1. 16 Apr, 2020 1 commit
    • Koen Vandeputte's avatar
      kernel: bump 4.14 to 4.14.176 · 1f0679f5
      Koen Vandeputte authored
      
      
      Refreshed all patches.
      
      Remove upstreamed:
      - 0001-net-thunderx-workaround-BGX-TX-Underflow-issue.patch
      - 600-ipv6-addrconf-call-ipv6_mc_up-for-non-Ethernet-inter.patch
      
      Fixes:
      - CVE-2020-8647
      - CVE-2020-8648 (potentially)
      - CVE-2020-8649
      
      Compile-tested on: cns3xxx
      Runtime-tested on: cns3xxx
      Signed-off-by: default avatarKoen Vandeputte <koen.vandeputte@ncentric.com>
      1f0679f5
  2. 04 Feb, 2020 1 commit
    • Koen Vandeputte's avatar
      kernel: bump 4.14 to 4.14.169 · 4eba8682
      Koen Vandeputte authored
      
      
      Refreshed all patches.
      
      Fixes:
      - CVE-2019-14896
      - CVE-2019-14897
      
      Remove upstreamed:
      - 023-0007-crypto-crypto4xx-Fix-wrong-ppc4xx_trng_probe-ppc4xx_.patch
      
      Altered patches:
      - 102-MIPS-BCM63XX-move-code-touching-the-USB-private-regi.patch
      - 105-MIPS-BCM63XX-add-support-for-the-on-chip-OHCI-contro.patch
      - 106-MIPS-BCM63XX-register-OHCI-controller-if-board-enabl.patch
      - 108-MIPS-BCM63XX-add-support-for-the-on-chip-EHCI-contro.patch
      - 207-MIPS-BCM63XX-move-device-registration-code-into-its-.patch
      - 350-MIPS-BCM63XX-support-settings-num-usbh-ports.patch
      - 356-MIPS-BCM63XX-move-fallback-sprom-support-into-its-ow.patch
      - 390-MIPS-BCM63XX-do-not-register-SPI-controllers.patch
      - 391-MIPS-BCM63XX-do-not-register-uart.patch
      - 392-MIPS-BCM63XX-remove-leds-and-buttons.patch
      - 416-BCM63XX-add-a-fixup-for-ath9k-devices.patch
      - 422-BCM63XX-add-a-fixup-for-rt2x00-devices.patch
      -
      
      Compile-tested on: brcm63xx, cns3xxx
      Runtime-tested on: cns3xxx
      Signed-off-by: default avatarKoen Vandeputte <koen.vandeputte@ncentric.com>
      4eba8682
  3. 01 Jan, 2020 1 commit
  4. 28 Aug, 2019 1 commit
  5. 09 Jul, 2019 1 commit
  6. 15 May, 2019 1 commit
  7. 15 Jan, 2019 1 commit
  8. 19 Oct, 2018 1 commit
  9. 28 Aug, 2018 1 commit
  10. 06 Aug, 2018 1 commit
    • Stijn Segers's avatar
      kernel: bump 4.14 to 4.14.60 for 18.06 · 9ce7aa32
      Stijn Segers authored
      
      
      * Refreshed patches.
      * Patches made redundant by changes upstream:
        - target/linux/ramips/patches-4.14/0036-mtd-fix-cfi-cmdset-0002-erase-status-check.patch
      * Patches accepted upstream:
        - target/linux/apm821xx/patches-4.14/020-0001-crypto-crypto4xx-remove-bad-list_del.patch
        - target/linux/apm821xx/patches-4.14/020-0011-crypto-crypto4xx-fix-crypto4xx_build_pdr-crypto4xx_b.patch
        - target/linux/brcm63xx/patches-4.14/001-4.15-08-bcm63xx_enet-correct-clock-usage.patch
        - target/linux/brcm63xx/patches-4.14/001-4.15-09-bcm63xx_enet-do-not-write-to-random-DMA-channel-on-B.patch
        - target/linux/generic/backport-4.14/080-net-convert-sock.sk_wmem_alloc-from-atomic_t-to-refc.patch
        - target/linux/generic/pending-4.14/900-gen_stats-fix-netlink-stats-padding.patch
      
      The ext4 regression introduced in 4.14.55 has been fixed by 4.14.60 (commit f547aa20b4f61662ad3e1a2040bb3cc5778f19b0).
      
      Fixes the following CVEs:
      - CVE-2018-10876
      - CVE-2018-10877
      - CVE-2018-10879
      - CVE-2018-10880
      - CVE-2018-10881
      - CVE-2018-10882
      - CVE-2018-10883
      
      Thanks to Stijn Tintel for the CVE list :-).
      
      Compile-tested on: ramips/mt7621, x86/64
      Run-tested on: ramips/mt7621, x86/64
      Signed-off-by: default avatarStijn Segers <foss@volatilesystems.org>
      9ce7aa32
  11. 07 Jun, 2018 1 commit
    • Stijn Segers's avatar
      kernel: bump 4.14 to 4.14.48 for 18.06 · 1199a910
      Stijn Segers authored
      
      
      Refreshed patches. The following patches were upstreamed and have been deleted:
      
      * target/linux/lantiq/patches-4.14/0025-MIPS-lantiq-gphy-Remove-reboot-remove-reset-asserts.patch
      * target/linux/generic/pending-4.14/101-clocksource-mips-gic-timer-fix-clocksource-counter-w.patch
      * target/linux/generic/pending-4.14/103-MIPS-c-r4k-fix-data-corruption-related-to-cache-coherence.patch
      * target/linux/generic/pending-4.14/181-net-usb-add-lte-modem-wistron-neweb-d18q1.patch
      
      Compile-tested: ramips/mt7621, x86/64
      Run-tested: ramips/mt7621
      Signed-off-by: default avatarStijn Segers <foss@volatilesystems.org>
      1199a910
  12. 24 May, 2018 1 commit
    • Koen Vandeputte's avatar
      kernel: bump 4.14 to 4.14.43 for 18.06 · e39414ed
      Koen Vandeputte authored
      
      
      Refreshed all patches
      
      Dropped upstreamed patches:
      522-PCI-aardvark-fix-logic-in-PCI-configuration-read-write-functions.patch
      523-PCI-aardvark-set-PIO_ADDR_LS-correctly-in-advk_pcie_rd_conf.patch
      525-PCI-aardvark-use-isr1-instead-of-isr0-interrupt-in-legacy-irq-mode.patch
      527-PCI-aardvark-fix-PCIe-max-read-request-size-setting.patch
      
      updated patches:
      524-PCI-aardvark-set-host-and-device-to-the-same-MAX-payload-size.patch
      030-USB-serial-option-fix-dwm-158-3g-modem-interface.patch
      
      Added new ARM64 symbol: CONFIG_ARM64_ERRATUM_1024718
      
      Compile-tested on: cns3xxx, imx6, mvebu (arm64), x86_64
      Runtime-tested on: cns3xxx, imx6, x86_64
      Signed-off-by: default avatarKoen Vandeputte <koen.vandeputte@ncentric.com>
      e39414ed
  13. 02 Jan, 2018 1 commit
    • Stijn Tintel's avatar
      kernel: bump 4.14 to 4.14.11 · c5ca1c9a
      Stijn Tintel authored
      
      
      Rename unwinder config symbols to match upstream changes.
      Refresh patches.
      Update patch that no longer applies: 202-reduce_module_size.patch
      
      Also enable CONFIG_PAGE_TABLE_ISOLATION. This feature was backported
      from 4.15 to the 4.14 stable series. It is enabled by default, so enable
      it in OpenWrt as well.
      
      Compile-tested on x86/64.
      Runtime-tested on x86/64.
      Signed-off-by: default avatarStijn Tintel <stijn@linux-ipv6.be>
      c5ca1c9a
  14. 16 Dec, 2017 1 commit
    • Hauke Mehrtens's avatar
      kernel: generic: Add kernel 4.14 support · b3f95490
      Hauke Mehrtens authored
      
      
      This adds initial support for kernel 4.14 based on the patches for
      kernel 4.9.
      
      In the configuration I deactivated some of the new possible security
      features like:
      CONFIG_REFCOUNT_FULL
      CONFIG_SLAB_FREELIST_HARDENED
      CONFIG_SOFTLOCKUP_DETECTOR
      CONFIG_WARN_ALL_UNSEEDED_RANDOM
      
      And these overlay FS options are also deactivated:
      CONFIG_OVERLAY_FS_INDEX
      CONFIG_OVERLAY_FS_REDIRECT_DIR
      
      I activated this:
      CONFIG_FORTIFY_SOURCE
      CONFIG_POSIX_TIMERS
      CONFIG_SLAB_MERGE_DEFAULT
      CONFIG_WATCHDOG_HANDLE_BOOT_ENABLED
      
      I am not sure if I did the porting correct for the following patches:
      target/linux/generic/backport-4.14/020-backport_netfilter_rtcache.patch
      target/linux/generic/hack-4.14/220-gc_sections.patch
      target/linux/generic/hack-4.14/321-powerpc_crtsavres_prereq.patch
      target/linux/generic/pending-4.14/305-mips_module_reloc.patch
      target/linux/generic/pending-4.14/611-netfilter_match_bypass_default_table.patch
      target/linux/generic/pending-4.14/680-NET-skip-GRO-for-foreign-MAC-addresses.patch
      Signed-off-by: default avatarHauke Mehrtens <hauke@hauke-m.de>
      b3f95490
  15. 22 Nov, 2017 1 commit
  16. 18 Oct, 2017 1 commit
  17. 20 Sep, 2017 1 commit
  18. 17 Aug, 2017 1 commit
    • Stijn Tintel's avatar
      kernel: update 4.9 to 4.9.44 · 2d02a4f5
      Stijn Tintel authored
      
      
      Refresh patches.
      Adapt 704-phy-no-genphy-soft-reset.patch.
      Remove brcm2708/950-0005-mm-Remove-the-PFN-busy-warning.patch.
      Compile-tested on brcm2708/bcm2708 and x86/64.
      Runtime-tested on brcm2708/bcm2708 and x86/64.
      
      Fixes the following vulnerabilities:
      - CVE-2017-7533
      - CVE-2017-1000111
      - CVE-2017-1000112
      Signed-off-by: default avatarStijn Tintel <stijn@linux-ipv6.be>
      2d02a4f5
  19. 05 Aug, 2017 1 commit
    • John Crispin's avatar
      kernel: split patches folder up into backport, pending and hack folders · 74d00a8c
      John Crispin authored
      
      
      * properly format/comment all patches
      * merge debloat patches
      * merge Kconfig patches
      * merge swconfig patches
      * merge hotplug patches
      * drop 200-fix_localversion.patch - upstream
      * drop 222-arm_zimage_none.patch - unused
      * drop 252-mv_cesa_depends.patch - no longer required
      * drop 410-mtd-move-forward-declaration-of-struct-mtd_info.patch - unused
      * drop 661-fq_codel_keep_dropped_stats.patch - outdated
      * drop 702-phy_add_aneg_done_function.patch - upstream
      * drop 840-rtc7301.patch - unused
      * drop 841-rtc_pt7c4338.patch - upstream
      * drop 921-use_preinit_as_init.patch - unused
      * drop spio-gpio-old and gpio-mmc - unused
      Signed-off-by: default avatarJohn Crispin <john@phrozen.org>
      74d00a8c
  20. 21 May, 2017 1 commit
  21. 26 Mar, 2017 1 commit
  22. 27 Feb, 2017 1 commit
  23. 26 Feb, 2017 1 commit
  24. 04 Feb, 2017 1 commit
  25. 13 Dec, 2016 1 commit
  26. 16 Nov, 2016 1 commit
  27. 07 Jun, 2016 1 commit
  28. 19 May, 2016 1 commit
  29. 24 Apr, 2016 1 commit
  30. 02 Dec, 2015 1 commit
  31. 11 Oct, 2015 1 commit
  32. 11 Jul, 2015 1 commit
  33. 27 Oct, 2014 1 commit
  34. 13 Jun, 2014 1 commit
  35. 07 Mar, 2014 1 commit
  36. 26 Jan, 2014 1 commit
  37. 15 Dec, 2013 1 commit
  38. 15 Sep, 2013 1 commit
  39. 01 Jul, 2013 1 commit
  40. 19 May, 2013 1 commit