This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".
The branch, next has been updated
via aee6dd0ba45cf12f014050bbab234d9e4b0d03ab (commit)
via 44b227b102964e520369d8628db342e68551966f (commit)
via b007a35292928d150fcbe0053bd21e9fe6eebe0e (commit)
from 9e5434d4bf822ba7c62cb8917ec8692b9aa68143 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit aee6dd0ba45cf12f014050bbab234d9e4b0d03ab
Merge: 44b227b10 9e5434d4b
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Thu Nov 14 22:13:23 2019 +0100
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
commit 44b227b102964e520369d8628db342e68551966f
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Thu Nov 14 22:12:12 2019 +0100
kernel: update to 4.14.154
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit b007a35292928d150fcbe0053bd21e9fe6eebe0e
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Thu Nov 14 22:10:04 2019 +0100
vulnearabilities.cgi: add tsx async abort and itlb_multihit
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
-----------------------------------------------------------------------
Summary of changes:
config/kernel/kernel.config.aarch64-ipfire | 4 +++-
config/kernel/kernel.config.armv5tel-ipfire-kirkwood | 3 ++-
config/kernel/kernel.config.armv5tel-ipfire-multi | 3 ++-
config/kernel/kernel.config.i586-ipfire | 6 +++++-
config/kernel/kernel.config.i586-ipfire-pae | 6 +++++-
config/kernel/kernel.config.x86_64-ipfire | 6 +++++-
config/rootfiles/common/aarch64/linux | 2 ++
config/rootfiles/common/armv5tel/linux-kirkwood | 2 ++
config/rootfiles/common/armv5tel/linux-multi | 2 ++
config/rootfiles/common/i586/linux | 10 +++++-----
config/rootfiles/common/x86_64/linux | 10 +++++-----
config/rootfiles/packages/linux-pae | 10 +++++-----
html/cgi-bin/vulnerabilities.cgi | 2 ++
langs/en/cgi-bin/en.pl | 2 ++
lfs/linux | 10 +++++-----
15 files changed, 52 insertions(+), 26 deletions(-)
Difference in files:
diff --git a/config/kernel/kernel.config.aarch64-ipfire b/config/kernel/kernel.config.aarch64-ipfire
index 778b05a9a..e79403bc7 100644
--- a/config/kernel/kernel.config.aarch64-ipfire
+++ b/config/kernel/kernel.config.aarch64-ipfire
@@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
-# Linux/arm64 4.14.150-ipfire Kernel Configuration
+# Linux/arm64 4.14.154-ipfire Kernel Configuration
#
CONFIG_ARM64=y
CONFIG_64BIT=y
@@ -1456,6 +1456,7 @@ CONFIG_DEV_COREDUMP=y
# CONFIG_SYS_HYPERVISOR is not set
# CONFIG_GENERIC_CPU_DEVICES is not set
CONFIG_GENERIC_CPU_AUTOPROBE=y
+CONFIG_GENERIC_CPU_VULNERABILITIES=y
CONFIG_SOC_BUS=y
CONFIG_REGMAP=y
CONFIG_REGMAP_I2C=y
@@ -6822,6 +6823,7 @@ CONFIG_ASSOCIATIVE_ARRAY=y
CONFIG_HAS_IOMEM=y
CONFIG_HAS_IOPORT_MAP=y
CONFIG_HAS_DMA=y
+CONFIG_SGL_ALLOC=y
# CONFIG_DMA_NOOP_OPS is not set
# CONFIG_DMA_VIRT_OPS is not set
CONFIG_CPU_RMAP=y
diff --git a/config/kernel/kernel.config.armv5tel-ipfire-kirkwood b/config/kernel/kernel.config.armv5tel-ipfire-kirkwood
index fcbac3bcd..2bfb7ff36 100644
--- a/config/kernel/kernel.config.armv5tel-ipfire-kirkwood
+++ b/config/kernel/kernel.config.armv5tel-ipfire-kirkwood
@@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
-# Linux/arm 4.14.150-ipfire-kirkwood Kernel Configuration
+# Linux/arm 4.14.154-ipfire-kirkwood Kernel Configuration
#
CONFIG_ARM=y
CONFIG_ARM_HAS_SG_CHAIN=y
@@ -6235,6 +6235,7 @@ CONFIG_ASSOCIATIVE_ARRAY=y
CONFIG_HAS_IOMEM=y
CONFIG_HAS_IOPORT_MAP=y
CONFIG_HAS_DMA=y
+CONFIG_SGL_ALLOC=y
# CONFIG_DMA_NOOP_OPS is not set
# CONFIG_DMA_VIRT_OPS is not set
CONFIG_DQL=y
diff --git a/config/kernel/kernel.config.armv5tel-ipfire-multi b/config/kernel/kernel.config.armv5tel-ipfire-multi
index fc74eb142..7e9de39ea 100644
--- a/config/kernel/kernel.config.armv5tel-ipfire-multi
+++ b/config/kernel/kernel.config.armv5tel-ipfire-multi
@@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
-# Linux/arm 4.14.150-ipfire-multi Kernel Configuration
+# Linux/arm 4.14.154-ipfire-multi Kernel Configuration
#
CONFIG_ARM=y
CONFIG_ARM_HAS_SG_CHAIN=y
@@ -7318,6 +7318,7 @@ CONFIG_TEXTSEARCH_FSM=m
CONFIG_ASSOCIATIVE_ARRAY=y
CONFIG_HAS_IOMEM=y
CONFIG_HAS_DMA=y
+CONFIG_SGL_ALLOC=y
# CONFIG_DMA_NOOP_OPS is not set
# CONFIG_DMA_VIRT_OPS is not set
CONFIG_CPU_RMAP=y
diff --git a/config/kernel/kernel.config.i586-ipfire b/config/kernel/kernel.config.i586-ipfire
index 4eaae6f74..2732bba42 100644
--- a/config/kernel/kernel.config.i586-ipfire
+++ b/config/kernel/kernel.config.i586-ipfire
@@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
-# Linux/x86 4.14.150-ipfire Kernel Configuration
+# Linux/x86 4.14.154-ipfire-pae Kernel Configuration
#
# CONFIG_64BIT is not set
CONFIG_X86_32=y
@@ -601,6 +601,9 @@ CONFIG_X86_PAT=y
CONFIG_ARCH_USES_PG_UNCACHED=y
CONFIG_ARCH_RANDOM=y
CONFIG_X86_SMAP=y
+CONFIG_X86_INTEL_TSX_MODE_OFF=y
+# CONFIG_X86_INTEL_TSX_MODE_ON is not set
+# CONFIG_X86_INTEL_TSX_MODE_AUTO is not set
CONFIG_EFI=y
CONFIG_EFI_STUB=y
CONFIG_SECCOMP=y
@@ -7024,6 +7027,7 @@ CONFIG_ASSOCIATIVE_ARRAY=y
CONFIG_HAS_IOMEM=y
CONFIG_HAS_IOPORT_MAP=y
CONFIG_HAS_DMA=y
+CONFIG_SGL_ALLOC=y
# CONFIG_DMA_NOOP_OPS is not set
# CONFIG_DMA_VIRT_OPS is not set
CONFIG_CHECK_SIGNATURE=y
diff --git a/config/kernel/kernel.config.i586-ipfire-pae b/config/kernel/kernel.config.i586-ipfire-pae
index 526adbbcb..9b53ab35c 100644
--- a/config/kernel/kernel.config.i586-ipfire-pae
+++ b/config/kernel/kernel.config.i586-ipfire-pae
@@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
-# Linux/x86 4.14.150-ipfire-pae Kernel Configuration
+# Linux/x86 4.14.154-ipfire-pae Kernel Configuration
#
# CONFIG_64BIT is not set
CONFIG_X86_32=y
@@ -619,6 +619,9 @@ CONFIG_X86_PAT=y
CONFIG_ARCH_USES_PG_UNCACHED=y
CONFIG_ARCH_RANDOM=y
CONFIG_X86_SMAP=y
+CONFIG_X86_INTEL_TSX_MODE_OFF=y
+# CONFIG_X86_INTEL_TSX_MODE_ON is not set
+# CONFIG_X86_INTEL_TSX_MODE_AUTO is not set
CONFIG_EFI=y
CONFIG_EFI_STUB=y
CONFIG_SECCOMP=y
@@ -7029,6 +7032,7 @@ CONFIG_ASSOCIATIVE_ARRAY=y
CONFIG_HAS_IOMEM=y
CONFIG_HAS_IOPORT_MAP=y
CONFIG_HAS_DMA=y
+CONFIG_SGL_ALLOC=y
# CONFIG_DMA_NOOP_OPS is not set
# CONFIG_DMA_VIRT_OPS is not set
CONFIG_CHECK_SIGNATURE=y
diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire
index c9563234e..2fcf1e589 100644
--- a/config/kernel/kernel.config.x86_64-ipfire
+++ b/config/kernel/kernel.config.x86_64-ipfire
@@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
-# Linux/x86 4.14.150-ipfire Kernel Configuration
+# Linux/x86 4.14.154-ipfire Kernel Configuration
#
CONFIG_64BIT=y
CONFIG_X86_64=y
@@ -611,6 +611,9 @@ CONFIG_ARCH_RANDOM=y
CONFIG_X86_SMAP=y
# CONFIG_X86_INTEL_MPX is not set
CONFIG_X86_INTEL_MEMORY_PROTECTION_KEYS=y
+CONFIG_X86_INTEL_TSX_MODE_OFF=y
+# CONFIG_X86_INTEL_TSX_MODE_ON is not set
+# CONFIG_X86_INTEL_TSX_MODE_AUTO is not set
CONFIG_EFI=y
CONFIG_EFI_STUB=y
CONFIG_EFI_MIXED=y
@@ -6909,6 +6912,7 @@ CONFIG_ASSOCIATIVE_ARRAY=y
CONFIG_HAS_IOMEM=y
CONFIG_HAS_IOPORT_MAP=y
CONFIG_HAS_DMA=y
+CONFIG_SGL_ALLOC=y
# CONFIG_DMA_NOOP_OPS is not set
# CONFIG_DMA_VIRT_OPS is not set
CONFIG_CHECK_SIGNATURE=y
diff --git a/config/rootfiles/common/aarch64/linux b/config/rootfiles/common/aarch64/linux
index d8e93542d..f9dc8555b 100644
--- a/config/rootfiles/common/aarch64/linux
+++ b/config/rootfiles/common/aarch64/linux
@@ -9821,6 +9821,8 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire/build/include/config/sg/pool.h
#lib/modules/KVER-ipfire/build/include/config/sgetmask
#lib/modules/KVER-ipfire/build/include/config/sgetmask/syscall.h
+#lib/modules/KVER-ipfire/build/include/config/sgl
+#lib/modules/KVER-ipfire/build/include/config/sgl/alloc.h
#lib/modules/KVER-ipfire/build/include/config/shmem.h
#lib/modules/KVER-ipfire/build/include/config/signalfd.h
#lib/modules/KVER-ipfire/build/include/config/simple
diff --git a/config/rootfiles/common/armv5tel/linux-kirkwood b/config/rootfiles/common/armv5tel/linux-kirkwood
index 2269896d8..9ccc006b9 100644
--- a/config/rootfiles/common/armv5tel/linux-kirkwood
+++ b/config/rootfiles/common/armv5tel/linux-kirkwood
@@ -9329,6 +9329,8 @@ boot/vmlinuz-KVER-ipfire-kirkwood
#lib/modules/KVER-ipfire-kirkwood/build/include/config/sg/pool.h
#lib/modules/KVER-ipfire-kirkwood/build/include/config/sgetmask
#lib/modules/KVER-ipfire-kirkwood/build/include/config/sgetmask/syscall.h
+#lib/modules/KVER-ipfire-kirkwood/build/include/config/sgl
+#lib/modules/KVER-ipfire-kirkwood/build/include/config/sgl/alloc.h
#lib/modules/KVER-ipfire-kirkwood/build/include/config/shmem.h
#lib/modules/KVER-ipfire-kirkwood/build/include/config/signalfd.h
#lib/modules/KVER-ipfire-kirkwood/build/include/config/simple
diff --git a/config/rootfiles/common/armv5tel/linux-multi b/config/rootfiles/common/armv5tel/linux-multi
index 1e7a090d9..890e3be21 100644
--- a/config/rootfiles/common/armv5tel/linux-multi
+++ b/config/rootfiles/common/armv5tel/linux-multi
@@ -10752,6 +10752,8 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire-multi/build/include/config/sg/pool.h
#lib/modules/KVER-ipfire-multi/build/include/config/sgetmask
#lib/modules/KVER-ipfire-multi/build/include/config/sgetmask/syscall.h
+#lib/modules/KVER-ipfire-multi/build/include/config/sgl
+#lib/modules/KVER-ipfire-multi/build/include/config/sgl/alloc.h
#lib/modules/KVER-ipfire-multi/build/include/config/shmem.h
#lib/modules/KVER-ipfire-multi/build/include/config/signalfd.h
#lib/modules/KVER-ipfire-multi/build/include/config/simple
diff --git a/config/rootfiles/common/i586/linux b/config/rootfiles/common/i586/linux
index 1fe01233f..684dbe07b 100644
--- a/config/rootfiles/common/i586/linux
+++ b/config/rootfiles/common/i586/linux
@@ -10838,6 +10838,8 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire/build/include/config/sg/pool.h
#lib/modules/KVER-ipfire/build/include/config/sgetmask
#lib/modules/KVER-ipfire/build/include/config/sgetmask/syscall.h
+#lib/modules/KVER-ipfire/build/include/config/sgl
+#lib/modules/KVER-ipfire/build/include/config/sgl/alloc.h
#lib/modules/KVER-ipfire/build/include/config/shmem.h
#lib/modules/KVER-ipfire/build/include/config/signalfd.h
#lib/modules/KVER-ipfire/build/include/config/sis190.h
@@ -12164,6 +12166,9 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire/build/include/config/x86/intel/mid.h
#lib/modules/KVER-ipfire/build/include/config/x86/intel/pstate.h
#lib/modules/KVER-ipfire/build/include/config/x86/intel/quark.h
+#lib/modules/KVER-ipfire/build/include/config/x86/intel/tsx
+#lib/modules/KVER-ipfire/build/include/config/x86/intel/tsx/mode
+#lib/modules/KVER-ipfire/build/include/config/x86/intel/tsx/mode/off.h
#lib/modules/KVER-ipfire/build/include/config/x86/intel/usercopy.h
#lib/modules/KVER-ipfire/build/include/config/x86/internode
#lib/modules/KVER-ipfire/build/include/config/x86/internode/cache
@@ -14027,7 +14032,6 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire/build/include/linux/net.h
#lib/modules/KVER-ipfire/build/include/linux/netdev_features.h
#lib/modules/KVER-ipfire/build/include/linux/netdevice.h
-#lib/modules/KVER-ipfire/build/include/linux/netdevice.h.orig
#lib/modules/KVER-ipfire/build/include/linux/netfilter
#lib/modules/KVER-ipfire/build/include/linux/netfilter.h
#lib/modules/KVER-ipfire/build/include/linux/netfilter/ipset
@@ -14773,7 +14777,6 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire/build/include/linux/sizes.h
#lib/modules/KVER-ipfire/build/include/linux/skb_array.h
#lib/modules/KVER-ipfire/build/include/linux/skbuff.h
-#lib/modules/KVER-ipfire/build/include/linux/skbuff.h.orig
#lib/modules/KVER-ipfire/build/include/linux/slab.h
#lib/modules/KVER-ipfire/build/include/linux/slab_def.h
#lib/modules/KVER-ipfire/build/include/linux/slub_def.h
@@ -15587,7 +15590,6 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire/build/include/net/route.h
#lib/modules/KVER-ipfire/build/include/net/rtnetlink.h
#lib/modules/KVER-ipfire/build/include/net/sch_generic.h
-#lib/modules/KVER-ipfire/build/include/net/sch_generic.h.orig
#lib/modules/KVER-ipfire/build/include/net/scm.h
#lib/modules/KVER-ipfire/build/include/net/sctp
#lib/modules/KVER-ipfire/build/include/net/sctp/auth.h
@@ -17242,9 +17244,7 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire/build/net/ncsi/Makefile
#lib/modules/KVER-ipfire/build/net/netfilter
#lib/modules/KVER-ipfire/build/net/netfilter/Kconfig
-#lib/modules/KVER-ipfire/build/net/netfilter/Kconfig.orig
#lib/modules/KVER-ipfire/build/net/netfilter/Makefile
-#lib/modules/KVER-ipfire/build/net/netfilter/Makefile.orig
#lib/modules/KVER-ipfire/build/net/netfilter/ipset
#lib/modules/KVER-ipfire/build/net/netfilter/ipset/Kconfig
#lib/modules/KVER-ipfire/build/net/netfilter/ipset/Makefile
diff --git a/config/rootfiles/common/x86_64/linux b/config/rootfiles/common/x86_64/linux
index 68f907faa..f44266e52 100644
--- a/config/rootfiles/common/x86_64/linux
+++ b/config/rootfiles/common/x86_64/linux
@@ -10850,6 +10850,8 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire/build/include/config/sg/pool.h
#lib/modules/KVER-ipfire/build/include/config/sgetmask
#lib/modules/KVER-ipfire/build/include/config/sgetmask/syscall.h
+#lib/modules/KVER-ipfire/build/include/config/sgl
+#lib/modules/KVER-ipfire/build/include/config/sgl/alloc.h
#lib/modules/KVER-ipfire/build/include/config/shmem.h
#lib/modules/KVER-ipfire/build/include/config/signalfd.h
#lib/modules/KVER-ipfire/build/include/config/sis190.h
@@ -12122,6 +12124,9 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire/build/include/config/x86/intel/memory/protection
#lib/modules/KVER-ipfire/build/include/config/x86/intel/memory/protection/keys.h
#lib/modules/KVER-ipfire/build/include/config/x86/intel/pstate.h
+#lib/modules/KVER-ipfire/build/include/config/x86/intel/tsx
+#lib/modules/KVER-ipfire/build/include/config/x86/intel/tsx/mode
+#lib/modules/KVER-ipfire/build/include/config/x86/intel/tsx/mode/auto.h
#lib/modules/KVER-ipfire/build/include/config/x86/internode
#lib/modules/KVER-ipfire/build/include/config/x86/internode/cache
#lib/modules/KVER-ipfire/build/include/config/x86/internode/cache/shift.h
@@ -14042,7 +14047,6 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire/build/include/linux/net.h
#lib/modules/KVER-ipfire/build/include/linux/netdev_features.h
#lib/modules/KVER-ipfire/build/include/linux/netdevice.h
-#lib/modules/KVER-ipfire/build/include/linux/netdevice.h.orig
#lib/modules/KVER-ipfire/build/include/linux/netfilter
#lib/modules/KVER-ipfire/build/include/linux/netfilter.h
#lib/modules/KVER-ipfire/build/include/linux/netfilter/ipset
@@ -14788,7 +14792,6 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire/build/include/linux/sizes.h
#lib/modules/KVER-ipfire/build/include/linux/skb_array.h
#lib/modules/KVER-ipfire/build/include/linux/skbuff.h
-#lib/modules/KVER-ipfire/build/include/linux/skbuff.h.orig
#lib/modules/KVER-ipfire/build/include/linux/slab.h
#lib/modules/KVER-ipfire/build/include/linux/slab_def.h
#lib/modules/KVER-ipfire/build/include/linux/slub_def.h
@@ -15602,7 +15605,6 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire/build/include/net/route.h
#lib/modules/KVER-ipfire/build/include/net/rtnetlink.h
#lib/modules/KVER-ipfire/build/include/net/sch_generic.h
-#lib/modules/KVER-ipfire/build/include/net/sch_generic.h.orig
#lib/modules/KVER-ipfire/build/include/net/scm.h
#lib/modules/KVER-ipfire/build/include/net/sctp
#lib/modules/KVER-ipfire/build/include/net/sctp/auth.h
@@ -17257,9 +17259,7 @@ etc/modprobe.d/ipv6.conf
#lib/modules/KVER-ipfire/build/net/ncsi/Makefile
#lib/modules/KVER-ipfire/build/net/netfilter
#lib/modules/KVER-ipfire/build/net/netfilter/Kconfig
-#lib/modules/KVER-ipfire/build/net/netfilter/Kconfig.orig
#lib/modules/KVER-ipfire/build/net/netfilter/Makefile
-#lib/modules/KVER-ipfire/build/net/netfilter/Makefile.orig
#lib/modules/KVER-ipfire/build/net/netfilter/ipset
#lib/modules/KVER-ipfire/build/net/netfilter/ipset/Kconfig
#lib/modules/KVER-ipfire/build/net/netfilter/ipset/Makefile
diff --git a/config/rootfiles/packages/linux-pae b/config/rootfiles/packages/linux-pae
index f3966ce75..c0894cd1f 100644
--- a/config/rootfiles/packages/linux-pae
+++ b/config/rootfiles/packages/linux-pae
@@ -10836,6 +10836,8 @@ boot/vmlinuz-KVER-ipfire-pae
#lib/modules/KVER-ipfire-pae/build/include/config/sg/pool.h
#lib/modules/KVER-ipfire-pae/build/include/config/sgetmask
#lib/modules/KVER-ipfire-pae/build/include/config/sgetmask/syscall.h
+#lib/modules/KVER-ipfire-pae/build/include/config/sgl
+#lib/modules/KVER-ipfire-pae/build/include/config/sgl/alloc.h
#lib/modules/KVER-ipfire-pae/build/include/config/shmem.h
#lib/modules/KVER-ipfire-pae/build/include/config/signalfd.h
#lib/modules/KVER-ipfire-pae/build/include/config/sis190.h
@@ -12164,6 +12166,9 @@ boot/vmlinuz-KVER-ipfire-pae
#lib/modules/KVER-ipfire-pae/build/include/config/x86/intel/lpss.h
#lib/modules/KVER-ipfire-pae/build/include/config/x86/intel/pstate.h
#lib/modules/KVER-ipfire-pae/build/include/config/x86/intel/quark.h
+#lib/modules/KVER-ipfire-pae/build/include/config/x86/intel/tsx
+#lib/modules/KVER-ipfire-pae/build/include/config/x86/intel/tsx/mode
+#lib/modules/KVER-ipfire-pae/build/include/config/x86/intel/tsx/mode/off.h
#lib/modules/KVER-ipfire-pae/build/include/config/x86/intel/usercopy.h
#lib/modules/KVER-ipfire-pae/build/include/config/x86/internode
#lib/modules/KVER-ipfire-pae/build/include/config/x86/internode/cache
@@ -14097,7 +14102,6 @@ boot/vmlinuz-KVER-ipfire-pae
#lib/modules/KVER-ipfire-pae/build/include/linux/net.h
#lib/modules/KVER-ipfire-pae/build/include/linux/netdev_features.h
#lib/modules/KVER-ipfire-pae/build/include/linux/netdevice.h
-#lib/modules/KVER-ipfire-pae/build/include/linux/netdevice.h.orig
#lib/modules/KVER-ipfire-pae/build/include/linux/netfilter
#lib/modules/KVER-ipfire-pae/build/include/linux/netfilter.h
#lib/modules/KVER-ipfire-pae/build/include/linux/netfilter/ipset
@@ -14843,7 +14847,6 @@ boot/vmlinuz-KVER-ipfire-pae
#lib/modules/KVER-ipfire-pae/build/include/linux/sizes.h
#lib/modules/KVER-ipfire-pae/build/include/linux/skb_array.h
#lib/modules/KVER-ipfire-pae/build/include/linux/skbuff.h
-#lib/modules/KVER-ipfire-pae/build/include/linux/skbuff.h.orig
#lib/modules/KVER-ipfire-pae/build/include/linux/slab.h
#lib/modules/KVER-ipfire-pae/build/include/linux/slab_def.h
#lib/modules/KVER-ipfire-pae/build/include/linux/slub_def.h
@@ -15657,7 +15660,6 @@ boot/vmlinuz-KVER-ipfire-pae
#lib/modules/KVER-ipfire-pae/build/include/net/route.h
#lib/modules/KVER-ipfire-pae/build/include/net/rtnetlink.h
#lib/modules/KVER-ipfire-pae/build/include/net/sch_generic.h
-#lib/modules/KVER-ipfire-pae/build/include/net/sch_generic.h.orig
#lib/modules/KVER-ipfire-pae/build/include/net/scm.h
#lib/modules/KVER-ipfire-pae/build/include/net/sctp
#lib/modules/KVER-ipfire-pae/build/include/net/sctp/auth.h
@@ -17312,9 +17314,7 @@ boot/vmlinuz-KVER-ipfire-pae
#lib/modules/KVER-ipfire-pae/build/net/ncsi/Makefile
#lib/modules/KVER-ipfire-pae/build/net/netfilter
#lib/modules/KVER-ipfire-pae/build/net/netfilter/Kconfig
-#lib/modules/KVER-ipfire-pae/build/net/netfilter/Kconfig.orig
#lib/modules/KVER-ipfire-pae/build/net/netfilter/Makefile
-#lib/modules/KVER-ipfire-pae/build/net/netfilter/Makefile.orig
#lib/modules/KVER-ipfire-pae/build/net/netfilter/ipset
#lib/modules/KVER-ipfire-pae/build/net/netfilter/ipset/Kconfig
#lib/modules/KVER-ipfire-pae/build/net/netfilter/ipset/Makefile
diff --git a/html/cgi-bin/vulnerabilities.cgi b/html/cgi-bin/vulnerabilities.cgi
index a8746c30c..333b03399 100644
--- a/html/cgi-bin/vulnerabilities.cgi
+++ b/html/cgi-bin/vulnerabilities.cgi
@@ -30,12 +30,14 @@ require "${General::swroot}/lang.pl";
require "${General::swroot}/header.pl";
my %VULNERABILITIES = (
+ "itlb_multihit" => "$Lang::tr{'itlb multihit'} (CVE-2018-12207)",
"l1tf" => "$Lang::tr{'foreshadow'} (CVE-2018-3620)",
"mds" => "$Lang::tr{'fallout zombieload ridl'} (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127, CVE-2019-11091)",
"meltdown" => "$Lang::tr{'meltdown'} (CVE-2017-5754)",
"spec_store_bypass" => "$Lang::tr{'spectre variant 4'} (CVE-2018-3639)",
"spectre_v1" => "$Lang::tr{'spectre variant 1'} (CVE-2017-5753)",
"spectre_v2" => "$Lang::tr{'spectre variant 2'} (CVE-2017-5715)",
+ "tsx_async_abort" => "$Lang::tr{'taa zombieload2'} (CVE-2019-11135)",
);
my $errormessage = "";
diff --git a/langs/en/cgi-bin/en.pl b/langs/en/cgi-bin/en.pl
index 8b7e63cb8..b40ef9390 100644
--- a/langs/en/cgi-bin/en.pl
+++ b/langs/en/cgi-bin/en.pl
@@ -1542,6 +1542,7 @@
'isdn settings' => 'Additional ISDN settings:',
'isdn1' => 'Single ISDN',
'isdn2' => 'Dual ISDN',
+'itlb multihit' => 'iTLB MultiHit',
'january' => 'January',
'javascript menu error1' => 'If the drop down menus aren\'t working, disable javascript on the',
'javascript menu error2' => 'page.',
@@ -2322,6 +2323,7 @@
'system logs' => 'System Logs',
'system status information' => 'System Status Information',
'ta key' => 'TLS-Authentification-Key',
+'taa zombieload2' => 'TSX Async Abort / ZombieLoad v2',
'tcp more reliable' => 'TCP (more reliable)',
'telephone not set' => 'Telephone not set.',
'template' => 'Preset',
diff --git a/lfs/linux b/lfs/linux
index c8bcdbb97..aac2c4868 100644
--- a/lfs/linux
+++ b/lfs/linux
@@ -24,8 +24,8 @@
include Config
-VER = 4.14.150
-ARM_PATCHES = 4.14.150-ipfire0
+VER = 4.14.154
+ARM_PATCHES = 4.14.154-ipfire0
THISAPP = linux-$(VER)
DL_FILE = linux-$(VER).tar.xz
@@ -34,7 +34,7 @@ DIR_APP = $(DIR_SRC)/$(THISAPP)
CFLAGS =
CXXFLAGS =
-PAK_VER = 88
+PAK_VER = 89
DEPS = ""
HEADERS_ARCH = $(BUILD_PLATFORM)
@@ -82,8 +82,8 @@ objects =$(DL_FILE) \
$(DL_FILE) = $(URL_IPFIRE)/$(DL_FILE)
arm-multi-patches-$(ARM_PATCHES).patch.xz = $(URL_IPFIRE)/arm-multi-patches-$(ARM_PATCHES).patch.xz
-$(DL_FILE)_MD5 = 61358e7be9bfc17adb4c418355d957db
-arm-multi-patches-$(ARM_PATCHES).patch.xz_MD5 = e4931541ffe21dd29ca2447620de6693
+$(DL_FILE)_MD5 = d6cf4b51c1cd10bc48bac50f4557a0d9
+arm-multi-patches-$(ARM_PATCHES).patch.xz_MD5 = 539737e07e5634565b3f4f1b932c269b
install : $(TARGET)
hooks/post-receive
--
IPFire 2.x development tree