summaryrefslogtreecommitdiff
path: root/profiles
diff options
context:
space:
mode:
Diffstat (limited to 'profiles')
-rw-r--r--profiles/Manifest.gzbin179460 -> 179461 bytes
-rw-r--r--profiles/package.mask30
-rw-r--r--profiles/use.local.desc2
3 files changed, 26 insertions, 6 deletions
diff --git a/profiles/Manifest.gz b/profiles/Manifest.gz
index 1a33fabdbd82..e2991b714f7a 100644
--- a/profiles/Manifest.gz
+++ b/profiles/Manifest.gz
Binary files differ
diff --git a/profiles/package.mask b/profiles/package.mask
index 2e96f16371f1..1355aff7ba9b 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -33,6 +33,32 @@
#--- END OF EXAMPLES ---
+# Mike Pagano <mpagano@gentoo.org> (2023-07-18)
+# Mask impacted kernels vulnerable to StackRot and
+# ones with a memory corruption bug
+# Bug #909829, #794547.
+=sys-kernel/gentoo-kernel-6.1.28
+=sys-kernel/gentoo-kernel-6.1.37*
+=sys-kernel/gentoo-kernel-6.3*
+=sys-kernel/gentoo-sources-6.1.28
+=sys-kernel/gentoo-sources-6.1.37*
+=sys-kernel/gentoo-sources-6.3*
+=sys-kernel/gentoo-sources-6.4.0
+=sys-kernel/gentoo-sources-6.4.1*
+=sys-kernel/gentoo-sources-6.4.2
+=sys-kernel/vanilla-kernel-6.1.28
+=sys-kernel/vanilla-kernel-6.1.37*
+=sys-kernel/vanilla-kernel-6.3*
+=sys-kernel/vanilla-sources-6.1.28
+=sys-kernel/vanilla-sources-6.1.37*
+=sys-kernel/vanilla-sources-6.3*
+=sys-kernel/vanilla-sources-6.4.0
+=sys-kernel/vanilla-sources-6.4.1*
+=sys-kernel/vanilla-sources-6.4.2
+=virtual/dist-kernel-6.1.28
+=virtual/dist-kernel-6.1.37*
+=virtual/dist-kernel-6.3*
+
# Hans de Graaff <graaff@gentoo.org> (2023-07-18)
# Obsolete rubu30-only package, previously a dependency of nanoc. No
# longer maintained upstream. Masked for removal on 2023-08-18.
@@ -522,10 +548,6 @@ x11-drivers/nvidia-drivers:0/390
# not include 5.15.99 and is misleading
=sys-kernel/gentoo-sources-5.15.99
-# Mike Pagano <mpagano@gentoo.org> (2023-02-27)
-# Mask =www-servers/nginx-unit-1.29.0-r1 for testing
-=www-servers/nginx-unit-1.29.0-r1
-
# Torokhov Sergey <torokhov-s-a@yandex.ru> (2023-02-26)
# The masked version causes GIMP breaking of Cut/Copy/Paste
# https://gitlab.gnome.org/GNOME/gimp/-/issues/9175
diff --git a/profiles/use.local.desc b/profiles/use.local.desc
index 297136f54352..c19905eb57e7 100644
--- a/profiles/use.local.desc
+++ b/profiles/use.local.desc
@@ -390,7 +390,6 @@ app-crypt/seahorse:ldap - Enable seahorse to manipulate GPG keys on a LDAP serve
app-crypt/swtpm:fuse - Support sys-fs/fuse based /dev/tpm interface
app-crypt/swtpm:gnutls - Use net-libs/gnutls as crypto engine
app-crypt/swtpm:openssl - Use dev-libs/openssl as crypto engine
-app-crypt/tpm-emulator:mtm-emulator - Build the MTM emulator
app-crypt/tpm-tools:pkcs11 - Build Token data management utilities based on OpenCryptoki's (dev-libs/opencryptoki) PKCS#11 implementation.
app-crypt/tpm2-pkcs11:fapi - Enable feature API backend
app-crypt/tpm2-tools:fapi - Enable feature API tools
@@ -6822,7 +6821,6 @@ net-voip/yate:tdmcard - Enable TDMV API card driver
net-voip/yate:wanpipe - Enable Wanpipe support
net-voip/yate:wpcard - Enable Wanpipe card driver
net-voip/yate:zaptel - Enable Zaptel driver
-net-vpn/i2p:nls - Adds Native Language Support using GNU gettext.
net-vpn/i2pd:i2p-hardening - Compile with hardening on vanilla compilers/linkers
net-vpn/libreswan:dnssec - Use DNSSEC resolver (requires net-dns/unbound)
net-vpn/networkmanager-sstp:gtk4 - Use gui-libs/gtk for GUI support.