Git-Mirrors/DivestOS
1
0
Fork 0
mirror of https://github.com/Divested-Mobile/DivestOS-Build.git synced 2024-10-01 01:35:54 -04:00
Code Issues Packages Projects Releases Wiki Activity
3047b3b269
DivestOS/Scripts/LineageOS-19.1/CVE_Patchers/android_kernel_fairphone_sdm632.sh

107 lines
7.3 KiB
Bash
Raw Normal View History

19.1: More promotions Signed-off-by: Tad <tad@spotco.us>
2022-07-01 14:08:55 -04:00
#!/bin/bash
cd "$DOS_BUILD_BASE""kernel/fairphone/sdm632"
Update CVE patchers This fixes CVE-2018-9422 which was primarily added via b56fabac May still need to be fixed: 16.0/kernel_google_yellowstone 16.0/kernel_xiaomi_msm8937 Signed-off-by: Tad <tad@spotco.us>
2022-11-21 06:07:45 -05:00
git apply $DOS_PATCHES_LINUX_CVES/0001-LinuxIncrementals/4.9/4.9.0332-0333.patch --exclude=Makefile
Update CVE patchers Appears I skipped 20.0 by accident last update Signed-off-by: Tad <tad@spotco.us>
2022-12-05 13:33:08 -05:00
git apply $DOS_PATCHES_LINUX_CVES/0001-LinuxIncrementals/4.9/4.9.0333-0334.patch --exclude=Makefile
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-12-16 21:04:10 -05:00
git apply $DOS_PATCHES_LINUX_CVES/0001-LinuxIncrementals/4.9/4.9.0334-0335.patch --exclude=Makefile
19.1: More promotions Signed-off-by: Tad <tad@spotco.us>
2022-07-01 14:08:55 -04:00
git apply $DOS_PATCHES_LINUX_CVES/0005-Graphene-Deny_USB/4.9/0002.patch
GrapheneOS kernel hardening patches update Maybe some compile breakage Signed-off-by: Tad <tad@spotco.us>
2023-01-24 18:20:37 -05:00
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-allocsize/4.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-allocsize/4.9/0015.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-allocsize/4.9/0020.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-bugon/4.9/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-bugon/4.9/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-misc/4.9/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-misc/4.9/0017.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-misc/4.9/0020.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-random/4.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-random/4.9/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-random/4.9/0011.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-random/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0011.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0027.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0031.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-sanitize/4.9/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-sanitize/4.9/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.9/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.9/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.9/0013.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.9/0017.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slub/4.9/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slub/4.9/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slub/4.9/0008.patch
19.1: More promotions Signed-off-by: Tad <tad@spotco.us>
2022-07-01 14:08:55 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2015-7837/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-3695/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-16USB/ANY/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-16USB/ANY/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-16USB/ANY/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-7477/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-13693/^4.12.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-13694/^4.12.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-1000252/^4.13/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5897/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-9415/ANY/0005.patch
various small fixes - loose versioning fixes for 4.9 - remove GPG commit verification for GOS repos, they use SSH now. TODO: support that - 20.0: fixup AudioFX stray lines - 20.0: broken fix for gs101/201 stray iwlan lines Signed-off-by: Tad <tad@spotco.us>
2023-01-18 15:54:53 -05:00
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11412/4.14/0002.patch
19.1: More promotions Signed-off-by: Tad <tad@spotco.us>
2022-07-01 14:08:55 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-20855/^4.18/0001.patch
Update CVE patchers This adds loose versioning applying 4.14 patches to 4.9 Signed-off-by: Tad <tad@spotco.us>
2023-01-13 12:42:47 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-25020/4.14/0002.patch
19.1: More promotions Signed-off-by: Tad <tad@spotco.us>
2022-07-01 14:08:55 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12378/^5.1.5/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12455/^5.1.5/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12456/^5.1.5/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-15291/4.9/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-16921/^4.16/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-16994/4.9/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-19051/4.9/0013.patch
Churn Signed-off-by: Tad <tad@spotco.us>
2022-09-13 22:41:47 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-19068/4.9/0005.patch
19.1: More promotions Signed-off-by: Tad <tad@spotco.us>
2022-07-01 14:08:55 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-20908/^5.2/0001.patch
Add even more captive portal servers + sorting TODO: apply to other branches Signed-off-by: Tad <tad@spotco.us>
2023-01-22 18:45:37 -05:00
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-0067/4.14/0002.patch
19.1: More promotions Signed-off-by: Tad <tad@spotco.us>
2022-07-01 14:08:55 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-3674/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-16119/^5.10/0002.patch
Update CVE patchers This adds loose versioning applying 4.14 patches to 4.9 Signed-off-by: Tad <tad@spotco.us>
2023-01-13 12:42:47 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-24394/4.14/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-3656/4.14/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-33098/4.14/0002.patch
Churn Signed-off-by: Tad <tad@spotco.us>
2022-09-13 22:41:47 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-39792/ANY/0001.patch
19.1: More promotions Signed-off-by: Tad <tad@spotco.us>
2022-07-01 14:08:55 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-44879/^5.16/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-45469/4.9-^5.16/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-Misc2/ANY/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-Misc2/ANY/0011.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-Misc2/ANY/0012.patch
various small fixes - loose versioning fixes for 4.9 - remove GPG commit verification for GOS repos, they use SSH now. TODO: support that - 20.0: fixup AudioFX stray lines - 20.0: broken fix for gs101/201 stray iwlan lines Signed-off-by: Tad <tad@spotco.us>
2023-01-18 15:54:53 -05:00
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1204/4.14/0006.patch
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1204/4.14/0007.patch
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1204/4.14/0008.patch
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1204/4.14/0009.patch
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1204/4.14/0010.patch
Update CVE patchers This adds loose versioning applying 4.14 patches to 4.9 Signed-off-by: Tad <tad@spotco.us>
2023-01-13 12:42:47 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1679/4.14/0002.patch
19.1: More promotions Signed-off-by: Tad <tad@spotco.us>
2022-07-01 14:08:55 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-2153/^5.17/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-2153/^5.17/0002.patch
Update CVE patchers This fixes CVE-2018-9422 which was primarily added via b56fabac May still need to be fixed: 16.0/kernel_google_yellowstone 16.0/kernel_xiaomi_msm8937 Signed-off-by: Tad <tad@spotco.us>
2022-11-21 06:07:45 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-2978/4.9/0004.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-09-04 13:12:40 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3061/^5.18/0001.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-01-18 13:17:08 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3424/4.9/0004.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-10-22 20:54:36 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3542/3.8-^6.0/0001.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-11-03 11:30:45 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3565/4.9/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3594/4.9/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3621/4.9/0004.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-12-22 09:49:19 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3643/4.9/0006.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-11-03 11:30:45 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3646/4.9/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3649/4.9/0004.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-02-06 22:30:22 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-4382/^6.2/0001.patch
19.1: More promotions Signed-off-by: Tad <tad@spotco.us>
2022-07-01 14:08:55 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20148/^5.15/0002.patch
Update CVE patchers This adds loose versioning applying 4.14 patches to 4.9 Signed-off-by: Tad <tad@spotco.us>
2023-01-13 12:42:47 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20369/4.14/0006.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-08-04 10:45:25 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20371/ANY/0001.patch
19.1: More promotions Signed-off-by: Tad <tad@spotco.us>
2022-07-01 14:08:55 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-27950/^5.16/0001.patch
Update CVE patchers This adds loose versioning applying 4.14 patches to 4.9 Signed-off-by: Tad <tad@spotco.us>
2023-01-13 12:42:47 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-28388/4.14/0002.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-01-18 13:17:08 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-36280/4.9/0004.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-11-03 11:30:45 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-40768/4.9/0007.patch
Update CVE patchers This fixes CVE-2018-9422 which was primarily added via b56fabac May still need to be fixed: 16.0/kernel_google_yellowstone 16.0/kernel_xiaomi_msm8937 Signed-off-by: Tad <tad@spotco.us>
2022-11-21 06:07:45 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-41849/4.9/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-41850/4.9/0004.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-11-03 11:30:45 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-43750/4.9/0004.patch
Update CVE patchers This adds loose versioning applying 4.14 patches to 4.9 Signed-off-by: Tad <tad@spotco.us>
2023-01-13 12:42:47 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-45934/4.9/0004.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-02-06 22:30:22 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0045/4.14/0002.patch
Update CVE patchers Maybe some breakage Signed-off-by: Tad <tad@spotco.us>
2023-01-28 18:07:32 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0394/4.14/0002.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-02-06 22:30:22 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0615/4.9/0005.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-23559/4.14/0002.patch
GrapheneOS kernel hardening patches update Maybe some compile breakage Signed-off-by: Tad <tad@spotco.us>
2023-01-24 18:20:37 -05:00
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.9/0005.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-02-06 22:30:22 -05:00
editKernelLocalversion "-dos.p102"
19.1: More promotions Signed-off-by: Tad <tad@spotco.us>
2022-07-01 14:08:55 -04:00
cd "$DOS_BUILD_BASE"
Reference in New Issue Copy Permalink