Re: [PATCH] kernel: update to 4.14.229

["Peter Müller" <peter.mueller@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 4931 bytes --]

Hello Arne,

thank you for this patch.

Skimming through it, I stumbled across one small oddity - please see below.

Looking at https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.230, I regret to
notice Linux 4.14.230 has been released meanwhile, fixing CVE-2021-29154 - for x86_64 only.
(Once more, we see 32bit architectures dying away...)

Do we consider CVE-2021-29154 critical enough to undergo an update to 4.14.230 in Core Update 157?

Anyway:

Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org>

Thanks, and best regards,
Peter Müller

> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
> ---
>  config/kernel/kernel.config.aarch64-ipfire        | 3 +--
>  config/kernel/kernel.config.armv5tel-ipfire-multi | 3 +--
>  config/kernel/kernel.config.i586-ipfire           | 3 +--
>  config/kernel/kernel.config.x86_64-ipfire         | 3 +--
>  lfs/linux                                         | 8 ++++----
>  5 files changed, 8 insertions(+), 12 deletions(-)
> 
> diff --git a/config/kernel/kernel.config.aarch64-ipfire b/config/kernel/kernel.config.aarch64-ipfire
> index b794cbcf2..9e8563cbd 100644
> --- a/config/kernel/kernel.config.aarch64-ipfire
> +++ b/config/kernel/kernel.config.aarch64-ipfire
> @@ -1,6 +1,6 @@
>  #
>  # Automatically generated file; DO NOT EDIT.
> -# Linux/arm64 4.14.206-ipfire Kernel Configuration
> +# Linux/arm64 4.14.229 Kernel Configuration

Just a very minor comment: Is this intentional?

>  #
>  CONFIG_ARM64=y
>  CONFIG_64BIT=y
> @@ -5050,7 +5050,6 @@ CONFIG_USB_LCD=m
>  CONFIG_USB_FTDI_ELAN=m
>  # CONFIG_USB_APPLEDISPLAY is not set
>  CONFIG_USB_SISUSBVGA=m
> -CONFIG_USB_SISUSBVGA_CON=y
>  # CONFIG_USB_LD is not set
>  # CONFIG_USB_TRANCEVIBRATOR is not set
>  CONFIG_USB_IOWARRIOR=m
> diff --git a/config/kernel/kernel.config.armv5tel-ipfire-multi b/config/kernel/kernel.config.armv5tel-ipfire-multi
> index 3c26a3ce2..c40eb9f55 100644
> --- a/config/kernel/kernel.config.armv5tel-ipfire-multi
> +++ b/config/kernel/kernel.config.armv5tel-ipfire-multi
> @@ -1,6 +1,6 @@
>  #
>  # Automatically generated file; DO NOT EDIT.
> -# Linux/arm 4.14.206-ipfire-multi Kernel Configuration
> +# Linux/arm 4.14.229-ipfire-multi Kernel Configuration
>  #
>  CONFIG_ARM=y
>  CONFIG_ARM_HAS_SG_CHAIN=y
> @@ -5457,7 +5457,6 @@ CONFIG_USB_LCD=m
>  CONFIG_USB_FTDI_ELAN=m
>  # CONFIG_USB_APPLEDISPLAY is not set
>  CONFIG_USB_SISUSBVGA=m
> -CONFIG_USB_SISUSBVGA_CON=y
>  # CONFIG_USB_LD is not set
>  # CONFIG_USB_TRANCEVIBRATOR is not set
>  CONFIG_USB_IOWARRIOR=m
> diff --git a/config/kernel/kernel.config.i586-ipfire b/config/kernel/kernel.config.i586-ipfire
> index 8cac7cd45..448b8a84b 100644
> --- a/config/kernel/kernel.config.i586-ipfire
> +++ b/config/kernel/kernel.config.i586-ipfire
> @@ -1,6 +1,6 @@
>  #
>  # Automatically generated file; DO NOT EDIT.
> -# Linux/x86 4.14.206-ipfire Kernel Configuration
> +# Linux/x86 4.14.229 Kernel Configuration
>  #
>  # CONFIG_64BIT is not set
>  CONFIG_X86_32=y
> @@ -5179,7 +5179,6 @@ CONFIG_USB_LCD=m
>  CONFIG_USB_FTDI_ELAN=m
>  # CONFIG_USB_APPLEDISPLAY is not set
>  CONFIG_USB_SISUSBVGA=m
> -CONFIG_USB_SISUSBVGA_CON=y
>  # CONFIG_USB_LD is not set
>  # CONFIG_USB_TRANCEVIBRATOR is not set
>  CONFIG_USB_IOWARRIOR=m
> diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire
> index 4dec50605..65c365c1b 100644
> --- a/config/kernel/kernel.config.x86_64-ipfire
> +++ b/config/kernel/kernel.config.x86_64-ipfire
> @@ -1,6 +1,6 @@
>  #
>  # Automatically generated file; DO NOT EDIT.
> -# Linux/x86 4.14.206-ipfire Kernel Configuration
> +# Linux/x86 4.14.229 Kernel Configuration
>  #
>  CONFIG_64BIT=y
>  CONFIG_X86_64=y
> @@ -5021,7 +5021,6 @@ CONFIG_USB_LCD=m
>  CONFIG_USB_FTDI_ELAN=m
>  # CONFIG_USB_APPLEDISPLAY is not set
>  CONFIG_USB_SISUSBVGA=m
> -CONFIG_USB_SISUSBVGA_CON=y
>  # CONFIG_USB_LD is not set
>  # CONFIG_USB_TRANCEVIBRATOR is not set
>  CONFIG_USB_IOWARRIOR=m
> diff --git a/lfs/linux b/lfs/linux
> index 5abc6f93a..86acc14f7 100644
> --- a/lfs/linux
> +++ b/lfs/linux
> @@ -24,8 +24,8 @@
>  
>  include Config
>  
> -VER         = 4.14.212
> -ARM_PATCHES = 4.14.212-ipfire0
> +VER         = 4.14.229
> +ARM_PATCHES = 4.14.229-ipfire0
>  
>  THISAPP    = linux-$(VER)
>  DL_FILE    = linux-$(VER).tar.xz
> @@ -79,8 +79,8 @@ objects =$(DL_FILE) \
>  $(DL_FILE)					= $(URL_IPFIRE)/$(DL_FILE)
>  arm-multi-patches-$(ARM_PATCHES).patch.xz	= $(URL_IPFIRE)/arm-multi-patches-$(ARM_PATCHES).patch.xz
>  
> -$(DL_FILE)_MD5					= 645d5256adf72569e14edcf80c3757dc
> -arm-multi-patches-$(ARM_PATCHES).patch.xz_MD5	= 2b0e8e3ebe9827b2bfed7397b043dbc5
> +$(DL_FILE)_MD5					= 9d4cf6e9ffff893d8a2ecea6a8c5a15b
> +arm-multi-patches-$(ARM_PATCHES).patch.xz_MD5	= a04b842733999abb818cabb0388572b8
>  
>  install : $(TARGET)
>  
>