Kim

2025-10-29 08:22

developer   ~0017672

Hi Willin,

Please share the security patch 2025-10 files for smart3 OS12.

Thank you.
Kim

(SW) Willin Deng

2025-10-30 10:57

developer   ~0017673

Hi JunGyu,
     After confirmation yesterday and today, the 2025/10 directory does not include Android 10 & 12 security patches related to TV.

BR.
Willin

(ALTech) JunGyu Kim

2025-10-30 16:05

developer   ~0017674

Hi Willin,

Thank you for check it.

I'm applying the 2025-09 patch and have a question.

In this patch, there's a patch file called 005-update-ABI.patch in the frameworks/native folder.
But the contents of this patch are not in frameworks/native, so I can't apply it.

After searching the source code, I found that the 005-update-ABI.patch patch can be applied to prebuilts/abi-dumps/vndk.
In this case, is it possible to determine whether I should apply this patch to prebuilts/abi-dumps/vndk, or whether I should not apply the patch?

Thank you.
Kim

(SW) Willin Deng

2025-10-30 17:31

developer   ~0017675

Hi JunGyu,
     I think it's a issue of Google patch , the issue is send to Google.
     URL: https://partnerissuetracker.corp.google.com/issues/456362600

BR.
willin

(ALTech) Younkwang Jung

2025-11-05 08:33

developer   ~0017676

Hi Willin
SKB QA is currently in progress and the security patchs should be applied by this week.
Is there an update from Google ?
Please check it

Thank you
YK.Jung

(SW) Willin Deng

2025-11-05 08:51

developer   ~0017679

Last edited: 2025-11-05 09:14

Hi Yk,
      the google has no updates available.
      we have sent a comment to inquire with them.
      The file 31/64/x86/source-based/libbinder.so.lsdump is located within the prebuilt AOSP directory structure.
      The full path is typically: ${ANDROID_BUILD_TOP}/prebuilts/abi-dumps/vndk/31/64/x86/source-based/libbinder.so.lsdump
      I recommend moving this patch ("005-update-ABI.patch") to the dir ("prebuild") to allow the compilation process to proceed.


BR.
Willin

(ALTech) JunGyu Kim

2025-11-13 16:30

developer   ~0017681

Hi Willin,

Thank you for your feedback.

As you suggested, I have applied the problematic patch to the affected path.
If you receive any feedback from Google, please let us know.

Thank you.
Kim

(SW) Willin Deng

2025-11-13 17:55

developer   ~0017682

Hi Kim,
     We have checked the Google issue tracker, and there are currently no effective responses available.
     We will check this issue daily and provide effective updates here.

BR.
Willin

(ALTech) JunGyu Kim

2025-12-05 16:37

developer   ~0017685

Hi Willin,

After applying the 2025-09 security patch, I got some fail items on CTS.
Could you please check if there any update?

Thank you.
Kim
image-3.png (221,355 bytes)   
image-3.png (221,355 bytes)   

(ALTech) JunGyu Kim

2025-12-05 19:11

developer   ~0017686

Hi Willin,

There are three problematic patches.

packages/providers/MediaProvider
   [PATCH] DO NOT MERGE Fix misuse of MediaProvider#INCLUDED_DEFAULT_DIRECTORIES
frameworks/base
   [PATCH] [RESTRICT AUTOMERGE] Disallow PINNED in setLaunchWindowingMode
   [PATCH] frameworks/base RESTRICT AUTOMERGE Ignore pinned Windows

After removing these patches, all failed items in the CTS passed.
Can you confirm whether it's okay to remove these patches?

Thank you.
Kim

Hank Huang (FXN)

2025-12-08 14:11

developer   ~0017687

Hi Kim,
     Sorry for reply late.
We checked Google's patch distribution driver, which only updates OS 13 to 15, but no changed for OS 10 and 12.
We inquired about the patch update information from Google on 11/24, but have not yet received a response.

For the patch tags, the keyword “[DO NOT MERGE]” indicates that merging should not occur.
Please revert any patches with these comments until Google informs us that patch is OK.

The keyword “[PATCH] [RESTRICT AUTOMERGE]” indicates that a manual merge is required, and any errors must be reverted.
Please use the latest CTS program daily build version for verification (android-cts_12_20251205-14537984_arm64.zip).
If errors persist, roll back the patches with these tags until Google notifies us that we can proceed.

We will promptly inform you of any patch updates from Google.

BR.
Hank

(ALTech) JunGyu Kim

2025-12-08 16:02

developer   ~0017688

Hi Hank,

Thank you for check this issue.
We confirmed that all four CtsWindowManagerDeviceTestCases tests pass in the android-cts_12_20251205-14537984_arm64.zip daily build tool.

Therefore, we will revert only the patch below for now:
  - packages/providers/MediaProvider
    [PATCH] DO NOT MERGE Fix misuse of MediaProvider#INCLUDED_DEFAULT_DIRECTORIES

Please let us know if there's an update from Google.

Thank you.
Kim

(ALTech) JunGyu Kim

2025-12-22 09:02

developer   ~0017699

Hi Willin, Hank.

Please share the security patch 2025-11, 2025-12 files for smart3 OS12.

Thank you.
Kim

Hank Huang (FXN)

2025-12-22 11:30

developer   ~0017700

Hi JunGyu Kim,
      I found that there were no security patches in 2025-11, but there were security patches in 2025-12.
     
      Here is the security patch 2025-12 for Android SC (Android version 12) .

Thank you.
Hank
2025-11.PNG (69,017 bytes)   
2025-11.PNG (69,017 bytes)   

(ALTech) Younkwang Jung

2026-04-02 16:32

developer   ~0017762

HI all

The security patches for 2025 have been applied.
So close this ticket.

Thank you your support
YK.Jung

Issue History

Date Modified Username Field Change
2025-02-18 10:54 (ALTech) Younkwang Jung New Issue
2025-02-18 10:54 (ALTech) Younkwang Jung Status new => assigned
2025-02-18 10:54 (ALTech) Younkwang Jung Assigned To => (SW) Kinbay Wu
2025-02-18 10:54 (ALTech) Younkwang Jung Issue Monitored: (ALTech) Jong-Hwa JUNG
2025-02-18 10:54 (ALTech) Younkwang Jung Issue Monitored: (ALTech) JunGyu Kim
2025-02-18 10:54 (ALTech) Younkwang Jung Issue Monitored: (ALTech) Sangmin Choi
2025-02-18 10:54 (ALTech) Younkwang Jung Issue Monitored: (ALTech) SY Yoon
2025-02-18 10:54 (ALTech) Younkwang Jung Issue Monitored: (ALTech) Wooshin Kang
2025-02-18 10:54 (ALTech) Younkwang Jung Issue Monitored: (Sales) Miya Wang
2025-02-18 10:54 (ALTech) Younkwang Jung Issue Monitored: (SW) Kerwin Chen
2025-02-21 11:58 (ALTech) Jong-Hwa JUNG Note Added: 0017349
2025-02-21 12:02 (ALTech) Jong-Hwa JUNG Note Edited: 0017349
2025-02-21 12:10 (ALTech) Jong-Hwa JUNG Note Edited: 0017349
2025-02-21 13:37 (PM) Sheila Tu Issue End Monitor: (Sales) Miya Wang
2025-02-21 13:37 (PM) Sheila Tu Issue Monitored: (PM) Sheila Tu
2025-02-21 13:40 (PM) Sheila Tu Note Added: 0017351
2025-02-21 15:08 (ALTech) Jong-Hwa JUNG Note Added: 0017352
2025-02-21 15:11 (ALTech) Jong-Hwa JUNG Note Edited: 0017352
2025-02-26 16:43 (SW) Willin Deng Note Added: 0017360
2025-02-26 16:43 (SW) Willin Deng File Added: 202412-TV(RVC).zip
2025-02-26 16:43 (SW) Willin Deng File Added: platform-202503-TV(RVC).zip
2025-02-26 16:43 (SW) Willin Deng File Added: platform-202502-TV(RVC).zip
2025-02-26 16:43 (SW) Willin Deng File Added: platform-202501-TV(RVC).zip
2025-02-26 17:17 (SW) Willin Deng Note View State: 0017360: private
2025-02-26 17:21 (SW) Willin Deng Note Edited: 0017360
2025-02-26 17:29 (SW) Willin Deng Note Added: 0017361
2025-02-26 17:29 (SW) Willin Deng File Added: 2024-12-android-bulletin-partner-preview_v1.1-patches.zip
2025-02-26 17:29 (SW) Willin Deng File Added: 2025-03-android-bulletin-partner-preview_v1.3-patches.zip
2025-02-26 17:29 (SW) Willin Deng File Added: 2025-02-android-bulletin-partner-preview_v1.2-patches.zip
2025-02-26 17:29 (SW) Willin Deng File Added: 2025-01-android-bulletin-partner-preview_v2.0-patches.zip
2025-04-07 10:20 (SW) Kerwin Chen Status assigned => closed
2025-04-07 10:20 (SW) Kerwin Chen Resolution open => fixed
2025-04-22 10:44 (ALTech) Younkwang Jung Assigned To (SW) Kinbay Wu => (SW) Willin Deng
2025-04-22 10:44 (ALTech) Younkwang Jung Status closed => feedback
2025-04-22 10:44 (ALTech) Younkwang Jung Resolution fixed => reopened
2025-04-22 10:44 (ALTech) Younkwang Jung Due Date => 2025-04-25 11:41
2025-04-22 10:44 (ALTech) Younkwang Jung Note Added: 0017496
2025-04-22 10:46 (ALTech) Younkwang Jung Note Edited: 0017496 View Revisions
2025-04-22 11:51 (SW) Willin Deng Note Added: 0017497
2025-04-22 11:51 (SW) Willin Deng File Added: SC-20250422T034710Z-001.zip
2025-04-22 11:51 (SW) Willin Deng Note Edited: 0017497
2025-05-14 19:28 (ALTech) JunGyu Kim Note Added: 0017543
2025-05-14 19:28 (ALTech) JunGyu Kim File Added: image.png
2025-05-15 09:15 (SW) Willin Deng Note Added: 0017544
2025-05-15 09:15 (SW) Willin Deng File Added: 2025-03-android-bulletin-partner-preview_v1.5-patches.zip
2025-05-15 09:15 (SW) Willin Deng File Added: Screenshot from 2025-05-15 08-57-41.png
2025-05-15 13:51 (ALTech) JunGyu Kim Note Added: 0017545
2025-05-15 13:51 (ALTech) JunGyu Kim File Added: image-2.png
2025-05-15 14:59 (SW) Willin Deng Note Added: 0017546
2025-05-15 14:59 (SW) Willin Deng File Added: Screenshot from 2025-05-15 14-25-24.png
2025-05-28 14:17 (ALTech) Younkwang Jung Note Added: 0017564
2025-05-28 14:17 (ALTech) Younkwang Jung Status feedback => assigned
2025-05-28 14:18 (ALTech) Younkwang Jung Due Date 2025-04-25 11:41 => 2025-06-06 11:41
2025-05-28 15:25 (SW) Willin Deng Note Added: 0017565
2025-05-28 15:25 (SW) Willin Deng File Added: Screenshot from 2025-05-28 15-05-58.png
2025-05-28 15:25 (SW) Willin Deng File Added: SC-20250528T070121Z-1-001.zip
2025-05-28 15:25 (SW) Willin Deng File Added: SC-20250528T070036Z-1-001.zip
2025-07-17 08:41 (ALTech) JunGyu Kim Note Added: 0017611
2025-07-17 10:06 (SW) Vangie Liang Note Added: 0017612
2025-07-17 10:06 (SW) Vangie Liang File Added: SC-20250717T012842Z-1-001.zip
2025-08-26 09:46 (ALTech) JunGyu Kim Note Added: 0017642
2025-08-26 16:19 (SW) Vangie Liang Note Added: 0017643
2025-08-26 16:19 (SW) Vangie Liang File Added: Screenshot from 2025-08-26 16-01-18.png
2025-08-26 16:19 (SW) Vangie Liang File Added: SC-20250826T080143Z-1-001.zip
2025-09-01 16:10 (SW) Willin Deng Assigned To (SW) Willin Deng => (SW) Vangie Liang
2025-09-30 18:15 (ALTech) JunGyu Kim Note Added: 0017662
2025-10-07 08:58 (SW) Willin Deng Note Added: 0017665
2025-10-07 08:58 (SW) Willin Deng File Added: SC-20251007T005608Z-1-001.zip
2025-10-29 08:22 (ALTech) JunGyu Kim Note Added: 0017672
2025-10-30 10:57 (SW) Willin Deng Note Added: 0017673
2025-10-30 10:57 (SW) Willin Deng File Added: Screenshot from 2025-10-30 10-53-53.png
2025-10-30 16:05 (ALTech) JunGyu Kim Note Added: 0017674
2025-10-30 17:31 (SW) Willin Deng Note Added: 0017675
2025-10-30 17:31 (SW) Willin Deng File Added: Screenshot from 2025-10-30 17-30-53.png
2025-11-05 08:33 (ALTech) Younkwang Jung Note Added: 0017676
2025-11-05 08:51 (SW) Willin Deng Note Added: 0017679
2025-11-05 08:51 (SW) Willin Deng File Added: Screenshot from 2025-11-05 08-46-11.png
2025-11-05 09:14 (SW) Willin Deng Note Edited: 0017679
2025-11-13 16:30 (ALTech) JunGyu Kim Note Added: 0017681
2025-11-13 17:55 (SW) Willin Deng Note Added: 0017682
2025-11-13 17:55 (SW) Willin Deng File Added: Screenshot from 2025-11-13 17-42-48.png
2025-12-05 16:37 (ALTech) JunGyu Kim Note Added: 0017685
2025-12-05 16:37 (ALTech) JunGyu Kim File Added: image-3.png
2025-12-05 19:11 (ALTech) JunGyu Kim Note Added: 0017686
2025-12-08 14:11 Hank Huang (FXN) Note Added: 0017687
2025-12-08 16:02 (ALTech) JunGyu Kim Note Added: 0017688
2025-12-22 09:02 (ALTech) JunGyu Kim Note Added: 0017699
2025-12-22 11:30 Hank Huang (FXN) Note Added: 0017700
2025-12-22 11:30 Hank Huang (FXN) File Added: 2025-11.PNG
2025-12-22 11:30 Hank Huang (FXN) File Added: SC-20251222T032529Z-3-001.zip
2025-12-22 17:00 (SW) Willin Deng Assigned To (SW) Vangie Liang => (ALTech) Younkwang Jung
2026-04-02 16:32 (ALTech) Younkwang Jung Note Added: 0017762
2026-04-02 16:33 (ALTech) Younkwang Jung Status assigned => closed