summaryrefslogtreecommitdiff
path: root/PKGBUILD
diff options
context:
space:
mode:
authorjc_gargma <jc_gargma@iserlohn-fortress.net>2018-01-19 11:14:49 -0800
committerjc_gargma <jc_gargma@iserlohn-fortress.net>2018-01-19 11:14:49 -0800
commit90794ad9b68d0de6baac2e6abdf335e22741b3d7 (patch)
treed2b7384c12288028b39032589b5ca6a168ce3382 /PKGBUILD
parentFixed broken urls (diff)
downloadlinux-libre-hardened-90794ad9b68d0de6baac2e6abdf335e22741b3d7.tar.xz
Updated to 4.14.14.a
Diffstat (limited to 'PKGBUILD')
-rw-r--r--PKGBUILD21
1 files changed, 5 insertions, 16 deletions
diff --git a/PKGBUILD b/PKGBUILD
index 7389c76..22eba41 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -5,7 +5,7 @@
pkgbase=linux-libre-hardened
_majver=4.14
-_minver=13
+_minver=14
_fullver=${_majver}.${_minver}
_basever=${_majver}-gnu
_pkgver=${_fullver}-gnu
@@ -26,38 +26,30 @@ source=(https://linux-libre.fsfla.org/pub/linux-libre/releases/${_basever}/linux
90-linux.hook # pacman hook for initramfs regeneration
linux.preset # standard config files for mkinitcpio ramdisk
- # https://bugs.archlinux.org/task/56575
- e1000e-Fix-e1000_check_for_copper_link_ich8lan-retur.patch
# https://bugs.archlinux.org/task/56605
xfrm-Fix-stack-out-of-bounds-read-on-socket-policy-lookup.patch
- # https://bugs.archlinux.org/task/56846
- cgroup-fix-css_task_iter-crash-on-CSS_TASK_ITER_PROC.patch
# https://bugs.archlinux.org/task/56711
drm-i915-edp-Only-use-the-alternate-fixed-mode-if-its-asked-for.patch
CVE-2017-8824-dccp-use-after-free-in-DCCP-code.patch
CVE-2017-17448-netfilter-nfnetlink_cthelper-Add-missing-permission-checks.patch
CVE-2017-17450-netfilter-xt_osf-Add-missing-permission-checks.patch
- CVE-2017-17741-KVM-Fix-stack-out-of-bounds-read-in-write_mmio.patch
)
sha256sums=('70f0098d823472402619a053211532423d15bfef628de7f49616014c81658278'
'SKIP'
- '3d1ab381d7c0ff298cce8785c90d9ed2da4788d0dfe56659303119f291c793b0'
+ '018b03f8ce45005c408c25631214c3879d880820956af0cc4658932bc4292087'
'SKIP'
- '6b12f95c7eecfc3629fe94079f5a82d509a31621f689503dd91225c730ed0371'
+ '0ee89f7c93da3708047467041d4fed7f2f19e07d2a46c3184f61d8ba5d36a80a'
'SKIP'
- '705ceb98f0ea2e22be30087ac28cf65d2b66d33ca0190cb4e53d3ff806902150'
+ 'a059fdf35987ec422940dc50e55eb64621699b63cb0d7db5851813de99208fdd'
'ae2e95db94ef7176207c690224169594d49445e04249d2499e9d2fbc117a0b21'
'75f99f5239e03238f88d1a834c50043ec32b1dc568f2cc291b07d04718483919'
'ad6344badc91ad0630caacde83f7f9b97276f80d26a20619a87952be65492c65'
- 'c6e7db7dfd6a07e1fd0e20c3a5f0f315f9c2a366fe42214918b756f9a1c9bfa3'
'294c928b8252112d621df1d13fbfeade13f28ddea034d44e89db41b66d2b7d45'
- '721c387db986d883a6df6b0da17941ce6d59811b0647ae6653b978c5ee144f19'
'c08d12c699398ef88b764be1837b9ee11f2efd3188bd1bf4e8f85dfbeee58148'
'6be803c62b7ce41f1b4de6c867715398812b1c1a3e68a0078512f2872e2a3fa9'
'b833ad4354fcd2cc6ee60c971088f77aa5b06a58fce346c40268c0b05b1e8cb5'
- '72efa781c8ee1175a8865e6a12568aaf3bac4b76d4285819c6a75a3e5fe41435'
- 'ee125179fdd295266aba52e1aebaef97cb41f4a05d9cd1c2b11b4ce83746e197')
+ '72efa781c8ee1175a8865e6a12568aaf3bac4b76d4285819c6a75a3e5fe41435')
validpgpkeys=(
'474402C8C582DAFBE389C427BCB7CF877E7D47A7' # Alexandre Oliva
'65EEFE022108E2B708CBFCF7F9E712E59AF5F22A' # Daniel Micay
@@ -74,13 +66,10 @@ prepare() {
chmod +x tools/objtool/sync-check.sh
# Hotfixes
- patch -p1 -i "${srcdir}/cgroup-fix-css_task_iter-crash-on-CSS_TASK_ITER_PROC.patch"
patch -p1 -i "${srcdir}/CVE-2017-8824-dccp-use-after-free-in-DCCP-code.patch"
patch -p1 -i "${srcdir}/CVE-2017-17448-netfilter-nfnetlink_cthelper-Add-missing-permission-checks.patch"
patch -p1 -i "${srcdir}/CVE-2017-17450-netfilter-xt_osf-Add-missing-permission-checks.patch"
- patch -p1 -i "${srcdir}/CVE-2017-17741-KVM-Fix-stack-out-of-bounds-read-in-write_mmio.patch"
patch -p1 -i "${srcdir}/drm-i915-edp-Only-use-the-alternate-fixed-mode-if-its-asked-for.patch"
- patch -p1 -i "${srcdir}/e1000e-Fix-e1000_check_for_copper_link_ich8lan-retur.patch"
patch -p1 -i "${srcdir}/xfrm-Fix-stack-out-of-bounds-read-on-socket-policy-lookup.patch"
# linux hardened patch