/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.117 - (hide annotations) (download)
Wed Dec 6 19:15:15 2006 UTC (7 years, 10 months ago) by phreak
Branch: MAIN
Changes since 1.116: +6 -1 lines
Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf of Mike Doty).
(Portage version: 2.1.2_rc2-r5)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 solar 1.73 # Copyright 2000-2006 Gentoo Foundation; Distributed under the GPL v2
3 phreak 1.117 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.116 2006/11/23 19:53:04 phreak Exp $
4    
5     06 Dec 2006; Christian Heim <phreak@gentoo.org>
6     hardened-sources-2.6.18.ebuild:
7     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
8     of Mike Doty).
9 phreak 1.116
10     *hardened-sources-2.6.18-r1 (23 Nov 2006)
11    
12     23 Nov 2006; Christian Heim <phreak@gentoo.org>
13     +hardened-sources-2.6.18-r1.ebuild:
14     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
15 phreak 1.115
16     *hardened-sources-2.6.18 (11 Nov 2006)
17    
18     11 Nov 2006; Christian Heim <phreak@gentoo.org>
19     +hardened-sources-2.6.18.ebuild:
20     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
21 solar 1.114
22     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
23     - mark amd64 stable also. bug #151877
24 solar 1.113
25     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
26     - mark 2.6.17-r1 stable
27 phreak 1.112
28     27 Aug 2006; Christian Heim <phreak@gentoo.org>
29     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
30     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
31 phreak 1.111
32     *hardened-sources-2.6.17-r1 (26 Aug 2006)
33    
34     26 Aug 2006; Christian Heim <phreak@gentoo.org>
35     +hardened-sources-2.6.17-r1.ebuild:
36     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
37     grsecurity patch.
38 phreak 1.110
39     *hardened-sources-2.6.17 (17 Aug 2006)
40    
41     17 Aug 2006; Christian Heim <phreak@gentoo.org>
42     +hardened-sources-2.6.17.ebuild:
43     Bumping the hardened-sources-2.6 series to 2.6.17, using
44     genpatches-2.6.17-6.base.
45 solar 1.109
46     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
47     - stable on x86 and amd64
48 solar 1.108
49     *hardened-sources-2.6.16-r11 (15 Jul 2006)
50    
51     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
52     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
53     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
54     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
55     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
56     crusty ebuilds
57 johnm 1.107
58     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
59     hardened-sources-2.6.16-r10.ebuild:
60     marking stable on x86 and amd64
61 solar 1.106
62     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
63     - 2.4.32-r6 stable on x86. RSBAC state unknown
64 kang 1.105
65     *hardened-sources-2.4.32-r7 (10 Jul 2006)
66    
67     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
68     +hardened-sources-2.4.32-r7.ebuild:
69     Bump PaX for RSBAC to test-17
70 johnm 1.104
71     *hardened-sources-2.6.16-r9 (03 Jul 2006)
72    
73     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
74     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
75     hardened-sources-2.6.16 bump to latest -base.
76 solar 1.103
77     *hardened-sources-2.4.32-r6 (30 Jun 2006)
78    
79     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
80     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
81     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
82     sysctl controlable resource logging
83 johnm 1.102
84     *hardened-sources-2.6.16-r7 (05 Jun 2006)
85    
86     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
87     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
88     push new 2.6.16 release in preparation for stable
89 solar 1.101
90     22 May 2006; <solar@gentoo.org> :
91     - redigest bug 134002
92 kang 1.100
93     *hardened-sources-2.4.32-r5 (16 May 2006)
94    
95     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
96     +hardened-sources-2.4.32-r5.ebuild:
97     Fixes rsbac common patching (new patch in new -r5 patchset)
98 solar 1.99
99     *hardened-sources-2.4.32-r4 (13 May 2006)
100    
101     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
102     +hardened-sources-2.4.32-r4.ebuild:
103     - security bumps
104 johnm 1.98
105     *hardened-sources-2.6.16-r6 (03 May 2006)
106    
107     03 May 2006; John Mylchreest <johnm@gentoo.org>
108     +hardened-sources-2.6.16-r6.ebuild:
109     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
110 johnm 1.97
111     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
112     hardened-sources-2.6.14-r8.ebuild:
113     fix x86_64 build problem, this will delay the digest issue again for a short
114     while but it will sort itself out
115 johnm 1.96
116     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
117     hardened-sources-2.6.14-r8.ebuild:
118     bump hardened patchset
119 antarus 1.94
120     27 Apr 2006; Alec Warner <antarus@gentoo.org>
121     files/digest-hardened-sources-2.4.32-r2,
122     files/digest-hardened-sources-2.4.32-r3,
123     files/digest-hardened-sources-2.6.14-r8, Manifest:
124     Fixing duff SHA256 digests: Bug # 131293
125 johnm 1.93
126 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
127    
128     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
129     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
130     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
131     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
132     cleanup of old uneccessary sources
133    
134 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
135     fix digest
136 johnm 1.92
137     *hardened-sources-2.6.14-r8 (20 Apr 2006)
138    
139     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
140     +hardened-sources-2.6.14-r8.ebuild:
141     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
142 johnm 1.91
143     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
144     Turning on gpg-signing again, and recomitting
145 johnm 1.90
146     *hardened-sources-2.6.16-r4 (20 Apr 2006)
147    
148     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
149     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
150     +hardened-sources-2.6.16-r4.ebuild:
151     Fix numerous security vulns
152 solar 1.89
153     *hardened-sources-2.4.32-r3 (16 Apr 2006)
154    
155     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
156     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
157     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
158     - security bump for bug #112791. Removed old ebuilds
159 johnm 1.88
160     *hardened-sources-2.6.16-r3 (15 Apr 2006)
161    
162     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
163     +hardened-sources-2.6.16-r3.ebuild:
164     Removing silly localversion which I missed
165 johnm 1.87
166     *hardened-sources-2.6.14-r7 (14 Apr 2006)
167    
168     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
169     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
170     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
171 johnm 1.86
172     *hardened-sources-2.6.16-r2 (13 Apr 2006)
173    
174     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
175     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
176     +hardened-sources-2.6.16-r2.ebuild:
177     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
178     labels, dropping USERGROUP define fixes, since these were merged mainstream.
179 johnm 1.85
180     *hardened-sources-2.6.16-r1 (11 Apr 2006)
181    
182     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
183     +hardened-sources-2.6.16-r1.ebuild:
184     Bumping to include ppc build fix and 2.6.16.3
185 tsunam 1.84
186     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
187     hardened-sources-2.6.14-r6.ebuild:
188     Stable on x86; bug #127718
189 johnm 1.83
190     *hardened-sources-2.6.16 (31 Mar 2006)
191    
192     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
193     +hardened-sources-2.6.16.ebuild:
194     Bumping to new version of grsec, and kernel base. New squashfs. Based on
195     2.6.16.1
196 cryos 1.82
197     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
198     hardened-sources-2.6.14-r6.ebuild:
199     Stable on amd64, bug 127718.
200 nixnut 1.81
201     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
202     Stable on ppc. Bug #127718
203 johnm 1.80
204     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
205     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
206     -hardened-sources-2.6.14-r4.ebuild:
207     Cleanup.
208 johnm 1.79
209     *hardened-sources-2.6.14-r6 (15 Mar 2006)
210    
211     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
212     +hardened-sources-2.6.14-r6.ebuild:
213     Fixes grsec policy recreation bug and adds a
214     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
215 solar 1.78
216     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
217     - stable on x86
218 hansmi 1.77
219     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
220     hardened-sources-2.6.14-r5.ebuild:
221     Stable on ppc.
222 johnm 1.76
223     *hardened-sources-2.6.14-r5 (01 Feb 2006)
224    
225     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
226     +hardened-sources-2.6.14-r5.ebuild:
227     fixing every known exploit
228 solar 1.75
229     *hardened-sources-2.4.32-r2 (26 Jan 2006)
230    
231     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
232     +hardened-sources-2.4.32-r2.ebuild:
233     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
234 solar 1.74
235     *hardened-sources-2.6.14-r4 (12 Jan 2006)
236    
237     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
238     - version bump for new genpatches which fix up a few sec holes
239 solar 1.73
240     *hardened-sources-2.4.32-r1 (05 Jan 2006)
241    
242     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
243     - revision bump to add misc vital linux kernel security patches.
244 johnm 1.72
245     *hardened-sources-2.6.14-r3 (30 Dec 2005)
246    
247     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
248     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
249     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
250 johnm 1.71
251     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
252     hardened-sources-2.6.14-r2.ebuild:
253     making x86 & amd64 stable following testing.
254 johnm 1.70
255     *hardened-sources-2.6.14-r2 (27 Dec 2005)
256    
257     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
258     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
259     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
260     network hooks.
261 johnm 1.69
262     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
263     hardened-sources-2.6.14-r1.ebuild:
264     bumping to stable early for sec fix on x86 & amd64
265 johnm 1.68
266     *hardened-sources-2.6.14-r1 (05 Dec 2005)
267    
268     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
269     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
270     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
271 solar 1.67
272     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
273     - stable on x86 security bug #114227 CAN-2005-3257
274 kang 1.66
275     *hardened-sources-2.4.32 (19 Nov 2005)
276    
277     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
278     +hardened-sources-2.4.32.ebuild:
279     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
280     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
281     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
282     rsbac >> /etc/portage/package.use)
283 johnm 1.65
284     *hardened-sources-2.6.14 (14 Nov 2005)
285    
286     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
287     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
288     Bumping 2.6 series to 2.6.14.2
289 johnm 1.64
290     *hardened-sources-2.6.13-r2 (20 Oct 2005)
291    
292     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
293     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
294     +hardened-sources-2.6.13-r2.ebuild:
295     Fixes minor build error in ppc.
296 johnm 1.63
297     *hardened-sources-2.6.13-r1 (17 Oct 2005)
298    
299     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
300     +hardened-sources-2.6.13-r1.ebuild:
301     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
302     2.6.13.4, fixes some major amd64 stability problems.
303 johnm 1.62
304     *hardened-sources-2.6.13 (16 Sep 2005)
305    
306     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
307     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
308     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
309     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
310     users should test this thoroughly.
311 solar 1.61
312     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
313     - stable on x86
314 johnm 1.60
315     *hardened-sources-2.6.11-r15 (27 Jun 2005)
316    
317     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
318     +hardened-sources-2.6.11-r15.ebuild:
319     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
320     grsec redefining curr_ip struct.
321 solar 1.59
322     *hardened-sources-2.4.31 (20 Jun 2005)
323    
324     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
325     initial import of 2.4.31 tree
326 johnm 1.58
327     *hardened-sources-2.6.11-r14 (14 Jun 2005)
328    
329     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
330     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
331     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
332     naming scheme to abide by genpatches
333 johnm 1.57
334     *hardened-sources-2.6.11-r13 (18 May 2005)
335    
336     18 May 2005; John Mylchreest <johnm@gentoo.org>
337     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
338     Managed to mangle the Makefile patch from grsec, to miss out the grsec
339     target. sorry about that. Fixes bug #93022
340 johnm 1.56
341     *hardened-sources-2.6.11-r12 (17 May 2005)
342    
343     17 May 2005; John Mylchreest <johnm@gentoo.org>
344     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
345     +hardened-sources-2.6.11-r12.ebuild:
346     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
347     merges in genpatches-base
348 johnm 1.55
349     *hardened-sources-2.6.11-r12 (17 May 2005)
350    
351     17 May 2005; John Mylchreest <johnm@gentoo.org>
352     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
353     +hardened-sources-2.6.11-r12.ebuild:
354     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
355     merges in genpatches-base
356 solar 1.54
357     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
358     -files/2.4.27-cmdline-race.patch,
359     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
360     -files/2.4.28-grsec-binfmt_a.out.patch,
361     -files/2.4.28-grsec-cmdline-race.patch,
362     -files/2.4.28-selinux-binfmt_a.out.patch,
363     -files/2.4.28-selinux-cmdline-race.patch,
364     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
365     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
366     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
367     cleanup..
368 solar 1.53
369     *hardened-sources-2.4.30-r1 (21 Apr 2005)
370    
371     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
372     - disable aout by default
373 solar 1.52
374     *hardened-sources-2.4.30 (18 Apr 2005)
375    
376     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
377     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
378     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
379     use
380 tocharian 1.50
381 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
382    
383     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
384     +hardened-sources-2.4.29.ebuild:
385     New hardened-patches-2.4-29.0 patchball.
386     Removed SELinux support, upgraded GRSecurity to 2.1.4.
387    
388     *hardened-sources-2.4.28-r5 (06 Mar 2005)
389    
390     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
391     +hardened-sources-2.4.28-r5.ebuild:
392     Added a fix for a PaX vulnerability.
393    
394     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
395 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
396     Stable on x86
397 solar 1.49
398     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
399     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
400     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
401     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
402     - fixed/added RDEPEND= in all kernel-2 ebuilds
403 tocharian 1.48
404     *hardened-sources-2.4.28-r4 (21 Jan 2005)
405    
406     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
407     +hardened-sources-2.4.28-r4.ebuild:
408     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
409     backport of neighbour hash updates.
410 tocharian 1.47
411     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
412     hardened-sources-2.4.28-r3.ebuild:
413     Stable on x86
414 tseng 1.46
415     *hardened-sources-2.6.10-r3 (20 Jan 2005)
416    
417     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
418     +hardened-sources-2.6.10-r3.ebuild:
419     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
420     in 2005.0
421 tocharian 1.45
422     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
423     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
424     hardened-sources-2.4.28-r2.ebuild:
425     Mark stable on x86
426 tocharian 1.44
427     *hardened-sources-2.4.28-r3 (17 Jan 2005)
428    
429     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
430     +hardened-sources-2.4.28-r3.ebuild:
431     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
432 tocharian 1.43
433     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
434     hardened-sources-2.4.28.ebuild:
435     Mark stable on x86.
436 tocharian 1.42
437     *hardened-sources-2.4.28-r2 (13 Jan 2005)
438    
439     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
440     +hardened-sources-2.4.28-r2.ebuild:
441     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
442     Mazinger for grsecurity patches as well.
443 plasmaroo 1.41
444     *hardened-sources-2.4.28-r1 (23 Dec 2004)
445    
446     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
447     Security bump. Thank tocharian for rolling a new patchset...
448 solar 1.40
449     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
450     +files/2.4.28-grsec-cmdline-race.patch,
451     +files/2.4.28-selinux-binfmt_a.out.patch,
452     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
453     - Round up remaining security patches that appear to be missing in 2.4.28. -
454     PaX standalone updated to current. hgpv=28.1
455 solar 1.39
456     *hardened-sources-2.4.28 (28 Nov 2004)
457    
458     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
459     security bump. Thank tocharian for rolling a new patchset
460 scox 1.31
461 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
462    
463     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
464     +hardened-sources-2.4.27-r3.ebuild:
465     Applies the new 2.4-27.2 patchball which updates
466     GRSecurity to the 2.0.1 version.
467    
468 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
469    
470     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
471     +hardened-sources-2.4.27-r2.ebuild:
472     Version bump.
473     This version uses the new 2.4-27.1 patchball which updates
474     both the SELinux PaX hooks patch and the SELinux headers.
475    
476 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
477    
478     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
479     +hardened-sources-2.4.27-r1.ebuild,
480     -hardened-sources-2.4.27.ebuild,
481     +files/2.4.27-cmdline-race.patch:
482     Version bump, fix for cmdline race. See bug #59905.
483    
484     *hardened-sources-2.4.26-r6 (09 Aug 2004)
485    
486     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
487     +hardened-sources-2.4.26-r6.ebuild,
488     -hardened-sources-2.4.26-r5.ebuild,
489     -hardened-sources-2.4.26-r4.ebuild,
490     +files/2.4.26-cmdline-race.patch:
491     Version bump, fix for cmdline race. See bug #59905.
492    
493 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
494    
495     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
496     +hardened-sources-2.4.27.ebuild,
497     +files/2.4.27-CAN-2004-0394.patch:
498     Ported the patchball to the 2.4.27 kernel version.
499    
500 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
501    
502     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
503     +hardened-sources-2.4.26-r5.ebuild:
504 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
505 scox 1.34 It adds the following features:
506     - Squashfs
507     - Ebtables
508     - Netdev random (core+drivers)
509     - Watchdog Timer (WDT) fix.
510    
511 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
512    
513     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
514     +hardened-sources-2.4.26-r4.ebuild,
515     +files/2.4.26-CAN-2004-0415.patch,
516     -hardened-sources-2.4.26-3:
517     Version bump, fix for CAN 0415, see bug #59378.
518    
519 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
520    
521     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
522     +hardened-sources-2.4.26-r3.ebuild,
523     +files/2.4.26-CAN-2004-0497.patch,
524     -hardened-sources-2.4.26-r2.ebuild:
525     Version bump, fixed CAN 0497, see bug #56171.
526    
527 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
528    
529     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
530 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
531 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
532     +files/2.4.26-CAN-2004-0535.patch,
533     -hardened-sources-2.4.26-r1.ebuild:
534     Fixes for both CAN 0495 and 0535, see bug #54976
535 pvdabeel 1.27
536 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
537     hardened-sources-2.4.26-r1.ebuild:
538     QA - fix use invocation
539 scox 1.28
540     *hardened-sources-2.4.26-r1 (22 June 2004)
541    
542     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
543     +hardened-sources-2.4.26-r1.ebuild,
544     +files/2.4.26-CAN-2004-0394.patch,
545     +files/2.4.26-signal-race.patch,
546     -hardened-sources-2.4.26.ebuild,
547     -hardened-sources-2.4.24-r3.ebuild:
548     Version bump for the CAN-2004-0394 issue and bug #53804
549     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
550    
551    
552 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
553     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
554     Masked hardened-sources-2.4.26.ebuild broken for ppc
555    
556     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
557     hardened-sources-2.4.24-r3.ebuild:
558     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
559 plasmaroo 1.25
560 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
561    
562     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
563     +hardened-sources-2.4.26.ebuild:
564     Updated hardened-sources for the 2.4.26 kernel
565     Removed broken components, updated almost everything.
566    
567 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
568    
569     17 Apr 2004; <plasmaroo@gentoo.org>
570     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
571     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
572     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
573     +hardened-sources-2.4.24-r3.ebuild:
574     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
575     vulnerabilities. Old revisions removed.
576 plasmaroo 1.24
577     *hardened-sources-2.4.24-r2 (15 Apr 2004)
578    
579     15 Apr 2004; <plasmaroo@gentoo.org>
580     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
581     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
582     Version bump for the CAN-2004-0109 issue; bug #47881.
583 aliz 1.23
584     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
585     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
586     Add eutils to inherit.
587 plasmaroo 1.22
588     *hardened-sources-2.4.24-r1 (19 Feb 2004)
589    
590     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
591     files/hardened-sources-2.4.24.munmap.patch:
592     Added the patch for the mremap/munmap vulnerability. Bug #42024.
593 scox 1.19
594 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
595 scox 1.26
596 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
597     hardened-sources-2.4.24.ebuild:
598     Version bump, updated most of the components.
599     This release includes the following:
600    
601     - Hardened security
602     - Netfilter patch-o-matic 20031219
603     - FreeSWAN 2.04 & x509 1.4.8
604     - EVMS 2.2.2
605     - XFS 1.3.1
606     - cryptoloop jari
607     - grsecurity 2.0-rc4
608     - SELinux
609     - PaX 200402060000
610     - PaX Obscurity 200308302223
611     - Others...
612    
613     Neither -ck nor systrace are included anymore.
614    
615 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
616    
617     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
618     hardened-sources-2.4.22-r2.ebuild:
619 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
620 scox 1.19
621     *hardened-sources-2.4.22-r1 (02 Dec 2003)
622 iggy 1.17
623     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
624 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
625 iggy 1.16
626     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
627 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
628     Version bump for the 'do_brk' vulnerability.
629 iggy 1.15
630     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
631     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
632     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
633     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
634 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
635 frogger 1.14
636     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
637     hardened-sources-2.4.22.ebuild:
638 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
639     components. These are no longer handled in the kernel
640     so this code was not necessary.
641 frogger 1.13
642     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
643     New 2.4.22 based hardened-sources thanks to
644     Phil West <p.west@computer.org>.
645    
646     These sources include:
647 plasmaroo 1.18 - New SELinux API
648     - Updated CK-base
649     - Updated GRSec
650     - Systrace
651     - SuperFreeS/WAN 1.99.8
652     - Propolice kernel build support
653     - EVMS
654     - Other various security related patches
655 frogger 1.11
656 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
657    
658     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
659     Updated hardened-sources based on the 2.4.21 Linux kernel.
660     This includes updates to most major components such as:
661 plasmaroo 1.18 - ck-base-0306300059
662     - selinux-2.4-2003071106
663     - grsecurity-2.0-rc1
664     - Updated IPTables patch-o-matic
665     - Updated SuperFreeS/WAN
666    
667 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
668     updated patch set ready for the 2.4.21 based kernel.
669    
670 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
671     Initial import of hardened-sources-2.4.20-r4. This revision
672     includes only a few changes, but one of these is an important
673     security fix. It is recommended all users of hardened-sources
674     upgrade to this release.
675 plasmaroo 1.18
676 frogger 1.11 - ioperm bug fix
677     - fixed compilation failure when building without GRSec
678 plasmaroo 1.18
679 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
680     due to time constraints, but is planned for inclusion in the near
681     future.
682 msterret 1.10
683     *hardened-sources-2.4.20-r2 (12 Jun 2003)
684    
685     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
686     hardened-sources-2.4.20-r3.ebuild:
687 plasmaroo 1.18 Add Header...
688 frogger 1.9
689     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
690     hardened-sources-2.4.20-r3.ebuild:
691     Removed warnings from ebuild. This kernel should be safe to
692     use at this point.
693 frogger 1.8
694     *hardened-sources-2.4.20-r3 (08 Jun 2003)
695    
696     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
697     hardened-sources-2.4.20-r3.ebuild:
698     New revision. Includes the following changes over -r2:
699 plasmaroo 1.18
700 frogger 1.8 - ck7-base (O(1), preempt, low latency)
701     - Super FreeS/WAN 1.99.7rc2
702     - PaX for the LSM/SELinux branch
703     - GRSecurity 2.0-pre4 (role based access control)
704     - Systrace 1.3
705     - EXT3 fixes
706     - EVMS 2.0.1
707     - GCC 3.1+ compile optimizations
708     - ProPolice kernel build support
709     - Hashing table security fixes
710 frogger 1.3
711     *hardened-sources-2.4.20-r1 (09 Apr 2003)
712 frogger 1.7
713     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
714     Initial import of hardened-sources-r2. This new
715     ebuild includes many new performance and security
716     related patches. As in -r1, it will patch in
717     LSM/SELinux if "selinux" is in USE, otherwise it
718     will patch in GRSecurity. The following patches
719     are included in this revision:
720 plasmaroo 1.18
721 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
722     (pulled from the base CK patch)
723     - ptrace exploit patch for the LSM kernel
724     (the GRSec patch already fixes this)
725     - LSM 2.4-2003040709
726     - SELinux 2.4-2003040709
727     - Systrace v1.2
728     - IPTables patch-o-matic base patches - 20030107
729     - CryptoAPI 2.4.20.1 w/ loop-jari patch
730     - Super FreeS/WAN 1.99.6.1
731     - GRSecurity 1.9.9g
732     - MPPE
733     - EXT3 data journal fix
734     - CIPE 1.5.4
735 frogger 1.6
736     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
737     hardened-sources-2.4.20-r1.ebuild, manifest:
738 plasmaroo 1.18 Updated to install flask components correctly for selinux.
739 frogger 1.5
740     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
741     hardened-sources-2.4.20-r1.ebuild:
742     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
743     is patched in instead. Ptrace patches for selinux have also been added. In
744     either case, systrace support will be patched in as well.
745 frogger 1.3
746     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
747     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
748 plasmaroo 1.18 Revision bump for new sources.
749 frogger 1.4
750 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
751 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
752 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
753 method 1.1
754 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
755    
756 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
757     hardened-sources-2.4.20.ebuild:
758 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20