sys-kernel/xanmod-kernel: Backport CVE-2023-32233 fix to 6.1.27-r1

Signed-off-by: Alfred Wingate <parona@protonmail.com>
This commit is contained in:
Alfred Wingate 2023-05-12 06:52:04 +03:00
parent a579da7305
commit f94c32f631
No known key found for this signature in database
GPG Key ID: A12750536B5E7010
2 changed files with 80 additions and 0 deletions

View File

@ -2,6 +2,8 @@ DIST genpatches-6.1-30.base.tar.xz 1467496 BLAKE2B 7e442668319addb39f4812669463c
DIST genpatches-6.1-30.extras.tar.xz 3812 BLAKE2B 8797213e32516d6f5cd88061574201951f5803f9e26e0662eae391704521c9530c47bcf2498a469b3e8f0696a1fa1a329fa097e983476ae4aaf38af465c1593e SHA512 58f4e9d6791b3e9903703349f4cb5456fe2e4d871cdf6f7c3dcf0338982c55c82c1da80b65a768d8efd2d992386c176821f4858aedaefcfc4b293c55a7aa8a1a DIST genpatches-6.1-30.extras.tar.xz 3812 BLAKE2B 8797213e32516d6f5cd88061574201951f5803f9e26e0662eae391704521c9530c47bcf2498a469b3e8f0696a1fa1a329fa097e983476ae4aaf38af465c1593e SHA512 58f4e9d6791b3e9903703349f4cb5456fe2e4d871cdf6f7c3dcf0338982c55c82c1da80b65a768d8efd2d992386c176821f4858aedaefcfc4b293c55a7aa8a1a
DIST genpatches-6.1-31.base.tar.xz 1473456 BLAKE2B 2bee72cc97ba8a27bab8f69ab11ca7ac3aab81c9d9a00a8cdbe4ab6a50a378d6ea0de3b825ea2acc2fc3cac900b5bb2c3dd7e652a38f804237bb478020be9b5b SHA512 da57c6f5495b0768807c064f7045a19f0d6cb1d90150b6987d6ea0e21756668fb29fdd40329061acfcb923ac3d1dda2144853c33fe5f1bb5d21df05fd30bac65 DIST genpatches-6.1-31.base.tar.xz 1473456 BLAKE2B 2bee72cc97ba8a27bab8f69ab11ca7ac3aab81c9d9a00a8cdbe4ab6a50a378d6ea0de3b825ea2acc2fc3cac900b5bb2c3dd7e652a38f804237bb478020be9b5b SHA512 da57c6f5495b0768807c064f7045a19f0d6cb1d90150b6987d6ea0e21756668fb29fdd40329061acfcb923ac3d1dda2144853c33fe5f1bb5d21df05fd30bac65
DIST genpatches-6.1-31.extras.tar.xz 3812 BLAKE2B 2d599eba0488cce5ff711080e61cc94aef9265c710c5b68ca7badb4a13147cf8f19e4660988321a0f929a3d3a9dd78adf30f905d4eeb63de4e45f41bc5063fd3 SHA512 87db9b58bb212c5182927012b95d04628dec1cb884cf52b83c566fc52262a5684dcea298260233f8a02974b30640f538754893b2c87cb34a71b5d7674b482ae2 DIST genpatches-6.1-31.extras.tar.xz 3812 BLAKE2B 2d599eba0488cce5ff711080e61cc94aef9265c710c5b68ca7badb4a13147cf8f19e4660988321a0f929a3d3a9dd78adf30f905d4eeb63de4e45f41bc5063fd3 SHA512 87db9b58bb212c5182927012b95d04628dec1cb884cf52b83c566fc52262a5684dcea298260233f8a02974b30640f538754893b2c87cb34a71b5d7674b482ae2
DIST genpatches-6.1-32.base.tar.xz 1474460 BLAKE2B 43060d16a84ca2c65ef9d7447747e6b857423134fd518e05c3c052bf5c664c9a0f8af97b84e7d911c84766cf478b71695537a3c56a367589bf37adaac032a7e0 SHA512 cf8bd867d09b68a197368c546ffa4c626b1c30f0f7a63138129d3abe8a0479c88717dff6ea0a79c53d7f108d2a1fedc433b7b2088e20f082be921701e5d7d790
DIST genpatches-6.1-32.extras.tar.xz 3808 BLAKE2B b697db5da31e471ab0af978e722c12ca2d8c5cc371f1d4c2d11c5816b34b479e6ac17f1cd9ab26826bacb065e0a254e18b767c9cfcc12fb16c40f9d73aa1e3d9 SHA512 9113f7505f8dd5a535e2550863dc8d69a6961fc4180d5a7b77206a397db570571f083e39f6be87da072b588e4a2d1b9c1e4b2a725172c9a799b3dc8e88542f66
DIST genpatches-6.2-13.base.tar.xz 700552 BLAKE2B 53187881831a5ee8ac1581d78d89b56d5e6cbd45a1267f294312fbd648818530f029280b6face5c1c7f7c6d2c13c5e3fc6d1747f4abea8b2065f960a42a45d2e SHA512 2ca287f97bb3c01291eb5faa1de40827d014547e2cbb5063e77597e027f58672a262bcc51f1f2111cb5621f75b59c61a3cfa40f30fe8bc923136f8de3dd3e1ca DIST genpatches-6.2-13.base.tar.xz 700552 BLAKE2B 53187881831a5ee8ac1581d78d89b56d5e6cbd45a1267f294312fbd648818530f029280b6face5c1c7f7c6d2c13c5e3fc6d1747f4abea8b2065f960a42a45d2e SHA512 2ca287f97bb3c01291eb5faa1de40827d014547e2cbb5063e77597e027f58672a262bcc51f1f2111cb5621f75b59c61a3cfa40f30fe8bc923136f8de3dd3e1ca
DIST genpatches-6.2-13.extras.tar.xz 3812 BLAKE2B 2e0620c2c03f6775a4ee7d29aeace0ed2474edf371bdea0aff7ec8b11db0804641ba4d2cb1993fdd7936ad6075c1b7de0bca6c055327b25f17a74d4f3a9d5d4c SHA512 5a146e403f04c1b8fec69ff2824f4d0b446fea895126839aacc511b47b4eadcfcf61ced441e3886ad4fc018379b029305d72a99d34d98ef1fdf486e28e888ce2 DIST genpatches-6.2-13.extras.tar.xz 3812 BLAKE2B 2e0620c2c03f6775a4ee7d29aeace0ed2474edf371bdea0aff7ec8b11db0804641ba4d2cb1993fdd7936ad6075c1b7de0bca6c055327b25f17a74d4f3a9d5d4c SHA512 5a146e403f04c1b8fec69ff2824f4d0b446fea895126839aacc511b47b4eadcfcf61ced441e3886ad4fc018379b029305d72a99d34d98ef1fdf486e28e888ce2
DIST genpatches-6.2-14.base.tar.xz 737376 BLAKE2B a31157486ed656f479c36a1d728627ba1361656e8a2d8a2dcaee0ee59e6edd6c046ad7799d2458e42990d53ea9893e49f26447a380b0c5bb02f8033e8ed3fc1b SHA512 126b365b3d5dd435e3ce8eac2b030bdeb227c3047d9b7182a289adc3746fd35f6454f08fa9ac323b83544d2ed614d9d1c1da569c74d8c61c50b14ab358ce4115 DIST genpatches-6.2-14.base.tar.xz 737376 BLAKE2B a31157486ed656f479c36a1d728627ba1361656e8a2d8a2dcaee0ee59e6edd6c046ad7799d2458e42990d53ea9893e49f26447a380b0c5bb02f8033e8ed3fc1b SHA512 126b365b3d5dd435e3ce8eac2b030bdeb227c3047d9b7182a289adc3746fd35f6454f08fa9ac323b83544d2ed614d9d1c1da569c74d8c61c50b14ab358ce4115

View File

@ -0,0 +1,78 @@
# Copyright 2022-2023 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=8
inherit kernel-build
MY_P=linux-${PV%.*}
GENPATCHES_P=genpatches-${PV%.*}-$(( ${PV##*.} + 5 ))
GENTOO_CONFIG_VER=g7
DESCRIPTION="Linux kernel built with XanMod and Gentoo patches"
HOMEPAGE="https://www.kernel.org/ https://xanmod.org/"
SRC_URI="
https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/${MY_P}.tar.xz
https://github.com/xanmod/linux/releases/download/${PV}-xanmod1/patch-${PV}-xanmod1.xz
https://dev.gentoo.org/~mpagano/dist/genpatches/${GENPATCHES_P}.base.tar.xz
https://dev.gentoo.org/~mpagano/dist/genpatches/${GENPATCHES_P}.extras.tar.xz
https://github.com/mgorny/gentoo-kernel-config/archive/${GENTOO_CONFIG_VER}.tar.gz
-> gentoo-kernel-config-${GENTOO_CONFIG_VER}.tar.gz
"
S=${WORKDIR}/${MY_P}
LICENSE="GPL-2"
KEYWORDS="-* ~amd64"
IUSE="debug"
RDEPEND="
!sys-kernel/xanmod-kernel-bin:${SLOT}
"
BDEPEND="
debug? ( dev-util/pahole )
"
PDEPEND="
>=virtual/dist-kernel-${PV}
"
QA_FLAGS_IGNORED="
usr/src/linux-.*/scripts/gcc-plugins/.*.so
usr/src/linux-.*/vmlinux
"
src_prepare() {
# Remove linux-stable patches (see 0000_README)
find "${WORKDIR}" -maxdepth 1 -name "1[0-4][0-9][0-9]*.patch" -exec rm {} + || die
local PATCHES=(
# meh, genpatches have no directory
"${WORKDIR}"/patch-${PV}-xanmod1
"${WORKDIR}"/*.patch
)
default
# prepare the default config
case ${ARCH} in
amd64)
cp "${S}/CONFIGS/xanmod/gcc/config_x86-64-v1" .config || die
;;
*)
die "Unsupported arch ${ARCH}"
;;
esac
rm "${S}/localversion" || die
local myversion="-xanmod1-dist"
echo "CONFIG_LOCALVERSION=\"${myversion}\"" > "${T}"/version.config || die
local dist_conf_path="${WORKDIR}/gentoo-kernel-config-${GENTOO_CONFIG_VER}"
local merge_configs=(
"${T}"/version.config
"${dist_conf_path}"/base.config
)
use debug || merge_configs+=(
"${dist_conf_path}"/no-debug.config
)
kernel-build_merge_configs "${merge_configs[@]}"
}