openwrtv3/include
Jo-Philipp Wich 55623a9c83 kernel: update kernel 4.9 to 4.9.31
Fixes the following security vulnerabilities:

CVE-2017-8890
The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the
Linux kernel through 4.10.15 allows attackers to cause a denial of service
(double free) or possibly have unspecified other impact by leveraging use
of the accept system call.

CVE-2017-9074
The IPv6 fragmentation implementation in the Linux kernel through 4.11.1
does not consider that the nexthdr field may be associated with an invalid
option, which allows local users to cause a denial of service (out-of-bounds
read and BUG) or possibly have unspecified other impact via crafted socket
and send system calls.

CVE-2017-9075
The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel
through 4.11.1 mishandles inheritance, which allows local users to cause a
denial of service or possibly have unspecified other impact via crafted
system calls, a related issue to CVE-2017-8890.

CVE-2017-9076
The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux
kernel through 4.11.1 mishandles inheritance, which allows local users to
cause a denial of service or possibly have unspecified other impact via
crafted system calls, a related issue to CVE-2017-8890.

CVE-2017-9077
The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel
through 4.11.1 mishandles inheritance, which allows local users to cause a
denial of service or possibly have unspecified other impact via crafted
system calls, a related issue to CVE-2017-8890.

CVE-2017-9242
The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel
through 4.11.3 is too late in checking whether an overwrite of an skb data
structure may occur, which allows local users to cause a denial of service
(system crash) via crafted system calls.

Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8890
Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9074
Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9075
Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9076
Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9077
Ref: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9242
Ref: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.31

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-06-08 01:03:39 +02:00
..
site toolchain: add support of ARC architecture 2015-11-10 12:03:59 +00:00
autotools.mk build: move STAGING_DIR_HOSTPKG and BUILD_DIR_HOST back to a common directory for all targets 2017-01-18 19:47:36 +01:00
cmake.mk cmake: skip build system check on compile 2017-02-21 13:03:20 +01:00
debug.mk include: remove trailing whitespaces 2015-03-29 07:29:18 +00:00
depends.mk build: add missing wildcard for ignoring .pkgdir in dependency checks 2017-02-05 22:17:30 +01:00
device_table.txt image: ensure that /dev/console exist in rootfs images 2013-08-27 12:02:58 +00:00
download.mk build: let make check warn about use of legacy PKG_MD5SUM variable in feeds 2017-01-13 10:23:43 +01:00
feeds.mk build: move PKG_CONFIG_DEPENDS from feeds.mk to opkg 2017-04-03 08:51:33 +02:00
hardening.mk hardening: make override variables more intuitive 2015-06-24 10:57:14 +00:00
host-build.mk build: stop overriding STAGING_DIR_HOST for toolchain build 2017-05-25 19:01:07 +02:00
image-commands.mk build: make NETGEAR_REGION optional in netgear-chk 2017-03-12 09:28:19 +01:00
image-legacy.mk build: fix build of ubifs images 2017-01-09 16:31:39 +01:00
image.mk image.mk: Generate cpiogz with root-owned files 2017-05-14 21:43:17 +02:00
kernel-build.mk kernel: fix segmentation fault in mconf on linux 2017-06-07 18:31:10 +02:00
kernel-defaults.mk build: add KERNEL_MAKE and KERNEL_MAKE_FLAGS variables and move to kernel.mk 2017-06-07 18:31:10 +02:00
kernel-version.mk kernel: update kernel 4.9 to 4.9.31 2017-06-08 01:03:39 +02:00
kernel.mk build: add KERNEL_MAKE and KERNEL_MAKE_FLAGS variables and move to kernel.mk 2017-06-07 18:31:10 +02:00
netfilter.mk netfilter.mk: prepare for linux 4.9 support 2017-01-27 11:18:27 +01:00
nls.mk nls.mk: add -rpath-link when needed for NLS support 2015-09-07 08:03:34 +00:00
package-bin.mk build: use if-then to avoid non-zero return codes in bin/ packaging code 2017-01-23 13:49:45 +01:00
package-defaults.mk build: reset ALTERNATIVES field in Package/Default 2017-05-03 17:40:46 +08:00
package-dumpinfo.mk include: fix nonshared flag handling 2016-04-15 10:26:36 +02:00
package-ipkg.mk build: ipkg: new field Alternatives 2017-05-02 22:10:51 +08:00
package-seccomp.mk include: add a seccomp filter install wrapper 2015-03-26 10:57:56 +00:00
package.mk build: fix QUILT related overrides 2017-05-25 20:42:45 +02:00
prereq-build.mk build: fix high cpu usage / hang in prereq-build.mk 2017-03-18 21:50:46 +01:00
prereq.mk build: do not overwrite already existing host commands 2015-09-16 12:38:16 +00:00
quilt.mk build: fix kernel refresh failure on first run 2017-06-04 10:36:48 +02:00
rootfs.mk build: cleanup tmp/ dir of target rootfs 2017-05-02 22:10:50 +08:00
scan.awk build: propagate override information to .packageinfo 2015-02-09 12:09:31 +00:00
scan.mk build: get rid of host.mk 2017-02-26 13:31:44 +01:00
scons.mk build: use CXXFLAGS if defined 2016-10-13 17:04:43 +02:00
shell.sh build: use mkhash to replace various quirky md5sum/openssl calls 2017-01-05 11:09:12 +01:00
subdir.mk build: allow building an individual subdir without dependencies using NO_DEPS=1 2017-02-21 13:03:20 +01:00
target.mk build: fix aarch64 default cpu selection 2017-04-23 09:19:33 +08:00
toolchain-build.mk build: stop overriding STAGING_DIR_HOST for toolchain build 2017-05-25 19:01:07 +02:00
toplevel.mk build: new fixes for symlinked .config handling 2017-05-11 00:53:05 +02:00
u-boot.mk u-boot.mk: pass HOSTCC and HOST_CFLAGS into the build 2017-04-04 12:34:23 +02:00
uclibc++.mk toolchain: eliminate the INSTALL_LIBSTDCPP config symbol and make c++ support mandatory - fixes recursive config symbol dependency issues 2013-05-09 20:50:49 +00:00
unpack.mk build: unzip: perform operations quietly 2017-01-05 11:09:13 +01:00
verbose.mk build: tell users to do non-paralle builds on errors 2015-04-16 12:18:26 +00:00
version.mk build: use SNAPSHOT instead of CURRENT to designate untagged branch builds 2016-12-14 18:43:49 +01:00