From e39d1cf34f97667b8fc1cdb60beec7a12e70839d Mon Sep 17 00:00:00 2001 From: Koen Vandeputte Date: Tue, 24 Sep 2019 11:05:57 +0200 Subject: kernel: bump 4.19 to 4.19.75 Refreshed all patches. Fixes: - CVE-2019-14814 - CVE-2019-14815 - CVE-2019-14816 - CVE-2019-14821 Compile-tested on: cns3xxx Runtime-tested on: cns3xxx Signed-off-by: Koen Vandeputte --- target/linux/ath79/patches-4.19/910-unaligned_access_hacks.patch | 4 ++-- .../343-netfilter-nft_flow_offload-handle-netdevice-events-f.patch | 2 +- .../370-netfilter-nf_flow_table-fix-offloaded-connection-tim.patch | 2 +- target/linux/generic/hack-4.19/661-use_fq_codel_by_default.patch | 2 +- 4 files changed, 5 insertions(+), 5 deletions(-) (limited to 'target') diff --git a/target/linux/ath79/patches-4.19/910-unaligned_access_hacks.patch b/target/linux/ath79/patches-4.19/910-unaligned_access_hacks.patch index bb7f847e1b..43c4932f1f 100644 --- a/target/linux/ath79/patches-4.19/910-unaligned_access_hacks.patch +++ b/target/linux/ath79/patches-4.19/910-unaligned_access_hacks.patch @@ -241,7 +241,7 @@ */ --- a/net/ipv6/datagram.c +++ b/net/ipv6/datagram.c -@@ -478,7 +478,7 @@ int ipv6_recv_error(struct sock *sk, str +@@ -480,7 +480,7 @@ int ipv6_recv_error(struct sock *sk, str ipv6_iface_scope_id(&sin->sin6_addr, IP6CB(skb)->iif); } else { @@ -250,7 +250,7 @@ &sin->sin6_addr); sin->sin6_scope_id = 0; } -@@ -828,12 +828,12 @@ int ip6_datagram_send_ctl(struct net *ne +@@ -830,12 +830,12 @@ int ip6_datagram_send_ctl(struct net *ne } if (fl6->flowlabel&IPV6_FLOWINFO_MASK) { diff --git a/target/linux/generic/backport-4.19/343-netfilter-nft_flow_offload-handle-netdevice-events-f.patch b/target/linux/generic/backport-4.19/343-netfilter-nft_flow_offload-handle-netdevice-events-f.patch index fc668dca10..3a9e21f580 100644 --- a/target/linux/generic/backport-4.19/343-netfilter-nft_flow_offload-handle-netdevice-events-f.patch +++ b/target/linux/generic/backport-4.19/343-netfilter-nft_flow_offload-handle-netdevice-events-f.patch @@ -48,7 +48,7 @@ Signed-off-by: Pablo Neira Ayuso MODULE_AUTHOR("Pablo Neira Ayuso "); --- a/net/netfilter/nft_flow_offload.c +++ b/net/netfilter/nft_flow_offload.c -@@ -211,47 +211,14 @@ static struct nft_expr_type nft_flow_off +@@ -217,47 +217,14 @@ static struct nft_expr_type nft_flow_off .owner = THIS_MODULE, }; diff --git a/target/linux/generic/backport-4.19/370-netfilter-nf_flow_table-fix-offloaded-connection-tim.patch b/target/linux/generic/backport-4.19/370-netfilter-nf_flow_table-fix-offloaded-connection-tim.patch index 07ef724094..64eda53295 100644 --- a/target/linux/generic/backport-4.19/370-netfilter-nf_flow_table-fix-offloaded-connection-tim.patch +++ b/target/linux/generic/backport-4.19/370-netfilter-nf_flow_table-fix-offloaded-connection-tim.patch @@ -84,7 +84,7 @@ Signed-off-by: Felix Fietkau } + nf_ct_offload_timeout(flow); - flow->timeout = (u32)jiffies; + flow->timeout = (u32)jiffies + NF_FLOW_TIMEOUT; return 0; } @@ -316,6 +335,8 @@ static int nf_flow_offload_gc_step(struc diff --git a/target/linux/generic/hack-4.19/661-use_fq_codel_by_default.patch b/target/linux/generic/hack-4.19/661-use_fq_codel_by_default.patch index fc0761c3c0..d147c0d743 100644 --- a/target/linux/generic/hack-4.19/661-use_fq_codel_by_default.patch +++ b/target/linux/generic/hack-4.19/661-use_fq_codel_by_default.patch @@ -83,7 +83,7 @@ Signed-off-by: Felix Fietkau EXPORT_SYMBOL(default_qdisc_ops); /* Main transmission queue. */ -@@ -1009,7 +1009,7 @@ static void attach_one_default_qdisc(str +@@ -1013,7 +1013,7 @@ static void attach_one_default_qdisc(str void *_unused) { struct Qdisc *qdisc; -- cgit v1.2.3