Git-Mirrors/DivestOS
1
0
Fork 0
mirror of https://github.com/Divested-Mobile/DivestOS-Build.git synced 2024-10-01 01:35:54 -04:00
Code Issues Packages Projects Releases Wiki Activity
7ef5d9a9c4
DivestOS/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fairphone_sdm632.sh

120 lines
7.9 KiB
Bash
Raw Normal View History

Bump FP3 to 20.0 Signed-off-by: Tad <tad@spotco.us>
2023-02-13 10:05:10 -05:00
#!/bin/bash
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-03-08 16:01:37 -05:00
if cd "$DOS_BUILD_BASE""kernel/fairphone/sdm632"; then
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-06-26 19:01:31 -04:00
git apply $DOS_PATCHES_LINUX_CVES/0002-Misc_Fixes-Steam/4.14/0002.patch
Bump FP3 to 20.0 Signed-off-by: Tad <tad@spotco.us>
2023-02-13 10:05:10 -05:00
git apply $DOS_PATCHES_LINUX_CVES/0005-Graphene-Deny_USB/4.9/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-allocsize/4.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-allocsize/4.9/0015.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-allocsize/4.9/0020.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-bugon/4.9/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-bugon/4.9/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-misc/4.9/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-misc/4.9/0017.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-misc/4.9/0020.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-random/4.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-random/4.9/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-random/4.9/0011.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-random/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0011.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0027.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0031.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-sanitize/4.9/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-sanitize/4.9/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.9/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.9/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.9/0013.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.9/0017.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slub/4.9/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slub/4.9/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slub/4.9/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2015-7837/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-3695/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-16USB/ANY/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-16USB/ANY/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-16USB/ANY/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-7477/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-13693/^4.12.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-13694/^4.12.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-1000252/^4.13/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5897/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-9415/ANY/0005.patch
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11412/4.14/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-20855/^4.18/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-25020/4.14/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12378/^5.1.5/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12455/^5.1.5/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12456/^5.1.5/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-15291/4.9/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-16921/^4.16/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-16994/4.9/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-19051/4.9/0013.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-19068/4.9/0005.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-20908/^5.2/0001.patch
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-0067/4.14/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-3674/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-16119/^5.10/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-24394/4.14/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-3656/4.14/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-33098/4.14/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-39792/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-44879/^5.16/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-45469/4.9-^5.16/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-Misc2/ANY/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-Misc2/ANY/0011.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-Misc2/ANY/0012.patch
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1204/4.14/0006.patch
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1204/4.14/0007.patch
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1204/4.14/0008.patch
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1204/4.14/0009.patch
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1204/4.14/0010.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1679/4.14/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-2153/^5.17/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-2153/^5.17/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3061/^5.18/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-4382/^6.2/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20148/^5.15/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20369/4.14/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20371/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-27950/^5.16/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-28388/4.14/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0045/4.14/0002.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-04-23 22:41:48 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0458/4.14/0003.patch
Update CVE patchers Fixes https://github.com/Divested-Mobile/DivestOS-Build/issues/193 Signed-off-by: Tad <tad@spotco.us>
2023-03-06 17:12:46 -05:00
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0461/4.14/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1073/4.14/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1074/4.14/0002.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-03-13 17:39:24 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1118/4.14/0002.patch
Update CVE patchers - Includes CVE-2023-32233 fixes for more devices - Upstream has reverted the LVT patches, maybe consider handling them Signed-off-by: Tad <tad@spotco.us>
2023-05-22 19:53:08 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1380/4.14/0002.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-03-27 23:44:08 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1513/4.14/0003.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-04-05 12:00:22 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1670/4.14/0002.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-04-17 22:53:57 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1855/4.14/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1989/4.14/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1990/4.14/0003.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-05-02 17:09:41 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-2002/3.10-^6.3/0001.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-04-23 22:41:48 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-2162/4.14/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-2194/4.14/0002.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-05-02 17:09:41 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-2248/4.14/0002.patch
Update CVE patchers - Includes CVE-2023-32233 fixes for more devices - Upstream has reverted the LVT patches, maybe consider handling them Signed-off-by: Tad <tad@spotco.us>
2023-05-22 19:53:08 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-2269/4.14/0002.patch
Update CVE patchers CVE-2020-36694 appears to be a duplicate of CVE-2021-29650 Signed-off-by: Tad <tad@spotco.us>
2023-06-01 20:30:45 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-2985/4.14/0003.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-07-05 18:23:59 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-3090/4.14/0003.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-06-16 10:25:38 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-3141/4.14/0003.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-06-26 19:01:31 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-3358/4.14/0002.patch
Update CVE patchers two lpes Signed-off-by: Tad <tad@spotco.us>
2023-07-25 12:04:01 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-3611/^6.4/0001.patch
Update CVE patchers TODO: adjust min version of CVE-2023-4132 Signed-off-by: Tad <tad@spotco.us>
2023-08-04 21:00:28 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-3777/^6.5/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-4132/^6.2/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-4132/^6.4/0002.patch
Bump FP3 to 20.0 Signed-off-by: Tad <tad@spotco.us>
2023-02-13 10:05:10 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-23559/4.14/0002.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-04-17 22:53:57 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-30772/4.14/0002.patch
Fixup Signed-off-by: Tad <tad@spotco.us>
2023-06-20 23:14:26 -04:00
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31084/4.14/0002.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-05-12 22:01:03 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-32269/4.14/0003.patch
Update CVE patchers CVE-2020-36694 appears to be a duplicate of CVE-2021-29650 Signed-off-by: Tad <tad@spotco.us>
2023-06-01 20:30:45 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-34256/4.14/0002.patch
Update CVE patchers TODO: enable CVE-2023-31084/4.4 Signed-off-by: Tad <tad@spotco.us>
2023-07-15 21:22:18 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-35001/^6.4/0001.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-06-26 19:01:31 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-35824/4.14/0003.patch
Bump FP3 to 20.0 Signed-off-by: Tad <tad@spotco.us>
2023-02-13 10:05:10 -05:00
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.9/0005.patch
Update CVE patchers TODO: adjust min version of CVE-2023-4132 Signed-off-by: Tad <tad@spotco.us>
2023-08-04 21:00:28 -04:00
editKernelLocalversion "-dos.p113"
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-03-08 16:01:37 -05:00
else echo "kernel_fairphone_sdm632 is unavailable, not patching.";
fi;
Bump FP3 to 20.0 Signed-off-by: Tad <tad@spotco.us>
2023-02-13 10:05:10 -05:00
cd "$DOS_BUILD_BASE"
Reference in New Issue Copy Permalink