/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.112 - (hide annotations) (download)
Sun Aug 27 11:49:20 2006 UTC (8 years ago) by phreak
Branch: MAIN
Changes since 1.111: +5 -1 lines
Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
(Portage version: 2.1.1_rc1)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 solar 1.73 # Copyright 2000-2006 Gentoo Foundation; Distributed under the GPL v2
3 phreak 1.112 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.111 2006/08/26 14:55:34 phreak Exp $
4    
5     27 Aug 2006; Christian Heim <phreak@gentoo.org>
6     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
7     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
8 phreak 1.111
9     *hardened-sources-2.6.17-r1 (26 Aug 2006)
10    
11     26 Aug 2006; Christian Heim <phreak@gentoo.org>
12     +hardened-sources-2.6.17-r1.ebuild:
13     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
14     grsecurity patch.
15 phreak 1.110
16     *hardened-sources-2.6.17 (17 Aug 2006)
17    
18     17 Aug 2006; Christian Heim <phreak@gentoo.org>
19     +hardened-sources-2.6.17.ebuild:
20     Bumping the hardened-sources-2.6 series to 2.6.17, using
21     genpatches-2.6.17-6.base.
22 solar 1.109
23     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
24     - stable on x86 and amd64
25 solar 1.108
26     *hardened-sources-2.6.16-r11 (15 Jul 2006)
27    
28     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
29     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
30     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
31     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
32     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
33     crusty ebuilds
34 johnm 1.107
35     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
36     hardened-sources-2.6.16-r10.ebuild:
37     marking stable on x86 and amd64
38 solar 1.106
39     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
40     - 2.4.32-r6 stable on x86. RSBAC state unknown
41 kang 1.105
42     *hardened-sources-2.4.32-r7 (10 Jul 2006)
43    
44     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
45     +hardened-sources-2.4.32-r7.ebuild:
46     Bump PaX for RSBAC to test-17
47 johnm 1.104
48     *hardened-sources-2.6.16-r9 (03 Jul 2006)
49    
50     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
51     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
52     hardened-sources-2.6.16 bump to latest -base.
53 solar 1.103
54     *hardened-sources-2.4.32-r6 (30 Jun 2006)
55    
56     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
57     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
58     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
59     sysctl controlable resource logging
60 johnm 1.102
61     *hardened-sources-2.6.16-r7 (05 Jun 2006)
62    
63     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
64     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
65     push new 2.6.16 release in preparation for stable
66 solar 1.101
67     22 May 2006; <solar@gentoo.org> :
68     - redigest bug 134002
69 kang 1.100
70     *hardened-sources-2.4.32-r5 (16 May 2006)
71    
72     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
73     +hardened-sources-2.4.32-r5.ebuild:
74     Fixes rsbac common patching (new patch in new -r5 patchset)
75 solar 1.99
76     *hardened-sources-2.4.32-r4 (13 May 2006)
77    
78     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
79     +hardened-sources-2.4.32-r4.ebuild:
80     - security bumps
81 johnm 1.98
82     *hardened-sources-2.6.16-r6 (03 May 2006)
83    
84     03 May 2006; John Mylchreest <johnm@gentoo.org>
85     +hardened-sources-2.6.16-r6.ebuild:
86     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
87 johnm 1.97
88     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
89     hardened-sources-2.6.14-r8.ebuild:
90     fix x86_64 build problem, this will delay the digest issue again for a short
91     while but it will sort itself out
92 johnm 1.96
93     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
94     hardened-sources-2.6.14-r8.ebuild:
95     bump hardened patchset
96 antarus 1.94
97     27 Apr 2006; Alec Warner <antarus@gentoo.org>
98     files/digest-hardened-sources-2.4.32-r2,
99     files/digest-hardened-sources-2.4.32-r3,
100     files/digest-hardened-sources-2.6.14-r8, Manifest:
101     Fixing duff SHA256 digests: Bug # 131293
102 johnm 1.93
103 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
104    
105     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
106     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
107     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
108     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
109     cleanup of old uneccessary sources
110    
111 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
112     fix digest
113 johnm 1.92
114     *hardened-sources-2.6.14-r8 (20 Apr 2006)
115    
116     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
117     +hardened-sources-2.6.14-r8.ebuild:
118     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
119 johnm 1.91
120     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
121     Turning on gpg-signing again, and recomitting
122 johnm 1.90
123     *hardened-sources-2.6.16-r4 (20 Apr 2006)
124    
125     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
126     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
127     +hardened-sources-2.6.16-r4.ebuild:
128     Fix numerous security vulns
129 solar 1.89
130     *hardened-sources-2.4.32-r3 (16 Apr 2006)
131    
132     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
133     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
134     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
135     - security bump for bug #112791. Removed old ebuilds
136 johnm 1.88
137     *hardened-sources-2.6.16-r3 (15 Apr 2006)
138    
139     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
140     +hardened-sources-2.6.16-r3.ebuild:
141     Removing silly localversion which I missed
142 johnm 1.87
143     *hardened-sources-2.6.14-r7 (14 Apr 2006)
144    
145     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
146     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
147     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
148 johnm 1.86
149     *hardened-sources-2.6.16-r2 (13 Apr 2006)
150    
151     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
152     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
153     +hardened-sources-2.6.16-r2.ebuild:
154     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
155     labels, dropping USERGROUP define fixes, since these were merged mainstream.
156 johnm 1.85
157     *hardened-sources-2.6.16-r1 (11 Apr 2006)
158    
159     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
160     +hardened-sources-2.6.16-r1.ebuild:
161     Bumping to include ppc build fix and 2.6.16.3
162 tsunam 1.84
163     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
164     hardened-sources-2.6.14-r6.ebuild:
165     Stable on x86; bug #127718
166 johnm 1.83
167     *hardened-sources-2.6.16 (31 Mar 2006)
168    
169     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
170     +hardened-sources-2.6.16.ebuild:
171     Bumping to new version of grsec, and kernel base. New squashfs. Based on
172     2.6.16.1
173 cryos 1.82
174     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
175     hardened-sources-2.6.14-r6.ebuild:
176     Stable on amd64, bug 127718.
177 nixnut 1.81
178     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
179     Stable on ppc. Bug #127718
180 johnm 1.80
181     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
182     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
183     -hardened-sources-2.6.14-r4.ebuild:
184     Cleanup.
185 johnm 1.79
186     *hardened-sources-2.6.14-r6 (15 Mar 2006)
187    
188     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
189     +hardened-sources-2.6.14-r6.ebuild:
190     Fixes grsec policy recreation bug and adds a
191     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
192 solar 1.78
193     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
194     - stable on x86
195 hansmi 1.77
196     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
197     hardened-sources-2.6.14-r5.ebuild:
198     Stable on ppc.
199 johnm 1.76
200     *hardened-sources-2.6.14-r5 (01 Feb 2006)
201    
202     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
203     +hardened-sources-2.6.14-r5.ebuild:
204     fixing every known exploit
205 solar 1.75
206     *hardened-sources-2.4.32-r2 (26 Jan 2006)
207    
208     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
209     +hardened-sources-2.4.32-r2.ebuild:
210     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
211 solar 1.74
212     *hardened-sources-2.6.14-r4 (12 Jan 2006)
213    
214     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
215     - version bump for new genpatches which fix up a few sec holes
216 solar 1.73
217     *hardened-sources-2.4.32-r1 (05 Jan 2006)
218    
219     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
220     - revision bump to add misc vital linux kernel security patches.
221 johnm 1.72
222     *hardened-sources-2.6.14-r3 (30 Dec 2005)
223    
224     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
225     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
226     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
227 johnm 1.71
228     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
229     hardened-sources-2.6.14-r2.ebuild:
230     making x86 & amd64 stable following testing.
231 johnm 1.70
232     *hardened-sources-2.6.14-r2 (27 Dec 2005)
233    
234     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
235     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
236     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
237     network hooks.
238 johnm 1.69
239     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
240     hardened-sources-2.6.14-r1.ebuild:
241     bumping to stable early for sec fix on x86 & amd64
242 johnm 1.68
243     *hardened-sources-2.6.14-r1 (05 Dec 2005)
244    
245     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
246     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
247     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
248 solar 1.67
249     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
250     - stable on x86 security bug #114227 CAN-2005-3257
251 kang 1.66
252     *hardened-sources-2.4.32 (19 Nov 2005)
253    
254     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
255     +hardened-sources-2.4.32.ebuild:
256     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
257     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
258     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
259     rsbac >> /etc/portage/package.use)
260 johnm 1.65
261     *hardened-sources-2.6.14 (14 Nov 2005)
262    
263     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
264     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
265     Bumping 2.6 series to 2.6.14.2
266 johnm 1.64
267     *hardened-sources-2.6.13-r2 (20 Oct 2005)
268    
269     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
270     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
271     +hardened-sources-2.6.13-r2.ebuild:
272     Fixes minor build error in ppc.
273 johnm 1.63
274     *hardened-sources-2.6.13-r1 (17 Oct 2005)
275    
276     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
277     +hardened-sources-2.6.13-r1.ebuild:
278     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
279     2.6.13.4, fixes some major amd64 stability problems.
280 johnm 1.62
281     *hardened-sources-2.6.13 (16 Sep 2005)
282    
283     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
284     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
285     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
286     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
287     users should test this thoroughly.
288 solar 1.61
289     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
290     - stable on x86
291 johnm 1.60
292     *hardened-sources-2.6.11-r15 (27 Jun 2005)
293    
294     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
295     +hardened-sources-2.6.11-r15.ebuild:
296     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
297     grsec redefining curr_ip struct.
298 solar 1.59
299     *hardened-sources-2.4.31 (20 Jun 2005)
300    
301     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
302     initial import of 2.4.31 tree
303 johnm 1.58
304     *hardened-sources-2.6.11-r14 (14 Jun 2005)
305    
306     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
307     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
308     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
309     naming scheme to abide by genpatches
310 johnm 1.57
311     *hardened-sources-2.6.11-r13 (18 May 2005)
312    
313     18 May 2005; John Mylchreest <johnm@gentoo.org>
314     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
315     Managed to mangle the Makefile patch from grsec, to miss out the grsec
316     target. sorry about that. Fixes bug #93022
317 johnm 1.56
318     *hardened-sources-2.6.11-r12 (17 May 2005)
319    
320     17 May 2005; John Mylchreest <johnm@gentoo.org>
321     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
322     +hardened-sources-2.6.11-r12.ebuild:
323     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
324     merges in genpatches-base
325 johnm 1.55
326     *hardened-sources-2.6.11-r12 (17 May 2005)
327    
328     17 May 2005; John Mylchreest <johnm@gentoo.org>
329     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
330     +hardened-sources-2.6.11-r12.ebuild:
331     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
332     merges in genpatches-base
333 solar 1.54
334     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
335     -files/2.4.27-cmdline-race.patch,
336     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
337     -files/2.4.28-grsec-binfmt_a.out.patch,
338     -files/2.4.28-grsec-cmdline-race.patch,
339     -files/2.4.28-selinux-binfmt_a.out.patch,
340     -files/2.4.28-selinux-cmdline-race.patch,
341     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
342     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
343     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
344     cleanup..
345 solar 1.53
346     *hardened-sources-2.4.30-r1 (21 Apr 2005)
347    
348     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
349     - disable aout by default
350 solar 1.52
351     *hardened-sources-2.4.30 (18 Apr 2005)
352    
353     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
354     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
355     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
356     use
357 tocharian 1.50
358 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
359    
360     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
361     +hardened-sources-2.4.29.ebuild:
362     New hardened-patches-2.4-29.0 patchball.
363     Removed SELinux support, upgraded GRSecurity to 2.1.4.
364    
365     *hardened-sources-2.4.28-r5 (06 Mar 2005)
366    
367     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
368     +hardened-sources-2.4.28-r5.ebuild:
369     Added a fix for a PaX vulnerability.
370    
371     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
372 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
373     Stable on x86
374 solar 1.49
375     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
376     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
377     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
378     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
379     - fixed/added RDEPEND= in all kernel-2 ebuilds
380 tocharian 1.48
381     *hardened-sources-2.4.28-r4 (21 Jan 2005)
382    
383     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
384     +hardened-sources-2.4.28-r4.ebuild:
385     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
386     backport of neighbour hash updates.
387 tocharian 1.47
388     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
389     hardened-sources-2.4.28-r3.ebuild:
390     Stable on x86
391 tseng 1.46
392     *hardened-sources-2.6.10-r3 (20 Jan 2005)
393    
394     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
395     +hardened-sources-2.6.10-r3.ebuild:
396     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
397     in 2005.0
398 tocharian 1.45
399     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
400     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
401     hardened-sources-2.4.28-r2.ebuild:
402     Mark stable on x86
403 tocharian 1.44
404     *hardened-sources-2.4.28-r3 (17 Jan 2005)
405    
406     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
407     +hardened-sources-2.4.28-r3.ebuild:
408     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
409 tocharian 1.43
410     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
411     hardened-sources-2.4.28.ebuild:
412     Mark stable on x86.
413 tocharian 1.42
414     *hardened-sources-2.4.28-r2 (13 Jan 2005)
415    
416     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
417     +hardened-sources-2.4.28-r2.ebuild:
418     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
419     Mazinger for grsecurity patches as well.
420 plasmaroo 1.41
421     *hardened-sources-2.4.28-r1 (23 Dec 2004)
422    
423     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
424     Security bump. Thank tocharian for rolling a new patchset...
425 solar 1.40
426     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
427     +files/2.4.28-grsec-cmdline-race.patch,
428     +files/2.4.28-selinux-binfmt_a.out.patch,
429     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
430     - Round up remaining security patches that appear to be missing in 2.4.28. -
431     PaX standalone updated to current. hgpv=28.1
432 solar 1.39
433     *hardened-sources-2.4.28 (28 Nov 2004)
434    
435     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
436     security bump. Thank tocharian for rolling a new patchset
437 scox 1.31
438 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
439    
440     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
441     +hardened-sources-2.4.27-r3.ebuild:
442     Applies the new 2.4-27.2 patchball which updates
443     GRSecurity to the 2.0.1 version.
444    
445 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
446    
447     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
448     +hardened-sources-2.4.27-r2.ebuild:
449     Version bump.
450     This version uses the new 2.4-27.1 patchball which updates
451     both the SELinux PaX hooks patch and the SELinux headers.
452    
453 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
454    
455     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
456     +hardened-sources-2.4.27-r1.ebuild,
457     -hardened-sources-2.4.27.ebuild,
458     +files/2.4.27-cmdline-race.patch:
459     Version bump, fix for cmdline race. See bug #59905.
460    
461     *hardened-sources-2.4.26-r6 (09 Aug 2004)
462    
463     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
464     +hardened-sources-2.4.26-r6.ebuild,
465     -hardened-sources-2.4.26-r5.ebuild,
466     -hardened-sources-2.4.26-r4.ebuild,
467     +files/2.4.26-cmdline-race.patch:
468     Version bump, fix for cmdline race. See bug #59905.
469    
470 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
471    
472     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
473     +hardened-sources-2.4.27.ebuild,
474     +files/2.4.27-CAN-2004-0394.patch:
475     Ported the patchball to the 2.4.27 kernel version.
476    
477 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
478    
479     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
480     +hardened-sources-2.4.26-r5.ebuild:
481 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
482 scox 1.34 It adds the following features:
483     - Squashfs
484     - Ebtables
485     - Netdev random (core+drivers)
486     - Watchdog Timer (WDT) fix.
487    
488 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
489    
490     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
491     +hardened-sources-2.4.26-r4.ebuild,
492     +files/2.4.26-CAN-2004-0415.patch,
493     -hardened-sources-2.4.26-3:
494     Version bump, fix for CAN 0415, see bug #59378.
495    
496 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
497    
498     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
499     +hardened-sources-2.4.26-r3.ebuild,
500     +files/2.4.26-CAN-2004-0497.patch,
501     -hardened-sources-2.4.26-r2.ebuild:
502     Version bump, fixed CAN 0497, see bug #56171.
503    
504 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
505    
506     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
507 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
508 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
509     +files/2.4.26-CAN-2004-0535.patch,
510     -hardened-sources-2.4.26-r1.ebuild:
511     Fixes for both CAN 0495 and 0535, see bug #54976
512 pvdabeel 1.27
513 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
514     hardened-sources-2.4.26-r1.ebuild:
515     QA - fix use invocation
516 scox 1.28
517     *hardened-sources-2.4.26-r1 (22 June 2004)
518    
519     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
520     +hardened-sources-2.4.26-r1.ebuild,
521     +files/2.4.26-CAN-2004-0394.patch,
522     +files/2.4.26-signal-race.patch,
523     -hardened-sources-2.4.26.ebuild,
524     -hardened-sources-2.4.24-r3.ebuild:
525     Version bump for the CAN-2004-0394 issue and bug #53804
526     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
527    
528    
529 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
530     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
531     Masked hardened-sources-2.4.26.ebuild broken for ppc
532    
533     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
534     hardened-sources-2.4.24-r3.ebuild:
535     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
536 plasmaroo 1.25
537 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
538    
539     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
540     +hardened-sources-2.4.26.ebuild:
541     Updated hardened-sources for the 2.4.26 kernel
542     Removed broken components, updated almost everything.
543    
544 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
545    
546     17 Apr 2004; <plasmaroo@gentoo.org>
547     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
548     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
549     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
550     +hardened-sources-2.4.24-r3.ebuild:
551     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
552     vulnerabilities. Old revisions removed.
553 plasmaroo 1.24
554     *hardened-sources-2.4.24-r2 (15 Apr 2004)
555    
556     15 Apr 2004; <plasmaroo@gentoo.org>
557     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
558     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
559     Version bump for the CAN-2004-0109 issue; bug #47881.
560 aliz 1.23
561     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
562     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
563     Add eutils to inherit.
564 plasmaroo 1.22
565     *hardened-sources-2.4.24-r1 (19 Feb 2004)
566    
567     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
568     files/hardened-sources-2.4.24.munmap.patch:
569     Added the patch for the mremap/munmap vulnerability. Bug #42024.
570 scox 1.19
571 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
572 scox 1.26
573 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
574     hardened-sources-2.4.24.ebuild:
575     Version bump, updated most of the components.
576     This release includes the following:
577    
578     - Hardened security
579     - Netfilter patch-o-matic 20031219
580     - FreeSWAN 2.04 & x509 1.4.8
581     - EVMS 2.2.2
582     - XFS 1.3.1
583     - cryptoloop jari
584     - grsecurity 2.0-rc4
585     - SELinux
586     - PaX 200402060000
587     - PaX Obscurity 200308302223
588     - Others...
589    
590     Neither -ck nor systrace are included anymore.
591    
592 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
593    
594     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
595     hardened-sources-2.4.22-r2.ebuild:
596 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
597 scox 1.19
598     *hardened-sources-2.4.22-r1 (02 Dec 2003)
599 iggy 1.17
600     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
601 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
602 iggy 1.16
603     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
604 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
605     Version bump for the 'do_brk' vulnerability.
606 iggy 1.15
607     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
608     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
609     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
610     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
611 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
612 frogger 1.14
613     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
614     hardened-sources-2.4.22.ebuild:
615 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
616     components. These are no longer handled in the kernel
617     so this code was not necessary.
618 frogger 1.13
619     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
620     New 2.4.22 based hardened-sources thanks to
621     Phil West <p.west@computer.org>.
622    
623     These sources include:
624 plasmaroo 1.18 - New SELinux API
625     - Updated CK-base
626     - Updated GRSec
627     - Systrace
628     - SuperFreeS/WAN 1.99.8
629     - Propolice kernel build support
630     - EVMS
631     - Other various security related patches
632 frogger 1.11
633 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
634    
635     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
636     Updated hardened-sources based on the 2.4.21 Linux kernel.
637     This includes updates to most major components such as:
638 plasmaroo 1.18 - ck-base-0306300059
639     - selinux-2.4-2003071106
640     - grsecurity-2.0-rc1
641     - Updated IPTables patch-o-matic
642     - Updated SuperFreeS/WAN
643    
644 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
645     updated patch set ready for the 2.4.21 based kernel.
646    
647 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
648     Initial import of hardened-sources-2.4.20-r4. This revision
649     includes only a few changes, but one of these is an important
650     security fix. It is recommended all users of hardened-sources
651     upgrade to this release.
652 plasmaroo 1.18
653 frogger 1.11 - ioperm bug fix
654     - fixed compilation failure when building without GRSec
655 plasmaroo 1.18
656 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
657     due to time constraints, but is planned for inclusion in the near
658     future.
659 msterret 1.10
660     *hardened-sources-2.4.20-r2 (12 Jun 2003)
661    
662     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
663     hardened-sources-2.4.20-r3.ebuild:
664 plasmaroo 1.18 Add Header...
665 frogger 1.9
666     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
667     hardened-sources-2.4.20-r3.ebuild:
668     Removed warnings from ebuild. This kernel should be safe to
669     use at this point.
670 frogger 1.8
671     *hardened-sources-2.4.20-r3 (08 Jun 2003)
672    
673     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
674     hardened-sources-2.4.20-r3.ebuild:
675     New revision. Includes the following changes over -r2:
676 plasmaroo 1.18
677 frogger 1.8 - ck7-base (O(1), preempt, low latency)
678     - Super FreeS/WAN 1.99.7rc2
679     - PaX for the LSM/SELinux branch
680     - GRSecurity 2.0-pre4 (role based access control)
681     - Systrace 1.3
682     - EXT3 fixes
683     - EVMS 2.0.1
684     - GCC 3.1+ compile optimizations
685     - ProPolice kernel build support
686     - Hashing table security fixes
687 frogger 1.3
688     *hardened-sources-2.4.20-r1 (09 Apr 2003)
689 frogger 1.7
690     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
691     Initial import of hardened-sources-r2. This new
692     ebuild includes many new performance and security
693     related patches. As in -r1, it will patch in
694     LSM/SELinux if "selinux" is in USE, otherwise it
695     will patch in GRSecurity. The following patches
696     are included in this revision:
697 plasmaroo 1.18
698 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
699     (pulled from the base CK patch)
700     - ptrace exploit patch for the LSM kernel
701     (the GRSec patch already fixes this)
702     - LSM 2.4-2003040709
703     - SELinux 2.4-2003040709
704     - Systrace v1.2
705     - IPTables patch-o-matic base patches - 20030107
706     - CryptoAPI 2.4.20.1 w/ loop-jari patch
707     - Super FreeS/WAN 1.99.6.1
708     - GRSecurity 1.9.9g
709     - MPPE
710     - EXT3 data journal fix
711     - CIPE 1.5.4
712 frogger 1.6
713     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
714     hardened-sources-2.4.20-r1.ebuild, manifest:
715 plasmaroo 1.18 Updated to install flask components correctly for selinux.
716 frogger 1.5
717     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
718     hardened-sources-2.4.20-r1.ebuild:
719     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
720     is patched in instead. Ptrace patches for selinux have also been added. In
721     either case, systrace support will be patched in as well.
722 frogger 1.3
723     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
724     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
725 plasmaroo 1.18 Revision bump for new sources.
726 frogger 1.4
727 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
728 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
729 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
730 method 1.1
731 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
732    
733 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
734     hardened-sources-2.4.20.ebuild:
735 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20