Git-Mirrors/DivestOS
1
0
Fork 0
mirror of https://github.com/Divested-Mobile/DivestOS-Build.git synced 2024-12-12 09:24:26 -05:00
Code Issues Packages Projects Releases Wiki Activity
09722044b0
DivestOS/Scripts/LineageOS-17.1/CVE_Patchers/android_kernel_essential_msm8998.sh

102 lines
6.5 KiB
Bash
Raw Normal View History

17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 16:15:33 -04:00
#!/bin/bash
cd "$DOS_BUILD_BASE""kernel/essential/msm8998"
git apply $DOS_PATCHES_LINUX_CVES/0007-Accelerated_AES/3.10+/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0007-Accelerated_AES/3.10+/0020.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0005.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0010.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0011.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0012.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0013.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0014.patch
Small updates - recovery: abort on serial number specific updates, credit: GrapheneOS - Add lists of missing CVEs - Update cherrypicks
2020-09-02 14:15:21 -04:00
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0015.patch
#git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/4.4/0019.patch
Update CVE patchers Includes many fixes for a69326f3 but probably breaks other things
2020-08-08 13:41:43 -04:00
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening/ANY/0001.patch
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 16:15:33 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2015-7837/ANY/0001.patch
Update CVE patchers Untested. I expect some breakage.
2020-08-08 12:03:23 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-1583/^4.6.3/0003.patch
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 16:15:33 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-6187/^4.6.5/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-6693/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-6696/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-8394/ANY/0001.patch
Update CVE patchers
2020-05-18 16:25:41 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-16USB/ANY/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-16USB/ANY/0009.patch
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 16:15:33 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-0610/ANY/0001.patch
Update CVE patchers I expect some breakage here
2020-10-06 21:14:18 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-0627/4.4/0009.patch
Update CVE patchers Includes many fixes for a69326f3 but probably breaks other things
2020-08-08 13:41:43 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-0627/ANY/0001.patch
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 16:15:33 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-0750/ANY/0001.patch
Update CVE patchers Untested. I expect some breakage.
2020-08-08 12:03:23 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-9059/^4.11.1/0001.patch
Update CVE patchers
2020-05-18 16:25:41 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-9711/4.4/0003.patch
Update CVE patchers I expect some breakage here
2020-10-06 21:14:18 -04:00
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-13218/4.4/0019.patch
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-13218/4.4/0027.patch
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 16:15:33 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-13693/^4.12.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-13694/^4.12.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-14875/ANY/0001.patch
Update CVE patchers Untested. I expect some breakage.
2020-08-08 12:03:23 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-18174/^4.7/0001.patch
Update CVE patchers
2020-11-04 10:20:46 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-18204/4.4/0004.patch
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 16:15:33 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-18306/4.4/0003.patch
Update CVE patchers Untested. I expect some breakage.
2020-08-08 12:03:23 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-1000252/^4.13.3/0002.patch
Update CVE patchers
2020-05-18 16:25:41 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5896/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5897/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5897/ANY/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5905/ANY/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5906/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5908/4.4/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5909/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5910/4.4/0003.patch
Update CVE patchers
2020-11-04 10:20:46 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-9415/ANY/0005.patch
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 16:15:33 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11273/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11818/ANY/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11919/4.4/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11984/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11986/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11987/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11988/ANY/0002.patch
Update CVE patchers I expect some breakage here
2020-10-06 21:14:18 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11988/ANY/0003.patch
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 16:15:33 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-12010/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-13912/ANY/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-13913/ANY/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-13914/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-13917/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-13920/ANY/0001.patch
Update CVE patchers
2020-11-04 10:20:46 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-16597/4.4/0002.patch
Update CVE patchers Untested. I expect some breakage.
2020-08-08 12:03:23 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-2054/ANY/0013.patch
Update CVE patchers - Drop tcp_sack=0 sysctl, as most devices are now patched
2020-10-12 15:19:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-2054/ANY/0014.patch
Update CVE patchers
2020-05-18 16:25:41 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-2264/ANY/0001.patch
Update CVE patchers I expect some breakage here
2020-10-06 21:14:18 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-2333/ANY/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-2341/ANY/0002.patch
Update CVE patchers
2020-05-18 16:25:41 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-8912/^4.20.11/0001.patch
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 16:15:33 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10494/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10503/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10503/ANY/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10515/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10524/ANY/0003.patch
Update CVE patchers I expect some breakage here
2020-10-06 21:14:18 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10527/ANY/0004.patch
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 16:15:33 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10555/ANY/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10567/ANY/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10584/ANY/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10614/ANY/0002.patch
Update CVE patchers
2020-05-04 17:18:50 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10622/ANY/0002.patch
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 16:15:33 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12378/^5.1.5/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12456/^5.1.5/0001.patch
Update CVE patchers I expect some breakage here
2020-10-06 21:14:18 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-14040/ANY/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-14041/ANY/0002.patch
Small updates - Partial revert of 5106063c - Cherry picks - CVE patcher fixes
2020-06-06 19:44:42 -04:00
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-14047/ANY/0002.patch
Update CVE patchers - Drop tcp_sack=0 sysctl, as most devices are now patched
2020-10-12 15:19:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-15291/4.4/0006.patch
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 16:15:33 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-16994/^5.0/0001.patch
Update CVE patchers - Drop tcp_sack=0 sysctl, as most devices are now patched
2020-10-12 15:19:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-19051/4.4/0012.patch
Fixup 9f01dc03 Enables replacing of vendor fingerprints. I thought this was broken, turns out it was the AUX camera change instead.
2020-11-02 11:04:47 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-19068/4.4/0004.patch
Update CVE patchers - Drop tcp_sack=0 sysctl, as most devices are now patched
2020-10-12 15:19:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-11608/4.4/0006.patch
Update CVE patchers Includes many fixes for a69326f3 but probably breaks other things
2020-08-08 13:41:43 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-11608/^5.6.1/0001.patch
Update CVE patchers
2020-10-30 13:54:24 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-12352/ANY/0011.patch
Update CVE patchers - Drop tcp_sack=0 sysctl, as most devices are now patched
2020-10-12 15:19:15 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-14386/3.10-^4.4/0002.patch
Update CVE patchers
2020-10-14 14:35:00 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-16119/^5.10/0002.patch
Update CVE patchers
2020-11-25 16:21:44 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-25669/4.4/0004.patch
editKernelLocalversion "-dos.p97"
17.1: Initial bringup - See items marked with '17REBASE'
2020-04-14 16:15:33 -04:00
cd "$DOS_BUILD_BASE"
Reference in New Issue Copy Permalink