Commit Graph

35 Commits

Author SHA1 Message Date
Arne Fitzenreiter
f04023b1ca kernel: add patch against CVE-2020-14386
fixes #12483

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-09-11 21:27:15 +02:00
Arne Fitzenreiter
b923dd3de0 kernel: backport "random: try to actively add entropy"
this backports https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/drivers/char/random.c?id=50ee7529ec4500c88f8664560770a7a1b65db72b
to gather enough entropy for initialise the crng faster.
Of some machines like the APU it will need forever if
the machine only wait for entropy without doing anything else.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-06-03 08:03:01 +00:00
Arne Fitzenreiter
70af65df41 kernel: update to 4.14.173
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-03-11 22:59:38 +01:00
Arne Fitzenreiter
ff58943d8e kernel: cleanup unused kirkwood patches
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-15 17:06:24 +00:00
Michael Tremer
951a9f9ba0 linux+iptables: Drop support for IMQ
This is no longer needed since we are using IFB now

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-10-21 18:58:08 +00:00
Arne Fitzenreiter
c27fdd8697 Revert "linux+iptables: Drop support for IMQ"
This reverts commit 59b9a6bd22.
2019-10-20 20:20:26 +00:00
Michael Tremer
59b9a6bd22 linux+iptables: Drop support for IMQ
This is no longer needed since we are using IFB now

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-10-14 18:02:55 +00:00
Stefan Schantl
415969cc1b kernel: Backport patch to fix a netfilter contrack related issue.
This fixes the packet drop issue when using suricata on IPFire.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-09-21 09:53:56 +00:00
Michael Tremer
3966b1e58f iptables: Fix build without kernel source
The layer7 filter header files were not installed into /usr/include
and therefore we needed to keep the whole kernel source tree.

This is just a waste of space and this patch fixes this.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-05-10 04:55:49 +01:00
Arne Fitzenreiter
3005eb2234 kernel: update user regd patch from openwrt
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-03-30 16:56:56 +01:00
Arne Fitzenreiter
c448474fc7 Revert "kernel: cleanup unused rpi patch"
This reverts commit a2d49659f3.

The patch is still needed to prevent strange crashes

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-03-13 09:39:07 +01:00
Arne Fitzenreiter
c09758302b kernel: update to 4.14.103
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-23 15:56:21 +01:00
Arne Fitzenreiter
173844d352 kernel: import cve-2019-8912 patch
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-22 21:20:57 +01:00
Arne Fitzenreiter
6957b699b3 kernel: apu leds: add more id's
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-22 18:02:45 +01:00
Arne Fitzenreiter
a2d49659f3 kernel: cleanup unused rpi patch
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-21 19:13:27 +01:00
Arne Fitzenreiter
17872019ba kernel: update apu led patch for apu3 and 4
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-02-19 01:04:19 +01:00
Arne Fitzenreiter
ed4bbe44d1 kernel: fix dwc2 (usb) dma crashes on RPi1-3
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-12-10 20:45:54 +01:00
Arne Fitzenreiter
7529349754 kernel: apu2 leds: update string for newer bios
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-08-05 17:19:52 +02:00
Arne Fitzenreiter
39a73adadf kernel: kirkwood: fix iConnect leds and modell name
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-05-13 07:59:01 +00:00
Arne Fitzenreiter
2e1fe3c816 kernel: update to 4.14.1
only x86_config has updated yet and grsecurity is removed.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-11-22 12:29:36 +01:00
Arne Fitzenreiter
d23a284f02 Revert "kernel: revert an upstream patch that break 8TB Blockdevices on 32bit"
This reverts commit c64e080f3a.
2017-11-02 19:20:41 +01:00
Arne Fitzenreiter
c64e080f3a kernel: revert an upstream patch that break 8TB Blockdevices on 32bit
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-11-01 13:38:18 +01:00
Arne Fitzenreiter
b389d73110 Merge branch 'master' into kernel-4.9
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-07-09 12:47:16 +02:00
Arne Fitzenreiter
0b4976e293 kernel: fix amba modules build with gcc6
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-06-20 06:12:45 +02:00
Arne Fitzenreiter
ad73e5ec63 kernel: rpi build fix
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-06-18 10:29:45 +02:00
Arne Fitzenreiter
fcffac1340 kernel: fix e1000e hung at stats update.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-03-27 06:10:18 +02:00
Arne Fitzenreiter
d52f116913 kernel: fix igb crash if update_stats was often used.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-03-25 10:43:55 +01:00
Arne Fitzenreiter
94112e8b69 kernel: update to 4.9.16
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-03-18 22:01:54 +01:00
Arne Fitzenreiter
a4f83ed886 kernel: update layer7 patchset
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-03-14 14:49:06 +01:00
Arne Fitzenreiter
9b677b44c0 kernel: update layer7 patchset
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-03-12 14:44:03 +01:00
Arne Fitzenreiter
ddc7b38cc0 kernel: fix and enable layer7 filter
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-03-06 13:36:53 +01:00
Arne Fitzenreiter
91648bd166 kernel: updated to 4.9.8
at the moment its only for x86_64 and layer7 is disabled because it crashs.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2017-02-12 19:58:43 +01:00
Arne Fitzenreiter
4bdbf22ee4 kernel: fix CVE-2016-5159 (Dirty COW)
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-10-22 20:20:22 +02:00
Arne Fitzenreiter
ed7a7f77db kernel: add support aes-ni support for aes-192 and 256
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-10-22 16:52:40 +02:00
Michael Tremer
a7b0967db4 linux: Backport Hyper-V network driver
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-12-22 14:47:43 +00:00