diff options
| author | Stijn Tintel <stijn@linux-ipv6.be> | 2017-08-17 10:51:05 +0200 |
|---|---|---|
| committer | Stijn Tintel <stijn@linux-ipv6.be> | 2017-08-17 12:34:34 +0200 |
| commit | 2d02a4f5bda4a5ff392286360ec7d1129bd77d25 (patch) | |
| tree | c243a9231fd508b585c2711e8b691e8ca06d2988 /target/linux/generic/pending-4.9/600-netfilter_conntrack_flush.patch | |
| parent | d9564d79b8e91eed23c45afd2eb4a71a97c922eb (diff) | |
| download | upstream-2d02a4f5bda4a5ff392286360ec7d1129bd77d25.tar.gz upstream-2d02a4f5bda4a5ff392286360ec7d1129bd77d25.tar.bz2 upstream-2d02a4f5bda4a5ff392286360ec7d1129bd77d25.zip | |
kernel: update 4.9 to 4.9.44
Refresh patches.
Adapt 704-phy-no-genphy-soft-reset.patch.
Remove brcm2708/950-0005-mm-Remove-the-PFN-busy-warning.patch.
Compile-tested on brcm2708/bcm2708 and x86/64.
Runtime-tested on brcm2708/bcm2708 and x86/64.
Fixes the following vulnerabilities:
- CVE-2017-7533
- CVE-2017-1000111
- CVE-2017-1000112
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Diffstat (limited to 'target/linux/generic/pending-4.9/600-netfilter_conntrack_flush.patch')
| -rw-r--r-- | target/linux/generic/pending-4.9/600-netfilter_conntrack_flush.patch | 9 |
1 files changed, 2 insertions, 7 deletions
diff --git a/target/linux/generic/pending-4.9/600-netfilter_conntrack_flush.patch b/target/linux/generic/pending-4.9/600-netfilter_conntrack_flush.patch index 606ef8baad..81dac2ab23 100644 --- a/target/linux/generic/pending-4.9/600-netfilter_conntrack_flush.patch +++ b/target/linux/generic/pending-4.9/600-netfilter_conntrack_flush.patch @@ -7,8 +7,6 @@ Signed-off-by: Felix Fietkau <nbd@nbd.name> net/netfilter/nf_conntrack_standalone.c | 59 ++++++++++++++++++++++++++++++++- 1 file changed, 58 insertions(+), 1 deletion(-) -diff --git a/net/netfilter/nf_conntrack_standalone.c b/net/netfilter/nf_conntrack_standalone.c -index 5f446cd9f3fd..4c1856b5151f 100644 --- a/net/netfilter/nf_conntrack_standalone.c +++ b/net/netfilter/nf_conntrack_standalone.c @@ -17,6 +17,7 @@ @@ -19,7 +17,7 @@ index 5f446cd9f3fd..4c1856b5151f 100644 #include <net/net_namespace.h> #ifdef CONFIG_SYSCTL #include <linux/sysctl.h> -@@ -298,10 +299,66 @@ static int ct_open(struct inode *inode, struct file *file) +@@ -298,10 +299,66 @@ static int ct_open(struct inode *inode, sizeof(struct ct_iter_state)); } @@ -86,7 +84,7 @@ index 5f446cd9f3fd..4c1856b5151f 100644 .llseek = seq_lseek, .release = seq_release_net, }; -@@ -405,7 +462,7 @@ static int nf_conntrack_standalone_init_proc(struct net *net) +@@ -405,7 +462,7 @@ static int nf_conntrack_standalone_init_ kuid_t root_uid; kgid_t root_gid; @@ -95,6 +93,3 @@ index 5f446cd9f3fd..4c1856b5151f 100644 if (!pde) goto out_nf_conntrack; --- -2.11.0 - |