From 90d7413c048522609e8c0b116d3dfc647a99579a Mon Sep 17 00:00:00 2001 From: Tad Date: Tue, 5 Dec 2017 19:42:36 -0500 Subject: [PATCH] Update CVE patchers --- Patches/Linux | 2 +- .../CVE_Patchers/android_kernel_amazon_hdx-common.sh | 1 + .../CVE_Patchers/android_kernel_asus_msm8916.sh | 3 +++ .../CVE_Patchers/android_kernel_google_marlin.sh | 2 ++ .../LineageOS-14.1/CVE_Patchers/android_kernel_google_msm.sh | 1 + .../CVE_Patchers/android_kernel_htc_flounder.sh | 2 ++ .../CVE_Patchers/android_kernel_htc_msm8994.sh | 5 +++++ .../CVE_Patchers/android_kernel_huawei_angler.sh | 2 ++ .../CVE_Patchers/android_kernel_lge_bullhead.sh | 2 ++ .../CVE_Patchers/android_kernel_lge_hammerhead.sh | 2 ++ .../LineageOS-14.1/CVE_Patchers/android_kernel_moto_shamu.sh | 3 +++ .../CVE_Patchers/android_kernel_motorola_msm8916.sh | 3 +++ .../CVE_Patchers/android_kernel_motorola_msm8992.sh | 3 +++ .../CVE_Patchers/android_kernel_nextbit_msm8992.sh | 3 +++ .../LineageOS-14.1/CVE_Patchers/android_kernel_samsung_jf.sh | 1 + .../CVE_Patchers/android_kernel_samsung_msm8974.sh | 1 + .../CVE_Patchers/android_kernel_samsung_universal8890.sh | 2 ++ 17 files changed, 37 insertions(+), 1 deletion(-) diff --git a/Patches/Linux b/Patches/Linux index b1f6f76f..693a4f41 160000 --- a/Patches/Linux +++ b/Patches/Linux @@ -1 +1 @@ -Subproject commit b1f6f76f69efdaeebf5294940adbe6f76cbf9e7f +Subproject commit 693a4f41a0a6e4d1536ec6c2d6476b762065ed54 diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_amazon_hdx-common.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_amazon_hdx-common.sh index 17e6c9da..a70c90b0 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_amazon_hdx-common.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_amazon_hdx-common.sh @@ -70,6 +70,7 @@ git apply $cvePatches/CVE-2017-7487/ANY/0001.patch git apply $cvePatches/CVE-2017-8246/3.4/0002.patch git apply $cvePatches/CVE-2017-8247/ANY/0001.patch git apply $cvePatches/CVE-2017-8254/3.4/0001.patch +git apply $cvePatches/CVE-2017-8254/3.4/0002.patch git apply $cvePatches/CVE-2017-8890/3.4/0001.patch git apply $cvePatches/CVE-2017-9242/^4.11/0001.patch git apply $cvePatches/CVE-2017-9684/ANY/0001.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_asus_msm8916.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_asus_msm8916.sh index aa530c9f..813a9798 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_asus_msm8916.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_asus_msm8916.sh @@ -1,5 +1,6 @@ #!/bin/bash cd $base"kernel/asus/msm8916" +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0001-No_dir-relax.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0002.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0003.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch @@ -7,8 +8,10 @@ git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0009.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0012.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_google_marlin.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_google_marlin.sh index ac01682e..597fdc1b 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_google_marlin.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_google_marlin.sh @@ -12,6 +12,7 @@ git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0026.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0027.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0030.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0031.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0032.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0033.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0034.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0035.patch @@ -156,6 +157,7 @@ git apply $cvePatches/CVE-2017-9720/3.18/0002.patch git apply $cvePatches/CVE-2017-9722/3.18/0001.patch git apply $cvePatches/Untracked/ANY/0002-ozwpan-Use-unsigned-ints-to-prevent-heap-overflow.patch git apply $cvePatches/Untracked/ANY/0003-tunnels-Don-t-apply-GRO-to-multiple-layers-of-encaps.patch +git apply $cvePatches/Untracked/ANY/0004-net-add-recursion-limit-to-GRO.patch git apply $cvePatches/Untracked/ANY/0005-tcp-fix-zero-cwnd-in-tcp_cwnd_reduction.patch git apply $cvePatches/Untracked/ANY/0007-USB-usbip-fix-potential-out-of-bounds-write.patch git apply $cvePatches/Untracked/ANY/0008-nfsd-check-for-oversized-NFSv2-v3-arguments.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_google_msm.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_google_msm.sh index c029b7c2..748a0626 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_google_msm.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_google_msm.sh @@ -30,5 +30,6 @@ git apply $cvePatches/CVE-2017-16USB/ANY/0005.patch git apply $cvePatches/CVE-2017-16USB/ANY/0006.patch git apply $cvePatches/CVE-2017-8246/3.4/0002.patch git apply $cvePatches/CVE-2017-8254/3.4/0001.patch +git apply $cvePatches/CVE-2017-8254/3.4/0002.patch git apply $cvePatches/Untracked/ANY/0008-nfsd-check-for-oversized-NFSv2-v3-arguments.patch cd $base diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_htc_flounder.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_htc_flounder.sh index 34d46e11..83177812 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_htc_flounder.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_htc_flounder.sh @@ -6,8 +6,10 @@ git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0009.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0012.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch git apply $cvePatches/CVE-2014-9892/ANY/0001.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_htc_msm8994.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_htc_msm8994.sh index b07b2272..5936c596 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_htc_msm8994.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_htc_msm8994.sh @@ -1,5 +1,6 @@ #!/bin/bash cd $base"kernel/htc/msm8994" +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0001-No_dir-relax.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0002.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0003.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch @@ -7,13 +8,16 @@ git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0009.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0012.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0016.patch git apply $cvePatches/CVE-2013-7446/^4.3/0002.patch +git apply $cvePatches/CVE-2013-7446/^4.3/0003.patch git apply $cvePatches/CVE-2014-9781/ANY/0001.patch git apply $cvePatches/CVE-2014-9903/ANY/0001.patch git apply $cvePatches/CVE-2014-9904/ANY/0001.patch @@ -96,6 +100,7 @@ git apply $cvePatches/CVE-2017-0620/ANY/0001.patch git apply $cvePatches/CVE-2017-0621/ANY/0001.patch git apply $cvePatches/CVE-2017-0627/ANY/0001.patch git apply $cvePatches/CVE-2017-0630/3.10/0001.patch +git apply $cvePatches/CVE-2017-0630/3.10/0002.patch git apply $cvePatches/CVE-2017-0631/ANY/0001.patch git apply $cvePatches/CVE-2017-0648/ANY/0001.patch git apply $cvePatches/CVE-2017-0710/ANY/0001.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_huawei_angler.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_huawei_angler.sh index 6723e3ab..e6b740ad 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_huawei_angler.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_huawei_angler.sh @@ -9,8 +9,10 @@ git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0009.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0012.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_lge_bullhead.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_lge_bullhead.sh index 8b4cc2ce..d47c6600 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_lge_bullhead.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_lge_bullhead.sh @@ -9,8 +9,10 @@ git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0009.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0012.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_lge_hammerhead.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_lge_hammerhead.sh index add02212..587786ff 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_lge_hammerhead.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_lge_hammerhead.sh @@ -2,6 +2,7 @@ cd $base"kernel/lge/hammerhead" git apply $cvePatches/CVE-2014-9881/ANY/0001.patch git apply $cvePatches/CVE-2014-9882/ANY/0001.patch +git apply $cvePatches/CVE-2014-9882/ANY/0002.patch git apply $cvePatches/CVE-2015-1593/ANY/0001.patch git apply $cvePatches/CVE-2016-3894/ANY/0001.patch git apply $cvePatches/CVE-2016-8650/ANY/0001.patch @@ -31,6 +32,7 @@ git apply $cvePatches/CVE-2017-6951/^3.14/0001.patch git apply $cvePatches/CVE-2017-8246/3.4/0002.patch git apply $cvePatches/CVE-2017-8247/ANY/0001.patch git apply $cvePatches/CVE-2017-8254/3.4/0001.patch +git apply $cvePatches/CVE-2017-8254/3.4/0002.patch git apply $cvePatches/CVE-2017-9242/^4.11/0001.patch git apply $cvePatches/CVE-2017-9684/ANY/0001.patch git apply $cvePatches/Untracked/ANY/0008-nfsd-check-for-oversized-NFSv2-v3-arguments.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_moto_shamu.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_moto_shamu.sh index d1dd2dd1..b2d5274b 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_moto_shamu.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_moto_shamu.sh @@ -1,12 +1,15 @@ #!/bin/bash cd $base"kernel/moto/shamu" +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0001-No_dir-relax.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0009.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0012.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_motorola_msm8916.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_motorola_msm8916.sh index acf20ab0..da512579 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_motorola_msm8916.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_motorola_msm8916.sh @@ -1,13 +1,16 @@ #!/bin/bash cd $base"kernel/motorola/msm8916" +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0001-No_dir-relax.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0002.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0009.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0012.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_motorola_msm8992.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_motorola_msm8992.sh index 11e4e1d6..f71b4b1e 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_motorola_msm8992.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_motorola_msm8992.sh @@ -1,5 +1,6 @@ #!/bin/bash cd $base"kernel/motorola/msm8992" +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0001-No_dir-relax.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0002.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0003.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch @@ -7,8 +8,10 @@ git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0009.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0012.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_nextbit_msm8992.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_nextbit_msm8992.sh index ff9f3586..ac56a36f 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_nextbit_msm8992.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_nextbit_msm8992.sh @@ -1,5 +1,6 @@ #!/bin/bash cd $base"kernel/nextbit/msm8992" +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0001-No_dir-relax.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0002.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0003.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0004.patch @@ -7,8 +8,10 @@ git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0005.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0006.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0007.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0008.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0009.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0010.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0011.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0012.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0013.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0014.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.10/0015.patch diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_jf.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_jf.sh index 7416a21e..e5efa79b 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_jf.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_jf.sh @@ -42,5 +42,6 @@ git apply $cvePatches/CVE-2017-16USB/ANY/0006.patch git apply $cvePatches/CVE-2017-5970/^4.9/0001.patch git apply $cvePatches/CVE-2017-7487/ANY/0001.patch git apply $cvePatches/CVE-2017-8254/3.4/0001.patch +git apply $cvePatches/CVE-2017-8254/3.4/0002.patch git apply $cvePatches/Untracked/ANY/0008-nfsd-check-for-oversized-NFSv2-v3-arguments.patch cd $base diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_msm8974.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_msm8974.sh index 6f1f01c9..efe9345b 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_msm8974.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_msm8974.sh @@ -16,5 +16,6 @@ git apply $cvePatches/CVE-2017-16USB/ANY/0005.patch git apply $cvePatches/CVE-2017-16USB/ANY/0006.patch git apply $cvePatches/CVE-2017-8246/3.4/0002.patch git apply $cvePatches/CVE-2017-8254/3.4/0001.patch +git apply $cvePatches/CVE-2017-8254/3.4/0002.patch git apply $cvePatches/Untracked/ANY/0008-nfsd-check-for-oversized-NFSv2-v3-arguments.patch cd $base diff --git a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_universal8890.sh b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_universal8890.sh index 146e0734..c890c3dc 100644 --- a/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_universal8890.sh +++ b/Scripts/LineageOS-14.1/CVE_Patchers/android_kernel_samsung_universal8890.sh @@ -10,6 +10,7 @@ git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0026.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0027.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0030.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0031.patch +git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0032.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0033.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0034.patch git apply $cvePatches/0002-Copperhead-Kernel_Hardening/3.18/0035.patch @@ -119,6 +120,7 @@ git apply $cvePatches/CVE-2017-7616/^4.10/0001.patch git apply $cvePatches/CVE-2017-7618/^4.10/0002.patch git apply $cvePatches/Untracked/ANY/0002-ozwpan-Use-unsigned-ints-to-prevent-heap-overflow.patch git apply $cvePatches/Untracked/ANY/0003-tunnels-Don-t-apply-GRO-to-multiple-layers-of-encaps.patch +git apply $cvePatches/Untracked/ANY/0004-net-add-recursion-limit-to-GRO.patch git apply $cvePatches/Untracked/ANY/0005-tcp-fix-zero-cwnd-in-tcp_cwnd_reduction.patch git apply $cvePatches/Untracked/ANY/0007-USB-usbip-fix-potential-out-of-bounds-write.patch git apply $cvePatches/Untracked/ANY/0008-nfsd-check-for-oversized-NFSv2-v3-arguments.patch