| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
| |
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2016-10229
Rference to upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?h=v3.12.74&id=c3bfbecb1bb575278ce4812746a29c04875a2926
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
tty: n_hdlc: get rid of racy n_hdlc.tbuf
Reference:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2636
Reference to upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/patch/?id=63075fbddd5151d2e98fa7cf0608a2113e23607d
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
|
|
|
|
|
|
|
|
| |
We need this patch to be able to cherry-pick the patch for
CVE-2017-2636 from later version.
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fixes double fetch in ioctl_send_fib().
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6480
Upstream bug:
https://bugzilla.kernel.org/show_bug.cgi?id=116751
Upstream fix:
https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/patch/?id=bcc85e09fc60d2e99053eae3fd0515c343189375
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fixes privilege escalation via MAP_PRIVATE COW breakage.
References:
===========
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-5195
http://www.securityfocus.com/bid/93793
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Crash on invalid USB device descriptors (mct_u232 driver)
Reference:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3136
Reference to upstream fix:
https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/patch/?id=f9dbb3666b3ddb5f9a7e44a433383cb6880a03f5
Signen-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
tcp: make challenge acks less predictable
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not
properly determine the rate of challenge ACK segments, which
makes it easier for man-in-the-middle attackers to hijack TCP
sessions via a blind in-window attack.
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5696
https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/
patch/?id=860c53258e634c54f70252c352bae7bac30724a9
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Martin Borg <martin.borg@enea.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fixes an out-of-bounds flaw in the kernel where the length of the
sockaddr parameter was not checked in the pptp_bind() and pptp_connect()
functions. A local system user could exploit this flaw to bypass
kernel ASLR or leak other information.
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8569
Upstream patch:
https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/patch/?id=d470ffbe3fe914d176ced4cf330a297c523c5711
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Nora Björklund <nora.bjorklund@enea.com>
|
|
|
|
| |
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
|
|
|
|
|
|
|
|
| |
Provide gzip-compressed kernel configuration file at run-time which
stores the kernel config file used to build the kernel.
Signed-off-by: Stefan Sicleru <stefan.sicleru@enea.com>
Signed-off-by: Martin Borg <martin.borg@enea.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Watchdog failed to assert reset signal so the board hanged everytime
a reboot command was issued. The watchdog (same controller used for
i.MX platforms) has an errata mentioning a software workaround for
a hardware issue that has no scheduled fix.
Implemented the workaround described in the errata. The workaround is
already present in upstream repositories.
Signed-off-by: Stefan Sicleru <stefan.sicleru@enea.com>
Signed-off-by: Martin Borg <martin.borg@enea.com>
|
|
|
|
|
|
|
|
| |
The staging kernel concept is not actual anymore, so these files are
useless.
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
Signed-off-by: Martin Borg <martin.borg@enea.com>
|
|
|
|
|
|
|
|
|
| |
Aplpy the same kernel configs as for the qoriq kernel. meta-fsl-arm has
a class overwriting the .config file in do_configure_prepend which makes
it impossible to make changes to it in a .bbappend. So we are forced to
change it in do_configure_append and force another configuration.
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
|
|
|
|
|
|
|
| |
We're not supporting it anymore so no need to be here.
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
Signed-off-by: Martin Borg <martin.borg@enea.com>
|
|
|
|
|
|
|
| |
Backport from mainline. Only kernels <4.2 are affected by this.
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
Signed-off-by: Martin Borg <martin.borg@enea.com>
|
|
|
|
|
|
|
| |
And enabled tar.gz rootfs type.
Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
Signed-off-by: Catalina Focsa <catalina.focsa@enea.com>
|
|
|
|
|
| |
Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
Signed-off-by: Catalina Focsa <catalina.focsa@enea.com>
|
|
|
|
|
|
|
| |
This is replacing the ls1021atwr machine support.
Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
Signed-off-by: Catalina Focsa <catalina.focsa@enea.com>
|
|
|
|
|
|
| |
Device tree for ls1021a TWR revision number: 700-28040 rev X3
Signed-off-by: Adrian Calianu <adrian.calianu@enea.com>
|
|
|
|
|
| |
Signed-off-by: Tudor Florea <tudor.florea@enea.com>
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
|
|
|
|
|
| |
Signed-off-by: Tudor Florea <tudor.florea@enea.com>
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
|
|
|
|
|
| |
Signed-off-by: Tudor Florea <tudor.florea@enea.com>
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
|
|
result of splitting up meta-enea
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
|