bump to 4.4.47_rt59-2 and patch CVE-2017-6074

1 files changed, 8 insertions, 2 deletions

diff --git a/PKGBUILD b/PKGBUILD
index 80ca36a..2028eb4 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -10,7 +10,7 @@ _srcname=linux-4.4
 _pkgver=4.4.47
 _rtpatchver=rt59
 pkgver=${_pkgver}_${_rtpatchver}
-pkgrel=1
+pkgrel=2
 arch=('i686' 'x86_64')
 url="https://www.kernel.org/"
 license=('GPL2')
@@ -31,6 +31,7 @@ source=("https://www.kernel.org/pub/linux/kernel/v4.x/${_srcname}.tar.xz"
         'change-default-console-loglevel.patch'
         'fix-race-in-PRT-wait-for-completion-simple-wait-code_Nvidia-RT-160319.patch'
         '0001-fix-rt_mutex.patch'
+        '0001-dccp-fix-freeing-skb-too-early-for-IPV6_RECVPKTINFO.patch'
         )
 
 sha256sums=('401d7c8fef594999a460d10c72c5a94e9c2e1022f16795ec51746b0d165418b2'
@@ -45,7 +46,8 @@ sha256sums=('401d7c8fef594999a460d10c72c5a94e9c2e1022f16795ec51746b0d165418b2'
             'a8886f2c9896f81f59cf0413b3e380cda2fbdc667eb9ce8dfcb0fceb6d92279f'
             '1256b241cd477b265a3c2d64bdc19ffe3c9bbcee82ea3994c590c2c76e767d99'
             '85f7612edfa129210343d6a4fe4ba2a4ac3542d98b7e28c8896738e7e6541c06'
-            '785960e97b6054274814a2354f84ccd64c0c01485761d3a3a82a4458bd7ad021')
+            '785960e97b6054274814a2354f84ccd64c0c01485761d3a3a82a4458bd7ad021'
+            'ab22d941388440ee7da44535305f535cb5a2abc4151289757f5753b13ebd78e8')
 
 validpgpkeys=('ABAF11C65A2970B130ABE3C479BE3E4300411886' # Linus Torvalds
               '647F28654894E3BD457199BE38DBBDC86092693E' # Greg Kroah-Hartman
@@ -81,6 +83,10 @@ prepare() {
 
   msg "0001-fix-rt_mutex.patch"
   patch -p1 -i "${srcdir}/0001-fix-rt_mutex.patch"
+  
+  # https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6074
+  msg "applying 0001-dccp-fix-freeing-skb-too-early-for-IPV6_RECVPKTINFO.patch"
+  patch -p1 -i "${srcdir}/0001-dccp-fix-freeing-skb-too-early-for-IPV6_RECVPKTINFO.patch"
 
   msg "All patches have successfully been applied"