| Message ID | 20230724210624.1802155-1-bernd@kuhls.net |
|---|---|
| State | Accepted |
| Headers | show |
| Series | [1/1] {linux, linux-headers}: security bump 4.19.x / 5.{4, 10, 15}.x / 6.{1, 4}.x series | expand |
Bernd, All, On 2023-07-24 23:06 +0200, Bernd Kuhls spake thusly: > Fixes Zenbleed (CVE-2023-20593): https://lwn.net/Articles/939101/ > > Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Applied to master, thanks. Regards, Yann E. MORIN. > --- > linux/Config.in | 2 +- > linux/linux.hash | 12 ++++++------ > package/linux-headers/Config.in.host | 12 ++++++------ > 3 files changed, 13 insertions(+), 13 deletions(-) > > diff --git a/linux/Config.in b/linux/Config.in > index 87d1a81915..c8b0d4c5a4 100644 > --- a/linux/Config.in > +++ b/linux/Config.in > @@ -128,7 +128,7 @@ endif > > config BR2_LINUX_KERNEL_VERSION > string > - default "6.4.5" if BR2_LINUX_KERNEL_LATEST_VERSION > + default "6.4.6" if BR2_LINUX_KERNEL_LATEST_VERSION > default "5.10.162-cip24" if BR2_LINUX_KERNEL_LATEST_CIP_VERSION > default "5.10.162-cip24-rt10" if BR2_LINUX_KERNEL_LATEST_CIP_RT_VERSION > default BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE \ > diff --git a/linux/linux.hash b/linux/linux.hash > index c80fcf5eff..a1773ca64b 100644 > --- a/linux/linux.hash > +++ b/linux/linux.hash > @@ -1,12 +1,12 @@ > # From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc > -sha256 374e2c07463c51dfd71204b7fac3b73c7f973550ae019b74e9f2b815b28de9b7 linux-6.4.5.tar.xz > -sha256 43eafc2197a07dcdcff7a7ef79ac7502061f7c564744e51626bf5fa2e22587f0 linux-6.1.40.tar.xz > +sha256 e1ecc496efc48aaf25a6607a4b8e52d574d6f67a2b0aa1664087d301d3515ea4 linux-6.4.6.tar.xz > +sha256 312809a78eea052a08a6580f47b2ed8dd28e5633461d6731febaf3cb1e570bb7 linux-6.1.41.tar.xz > # From https://www.kernel.org/pub/linux/kernel/v5.x/sha256sums.asc > -sha256 07e0cebdb00d25459683e9c330a0576349b8c5e5f2abf053b864f9909151c31d linux-5.15.121.tar.xz > -sha256 1e60296a135d272bb7ce645f6ae68fbd4ffd1972cb4b82c38c6faa1172481be3 linux-5.10.186.tar.xz > -sha256 dc5458462c6edbe3473fc6dee80fbe0841df7c177fe0546c2f131e5918f5351d linux-5.4.249.tar.xz > +sha256 38755801cd1ce229a8c0a0536d29aa37acea8a8aa13fa438e19fbf9d6293342d linux-5.15.122.tar.xz > +sha256 f69454210b3e9e00e8b8368aaa897d4ca59f8be3b85399a2fcaecbf17af98bbb linux-5.10.187.tar.xz > +sha256 0f5b8876526062bf5e346f6b9dde88be873761ee33cf3b8a1586d7d109a091fb linux-5.4.250.tar.xz > # From https://www.kernel.org/pub/linux/kernel/v4.x/sha256sums.asc > -sha256 33ebd0c445b58c814428558496b65a192410f000096b0e2e6f5d813ecd95e3eb linux-4.19.288.tar.xz > +sha256 118f7411793868db8dcb043cdc82e9ac6f722fbec8dcdde30b07889d941aa3b3 linux-4.19.289.tar.xz > sha256 ed82679c0c6e600db80050d09e2294fb28b61cf27dc98657296c7eb5250a7625 linux-4.14.320.tar.xz > # Locally computed > sha256 fb0edc3c18e47d2b6974cb0880a0afb5c3fa08f50ee87dfdf24349405ea5f8ae linux-cip-5.10.162-cip24.tar.gz > diff --git a/package/linux-headers/Config.in.host b/package/linux-headers/Config.in.host > index ca841d6114..03c99c08cc 100644 > --- a/package/linux-headers/Config.in.host > +++ b/package/linux-headers/Config.in.host > @@ -401,12 +401,12 @@ endchoice > config BR2_DEFAULT_KERNEL_HEADERS > string > default "4.14.320" if BR2_KERNEL_HEADERS_4_14 > - default "4.19.288" if BR2_KERNEL_HEADERS_4_19 > - default "5.4.249" if BR2_KERNEL_HEADERS_5_4 > - default "5.10.186" if BR2_KERNEL_HEADERS_5_10 > - default "5.15.121" if BR2_KERNEL_HEADERS_5_15 > - default "6.1.40" if BR2_KERNEL_HEADERS_6_1 > - default "6.4.5" if BR2_KERNEL_HEADERS_6_4 > + default "4.19.289" if BR2_KERNEL_HEADERS_4_19 > + default "5.4.250" if BR2_KERNEL_HEADERS_5_4 > + default "5.10.187" if BR2_KERNEL_HEADERS_5_10 > + default "5.15.122" if BR2_KERNEL_HEADERS_5_15 > + default "6.1.41" if BR2_KERNEL_HEADERS_6_1 > + default "6.4.6" if BR2_KERNEL_HEADERS_6_4 > default BR2_DEFAULT_KERNEL_VERSION if BR2_KERNEL_HEADERS_VERSION > default "custom" if BR2_KERNEL_HEADERS_CUSTOM_TARBALL > default BR2_KERNEL_HEADERS_CUSTOM_REPO_VERSION \ > -- > 2.39.2 > > _______________________________________________ > buildroot mailing list > buildroot@buildroot.org > https://lists.buildroot.org/mailman/listinfo/buildroot
>>>>> "Bernd" == Bernd Kuhls <bernd@kuhls.net> writes: > Fixes Zenbleed (CVE-2023-20593): https://lwn.net/Articles/939101/ > Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Committed to 2023.02.x and 2023.05.x (except for the 6.4.x bump), thanks.
diff --git a/linux/Config.in b/linux/Config.in index 87d1a81915..c8b0d4c5a4 100644 --- a/linux/Config.in +++ b/linux/Config.in @@ -128,7 +128,7 @@ endif config BR2_LINUX_KERNEL_VERSION string - default "6.4.5" if BR2_LINUX_KERNEL_LATEST_VERSION + default "6.4.6" if BR2_LINUX_KERNEL_LATEST_VERSION default "5.10.162-cip24" if BR2_LINUX_KERNEL_LATEST_CIP_VERSION default "5.10.162-cip24-rt10" if BR2_LINUX_KERNEL_LATEST_CIP_RT_VERSION default BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE \ diff --git a/linux/linux.hash b/linux/linux.hash index c80fcf5eff..a1773ca64b 100644 --- a/linux/linux.hash +++ b/linux/linux.hash @@ -1,12 +1,12 @@ # From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc -sha256 374e2c07463c51dfd71204b7fac3b73c7f973550ae019b74e9f2b815b28de9b7 linux-6.4.5.tar.xz -sha256 43eafc2197a07dcdcff7a7ef79ac7502061f7c564744e51626bf5fa2e22587f0 linux-6.1.40.tar.xz +sha256 e1ecc496efc48aaf25a6607a4b8e52d574d6f67a2b0aa1664087d301d3515ea4 linux-6.4.6.tar.xz +sha256 312809a78eea052a08a6580f47b2ed8dd28e5633461d6731febaf3cb1e570bb7 linux-6.1.41.tar.xz # From https://www.kernel.org/pub/linux/kernel/v5.x/sha256sums.asc -sha256 07e0cebdb00d25459683e9c330a0576349b8c5e5f2abf053b864f9909151c31d linux-5.15.121.tar.xz -sha256 1e60296a135d272bb7ce645f6ae68fbd4ffd1972cb4b82c38c6faa1172481be3 linux-5.10.186.tar.xz -sha256 dc5458462c6edbe3473fc6dee80fbe0841df7c177fe0546c2f131e5918f5351d linux-5.4.249.tar.xz +sha256 38755801cd1ce229a8c0a0536d29aa37acea8a8aa13fa438e19fbf9d6293342d linux-5.15.122.tar.xz +sha256 f69454210b3e9e00e8b8368aaa897d4ca59f8be3b85399a2fcaecbf17af98bbb linux-5.10.187.tar.xz +sha256 0f5b8876526062bf5e346f6b9dde88be873761ee33cf3b8a1586d7d109a091fb linux-5.4.250.tar.xz # From https://www.kernel.org/pub/linux/kernel/v4.x/sha256sums.asc -sha256 33ebd0c445b58c814428558496b65a192410f000096b0e2e6f5d813ecd95e3eb linux-4.19.288.tar.xz +sha256 118f7411793868db8dcb043cdc82e9ac6f722fbec8dcdde30b07889d941aa3b3 linux-4.19.289.tar.xz sha256 ed82679c0c6e600db80050d09e2294fb28b61cf27dc98657296c7eb5250a7625 linux-4.14.320.tar.xz # Locally computed sha256 fb0edc3c18e47d2b6974cb0880a0afb5c3fa08f50ee87dfdf24349405ea5f8ae linux-cip-5.10.162-cip24.tar.gz diff --git a/package/linux-headers/Config.in.host b/package/linux-headers/Config.in.host index ca841d6114..03c99c08cc 100644 --- a/package/linux-headers/Config.in.host +++ b/package/linux-headers/Config.in.host @@ -401,12 +401,12 @@ endchoice config BR2_DEFAULT_KERNEL_HEADERS string default "4.14.320" if BR2_KERNEL_HEADERS_4_14 - default "4.19.288" if BR2_KERNEL_HEADERS_4_19 - default "5.4.249" if BR2_KERNEL_HEADERS_5_4 - default "5.10.186" if BR2_KERNEL_HEADERS_5_10 - default "5.15.121" if BR2_KERNEL_HEADERS_5_15 - default "6.1.40" if BR2_KERNEL_HEADERS_6_1 - default "6.4.5" if BR2_KERNEL_HEADERS_6_4 + default "4.19.289" if BR2_KERNEL_HEADERS_4_19 + default "5.4.250" if BR2_KERNEL_HEADERS_5_4 + default "5.10.187" if BR2_KERNEL_HEADERS_5_10 + default "5.15.122" if BR2_KERNEL_HEADERS_5_15 + default "6.1.41" if BR2_KERNEL_HEADERS_6_1 + default "6.4.6" if BR2_KERNEL_HEADERS_6_4 default BR2_DEFAULT_KERNEL_VERSION if BR2_KERNEL_HEADERS_VERSION default "custom" if BR2_KERNEL_HEADERS_CUSTOM_TARBALL default BR2_KERNEL_HEADERS_CUSTOM_REPO_VERSION \
Fixes Zenbleed (CVE-2023-20593): https://lwn.net/Articles/939101/ Signed-off-by: Bernd Kuhls <bernd@kuhls.net> --- linux/Config.in | 2 +- linux/linux.hash | 12 ++++++------ package/linux-headers/Config.in.host | 12 ++++++------ 3 files changed, 13 insertions(+), 13 deletions(-)