Git-Mirrors/DivestOS
1
0
Fork 0
mirror of https://github.com/Divested-Mobile/DivestOS-Build.git synced 2024-10-01 01:35:54 -04:00
Code Issues Packages Projects Releases Wiki Activity
50c670c477
DivestOS/Scripts/Common/Fix_CVE_Patchers.sh

78 lines
7.3 KiB
Bash
Raw Normal View History

Update CVE patchers
2020-04-06 16:36:46 -04:00
#!/bin/bash
License headers
2020-11-17 10:11:40 -05:00
#DivestOS: A privacy focused mobile distribution
Update CVE patchers
2020-04-06 16:36:46 -04:00
#Copyright (c) 2020 Divested Computing Group
#
#This program is free software: you can redistribute it and/or modify
#it under the terms of the GNU General Public License as published by
#the Free Software Foundation, either version 3 of the License, or
#(at your option) any later version.
#
#This program is distributed in the hope that it will be useful,
#but WITHOUT ANY WARRANTY; without even the implied warranty of
#MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
#GNU General Public License for more details.
#
#You should have received a copy of the GNU General Public License
#along with this program. If not, see <https://www.gnu.org/licenses/>.
commentPatches() {
file="$1";
if [ -f $file ]; then
shift;
for var in "$@"
do
#escaped=$(printf "%q" "$var");
#echo $escaped;
sed -i $file -e '\|'$var'| s|^#*|#|';
done
fi;
}
Unbreak last commit This should be most of it also - properly update webview, repopick doesn't seem to handle the branch - always cd back to base, to prevent script breakage
2021-01-24 00:44:34 -05:00
commentPatches android_kernel_asus_fugu.sh "CVE-2014-2568" "CVE-2014-8559" "CVE-2015-8746" "CVE-2017-5551" "LVT-2017-0003/3.10/0001.patch";
Update CVE patchers Untested. I expect some breakage.
2020-08-08 12:03:23 -04:00
commentPatches android_kernel_asus_grouper.sh "CVE-2017-15868";
Update CVE patchers
2020-04-06 16:36:46 -04:00
commentPatches android_kernel_asus_msm8916.sh "CVE-2018-13913/ANY/0001.patch";
commentPatches android_kernel_asus_msm8953.sh "CVE-2017-13162/3.18/0001.patch";
Fix errors from compile test of all 14.1 kernels
2020-10-14 09:50:10 -04:00
commentPatches android_kernel_cyanogen_msm8916.sh "CVE-2018-13913/ANY/0001.patch" "CVE-2018-5897" "CVE-2018-9514" "CVE-2018-11266";
commentPatches android_kernel_cyanogen_msm8974.sh "CVE-2017-7373";
Update CVE patchers I expect some breakage here
2020-10-06 21:14:18 -04:00
commentPatches android_kernel_essential_msm8998.sh "0008-Graphene-Kernel_Hardening/4.4/0019.patch" "CVE-2017-13218" "CVE-2019-14047/ANY/0002.patch";
Fix errors from compile test of all 14.1 kernels
2020-10-14 09:50:10 -04:00
commentPatches android_kernel_fairphone_msm8974.sh "CVE-2018-20169";
Add FP3 to 16.0 and 17.1 Untested
2021-03-19 20:13:53 -04:00
commentPatches android_kernel_fairphone_sdm632.sh "CVE-2019-19319" "CVE-2020-1749" "CVE-2020-8992" "CVE-2021-3347";
Small updates - Various rebranding fixes - 17.1: hold off on Seedvault inclusion for now - 17.1: update kernel/fxtec/msm8998 CVE patcher - 17.1: build cheeseburger/dumpling
2020-10-31 10:49:54 -04:00
commentPatches android_kernel_fxtec_msm8998.sh "0008-Graphene-Kernel_Hardening/4.4/0011.patch" "0008-Graphene-Kernel_Hardening/4.4/0012.patch" "0008-Graphene-Kernel_Hardening/4.4/0014.patch" "0008-Graphene-Kernel_Hardening/4.4/0019.patch" "CVE-2019-11599" "CVE-2019-16746" "CVE-2019-18282" "CVE-2019-19319" "CVE-2019-ctnl-addr-leak" "CVE-2020-0429" "CVE-2020-1749" "CVE-2020-8992" "CVE-2020-16166";
Update CVE patchers Untested. I expect some breakage.
2020-08-08 12:03:23 -04:00
commentPatches android_kernel_google_bonito.sh "CVE-2020-0067";
Small fixes
2020-11-09 00:29:29 -05:00
commentPatches android_kernel_google_coral.sh "CVE-2019-19319" "CVE-2020-1749" "CVE-2020-8992";
Fixup dragon
2021-03-23 16:56:11 -04:00
commentPatches android_kernel_google_dragon.sh "0006-AndroidHardening-Kernel_Hardening/3.18/0026.patch" "CVE-2015-4167" "CVE-2017-15951" "CVE-2016-1237" "CVE-2016-6198" "CVE-2017-7374" "CVE-2018-17972" "CVE-2019-2214";
Update CVE patchers Untested. I expect some breakage.
2020-08-08 12:03:23 -04:00
commentPatches android_kernel_google_crosshatch.sh "CVE-2020-0067";
Small tweaks + ASB cherrypicks
2021-04-07 22:45:57 -04:00
commentPatches android_kernel_google_marlin.sh "0001-LinuxIncrementals/3.18/3.18.0098-0099.patch" "0006-AndroidHardening-Kernel_Hardening/3.18/0048.patch" "0006-AndroidHardening-Kernel_Hardening/3.18/0049.patch" "CVE-2017-13162/3.18/0001.patch" "CVE-2017-14883" "CVE-2017-15951" "CVE-2018-17972" "CVE-2019-16746" "CVE-2020-0427" "CVE-2020-14381" "CVE-2020-16166";
Update CVE patchers Includes many fixes for a69326f3 but probably breaks other things
2020-08-08 13:41:43 -04:00
commentPatches android_kernel_google_msm.sh "CVE-2017-11015/prima";
More fixes for a69326f3
2020-08-09 20:27:53 -04:00
commentPatches android_kernel_google_msm-4.9.sh "CVE-2019-19319" "CVE-2020-0067" "CVE-2020-1749" "CVE-2020-8992";
Update CVE patchers - Drop tcp_sack=0 sysctl, as most devices are now patched
2020-10-12 15:19:15 -04:00
commentPatches android_kernel_google_wahoo.sh "CVE-2019-14047/ANY/0002.patch" "CVE-2019-19319" "CVE-2020-1749" "CVE-2020-8992" "CVE-2020-16166";
Fixes
2020-10-23 18:15:01 -04:00
commentPatches android_kernel_google_yellowstone.sh "0001-LinuxIncrementals/3.10/3.10.0098-0099.patch" "CVE-2018-9514";
Unbreak last commit This should be most of it also - properly update webview, repopick doesn't seem to handle the branch - always cd back to base, to prevent script breakage
2021-01-24 00:44:34 -05:00
commentPatches android_kernel_huawei_angler.sh "CVE-2014-8559";
Update CVE patchers I expect some breakage here
2020-10-06 21:14:18 -04:00
commentPatches android_kernel_htc_flounder.sh "CVE-2018-9514";
Small changes - Add m7 and avicii (untested) - Use low_ram target on <2GB devices Silly me, this never did anything due to the git reset... - Update Chromium WebView cherrypick
2021-03-24 00:57:59 -04:00
commentPatches android_kernel_htc_msm8960.sh "CVE-2018-10876";
More CVE patcher fixes
2020-10-15 16:43:49 -04:00
commentPatches android_kernel_htc_msm8994.sh "CVE-2016-8394/ANY/0001.patch" "CVE-2017-13166" "CVE-2018-3585" "CVE-2018-9514";
Unbreak last commit This should be most of it also - properly update webview, repopick doesn't seem to handle the branch - always cd back to base, to prevent script breakage
2021-01-24 00:44:34 -05:00
commentPatches android_kernel_lge_bullhead.sh "CVE-2014-8559";
Fix errors from compile test of all 14.1 kernels
2020-10-14 09:50:10 -04:00
commentPatches android_kernel_lge_msm8992.sh "CVE-2018-5897" "CVE-2018-11266";
Small tweaks
2020-12-12 09:50:27 -05:00
commentPatches android_kernel_lge_msm8996.sh "CVE-2016-6198" "CVE-2017-13162/3.18/0001.patch" "CVE-2017-15951" "CVE-2018-17972" "CVE-2019-2214" "CVE-2019-14070/ANY/0006.patch" "CVE-2019-16746" "CVE-2020-0427" "CVE-2020-14381" "CVE-2020-16166";
Unbreak last commit This should be most of it also - properly update webview, repopick doesn't seem to handle the branch - always cd back to base, to prevent script breakage
2021-01-24 00:44:34 -05:00
commentPatches android_kernel_moto_shamu.sh "CVE-2014-8559";
commentPatches android_kernel_motorola_msm8916.sh "0001-LinuxIncrementals/3.10/3.10.0050-0051.patch" "CVE-2014-8559" "CVE-2018-9514";
Update CVE patchers
2021-04-10 18:21:37 -04:00
commentPatches android_kernel_motorola_msm8974.sh "CVE-2016-5696" "CVE-2017-7373" "CVE-2017-17770/3.4/0002.patch" "CVE-2019-11599";
Update CVE patchers Includes many fixes for a69326f3 but probably breaks other things
2020-08-08 13:41:43 -04:00
commentPatches android_kernel_motorola_msm8992.sh "CVE-2017-5551/3.10/0002.patch" "CVE-2017-14880/3.10/0001.patch" "CVE-2018-3585/3.10/0001.patch";
Small tweaks
2020-12-12 09:50:27 -05:00
commentPatches android_kernel_motorola_msm8996.sh "0001-LinuxIncrementals/3.18/3.18.0098-0099.patch" "CVE-2017-8266" "CVE-2017-13162/3.18/0001.patch" "CVE-2017-15951" "CVE-2018-17972" "CVE-2019-2214" "CVE-2019-14070/ANY/0006.patch" "CVE-2019-16746" "CVE-2020-0427" "CVE-2020-14381" "CVE-2020-16166";
Fix errors from compile test of all 14.1 kernels
2020-10-14 09:50:10 -04:00
commentPatches android_kernel_nextbit_msm8992.sh "CVE-2018-3585/3.10/0001.patch" "CVE-2018-9514";
commentPatches android_kernel_oneplus_msm8994.sh "CVE-2018-3585/3.10/0001.patch" "CVE-2018-9514";
Small tweaks
2020-12-12 09:50:27 -05:00
commentPatches android_kernel_oneplus_msm8996.sh "CVE-2017-13162/3.18/0001.patch" "CVE-2017-15951" "CVE-2017-16939" "CVE-2018-17972" "CVE-2019-2214" "CVE-2019-14070/ANY/0006.patch" "CVE-2019-16746" "CVE-2020-0427" "CVE-2020-14381" "CVE-2020-16166";
Small fix
2021-01-14 05:26:49 -05:00
commentPatches android_kernel_oneplus_msm8998.sh "0008-Graphene-Kernel_Hardening/4.4/0011.patch" "0008-Graphene-Kernel_Hardening/4.4/0012.patch" "0008-Graphene-Kernel_Hardening/4.4/0014.patch" "0008-Graphene-Kernel_Hardening/4.4/0019.patch" "CVE-2019-11599" "CVE-2019-19319" "CVE-2020-0305" "CVE-2020-8992" "CVE-2020-16166";
Small fixes
2021-04-01 10:55:23 -04:00
commentPatches android_kernel_oneplus_sm7250.sh "CVE-2018-5873" "CVE-2020-1749";
Many updates - Add OnePlus 6, 6T, 7, 7 Pro - Ensure verity/avb keys are *always* copied - Update cherry picks
2020-08-29 16:03:11 -04:00
commentPatches android_kernel_oneplus_sm8150.sh "CVE-2019-16746" "CVE-2019-19319" "CVE-2020-0067" "CVE-2020-8992";
Update CVE patchers - Drop tcp_sack=0 sysctl, as most devices are now patched
2020-10-12 15:19:15 -04:00
commentPatches android_kernel_razer_msm8998.sh "0008-Graphene-Kernel_Hardening/4.4/0011.patch" "0008-Graphene-Kernel_Hardening/4.4/0012.patch" "0008-Graphene-Kernel_Hardening/4.4/0014.patch" "0008-Graphene-Kernel_Hardening/4.4/0019.patch" "CVE-2019-14070/ANY/0005.patch" "CVE-2020-16166";
Small tweaks
2021-04-12 21:24:57 -04:00
commentPatches android_kernel_samsung_jf.sh "CVE-2019-11599";
Unbreak last commit This should be most of it also - properly update webview, repopick doesn't seem to handle the branch - always cd back to base, to prevent script breakage
2021-01-24 00:44:34 -05:00
commentPatches android_kernel_samsung_smdk4412.sh "CVE-2012-2127" "CVE-2016-8463/ANY/0001.patch";
commentPatches android_kernel_samsung_tuna.sh "CVE-2012-2127";
Small tweaks
2020-12-12 09:50:27 -05:00
commentPatches android_kernel_samsung_universal8890.sh "CVE-2016-7917" "CVE-2018-1092" "CVE-2018-17972" "CVE-2019-16746" "CVE-2020-0427" "CVE-2020-14381" "CVE-2020-16166";
More fixes for a69326f3
2020-08-09 20:27:53 -04:00
commentPatches android_kernel_samsung_universal9810.sh "CVE-2020-1749";
Update CVE patchers - Drop tcp_sack=0 sysctl, as most devices are now patched
2020-10-12 15:19:15 -04:00
commentPatches android_kernel_yandex_sdm660.sh "CVE-2019-11599" "CVE-2019-14070/ANY/0005.patch" "CVE-2019-19319" "CVE-2020-1749" "CVE-2020-8992" "CVE-2020-16166";
Unbreak last commit This should be most of it also - properly update webview, repopick doesn't seem to handle the branch - always cd back to base, to prevent script breakage
2021-01-24 00:44:34 -05:00
commentPatches android_kernel_zte_msm8930.sh "CVE-2015-2922" "CVE-2017-11015/prima";
Update CVE patchers
2021-04-10 18:21:37 -04:00
commentPatches android_kernel_zte_msm8996.sh "0001-LinuxIncrementals/3.18/3.18.0098-0099.patch" "CVE-2017-13162" "CVE-2017-15951" "CVE-2017-16939" "CVE-2018-17972" "CVE-2019-2214" "CVE-2019-14070" "CVE-2019-16746" "CVE-2020-0427" "CVE-2020-14381" "CVE-2020-16166";
Update CVE patchers - Drop tcp_sack=0 sysctl, as most devices are now patched
2020-10-12 15:19:15 -04:00
commentPatches android_kernel_zuk_msm8996.sh "0008-Graphene-Kernel_Hardening/4.4/0011.patch" "0008-Graphene-Kernel_Hardening/4.4/0012.patch" "0008-Graphene-Kernel_Hardening/4.4/0014.patch" "CVE-2019-19319" "CVE-2020-1749" "CVE-2020-8992" "CVE-2020-1616";
Reference in New Issue Copy Permalink