From 90794ad9b68d0de6baac2e6abdf335e22741b3d7 Mon Sep 17 00:00:00 2001
From: jc_gargma <jc_gargma@iserlohn-fortress.net>
Date: Fri, 19 Jan 2018 11:14:49 -0800
Subject: Updated to 4.14.14.a

---
 PKGBUILD | 21 +++++----------------
 1 file changed, 5 insertions(+), 16 deletions(-)

(limited to 'PKGBUILD')

diff --git a/PKGBUILD b/PKGBUILD
index 7389c76..22eba41 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -5,7 +5,7 @@
 
 pkgbase=linux-libre-hardened
 _majver=4.14
-_minver=13
+_minver=14
 _fullver=${_majver}.${_minver}
 _basever=${_majver}-gnu
 _pkgver=${_fullver}-gnu
@@ -26,38 +26,30 @@ source=(https://linux-libre.fsfla.org/pub/linux-libre/releases/${_basever}/linux
         90-linux.hook  # pacman hook for initramfs regeneration
         linux.preset   # standard config files for mkinitcpio ramdisk
 
-        # https://bugs.archlinux.org/task/56575
-        e1000e-Fix-e1000_check_for_copper_link_ich8lan-retur.patch
         # https://bugs.archlinux.org/task/56605
         xfrm-Fix-stack-out-of-bounds-read-on-socket-policy-lookup.patch
-        # https://bugs.archlinux.org/task/56846
-        cgroup-fix-css_task_iter-crash-on-CSS_TASK_ITER_PROC.patch
         # https://bugs.archlinux.org/task/56711
         drm-i915-edp-Only-use-the-alternate-fixed-mode-if-its-asked-for.patch
 
         CVE-2017-8824-dccp-use-after-free-in-DCCP-code.patch
         CVE-2017-17448-netfilter-nfnetlink_cthelper-Add-missing-permission-checks.patch
         CVE-2017-17450-netfilter-xt_osf-Add-missing-permission-checks.patch
-        CVE-2017-17741-KVM-Fix-stack-out-of-bounds-read-in-write_mmio.patch
 )
 sha256sums=('70f0098d823472402619a053211532423d15bfef628de7f49616014c81658278'
             'SKIP'
-            '3d1ab381d7c0ff298cce8785c90d9ed2da4788d0dfe56659303119f291c793b0'
+            '018b03f8ce45005c408c25631214c3879d880820956af0cc4658932bc4292087'
             'SKIP'
-            '6b12f95c7eecfc3629fe94079f5a82d509a31621f689503dd91225c730ed0371'
+            '0ee89f7c93da3708047467041d4fed7f2f19e07d2a46c3184f61d8ba5d36a80a'
             'SKIP'
-            '705ceb98f0ea2e22be30087ac28cf65d2b66d33ca0190cb4e53d3ff806902150'
+            'a059fdf35987ec422940dc50e55eb64621699b63cb0d7db5851813de99208fdd'
             'ae2e95db94ef7176207c690224169594d49445e04249d2499e9d2fbc117a0b21'
             '75f99f5239e03238f88d1a834c50043ec32b1dc568f2cc291b07d04718483919'
             'ad6344badc91ad0630caacde83f7f9b97276f80d26a20619a87952be65492c65'
-            'c6e7db7dfd6a07e1fd0e20c3a5f0f315f9c2a366fe42214918b756f9a1c9bfa3'
             '294c928b8252112d621df1d13fbfeade13f28ddea034d44e89db41b66d2b7d45'
-            '721c387db986d883a6df6b0da17941ce6d59811b0647ae6653b978c5ee144f19'
             'c08d12c699398ef88b764be1837b9ee11f2efd3188bd1bf4e8f85dfbeee58148'
             '6be803c62b7ce41f1b4de6c867715398812b1c1a3e68a0078512f2872e2a3fa9'
             'b833ad4354fcd2cc6ee60c971088f77aa5b06a58fce346c40268c0b05b1e8cb5'
-            '72efa781c8ee1175a8865e6a12568aaf3bac4b76d4285819c6a75a3e5fe41435'
-            'ee125179fdd295266aba52e1aebaef97cb41f4a05d9cd1c2b11b4ce83746e197')
+            '72efa781c8ee1175a8865e6a12568aaf3bac4b76d4285819c6a75a3e5fe41435')
 validpgpkeys=(
               '474402C8C582DAFBE389C427BCB7CF877E7D47A7' # Alexandre Oliva
               '65EEFE022108E2B708CBFCF7F9E712E59AF5F22A' # Daniel Micay
@@ -74,13 +66,10 @@ prepare() {
   chmod +x tools/objtool/sync-check.sh
 
   # Hotfixes
-  patch -p1 -i "${srcdir}/cgroup-fix-css_task_iter-crash-on-CSS_TASK_ITER_PROC.patch"
   patch -p1 -i "${srcdir}/CVE-2017-8824-dccp-use-after-free-in-DCCP-code.patch"
   patch -p1 -i "${srcdir}/CVE-2017-17448-netfilter-nfnetlink_cthelper-Add-missing-permission-checks.patch"
   patch -p1 -i "${srcdir}/CVE-2017-17450-netfilter-xt_osf-Add-missing-permission-checks.patch"
-  patch -p1 -i "${srcdir}/CVE-2017-17741-KVM-Fix-stack-out-of-bounds-read-in-write_mmio.patch"
   patch -p1 -i "${srcdir}/drm-i915-edp-Only-use-the-alternate-fixed-mode-if-its-asked-for.patch"
-  patch -p1 -i "${srcdir}/e1000e-Fix-e1000_check_for_copper_link_ich8lan-retur.patch"
   patch -p1 -i "${srcdir}/xfrm-Fix-stack-out-of-bounds-read-on-socket-policy-lookup.patch"
 
   # linux hardened patch
-- 
cgit v1.2.1