Git-Mirrors/DivestOS
1
0
Fork 0
mirror of https://github.com/Divested-Mobile/DivestOS-Build.git synced 2024-10-01 01:35:54 -04:00
Code Issues Packages Projects Releases Wiki Activity
e696cceac9
DivestOS/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fairphone_sm7225.sh

89 lines
6.1 KiB
Bash
Raw Normal View History

20.0: Initial roster Signed-off-by: Tad <tad@spotco.us>
2022-10-15 14:13:07 -04:00
#!/bin/bash
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-03-08 16:01:37 -05:00
if cd "$DOS_BUILD_BASE""kernel/fairphone/sm7225"; then
20.0: Initial roster Signed-off-by: Tad <tad@spotco.us>
2022-10-15 14:13:07 -04:00
git apply $DOS_PATCHES_LINUX_CVES/0003-syzkaller-Misc/ANY/0008.patch
GrapheneOS kernel hardening patches update Maybe some compile breakage Signed-off-by: Tad <tad@spotco.us>
2023-01-24 18:20:37 -05:00
git apply $DOS_PATCHES_LINUX_CVES/0005-Graphene-Deny_USB/4.19/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-allocsize/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-allocsize/4.19/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-allocsize/4.19/0012.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-allocsize/4.19/0017.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-allocsize/4.19/0022.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-bugon/4.19/0005.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-bugon/4.19/0011.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.19/0005.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-misc/4.19/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-misc/4.19/0011.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-misc/4.19/0019.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-random/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-random/4.19/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-random/4.19/0013.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-random/4.19/0018.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.19/0013.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.19/0018.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.19/0021.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.19/0024.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.19/0035.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-sanitize/4.19/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-sanitize/4.19/0010.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-sanitize/4.19/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-sanitize/4.19/0018.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.19/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.19/0011.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.19/0015.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.19/0019.patch
Fixup persistent IPv6 privacy address issue + churn Backports of rfc4941bis from Google/Linaro and workaround for legacy kernels from GrapheneOS already has rfc4941bis patch: fairphone_sdm632 google_gs101 google_gs201 google_msm-4.14 google_msm-4.9 google_redbull oneplus_sdm845 razer_sdm845 xiaomi_sdm845 Signed-off-by: Tad <tad@spotco.us>
2023-02-11 19:40:15 -05:00
git apply $DOS_PATCHES_LINUX_CVES/0009-rfc4941bis/4.19/0002.patch
20.0: Initial roster Signed-off-by: Tad <tad@spotco.us>
2022-10-15 14:13:07 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2015-7837/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-3695/ANY/0001.patch
#git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5873/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5897/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-9415/ANY/0005.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-3874/ANY/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-9444/ANY/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-11191/^5.0/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12378/^5.1.5/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12379/^5.1.5/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12380/^5.2/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12381/^5.2/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12455/^5.1.5/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12456/^5.1.5/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-15291/4.19/0005.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-12-22 09:49:19 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-18786/4.19/0003.patch
20.0: Initial roster Signed-off-by: Tad <tad@spotco.us>
2022-10-15 14:13:07 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-19051/4.19/0010.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-19068/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-19602/^5.4/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-20908/^5.2/0001.patch
20.0: add xz2 series + churn Signed-off-by: Tad <tad@spotco.us>
2023-01-09 13:13:03 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-11146/ANY/0001.patch
20.0: Initial roster Signed-off-by: Tad <tad@spotco.us>
2022-10-15 14:13:07 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-15780/^5.8/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-16119/^5.10/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-16119/^5.10/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-16120/^5.7/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-29372/^5.7/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-BleedingToothExtras/^5.10/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-1963/ANY/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-3493/^5.10/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-28039/^5.11/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-35085/qca-wifi-host-cmn/0001.patch --directory=drivers/staging/qca-wifi-host-cmn
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-12-22 09:49:19 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-39633/4.19/0003.patch
20.0: Initial roster Signed-off-by: Tad <tad@spotco.us>
2022-10-15 14:13:07 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3061/^5.18/0001.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-12-16 21:04:10 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3108/^5.16/0001.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-11-03 11:30:45 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3625/^5.19/0001.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-12-22 09:49:19 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3903/^6.0/0001.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-02-06 22:30:22 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-4382/^6.2/0001.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-12-31 21:13:25 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-4662/4.19/0004.patch
20.0: Initial roster Signed-off-by: Tad <tad@spotco.us>
2022-10-15 14:13:07 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20148/^5.15/0002.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2022-12-06 14:11:01 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20571/ANY/0001.patch
20.0: Initial roster Signed-off-by: Tad <tad@spotco.us>
2022-10-15 14:13:07 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-27950/^5.16/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-42703/4.19/0003.patch
Update CVE patchers This adds loose versioning applying 4.14 patches to 4.9 Signed-off-by: Tad <tad@spotco.us>
2023-01-13 12:42:47 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0030/^4.20/0001.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-03-27 23:44:08 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0386/^6.2/0001.patch
Update CVE patchers - Includes CVE-2023-32233 fixes for more devices - Upstream has reverted the LVT patches, maybe consider handling them Signed-off-by: Tad <tad@spotco.us>
2023-05-22 19:53:08 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1380/4.19/0003.patch
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-05-02 17:09:41 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-2002/3.10-^6.3/0001.patch
Update CVE patchers - Includes CVE-2023-32233 fixes for more devices - Upstream has reverted the LVT patches, maybe consider handling them Signed-off-by: Tad <tad@spotco.us>
2023-05-22 19:53:08 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-2269/4.19/0003.patch
Update CVE patchers Fixes https://github.com/Divested-Mobile/DivestOS-Build/issues/193 Signed-off-by: Tad <tad@spotco.us>
2023-03-06 17:12:46 -05:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-23000/^5.16/0001.patch
Update CVE patchers - Includes CVE-2023-32233 fixes for more devices - Upstream has reverted the LVT patches, maybe consider handling them Signed-off-by: Tad <tad@spotco.us>
2023-05-22 19:53:08 -04:00
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31084/^6.4/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-32233/4.19/0002.patch
editKernelLocalversion "-dos.p82"
Update CVE patchers Signed-off-by: Tad <tad@spotco.us>
2023-03-08 16:01:37 -05:00
else echo "kernel_fairphone_sm7225 is unavailable, not patching.";
fi;
20.0: Initial roster Signed-off-by: Tad <tad@spotco.us>
2022-10-15 14:13:07 -04:00
cd "$DOS_BUILD_BASE"
Reference in New Issue Copy Permalink