Arne Fitzenreiter
f04023b1ca
kernel: add patch against CVE-2020-14386
...
fixes #12483
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2020-09-11 21:27:15 +02:00
Arne Fitzenreiter
b923dd3de0
kernel: backport "random: try to actively add entropy"
...
this backports https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/drivers/char/random.c?id=50ee7529ec4500c88f8664560770a7a1b65db72b
to gather enough entropy for initialise the crng faster.
Of some machines like the APU it will need forever if
the machine only wait for entropy without doing anything else.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2020-06-03 08:03:01 +00:00
Arne Fitzenreiter
70af65df41
kernel: update to 4.14.173
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2020-03-11 22:59:38 +01:00
Arne Fitzenreiter
ff58943d8e
kernel: cleanup unused kirkwood patches
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2020-02-15 17:06:24 +00:00
Michael Tremer
951a9f9ba0
linux+iptables: Drop support for IMQ
...
This is no longer needed since we are using IFB now
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-21 18:58:08 +00:00
Arne Fitzenreiter
c27fdd8697
Revert "linux+iptables: Drop support for IMQ"
...
This reverts commit 59b9a6bd22 .
2019-10-20 20:20:26 +00:00
Michael Tremer
59b9a6bd22
linux+iptables: Drop support for IMQ
...
This is no longer needed since we are using IFB now
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-10-14 18:02:55 +00:00
Stefan Schantl
415969cc1b
kernel: Backport patch to fix a netfilter contrack related issue.
...
This fixes the packet drop issue when using suricata on IPFire.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-09-21 09:53:56 +00:00
Michael Tremer
3966b1e58f
iptables: Fix build without kernel source
...
The layer7 filter header files were not installed into /usr/include
and therefore we needed to keep the whole kernel source tree.
This is just a waste of space and this patch fixes this.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-05-10 04:55:49 +01:00
Arne Fitzenreiter
3005eb2234
kernel: update user regd patch from openwrt
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-03-30 16:56:56 +01:00
Arne Fitzenreiter
c448474fc7
Revert "kernel: cleanup unused rpi patch"
...
This reverts commit a2d49659f3 .
The patch is still needed to prevent strange crashes
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-03-13 09:39:07 +01:00
Arne Fitzenreiter
c09758302b
kernel: update to 4.14.103
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-23 15:56:21 +01:00
Arne Fitzenreiter
173844d352
kernel: import cve-2019-8912 patch
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-22 21:20:57 +01:00
Arne Fitzenreiter
6957b699b3
kernel: apu leds: add more id's
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-22 18:02:45 +01:00
Arne Fitzenreiter
a2d49659f3
kernel: cleanup unused rpi patch
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-21 19:13:27 +01:00
Arne Fitzenreiter
17872019ba
kernel: update apu led patch for apu3 and 4
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-19 01:04:19 +01:00
Arne Fitzenreiter
ed4bbe44d1
kernel: fix dwc2 (usb) dma crashes on RPi1-3
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-12-10 20:45:54 +01:00
Arne Fitzenreiter
7529349754
kernel: apu2 leds: update string for newer bios
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-08-05 17:19:52 +02:00
Arne Fitzenreiter
39a73adadf
kernel: kirkwood: fix iConnect leds and modell name
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2018-05-13 07:59:01 +00:00
Arne Fitzenreiter
2e1fe3c816
kernel: update to 4.14.1
...
only x86_config has updated yet and grsecurity is removed.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2017-11-22 12:29:36 +01:00
Arne Fitzenreiter
d23a284f02
Revert "kernel: revert an upstream patch that break 8TB Blockdevices on 32bit"
...
This reverts commit c64e080f3a .
2017-11-02 19:20:41 +01:00
Arne Fitzenreiter
c64e080f3a
kernel: revert an upstream patch that break 8TB Blockdevices on 32bit
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2017-11-01 13:38:18 +01:00
Arne Fitzenreiter
b389d73110
Merge branch 'master' into kernel-4.9
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2017-07-09 12:47:16 +02:00
Arne Fitzenreiter
0b4976e293
kernel: fix amba modules build with gcc6
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2017-06-20 06:12:45 +02:00
Arne Fitzenreiter
ad73e5ec63
kernel: rpi build fix
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2017-06-18 10:29:45 +02:00
Arne Fitzenreiter
fcffac1340
kernel: fix e1000e hung at stats update.
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2017-03-27 06:10:18 +02:00
Arne Fitzenreiter
d52f116913
kernel: fix igb crash if update_stats was often used.
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2017-03-25 10:43:55 +01:00
Arne Fitzenreiter
94112e8b69
kernel: update to 4.9.16
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2017-03-18 22:01:54 +01:00
Arne Fitzenreiter
a4f83ed886
kernel: update layer7 patchset
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2017-03-14 14:49:06 +01:00
Arne Fitzenreiter
9b677b44c0
kernel: update layer7 patchset
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2017-03-12 14:44:03 +01:00
Arne Fitzenreiter
ddc7b38cc0
kernel: fix and enable layer7 filter
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2017-03-06 13:36:53 +01:00
Arne Fitzenreiter
91648bd166
kernel: updated to 4.9.8
...
at the moment its only for x86_64 and layer7 is disabled because it crashs.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2017-02-12 19:58:43 +01:00
Arne Fitzenreiter
4bdbf22ee4
kernel: fix CVE-2016-5159 (Dirty COW)
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-10-22 20:20:22 +02:00
Arne Fitzenreiter
ed7a7f77db
kernel: add support aes-ni support for aes-192 and 256
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-10-22 16:52:40 +02:00
Michael Tremer
a7b0967db4
linux: Backport Hyper-V network driver
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2015-12-22 14:47:43 +00:00