/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.114 - (hide annotations) (download)
Wed Oct 18 21:45:47 2006 UTC (8 years, 2 months ago) by solar
Branch: MAIN
Changes since 1.113: +4 -1 lines
- mark 2.6.17-r1 stable on amd64 also. bug #151877
(Portage version: 2.1.2_pre1)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 solar 1.73 # Copyright 2000-2006 Gentoo Foundation; Distributed under the GPL v2
3 solar 1.114 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.113 2006/10/18 21:31:32 solar Exp $
4    
5     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
6     - mark amd64 stable also. bug #151877
7 solar 1.113
8     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
9     - mark 2.6.17-r1 stable
10 phreak 1.112
11     27 Aug 2006; Christian Heim <phreak@gentoo.org>
12     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
13     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
14 phreak 1.111
15     *hardened-sources-2.6.17-r1 (26 Aug 2006)
16    
17     26 Aug 2006; Christian Heim <phreak@gentoo.org>
18     +hardened-sources-2.6.17-r1.ebuild:
19     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
20     grsecurity patch.
21 phreak 1.110
22     *hardened-sources-2.6.17 (17 Aug 2006)
23    
24     17 Aug 2006; Christian Heim <phreak@gentoo.org>
25     +hardened-sources-2.6.17.ebuild:
26     Bumping the hardened-sources-2.6 series to 2.6.17, using
27     genpatches-2.6.17-6.base.
28 solar 1.109
29     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
30     - stable on x86 and amd64
31 solar 1.108
32     *hardened-sources-2.6.16-r11 (15 Jul 2006)
33    
34     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
35     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
36     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
37     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
38     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
39     crusty ebuilds
40 johnm 1.107
41     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
42     hardened-sources-2.6.16-r10.ebuild:
43     marking stable on x86 and amd64
44 solar 1.106
45     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
46     - 2.4.32-r6 stable on x86. RSBAC state unknown
47 kang 1.105
48     *hardened-sources-2.4.32-r7 (10 Jul 2006)
49    
50     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
51     +hardened-sources-2.4.32-r7.ebuild:
52     Bump PaX for RSBAC to test-17
53 johnm 1.104
54     *hardened-sources-2.6.16-r9 (03 Jul 2006)
55    
56     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
57     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
58     hardened-sources-2.6.16 bump to latest -base.
59 solar 1.103
60     *hardened-sources-2.4.32-r6 (30 Jun 2006)
61    
62     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
63     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
64     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
65     sysctl controlable resource logging
66 johnm 1.102
67     *hardened-sources-2.6.16-r7 (05 Jun 2006)
68    
69     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
70     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
71     push new 2.6.16 release in preparation for stable
72 solar 1.101
73     22 May 2006; <solar@gentoo.org> :
74     - redigest bug 134002
75 kang 1.100
76     *hardened-sources-2.4.32-r5 (16 May 2006)
77    
78     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
79     +hardened-sources-2.4.32-r5.ebuild:
80     Fixes rsbac common patching (new patch in new -r5 patchset)
81 solar 1.99
82     *hardened-sources-2.4.32-r4 (13 May 2006)
83    
84     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
85     +hardened-sources-2.4.32-r4.ebuild:
86     - security bumps
87 johnm 1.98
88     *hardened-sources-2.6.16-r6 (03 May 2006)
89    
90     03 May 2006; John Mylchreest <johnm@gentoo.org>
91     +hardened-sources-2.6.16-r6.ebuild:
92     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
93 johnm 1.97
94     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
95     hardened-sources-2.6.14-r8.ebuild:
96     fix x86_64 build problem, this will delay the digest issue again for a short
97     while but it will sort itself out
98 johnm 1.96
99     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
100     hardened-sources-2.6.14-r8.ebuild:
101     bump hardened patchset
102 antarus 1.94
103     27 Apr 2006; Alec Warner <antarus@gentoo.org>
104     files/digest-hardened-sources-2.4.32-r2,
105     files/digest-hardened-sources-2.4.32-r3,
106     files/digest-hardened-sources-2.6.14-r8, Manifest:
107     Fixing duff SHA256 digests: Bug # 131293
108 johnm 1.93
109 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
110    
111     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
112     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
113     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
114     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
115     cleanup of old uneccessary sources
116    
117 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
118     fix digest
119 johnm 1.92
120     *hardened-sources-2.6.14-r8 (20 Apr 2006)
121    
122     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
123     +hardened-sources-2.6.14-r8.ebuild:
124     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
125 johnm 1.91
126     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
127     Turning on gpg-signing again, and recomitting
128 johnm 1.90
129     *hardened-sources-2.6.16-r4 (20 Apr 2006)
130    
131     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
132     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
133     +hardened-sources-2.6.16-r4.ebuild:
134     Fix numerous security vulns
135 solar 1.89
136     *hardened-sources-2.4.32-r3 (16 Apr 2006)
137    
138     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
139     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
140     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
141     - security bump for bug #112791. Removed old ebuilds
142 johnm 1.88
143     *hardened-sources-2.6.16-r3 (15 Apr 2006)
144    
145     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
146     +hardened-sources-2.6.16-r3.ebuild:
147     Removing silly localversion which I missed
148 johnm 1.87
149     *hardened-sources-2.6.14-r7 (14 Apr 2006)
150    
151     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
152     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
153     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
154 johnm 1.86
155     *hardened-sources-2.6.16-r2 (13 Apr 2006)
156    
157     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
158     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
159     +hardened-sources-2.6.16-r2.ebuild:
160     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
161     labels, dropping USERGROUP define fixes, since these were merged mainstream.
162 johnm 1.85
163     *hardened-sources-2.6.16-r1 (11 Apr 2006)
164    
165     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
166     +hardened-sources-2.6.16-r1.ebuild:
167     Bumping to include ppc build fix and 2.6.16.3
168 tsunam 1.84
169     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
170     hardened-sources-2.6.14-r6.ebuild:
171     Stable on x86; bug #127718
172 johnm 1.83
173     *hardened-sources-2.6.16 (31 Mar 2006)
174    
175     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
176     +hardened-sources-2.6.16.ebuild:
177     Bumping to new version of grsec, and kernel base. New squashfs. Based on
178     2.6.16.1
179 cryos 1.82
180     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
181     hardened-sources-2.6.14-r6.ebuild:
182     Stable on amd64, bug 127718.
183 nixnut 1.81
184     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
185     Stable on ppc. Bug #127718
186 johnm 1.80
187     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
188     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
189     -hardened-sources-2.6.14-r4.ebuild:
190     Cleanup.
191 johnm 1.79
192     *hardened-sources-2.6.14-r6 (15 Mar 2006)
193    
194     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
195     +hardened-sources-2.6.14-r6.ebuild:
196     Fixes grsec policy recreation bug and adds a
197     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
198 solar 1.78
199     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
200     - stable on x86
201 hansmi 1.77
202     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
203     hardened-sources-2.6.14-r5.ebuild:
204     Stable on ppc.
205 johnm 1.76
206     *hardened-sources-2.6.14-r5 (01 Feb 2006)
207    
208     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
209     +hardened-sources-2.6.14-r5.ebuild:
210     fixing every known exploit
211 solar 1.75
212     *hardened-sources-2.4.32-r2 (26 Jan 2006)
213    
214     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
215     +hardened-sources-2.4.32-r2.ebuild:
216     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
217 solar 1.74
218     *hardened-sources-2.6.14-r4 (12 Jan 2006)
219    
220     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
221     - version bump for new genpatches which fix up a few sec holes
222 solar 1.73
223     *hardened-sources-2.4.32-r1 (05 Jan 2006)
224    
225     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
226     - revision bump to add misc vital linux kernel security patches.
227 johnm 1.72
228     *hardened-sources-2.6.14-r3 (30 Dec 2005)
229    
230     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
231     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
232     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
233 johnm 1.71
234     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
235     hardened-sources-2.6.14-r2.ebuild:
236     making x86 & amd64 stable following testing.
237 johnm 1.70
238     *hardened-sources-2.6.14-r2 (27 Dec 2005)
239    
240     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
241     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
242     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
243     network hooks.
244 johnm 1.69
245     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
246     hardened-sources-2.6.14-r1.ebuild:
247     bumping to stable early for sec fix on x86 & amd64
248 johnm 1.68
249     *hardened-sources-2.6.14-r1 (05 Dec 2005)
250    
251     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
252     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
253     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
254 solar 1.67
255     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
256     - stable on x86 security bug #114227 CAN-2005-3257
257 kang 1.66
258     *hardened-sources-2.4.32 (19 Nov 2005)
259    
260     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
261     +hardened-sources-2.4.32.ebuild:
262     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
263     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
264     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
265     rsbac >> /etc/portage/package.use)
266 johnm 1.65
267     *hardened-sources-2.6.14 (14 Nov 2005)
268    
269     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
270     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
271     Bumping 2.6 series to 2.6.14.2
272 johnm 1.64
273     *hardened-sources-2.6.13-r2 (20 Oct 2005)
274    
275     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
276     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
277     +hardened-sources-2.6.13-r2.ebuild:
278     Fixes minor build error in ppc.
279 johnm 1.63
280     *hardened-sources-2.6.13-r1 (17 Oct 2005)
281    
282     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
283     +hardened-sources-2.6.13-r1.ebuild:
284     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
285     2.6.13.4, fixes some major amd64 stability problems.
286 johnm 1.62
287     *hardened-sources-2.6.13 (16 Sep 2005)
288    
289     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
290     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
291     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
292     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
293     users should test this thoroughly.
294 solar 1.61
295     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
296     - stable on x86
297 johnm 1.60
298     *hardened-sources-2.6.11-r15 (27 Jun 2005)
299    
300     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
301     +hardened-sources-2.6.11-r15.ebuild:
302     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
303     grsec redefining curr_ip struct.
304 solar 1.59
305     *hardened-sources-2.4.31 (20 Jun 2005)
306    
307     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
308     initial import of 2.4.31 tree
309 johnm 1.58
310     *hardened-sources-2.6.11-r14 (14 Jun 2005)
311    
312     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
313     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
314     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
315     naming scheme to abide by genpatches
316 johnm 1.57
317     *hardened-sources-2.6.11-r13 (18 May 2005)
318    
319     18 May 2005; John Mylchreest <johnm@gentoo.org>
320     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
321     Managed to mangle the Makefile patch from grsec, to miss out the grsec
322     target. sorry about that. Fixes bug #93022
323 johnm 1.56
324     *hardened-sources-2.6.11-r12 (17 May 2005)
325    
326     17 May 2005; John Mylchreest <johnm@gentoo.org>
327     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
328     +hardened-sources-2.6.11-r12.ebuild:
329     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
330     merges in genpatches-base
331 johnm 1.55
332     *hardened-sources-2.6.11-r12 (17 May 2005)
333    
334     17 May 2005; John Mylchreest <johnm@gentoo.org>
335     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
336     +hardened-sources-2.6.11-r12.ebuild:
337     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
338     merges in genpatches-base
339 solar 1.54
340     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
341     -files/2.4.27-cmdline-race.patch,
342     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
343     -files/2.4.28-grsec-binfmt_a.out.patch,
344     -files/2.4.28-grsec-cmdline-race.patch,
345     -files/2.4.28-selinux-binfmt_a.out.patch,
346     -files/2.4.28-selinux-cmdline-race.patch,
347     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
348     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
349     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
350     cleanup..
351 solar 1.53
352     *hardened-sources-2.4.30-r1 (21 Apr 2005)
353    
354     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
355     - disable aout by default
356 solar 1.52
357     *hardened-sources-2.4.30 (18 Apr 2005)
358    
359     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
360     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
361     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
362     use
363 tocharian 1.50
364 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
365    
366     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
367     +hardened-sources-2.4.29.ebuild:
368     New hardened-patches-2.4-29.0 patchball.
369     Removed SELinux support, upgraded GRSecurity to 2.1.4.
370    
371     *hardened-sources-2.4.28-r5 (06 Mar 2005)
372    
373     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
374     +hardened-sources-2.4.28-r5.ebuild:
375     Added a fix for a PaX vulnerability.
376    
377     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
378 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
379     Stable on x86
380 solar 1.49
381     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
382     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
383     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
384     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
385     - fixed/added RDEPEND= in all kernel-2 ebuilds
386 tocharian 1.48
387     *hardened-sources-2.4.28-r4 (21 Jan 2005)
388    
389     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
390     +hardened-sources-2.4.28-r4.ebuild:
391     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
392     backport of neighbour hash updates.
393 tocharian 1.47
394     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
395     hardened-sources-2.4.28-r3.ebuild:
396     Stable on x86
397 tseng 1.46
398     *hardened-sources-2.6.10-r3 (20 Jan 2005)
399    
400     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
401     +hardened-sources-2.6.10-r3.ebuild:
402     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
403     in 2005.0
404 tocharian 1.45
405     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
406     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
407     hardened-sources-2.4.28-r2.ebuild:
408     Mark stable on x86
409 tocharian 1.44
410     *hardened-sources-2.4.28-r3 (17 Jan 2005)
411    
412     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
413     +hardened-sources-2.4.28-r3.ebuild:
414     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
415 tocharian 1.43
416     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
417     hardened-sources-2.4.28.ebuild:
418     Mark stable on x86.
419 tocharian 1.42
420     *hardened-sources-2.4.28-r2 (13 Jan 2005)
421    
422     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
423     +hardened-sources-2.4.28-r2.ebuild:
424     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
425     Mazinger for grsecurity patches as well.
426 plasmaroo 1.41
427     *hardened-sources-2.4.28-r1 (23 Dec 2004)
428    
429     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
430     Security bump. Thank tocharian for rolling a new patchset...
431 solar 1.40
432     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
433     +files/2.4.28-grsec-cmdline-race.patch,
434     +files/2.4.28-selinux-binfmt_a.out.patch,
435     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
436     - Round up remaining security patches that appear to be missing in 2.4.28. -
437     PaX standalone updated to current. hgpv=28.1
438 solar 1.39
439     *hardened-sources-2.4.28 (28 Nov 2004)
440    
441     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
442     security bump. Thank tocharian for rolling a new patchset
443 scox 1.31
444 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
445    
446     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
447     +hardened-sources-2.4.27-r3.ebuild:
448     Applies the new 2.4-27.2 patchball which updates
449     GRSecurity to the 2.0.1 version.
450    
451 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
452    
453     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
454     +hardened-sources-2.4.27-r2.ebuild:
455     Version bump.
456     This version uses the new 2.4-27.1 patchball which updates
457     both the SELinux PaX hooks patch and the SELinux headers.
458    
459 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
460    
461     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
462     +hardened-sources-2.4.27-r1.ebuild,
463     -hardened-sources-2.4.27.ebuild,
464     +files/2.4.27-cmdline-race.patch:
465     Version bump, fix for cmdline race. See bug #59905.
466    
467     *hardened-sources-2.4.26-r6 (09 Aug 2004)
468    
469     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
470     +hardened-sources-2.4.26-r6.ebuild,
471     -hardened-sources-2.4.26-r5.ebuild,
472     -hardened-sources-2.4.26-r4.ebuild,
473     +files/2.4.26-cmdline-race.patch:
474     Version bump, fix for cmdline race. See bug #59905.
475    
476 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
477    
478     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
479     +hardened-sources-2.4.27.ebuild,
480     +files/2.4.27-CAN-2004-0394.patch:
481     Ported the patchball to the 2.4.27 kernel version.
482    
483 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
484    
485     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
486     +hardened-sources-2.4.26-r5.ebuild:
487 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
488 scox 1.34 It adds the following features:
489     - Squashfs
490     - Ebtables
491     - Netdev random (core+drivers)
492     - Watchdog Timer (WDT) fix.
493    
494 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
495    
496     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
497     +hardened-sources-2.4.26-r4.ebuild,
498     +files/2.4.26-CAN-2004-0415.patch,
499     -hardened-sources-2.4.26-3:
500     Version bump, fix for CAN 0415, see bug #59378.
501    
502 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
503    
504     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
505     +hardened-sources-2.4.26-r3.ebuild,
506     +files/2.4.26-CAN-2004-0497.patch,
507     -hardened-sources-2.4.26-r2.ebuild:
508     Version bump, fixed CAN 0497, see bug #56171.
509    
510 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
511    
512     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
513 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
514 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
515     +files/2.4.26-CAN-2004-0535.patch,
516     -hardened-sources-2.4.26-r1.ebuild:
517     Fixes for both CAN 0495 and 0535, see bug #54976
518 pvdabeel 1.27
519 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
520     hardened-sources-2.4.26-r1.ebuild:
521     QA - fix use invocation
522 scox 1.28
523     *hardened-sources-2.4.26-r1 (22 June 2004)
524    
525     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
526     +hardened-sources-2.4.26-r1.ebuild,
527     +files/2.4.26-CAN-2004-0394.patch,
528     +files/2.4.26-signal-race.patch,
529     -hardened-sources-2.4.26.ebuild,
530     -hardened-sources-2.4.24-r3.ebuild:
531     Version bump for the CAN-2004-0394 issue and bug #53804
532     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
533    
534    
535 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
536     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
537     Masked hardened-sources-2.4.26.ebuild broken for ppc
538    
539     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
540     hardened-sources-2.4.24-r3.ebuild:
541     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
542 plasmaroo 1.25
543 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
544    
545     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
546     +hardened-sources-2.4.26.ebuild:
547     Updated hardened-sources for the 2.4.26 kernel
548     Removed broken components, updated almost everything.
549    
550 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
551    
552     17 Apr 2004; <plasmaroo@gentoo.org>
553     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
554     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
555     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
556     +hardened-sources-2.4.24-r3.ebuild:
557     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
558     vulnerabilities. Old revisions removed.
559 plasmaroo 1.24
560     *hardened-sources-2.4.24-r2 (15 Apr 2004)
561    
562     15 Apr 2004; <plasmaroo@gentoo.org>
563     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
564     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
565     Version bump for the CAN-2004-0109 issue; bug #47881.
566 aliz 1.23
567     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
568     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
569     Add eutils to inherit.
570 plasmaroo 1.22
571     *hardened-sources-2.4.24-r1 (19 Feb 2004)
572    
573     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
574     files/hardened-sources-2.4.24.munmap.patch:
575     Added the patch for the mremap/munmap vulnerability. Bug #42024.
576 scox 1.19
577 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
578 scox 1.26
579 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
580     hardened-sources-2.4.24.ebuild:
581     Version bump, updated most of the components.
582     This release includes the following:
583    
584     - Hardened security
585     - Netfilter patch-o-matic 20031219
586     - FreeSWAN 2.04 & x509 1.4.8
587     - EVMS 2.2.2
588     - XFS 1.3.1
589     - cryptoloop jari
590     - grsecurity 2.0-rc4
591     - SELinux
592     - PaX 200402060000
593     - PaX Obscurity 200308302223
594     - Others...
595    
596     Neither -ck nor systrace are included anymore.
597    
598 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
599    
600     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
601     hardened-sources-2.4.22-r2.ebuild:
602 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
603 scox 1.19
604     *hardened-sources-2.4.22-r1 (02 Dec 2003)
605 iggy 1.17
606     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
607 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
608 iggy 1.16
609     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
610 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
611     Version bump for the 'do_brk' vulnerability.
612 iggy 1.15
613     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
614     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
615     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
616     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
617 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
618 frogger 1.14
619     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
620     hardened-sources-2.4.22.ebuild:
621 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
622     components. These are no longer handled in the kernel
623     so this code was not necessary.
624 frogger 1.13
625     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
626     New 2.4.22 based hardened-sources thanks to
627     Phil West <p.west@computer.org>.
628    
629     These sources include:
630 plasmaroo 1.18 - New SELinux API
631     - Updated CK-base
632     - Updated GRSec
633     - Systrace
634     - SuperFreeS/WAN 1.99.8
635     - Propolice kernel build support
636     - EVMS
637     - Other various security related patches
638 frogger 1.11
639 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
640    
641     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
642     Updated hardened-sources based on the 2.4.21 Linux kernel.
643     This includes updates to most major components such as:
644 plasmaroo 1.18 - ck-base-0306300059
645     - selinux-2.4-2003071106
646     - grsecurity-2.0-rc1
647     - Updated IPTables patch-o-matic
648     - Updated SuperFreeS/WAN
649    
650 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
651     updated patch set ready for the 2.4.21 based kernel.
652    
653 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
654     Initial import of hardened-sources-2.4.20-r4. This revision
655     includes only a few changes, but one of these is an important
656     security fix. It is recommended all users of hardened-sources
657     upgrade to this release.
658 plasmaroo 1.18
659 frogger 1.11 - ioperm bug fix
660     - fixed compilation failure when building without GRSec
661 plasmaroo 1.18
662 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
663     due to time constraints, but is planned for inclusion in the near
664     future.
665 msterret 1.10
666     *hardened-sources-2.4.20-r2 (12 Jun 2003)
667    
668     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
669     hardened-sources-2.4.20-r3.ebuild:
670 plasmaroo 1.18 Add Header...
671 frogger 1.9
672     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
673     hardened-sources-2.4.20-r3.ebuild:
674     Removed warnings from ebuild. This kernel should be safe to
675     use at this point.
676 frogger 1.8
677     *hardened-sources-2.4.20-r3 (08 Jun 2003)
678    
679     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
680     hardened-sources-2.4.20-r3.ebuild:
681     New revision. Includes the following changes over -r2:
682 plasmaroo 1.18
683 frogger 1.8 - ck7-base (O(1), preempt, low latency)
684     - Super FreeS/WAN 1.99.7rc2
685     - PaX for the LSM/SELinux branch
686     - GRSecurity 2.0-pre4 (role based access control)
687     - Systrace 1.3
688     - EXT3 fixes
689     - EVMS 2.0.1
690     - GCC 3.1+ compile optimizations
691     - ProPolice kernel build support
692     - Hashing table security fixes
693 frogger 1.3
694     *hardened-sources-2.4.20-r1 (09 Apr 2003)
695 frogger 1.7
696     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
697     Initial import of hardened-sources-r2. This new
698     ebuild includes many new performance and security
699     related patches. As in -r1, it will patch in
700     LSM/SELinux if "selinux" is in USE, otherwise it
701     will patch in GRSecurity. The following patches
702     are included in this revision:
703 plasmaroo 1.18
704 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
705     (pulled from the base CK patch)
706     - ptrace exploit patch for the LSM kernel
707     (the GRSec patch already fixes this)
708     - LSM 2.4-2003040709
709     - SELinux 2.4-2003040709
710     - Systrace v1.2
711     - IPTables patch-o-matic base patches - 20030107
712     - CryptoAPI 2.4.20.1 w/ loop-jari patch
713     - Super FreeS/WAN 1.99.6.1
714     - GRSecurity 1.9.9g
715     - MPPE
716     - EXT3 data journal fix
717     - CIPE 1.5.4
718 frogger 1.6
719     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
720     hardened-sources-2.4.20-r1.ebuild, manifest:
721 plasmaroo 1.18 Updated to install flask components correctly for selinux.
722 frogger 1.5
723     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
724     hardened-sources-2.4.20-r1.ebuild:
725     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
726     is patched in instead. Ptrace patches for selinux have also been added. In
727     either case, systrace support will be patched in as well.
728 frogger 1.3
729     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
730     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
731 plasmaroo 1.18 Revision bump for new sources.
732 frogger 1.4
733 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
734 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
735 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
736 method 1.1
737 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
738    
739 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
740     hardened-sources-2.4.20.ebuild:
741 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20