1. 425e47a lvmd: Enforce caller authorization for mutating methods by Jae Hoon Kim · 2 hours ago main
  2. 50802db cros-camera-libs: Make libchrome dependency optional by Georg Neis · 3 hours ago
  3. 18a44b6 secagentd: Improve BPF mount directory handling by Aashay Shringarpure · 3 hours ago
  4. b57000d shill: Fix heap OOB write and drop stale SIM property replies in CellularCapability3gpp by Alain Michaud · 8 hours ago
  5. a82c585 libpreservation: Preserve POSIX metadata during default_key wipes by Sergey Poromov · 12 hours ago
  6. b759b640 rmad: Support secondary firmware updater for RMA by Jeff Lin · 20 hours ago
  7. 1c6885c missive: Improve sender verification in missived by Aashay Shringarpure · 28 hours ago
  8. 3afcc56 system_api: Remove unused import by John Admanski · 28 hours ago
  9. f90696a rmad: Guard shimless_mode with testlabe mode by Jeff Lin · 33 hours ago
  10. 4f9edc5 hermes: Increase send notification timeout by Ujjwal Pande · 33 hours ago
  11. 45919339 rmad: Deprecate skip_update_ro_firmware_from_rootfs and USB updater execution by Jeff Lin · 33 hours ago
  12. 5bff657 init: Remove cleanup of old Lacros logs by Georg Neis · 2 days ago
  13. 15d65da pciguard: Improve thread shutdown handling by Aashay Shringarpure · 2 days ago
  14. 36836ba cryptohome: Drop GetRecoverableKeyStores API by John Admanski · 2 days ago
  15. a4902c7 shill: net: portal URL properties are RO in safe mode by Hugo Benichi · 3 days ago
  16. 9dd9b62 shill: move IsDevMode to DaemonTask by Hugo Benichi · 3 days ago firmware-R152-16765.2.B release-R152-16765.B
  17. 5334002 vm_tools: Uprev baguette_image version by crosvm-luci-ci-builder · 4 days ago
  18. 77efb02 vm_tools: Uprev baguette_image version by crosvm-luci-ci-builder · 5 days ago
  19. 4148392 tpm_manager, trunks: Allow rollback_cleanup to access TPM by Chris Mullins · 5 days ago
  20. 1865c38 camera: Prevent ASLR bypass by hashing trace and flow IDs by Alain Michaud · 5 days ago
  21. 8d714f7 oobe_config: Fix rollback_data restore permissions on AOSP-layout devices by Sergey Poromov · 5 days ago
  22. 14a4bf6 debugd: enforce max log length in NVMe log by Sarthak Kukreti · 5 days ago
  23. 808d379 arc: Authenticate UDS connections in arcvm_boot_notification_server by Alain Michaud · 5 days ago
  24. eda74c4 vm_tools: Uprev baguette_image version by crosvm-luci-ci-builder · 6 days ago
  25. 9125500 cryptohome: Remove expired AuthSession performance timers and lifetime metrics by Thomas Cedeno · 6 days ago
  26. 71441f4 seccomp: allow madvise in policies for glibc 2.43 by Adrian Ratiu · 6 days ago
  27. 42d9e10 vm_tools: Uprev baguette_image version by crosvm-luci-ci-builder · 7 days ago
  28. c0f9348 shill: Fix potential Use-After-Free in P2PDevice by Alain Michaud · 7 days ago
  29. eafb03b vm_tools: Uprev baguette_image version by crosvm-luci-ci-builder · 7 days ago
  30. 3a04d59 power_manager: Use random trace IDs instead of pointer-based IDs by Alain Michaud · 8 days ago
  31. 9a487cb cros_healthd: Fix potential UAF in BluetoothRoutineBase by Alain Michaud · 8 days ago
  32. 6bca101 Revert "init: Improve BPF filesystem isolation" by Jie Jiang · 8 days ago
  33. fba319f tpm_manager: Restrict TpmNvram D-Bus interface to legitimate UIDs by Chris Mullins · 8 days ago
  34. 4afe86f vm_tools: Uprev baguette_image version by crosvm-luci-ci-builder · 9 days ago
  35. a558720 diagnostics: block following symlink by Hidehiko Abe · 9 days ago
  36. 27e23d9 vm_tools: Uprev baguette_image version by crosvm-luci-ci-builder · 9 days ago firmware-tanjiro-16759.B
  37. 9460df1 patchpanel: allow madvise in iptables seccomp policy by Adrian Ratiu · 10 days ago
  38. e2d4add sepolicy: rsyslogd: allow TCGETS/TCGETS2 ioctl on log files by Adrian Ratiu · 10 days ago
  39. 5451f61 login: Migrate from base::ByteCount to base::ByteSize by Jeff Lin · 10 days ago
  40. d4891fa vm_tools: Uprev baguette_image version by crosvm-luci-ci-builder · 11 days ago
  41. 4ddcdd7 vm_tools: Uprev baguette_image version by crosvm-luci-ci-builder · 12 days ago
  42. 5ad5406 vm_tools/chunnel: allow madvise in chunneld seccomp policies by Adrian Ratiu · 12 days ago
  43. ab1b996 sepolicy: allow TCGETS2 ioctl xperm for glibc 2.43 by Adrian Ratiu · 12 days ago
  44. d1d2869 cryptohome: Fix GenerateFreshRecoveryId response by John Admanski · 12 days ago
  45. 6485a8d system-proxy: Safely handle worker shutdown in ConnectNamespaceTask by Andreea Costinas · 13 days ago
  46. 944e8bb smbfs: Fix memory usage issue during teardown by Ben Reich · 14 days ago
  47. 5564db8 diagnostics: Use weakptr for a delayed task in PrivacyScreenRoutine by Hidehiko Abe · 14 days ago
  48. 963b07c cryptohome: Remove unused ACLs by Zi Lin · 2 weeks ago
  49. 2226280 init: Improve BPF filesystem isolation by Aashay Shringarpure · 2 weeks ago
  50. 09a420b secagentd: Take the file stats from file descriptor. by Hidehiko Abe · 2 weeks ago
  51. 76828ca kerberos: Mark config invalid before validation to prevent race by Alain Michaud · 2 weeks ago
  52. f89ce56 ml: Reject undersized shared memory regions in DocumentScanner by Alain Michaud · 2 weeks ago
  53. 4b02d6c camera: Reference-count buffer IDs to prevent UAF by Alain Michaud · 2 weeks ago
  54. 035e899 vm_tools: Uprev baguette_image version by crosvm-luci-ci-builder · 2 weeks ago
  55. 44adfb2 hermes: fix qmi_{decode|encode}_message() usages in ModemQrtr by Aleksander Morgado · 2 weeks ago
  56. cc5f980 camera: Make reused base::Threads restartable by Andrea Orru · 2 weeks ago
  57. 04a784f p2p: Improve robustness of HTTP server process management. by Jae Hoon Kim · 2 weeks ago
  58. 2aee4d1 shill: Gate test keys in TetheringConfig by Alain Michaud · 2 weeks ago
  59. b333b3b missive: close files after reading all records before advancing to next by Shanthanu Bhardwaj · 2 weeks ago
  60. dbbe772 chaps: Make key-usage flags read-only post-creation by Alain Michaud · 2 weeks ago
  61. 49250a2 vm_tools: Uprev baguette_image version by crosvm-luci-ci-builder · 2 weeks ago
  62. 06744d5 concierge: Prevent BOREALIS VM spoofing via caller-supplied images by Alain Michaud · 2 weeks ago
  63. 7b8aae1 common-mk: Add `-Wl,-rpath-link=.` to test config by Jeff Lin · 2 weeks ago
  64. 2542957 shill: Prevent plaintext credential extraction via Task.getsec by Alain Michaud · 2 weeks ago
  65. 3ffbb74 oobe_config: allow unlink and unlinkat in save by Aida Zolic · 2 weeks ago
  66. 1a6612f seccomp: allow MADV_GUARD_INSTALL/MADV_HUGEPAGE madvise for glibc 2.43 by Adrian Ratiu · 2 weeks ago
  67. 779605a Add missing includes of base file_path.h by Georg Neis · 2 weeks ago
  68. 86028d1 device_management: Use sticky bit for /run/lockbox by Alain Michaud · 2 weeks ago
  69. 9ff65bc libec: Require max_packet_size to exceed flash write header by Firas Sammoura · 2 weeks ago
  70. de556da libec: Require max_write_size to exceed fingerprint template header by Firas Sammoura · 2 weeks ago
  71. 6ea15be libec: Clamp num_capture_types loop bounds in FpInfoCommand by Firas Sammoura · 2 weeks ago
  72. a014d10 arc-setup: upgrade quick-xml by George Burgess IV · 2 weeks ago
  73. 3153032 biod: Move default SetContext success behavior to test fixture by Firas Sammoura · 2 weeks ago
  74. 3e90116 biod: Handle SetContext failure in ReadRecordsForSingleUser by Firas Sammoura · 2 weeks ago
  75. 9c0a4a3 seccomp: allow TCGETS2 ioctl in policies for glibc 2.43 by Adrian Ratiu · 2 weeks ago
  76. d545346 login: Correct clobber cmd for preserve_device_cfg by Aida Zolic · 2 weeks ago
  77. e0662e5 login: Check PID for HandleLockScreenDismissed by Hidehiko Abe · 2 weeks ago
  78. d1db433 dns-proxy: Fix UAF in shill dbus client. by Hidehiko Abe · 2 weeks ago
  79. ee60748 debugd: Fix argument array bounds checking by Athira Palliprath · 2 weeks ago
  80. a4f3dc2 Migrate CreateAndOpenFdForTemporaryFileInDir by Georg Neis · 2 weeks ago
  81. 2b1ca96 patchpanel: Write config file atomically. by Hidehiko Abe · 2 weeks ago
  82. f673dd8 shill: Write VPN config file atomically. by Hidehiko Abe · 2 weeks ago
  83. 448b4e3 update_engine: Block ResetStatus from chronos. by Hidehiko Abe · 2 weeks ago
  84. d2e4c30 vm_tools: Uprev baguette_image version by crosvm-luci-ci-builder · 3 weeks ago
  85. a453c45 Revert "init: chromeos-boot-alert: display boot messages in a minijail" by Firas Sammoura · 3 weeks ago
  86. 02162d2 shill: tethering: always clear state in OnNetworkDestroyed by Hugo Benichi · 3 weeks ago
  87. 3a05b0f modemfwd: Only allow dbus requests to ForceFlash in debug mode by Daniel Winkler · 3 weeks ago
  88. 1a890c0 shill: wifi: clear delegates when removing P2P dev by Hugo Benichi · 3 weeks ago
  89. 1455710 printscanmgr: Allow 'shutdown' syscall by Georg Neis · 3 weeks ago
  90. b194e6d patchmaker: Validate paths in manifest on load by Daniel Winkler · 3 weeks ago
  91. 9f07109 secagentd: Check resolve_path_to_string return value in all callsites by Aashay Shringarpure · 3 weeks ago
  92. 20e6f93 init: Add fingerprint_cq.star to DIR_METADATA by Josie Nordrum · 3 weeks ago
  93. 80e41ed vm_tools: Uprev baguette_image version by crosvm-luci-ci-builder · 3 weeks ago
  94. 76816f8d patchpanel: Reject ArcVm D-Bus calls on non-ARCVM devices by Satoshi Niwa · 3 weeks ago
  95. c3d3069 Revert "cros-disks: Restrict smbfs daemon-store bind mount to user hash" by Ben Reich · 3 weeks ago
  96. 3370d7f oobe_config: Skip HID and update screens by Aida Zolic · 3 weeks ago
  97. 6520b47 mojo_service_manager: Allow 'shutdown' syscall by Georg Neis · 3 weeks ago
  98. 77b867f permission_broker: patch keyboard hidraw bypass by maciek swiech · 3 weeks ago
  99. 67f5251 vm_tools: baguette_image: uprev to M152 by maciek swiech · 3 weeks ago
  100. 6a5fd1e smbprovider: Migrate NOTREACHED_IN_MIGRATION to NOTREACHED by Brett Brotherton · 3 weeks ago