From 4564db20f3128d4177e3e8e1cc3fa1bcc6a26b0e Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Tue, 8 Aug 2023 21:31:56 +0200 Subject: [PATCH] {linux, linux-headers}: security bump 4.{14, 19}.x / 5.{4, 10, 15}.x / 6.{1, 4}.x series Fixes CVE-2022-40982: https://downfall.page/ https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html https://www.phoronix.com/news/Linux-Git-INCEPTION-DOWNFALL Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni (cherry picked from commit e0a786a46733cc473f0e4c35064a3b09ccf548e6) [Peter: drop 6.4.x bump] Signed-off-by: Peter Korsgaard --- linux/linux.hash | 12 ++++++------ package/linux-headers/Config.in.host | 12 ++++++------ 2 files changed, 12 insertions(+), 12 deletions(-) diff --git a/linux/linux.hash b/linux/linux.hash index 69b6d8edc1..8f72e0edd4 100644 --- a/linux/linux.hash +++ b/linux/linux.hash @@ -1,13 +1,13 @@ # From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc sha256 ea460560e2898022c5f3c4649908694dcd75a094ffde726e8c6ca5e0a09491fb linux-6.3.13.tar.xz -sha256 245248470a62d4e94b46f753afc01e19e45b9e6f3a0fa06e7f5da21fe845a808 linux-6.1.43.tar.xz +sha256 2e51d41fe11d082ae167cee05772bb07ca7f19448d2b46772d8ca2db7673a1a5 linux-6.1.44.tar.xz # From https://www.kernel.org/pub/linux/kernel/v5.x/sha256sums.asc -sha256 00036a0260ad012aa832a8698a4afcf23b2410091527738ce48ce3fcc23f22ed linux-5.15.124.tar.xz -sha256 c9558bab35e23ae67661bfb3192c609c857f78582a035449ae63e33d04ab6112 linux-5.10.188.tar.xz -sha256 bcb4953ed68131ef17f9f1ba52cac8b9d70007f5ab600bf3dee1fbf8beb218ca linux-5.4.251.tar.xz +sha256 150f3846b76cd23a6135f49cef71372bade5a06e851cb4f8558df8b862d8fec7 linux-5.15.125.tar.xz +sha256 4c03516ae1d417571faaef175932d0892710bcbe0173e40550014d043d9098c9 linux-5.10.189.tar.xz +sha256 3a78587523940374a7319089b63357c7dc412b90f5879d512265e59173588267 linux-5.4.252.tar.xz # From https://www.kernel.org/pub/linux/kernel/v4.x/sha256sums.asc -sha256 118f7411793868db8dcb043cdc82e9ac6f722fbec8dcdde30b07889d941aa3b3 linux-4.19.289.tar.xz -sha256 ed82679c0c6e600db80050d09e2294fb28b61cf27dc98657296c7eb5250a7625 linux-4.14.320.tar.xz +sha256 6ee30a46f3fa6576602085b7b4b0c640586f99d1c110982db411819308b5755c linux-4.19.250.tar.xz +sha256 d0e32bd47a547cc20e0ce09ff45514282742edb2af38df5dc0a03f22d4321715 linux-4.14.321.tar.xz # Locally computed sha256 fb0edc3c18e47d2b6974cb0880a0afb5c3fa08f50ee87dfdf24349405ea5f8ae linux-cip-5.10.162-cip24.tar.gz sha256 b5539243f187e3d478d76d44ae13aab83952c94b885ad889df6fa9997e16a441 linux-cip-5.10.162-cip24-rt10.tar.gz diff --git a/package/linux-headers/Config.in.host b/package/linux-headers/Config.in.host index 337be012e3..c0a130c96a 100644 --- a/package/linux-headers/Config.in.host +++ b/package/linux-headers/Config.in.host @@ -396,12 +396,12 @@ endchoice config BR2_DEFAULT_KERNEL_HEADERS string - default "4.14.320" if BR2_KERNEL_HEADERS_4_14 - default "4.19.289" if BR2_KERNEL_HEADERS_4_19 - default "5.4.251" if BR2_KERNEL_HEADERS_5_4 - default "5.10.188" if BR2_KERNEL_HEADERS_5_10 - default "5.15.124" if BR2_KERNEL_HEADERS_5_15 - default "6.1.43" if BR2_KERNEL_HEADERS_6_1 + default "4.14.321" if BR2_KERNEL_HEADERS_4_14 + default "4.19.290" if BR2_KERNEL_HEADERS_4_19 + default "5.4.252" if BR2_KERNEL_HEADERS_5_4 + default "5.10.189" if BR2_KERNEL_HEADERS_5_10 + default "5.15.125" if BR2_KERNEL_HEADERS_5_15 + default "6.1.44" if BR2_KERNEL_HEADERS_6_1 default "6.3.13" if BR2_KERNEL_HEADERS_6_3 default BR2_DEFAULT_KERNEL_VERSION if BR2_KERNEL_HEADERS_VERSION default "custom" if BR2_KERNEL_HEADERS_CUSTOM_TARBALL