unredacted/linux-hardened-unredacted
3
2
Fork 0
Code Issues Pull requests Projects Releases 23 Packages Wiki Activity Actions 1

Upstream linux-hardened tag v7.1.8-hardened1 available #45

New issue
Closed
opened 2026-08-10 19:01:02 +00:00 by unredacted_bot · 1 comment
unredacted_bot commented 2026-08-10 19:01:02 +00:00
Owner
Copy link

Upstream tag: v7.1.8-hardened1
Local newest PUBLISHED: v7.1.7-hardened1

No CVEs are recorded as fixed between 7.1.7 and 7.1.8 in the kernel CVE feed yet (the feed can lag a release).

Action: review the upstream signature, then tag from an up-to-date
main and push — the tag push triggers build-kernel.yml.

git switch main && git pull --ff-only   # do NOT skip
git tag v7.1.8-hardened1
git push origin v7.1.8-hardened1

The pull is load-bearing. Seed-bump merges and publish: commits
land on main continuously between builds, so a tag cut from a
stale checkout builds an old seed pin and silently ships that config.
If you already pushed a stale tag, drop it on both sides
(git push origin :refs/tags/v7.1.8-hardened1 then
git tag -d v7.1.8-hardened1), pull, and re-tag.

See docs/users/cve-policy.md for the SLA.

Upstream tag: v7.1.8-hardened1 Local newest PUBLISHED: v7.1.7-hardened1 No CVEs are recorded as fixed between `7.1.7` and `7.1.8` in the kernel CVE feed yet (the feed can lag a release). Action: review the upstream signature, then tag from an up-to-date `main` and push — the tag push triggers build-kernel.yml. ``` git switch main && git pull --ff-only # do NOT skip git tag v7.1.8-hardened1 git push origin v7.1.8-hardened1 ``` The pull is load-bearing. Seed-bump merges and `publish:` commits land on `main` continuously between builds, so a tag cut from a stale checkout builds an old seed pin and silently ships that config. If you already pushed a stale tag, drop it on both sides (`git push origin :refs/tags/v7.1.8-hardened1` then `git tag -d v7.1.8-hardened1`), pull, and re-tag. See docs/users/cve-policy.md for the SLA.
zach commented 2026-08-13 04:51:10 +00:00
Owner
Copy link

Released

Released
zach closed this issue 2026-08-13 04:51:11 +00:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
feat/cve-list-in-issue
docs/accuracy-pass
feat/auto-seed-bump
fix/cve-watch-empty-local
fix/cve-watch-label-ids
fix/deferred-ci-hardening
fix/bughunt-cve-watch-repro-config-publish
v7.2.10-hardened1
v7.2.8-hardened1
v7.2.7-hardened1
v7.2.6-hardened1
v7.2.5-hardened1
v7.1.13-hardened1
v7.2.3-hardened1
v7.1.9-hardened1
v7.1.8-hardened1
v7.1.7-hardened1
v7.1.6-hardened1
v7.1.5-hardened1
v7.1.4-hardened1
v7.1.3-hardened1
v7.1.2-hardened1
v7.1.1-hardened1
v7.0.12-hardened1
v7.0.11-hardened2
v7.0.11-hardened1
v7.0.10-hardened1.5
v7.0.10-hardened1.4
v7.0.10-hardened1.3
v7.0.10-hardened1.2
v7.0.10-hardened1
v7.0.9-hardened1
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
unredacted/linux-hardened-unredacted#45
No description provided.