Rolf Neugebauer
21fb4db99b
kernel: Update to 4.17.10/4.14.58/4.9.115/4.4.144
...
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-07-25 21:09:25 +01:00
Rolf Neugebauer
480a8bc860
kernel: Update to 4.17.9/4.14.57/4.9.114/4.4.143
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-07-24 11:56:25 +01:00
Rolf Neugebauer
f70fc83b1d
kernel: Update to 4.17.7/4.14.56/4.9.113/4.4.141
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-07-17 13:48:18 +01:00
Rolf Neugebauer
c9dc3b97de
kernel: Update to 4.17.6/4.14.55/4.9.112/4.4.140
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@gmail.com>
2018-07-14 13:10:03 +01:00
Rolf Neugebauer
dcc4a5e799
kernel: Update to 4.17.4/4.14.53/4.9.111/4.4.139
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-07-03 11:49:36 +01:00
Rolf Neugebauer
e7a7fe9339
kernels: Update to 4.17.3/4.16.18/4.14.52/4.9.110
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-06-27 13:10:44 +01:00
Rolf Neugebauer
2ff0491ac1
kernel: Update to 4.17.2/4.16.16/4.14.50/4.9.109
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-06-20 13:50:23 +01:00
Rolf Neugebauer
268b5269f9
kernel: Update to 4.9.108
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-06-20 13:19:24 +01:00
Rolf Neugebauer
4e830a35a1
kernel: Update to 4.16.14/4.14.48/4.9.107/4.4.136
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-06-07 12:10:22 +01:00
Rolf Neugebauer
17d9870dd7
kernel: Update to 4.9.106
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-06-07 11:42:54 +01:00
Rolf Neugebauer
ba5e75a24e
kernel: Update to 4.14.47/4.9.105/4.4.135
...
These releases are a single patch only, fixing a bug.
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-06-06 08:26:54 +01:00
Rolf Neugebauer
acc059e6c8
kernel: Updatr to 4.16.13/4.14.46/4.9.104/4.4.134
...
Note, we skip 4.14.45 because 4.14.46 only has 3 patches
in it which unbreak 'perf' compilation.
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-05-30 15:59:03 +01:00
Rolf Neugebauer
d9a1ea45ce
kernel: Update to 4.16.12/4.14.44/4.9.103/4.4.133
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-05-30 14:36:14 +01:00
Rolf Neugebauer
00ce115df9
kernel: Update to 4.16.11/4.14.43/4.9.102
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-05-24 13:11:31 +01:00
Rolf Neugebauer
454d2142f3
kernel: Update to 4.16.10/4.14.42/4.9.101
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-05-24 10:54:45 +01:00
Rolf Neugebauer
c4a265c77f
kernel: Update to 4.16.9/4.14.41/4.9.100/4.4.132
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-05-16 17:55:10 +01:00
Rolf Neugebauer
2e2de63133
kernel: Update to 4.16.8/4.14.40/4.9.99
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-05-10 13:06:28 +01:00
Rolf Neugebauer
655bb391ca
kernel: Update to 4.16.7/4.14.39/4.9.98/4.4.131
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-05-03 17:22:26 +01:00
Rolf Neugebauer
262b25f874
kernel: Update to 4.16.6/4.14.38/4.9.97/4.4.130
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-04-30 10:35:33 +01:00
Rolf Neugebauer
54ed15ccce
kernel: Update to 4.16.5/4.14.37/4.9.96/4.4.129
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-04-27 16:45:36 +01:00
Rolf Neugebauer
d56d66a7aa
kernel: Update to 4.9.95
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-04-23 11:52:12 +01:00
Rolf Neugebauer
054b9bb924
kernel: Update to 4.9.94/4.4.128
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@gmail.com>
2018-04-14 11:18:33 +01:00
Rolf Neugebauer
fa9452af09
kernel: Update to 4.15.16/4.14.33/4.9.93/4.4.127
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-04-09 10:35:34 +01:00
Rolf Neugebauer
a5a685750d
kernel: Update to 4.15.15/4.14.32/4.9.92/4.4.126
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@gmail.com>
2018-04-01 17:52:14 +01:00
Rolf Neugebauer
462961d5c9
kernel: Update to 4.15.14/4.14.31/4.9.91/4.4.125
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@gmail.com>
2018-03-30 13:29:03 +01:00
Rolf Neugebauer
7f12cb577a
kernel: Update to 4.15.13/4.14.30/4.9.90/4.4.124
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@gmail.com>
2018-03-30 12:19:02 +01:00
Rolf Neugebauer
208811355a
kernel: Update to 4.15.12/4.14.29/4.9.89/4.4.123
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@gmail.com>
2018-03-22 19:55:57 +00:00
Rolf Neugebauer
45b613e668
kernel: Update to 4.15.11/4.14.28/4.9.88/4.4.122
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-03-20 12:05:27 +00:00
Rolf Neugebauer
659f877da6
kernel: Update to 4.15.9/4.14.26/4.9.87/4.4.121
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-03-12 17:00:06 +00:00
Rolf Neugebauer
ae30674227
kernel: Update to 4.14.24/4.9.86/4.4.120
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-03-09 12:39:11 +00:00
Rolf Neugebauer
fcba3e2350
kernel: Update to 4.15.7/4.4.23/4.9.85/4.4.119
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-02-28 11:02:15 +00:00
Rolf Neugebauer
75ac2563f5
kernel: Update to 4.15.6/4.14.22/4.9.84/4.4.118
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-02-26 12:16:51 +00:00
Rolf Neugebauer
5c68ca489d
kernel: Update to 4.15.5/4.14.21/4.9.83/4.4.117
...
Also remove the 4.4 patch which should have been removed by
231cead2cc
("kernel: Update to 4.15.4/4.14.20/4.9.82/4.4.116")
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-02-23 18:06:18 +00:00
Rolf Neugebauer
231cead2cc
kernel: Update to 4.15.4/4.14.20/4.9.82/4.4.116
...
The 4.14.20 update has Meltdown/Spectre fixes for arm64
The 4.4.116 update incorporates the proper fix for the
div by zero crash in the firmware loader, so the patch
with the hackish workaround was dropped.
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-02-19 14:06:11 +00:00
Rolf Neugebauer
43ba6de147
kernel: Update to 4.15.3/4.14.19/4.9.81
...
Drop the hack for the microcode division by 0 on GCP as
a proper fix is in upstream as:
2760f452a718 ("x86/microcode: Do the family check first")
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-02-13 17:22:23 +00:00
Rolf Neugebauer
ee0f182014
kernel: Update to 4.15.1/4.14.17/4.9.80/4.4.115
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-02-06 18:06:25 +00:00
Rolf Neugebauer
e4c4737548
kernel: Add patch to prevent division by zero panic
...
This adds a patch to avoid a division by zero panic for 4.4.x
and 4.9.x kernels on single vCPU machine types on Google Cloud.
4.14.x and 4.15.x kernels seem to work fine.
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-02-06 13:23:40 +00:00
Rolf Neugebauer
a6a5f69c8d
kernel: Update to 4.14.16/4.9.79/4.4.114
...
The 4.14 and 4.9 kernels have a significant number of
fixes to eBPF and also a fix for kernel level sockets
and namespace removals, ie fixes some aspects of
https://github.com/moby/moby/issues/5618
"unregister_netdevice: waiting for lo to become free"
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-02-06 13:23:40 +00:00
Rolf Neugebauer
5de66f4fd9
kernel: Update to 4.14.15/4.9.78/4.4.113
...
While at it, also update to latest alpine base
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-24 11:56:34 +00:00
Rolf Neugebauer
bfceb1dfbb
kernel: Update to 4.14.14/4.9.77/4.4.112
...
The 4.4.14 has a number of important fixes/additions:
- New support for retpolines (enabled but requires newer gcc
to take advantage of). This provides mitigation for Spectre
style attacks.
- Various KPTI fixes including fixes for EFI booting
- More eBPF fixes around out-of-bounds and overflow of
maps. These were used for variant 1 of CVE-2017-5753.
- Several KVM related to CVE-2017-5753, CVE-2017-5715,
CVE-2017-17741.
- New sysfs interface listing vulnerabilities:
/sys/devices/system/cpu/vulnerabilities
The 4.9.77 kernel also has seems to have most/all of the above
back-ported.
See https://lwn.net/SubscriberLink/744287/1fc3c18173f732e7/
for more details on the Spectre mitigation.
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-17 14:31:54 +00:00
Rolf Neugebauer
9a101d1136
kernel: Update to 4.14.13/4.9.76/4.4.111
...
This looks like there are a couple of minor fixes to the
recent KPTI changes but nothing major...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-10 11:12:27 +00:00
Rolf Neugebauer
d86d43fe40
kernel: Update to 4.14.12/4.9.75/4.4.110
...
4.9.75 and 4.4.10 now have KPTI backported as well
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-06 10:00:13 +00:00
Rolf Neugebauer
7abc1df0ad
kernel: Update to 4.14.11/4.9.74/4.4.109
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-03 11:03:52 +00:00
Rolf Neugebauer
37291f5967
kernel: Update to 4.14.10/4.9.73
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-12-30 16:11:10 +00:00
Rolf Neugebauer
dfb1982c65
kernel: Update to 4.14.9/4.9.72/4.4.108
...
This contains the fixes to the eBPF verifier which allowed
privilege escalation in 4.9 and 4.14 kernels.
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-12-28 16:43:14 +00:00
Rolf Neugebauer
e140ab4acc
kernel: Update to 4.14.8/4.9.71/4.4.107
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-12-28 14:48:20 +00:00
Rolf Neugebauer
467c1af0e2
kernel: Update to 4.14.7/4.9.70/4.4.106
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-12-18 16:59:21 +00:00
Rolf Neugebauer
1cf58d95b1
kernel: Update to 4.14.6/4.9.69
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-12-14 11:21:07 +00:00
Rolf Neugebauer
6a15459665
kernel: Update to 4.14.5/4.9.68/4.4.105
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-12-11 11:24:38 +00:00
Rolf Neugebauer
53127d7209
kernel: Update to 4.14.4/4.9.67/4.4.104
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-12-06 10:11:50 +00:00