/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.128 - (hide annotations) (download)
Wed Dec 27 19:16:53 2006 UTC (7 years, 6 months ago) by phreak
Branch: MAIN
Changes since 1.127: +7 -1 lines
Revision bump for bug #157186.
(Portage version: 2.1.2_rc4-r1)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 solar 1.73 # Copyright 2000-2006 Gentoo Foundation; Distributed under the GPL v2
3 phreak 1.128 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.127 2006/12/23 19:08:24 phreak Exp $
4    
5     *hardened-sources-2.6.18-r4 (27 Dec 2006)
6    
7     27 Dec 2006; Christian Heim <phreak@gentoo.org>
8     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
9     Revision bump for bug #157186.
10 phreak 1.127
11     *hardened-sources-2.6.19-r2 (23 Dec 2006)
12    
13     23 Dec 2006; Christian Heim <phreak@gentoo.org>
14     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
15     Revision bump to pull in genpatches-2.6.19-3 for #157186.
16 phreak 1.126
17     17 Dec 2006; Christian Heim <phreak@gentoo.org>
18     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
19     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
20     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
21     hardened-sources-2.6.19-r1.ebuild:
22     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
23     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
24 pappy 1.125
25     *hardened-sources-2.4.33.4 (17 Dec 2006)
26    
27     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
28     +hardened-sources-2.4.33.4.ebuild:
29     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
30     and quilting
31 phreak 1.124
32     *hardened-sources-2.6.19-r1 (14 Dec 2006)
33    
34     14 Dec 2006; Christian Heim <phreak@gentoo.org>
35     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
36     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
37     for reporting).
38 phreak 1.123
39     *hardened-sources-2.6.19 (13 Dec 2006)
40    
41     13 Dec 2006; Christian Heim <phreak@gentoo.org>
42     +hardened-sources-2.6.19.ebuild:
43     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
44     Brad for providing that prompt update.
45 phreak 1.122
46     *hardened-sources-2.6.18-r3 (13 Dec 2006)
47    
48     13 Dec 2006; Christian Heim <phreak@gentoo.org>
49     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
50     +hardened-sources-2.6.18-r3.ebuild:
51     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
52     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
53 phreak 1.121
54     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
55     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
56 nixnut 1.120
57     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
58     Stable on ppc wrt bug 157356
59 opfer 1.119
60     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
61     hardened-sources-2.6.18.ebuild:
62     stable x86, bug #157356
63 phreak 1.118
64     *hardened-sources-2.6.18-r2 (06 Dec 2006)
65    
66     06 Dec 2006; Christian Heim <phreak@gentoo.org>
67     +hardened-sources-2.6.18-r2.ebuild:
68     Revision bump, including 2.6.18.5 (via genpatches) and
69     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
70     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
71     redesign.
72 phreak 1.117
73     06 Dec 2006; Christian Heim <phreak@gentoo.org>
74     hardened-sources-2.6.18.ebuild:
75     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
76     of Mike Doty).
77 phreak 1.116
78     *hardened-sources-2.6.18-r1 (23 Nov 2006)
79    
80     23 Nov 2006; Christian Heim <phreak@gentoo.org>
81     +hardened-sources-2.6.18-r1.ebuild:
82     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
83 phreak 1.115
84     *hardened-sources-2.6.18 (11 Nov 2006)
85    
86     11 Nov 2006; Christian Heim <phreak@gentoo.org>
87     +hardened-sources-2.6.18.ebuild:
88     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
89 solar 1.114
90     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
91     - mark amd64 stable also. bug #151877
92 solar 1.113
93     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
94     - mark 2.6.17-r1 stable
95 phreak 1.112
96     27 Aug 2006; Christian Heim <phreak@gentoo.org>
97     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
98     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
99 phreak 1.111
100     *hardened-sources-2.6.17-r1 (26 Aug 2006)
101    
102     26 Aug 2006; Christian Heim <phreak@gentoo.org>
103     +hardened-sources-2.6.17-r1.ebuild:
104     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
105     grsecurity patch.
106 phreak 1.110
107     *hardened-sources-2.6.17 (17 Aug 2006)
108    
109     17 Aug 2006; Christian Heim <phreak@gentoo.org>
110     +hardened-sources-2.6.17.ebuild:
111     Bumping the hardened-sources-2.6 series to 2.6.17, using
112     genpatches-2.6.17-6.base.
113 solar 1.109
114     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
115     - stable on x86 and amd64
116 solar 1.108
117     *hardened-sources-2.6.16-r11 (15 Jul 2006)
118    
119     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
120     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
121     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
122     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
123     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
124     crusty ebuilds
125 johnm 1.107
126     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
127     hardened-sources-2.6.16-r10.ebuild:
128     marking stable on x86 and amd64
129 solar 1.106
130     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
131     - 2.4.32-r6 stable on x86. RSBAC state unknown
132 kang 1.105
133     *hardened-sources-2.4.32-r7 (10 Jul 2006)
134    
135     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
136     +hardened-sources-2.4.32-r7.ebuild:
137     Bump PaX for RSBAC to test-17
138 johnm 1.104
139     *hardened-sources-2.6.16-r9 (03 Jul 2006)
140    
141     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
142     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
143     hardened-sources-2.6.16 bump to latest -base.
144 solar 1.103
145     *hardened-sources-2.4.32-r6 (30 Jun 2006)
146    
147     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
148     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
149     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
150     sysctl controlable resource logging
151 johnm 1.102
152     *hardened-sources-2.6.16-r7 (05 Jun 2006)
153    
154     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
155     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
156     push new 2.6.16 release in preparation for stable
157 solar 1.101
158     22 May 2006; <solar@gentoo.org> :
159     - redigest bug 134002
160 kang 1.100
161     *hardened-sources-2.4.32-r5 (16 May 2006)
162    
163     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
164     +hardened-sources-2.4.32-r5.ebuild:
165     Fixes rsbac common patching (new patch in new -r5 patchset)
166 solar 1.99
167     *hardened-sources-2.4.32-r4 (13 May 2006)
168    
169     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
170     +hardened-sources-2.4.32-r4.ebuild:
171     - security bumps
172 johnm 1.98
173     *hardened-sources-2.6.16-r6 (03 May 2006)
174    
175     03 May 2006; John Mylchreest <johnm@gentoo.org>
176     +hardened-sources-2.6.16-r6.ebuild:
177     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
178 johnm 1.97
179     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
180     hardened-sources-2.6.14-r8.ebuild:
181     fix x86_64 build problem, this will delay the digest issue again for a short
182     while but it will sort itself out
183 johnm 1.96
184     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
185     hardened-sources-2.6.14-r8.ebuild:
186     bump hardened patchset
187 antarus 1.94
188     27 Apr 2006; Alec Warner <antarus@gentoo.org>
189     files/digest-hardened-sources-2.4.32-r2,
190     files/digest-hardened-sources-2.4.32-r3,
191     files/digest-hardened-sources-2.6.14-r8, Manifest:
192     Fixing duff SHA256 digests: Bug # 131293
193 johnm 1.93
194 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
195    
196     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
197     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
198     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
199     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
200     cleanup of old uneccessary sources
201    
202 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
203     fix digest
204 johnm 1.92
205     *hardened-sources-2.6.14-r8 (20 Apr 2006)
206    
207     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
208     +hardened-sources-2.6.14-r8.ebuild:
209     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
210 johnm 1.91
211     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
212     Turning on gpg-signing again, and recomitting
213 johnm 1.90
214     *hardened-sources-2.6.16-r4 (20 Apr 2006)
215    
216     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
217     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
218     +hardened-sources-2.6.16-r4.ebuild:
219     Fix numerous security vulns
220 solar 1.89
221     *hardened-sources-2.4.32-r3 (16 Apr 2006)
222    
223     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
224     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
225     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
226     - security bump for bug #112791. Removed old ebuilds
227 johnm 1.88
228     *hardened-sources-2.6.16-r3 (15 Apr 2006)
229    
230     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
231     +hardened-sources-2.6.16-r3.ebuild:
232     Removing silly localversion which I missed
233 johnm 1.87
234     *hardened-sources-2.6.14-r7 (14 Apr 2006)
235    
236     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
237     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
238     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
239 johnm 1.86
240     *hardened-sources-2.6.16-r2 (13 Apr 2006)
241    
242     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
243     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
244     +hardened-sources-2.6.16-r2.ebuild:
245     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
246     labels, dropping USERGROUP define fixes, since these were merged mainstream.
247 johnm 1.85
248     *hardened-sources-2.6.16-r1 (11 Apr 2006)
249    
250     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
251     +hardened-sources-2.6.16-r1.ebuild:
252     Bumping to include ppc build fix and 2.6.16.3
253 tsunam 1.84
254     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
255     hardened-sources-2.6.14-r6.ebuild:
256     Stable on x86; bug #127718
257 johnm 1.83
258     *hardened-sources-2.6.16 (31 Mar 2006)
259    
260     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
261     +hardened-sources-2.6.16.ebuild:
262     Bumping to new version of grsec, and kernel base. New squashfs. Based on
263     2.6.16.1
264 cryos 1.82
265     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
266     hardened-sources-2.6.14-r6.ebuild:
267     Stable on amd64, bug 127718.
268 nixnut 1.81
269     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
270     Stable on ppc. Bug #127718
271 johnm 1.80
272     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
273     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
274     -hardened-sources-2.6.14-r4.ebuild:
275     Cleanup.
276 johnm 1.79
277     *hardened-sources-2.6.14-r6 (15 Mar 2006)
278    
279     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
280     +hardened-sources-2.6.14-r6.ebuild:
281     Fixes grsec policy recreation bug and adds a
282     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
283 solar 1.78
284     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
285     - stable on x86
286 hansmi 1.77
287     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
288     hardened-sources-2.6.14-r5.ebuild:
289     Stable on ppc.
290 johnm 1.76
291     *hardened-sources-2.6.14-r5 (01 Feb 2006)
292    
293     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
294     +hardened-sources-2.6.14-r5.ebuild:
295     fixing every known exploit
296 solar 1.75
297     *hardened-sources-2.4.32-r2 (26 Jan 2006)
298    
299     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
300     +hardened-sources-2.4.32-r2.ebuild:
301     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
302 solar 1.74
303     *hardened-sources-2.6.14-r4 (12 Jan 2006)
304    
305     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
306     - version bump for new genpatches which fix up a few sec holes
307 solar 1.73
308     *hardened-sources-2.4.32-r1 (05 Jan 2006)
309    
310     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
311     - revision bump to add misc vital linux kernel security patches.
312 johnm 1.72
313     *hardened-sources-2.6.14-r3 (30 Dec 2005)
314    
315     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
316     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
317     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
318 johnm 1.71
319     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
320     hardened-sources-2.6.14-r2.ebuild:
321     making x86 & amd64 stable following testing.
322 johnm 1.70
323     *hardened-sources-2.6.14-r2 (27 Dec 2005)
324    
325     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
326     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
327     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
328     network hooks.
329 johnm 1.69
330     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
331     hardened-sources-2.6.14-r1.ebuild:
332     bumping to stable early for sec fix on x86 & amd64
333 johnm 1.68
334     *hardened-sources-2.6.14-r1 (05 Dec 2005)
335    
336     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
337     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
338     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
339 solar 1.67
340     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
341     - stable on x86 security bug #114227 CAN-2005-3257
342 kang 1.66
343     *hardened-sources-2.4.32 (19 Nov 2005)
344    
345     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
346     +hardened-sources-2.4.32.ebuild:
347     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
348     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
349     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
350     rsbac >> /etc/portage/package.use)
351 johnm 1.65
352     *hardened-sources-2.6.14 (14 Nov 2005)
353    
354     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
355     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
356     Bumping 2.6 series to 2.6.14.2
357 johnm 1.64
358     *hardened-sources-2.6.13-r2 (20 Oct 2005)
359    
360     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
361     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
362     +hardened-sources-2.6.13-r2.ebuild:
363     Fixes minor build error in ppc.
364 johnm 1.63
365     *hardened-sources-2.6.13-r1 (17 Oct 2005)
366    
367     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
368     +hardened-sources-2.6.13-r1.ebuild:
369     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
370     2.6.13.4, fixes some major amd64 stability problems.
371 johnm 1.62
372     *hardened-sources-2.6.13 (16 Sep 2005)
373    
374     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
375     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
376     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
377     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
378     users should test this thoroughly.
379 solar 1.61
380     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
381     - stable on x86
382 johnm 1.60
383     *hardened-sources-2.6.11-r15 (27 Jun 2005)
384    
385     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
386     +hardened-sources-2.6.11-r15.ebuild:
387     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
388     grsec redefining curr_ip struct.
389 solar 1.59
390     *hardened-sources-2.4.31 (20 Jun 2005)
391    
392     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
393     initial import of 2.4.31 tree
394 johnm 1.58
395     *hardened-sources-2.6.11-r14 (14 Jun 2005)
396    
397     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
398     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
399     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
400     naming scheme to abide by genpatches
401 johnm 1.57
402     *hardened-sources-2.6.11-r13 (18 May 2005)
403    
404     18 May 2005; John Mylchreest <johnm@gentoo.org>
405     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
406     Managed to mangle the Makefile patch from grsec, to miss out the grsec
407     target. sorry about that. Fixes bug #93022
408 johnm 1.56
409     *hardened-sources-2.6.11-r12 (17 May 2005)
410    
411     17 May 2005; John Mylchreest <johnm@gentoo.org>
412     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
413     +hardened-sources-2.6.11-r12.ebuild:
414     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
415     merges in genpatches-base
416 johnm 1.55
417     *hardened-sources-2.6.11-r12 (17 May 2005)
418    
419     17 May 2005; John Mylchreest <johnm@gentoo.org>
420     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
421     +hardened-sources-2.6.11-r12.ebuild:
422     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
423     merges in genpatches-base
424 solar 1.54
425     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
426     -files/2.4.27-cmdline-race.patch,
427     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
428     -files/2.4.28-grsec-binfmt_a.out.patch,
429     -files/2.4.28-grsec-cmdline-race.patch,
430     -files/2.4.28-selinux-binfmt_a.out.patch,
431     -files/2.4.28-selinux-cmdline-race.patch,
432     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
433     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
434     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
435     cleanup..
436 solar 1.53
437     *hardened-sources-2.4.30-r1 (21 Apr 2005)
438    
439     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
440     - disable aout by default
441 solar 1.52
442     *hardened-sources-2.4.30 (18 Apr 2005)
443    
444     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
445     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
446     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
447     use
448 tocharian 1.50
449 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
450    
451     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
452     +hardened-sources-2.4.29.ebuild:
453     New hardened-patches-2.4-29.0 patchball.
454     Removed SELinux support, upgraded GRSecurity to 2.1.4.
455    
456     *hardened-sources-2.4.28-r5 (06 Mar 2005)
457    
458     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
459     +hardened-sources-2.4.28-r5.ebuild:
460     Added a fix for a PaX vulnerability.
461    
462     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
463 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
464     Stable on x86
465 solar 1.49
466     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
467     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
468     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
469     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
470     - fixed/added RDEPEND= in all kernel-2 ebuilds
471 tocharian 1.48
472     *hardened-sources-2.4.28-r4 (21 Jan 2005)
473    
474     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
475     +hardened-sources-2.4.28-r4.ebuild:
476     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
477     backport of neighbour hash updates.
478 tocharian 1.47
479     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
480     hardened-sources-2.4.28-r3.ebuild:
481     Stable on x86
482 tseng 1.46
483     *hardened-sources-2.6.10-r3 (20 Jan 2005)
484    
485     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
486     +hardened-sources-2.6.10-r3.ebuild:
487     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
488     in 2005.0
489 tocharian 1.45
490     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
491     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
492     hardened-sources-2.4.28-r2.ebuild:
493     Mark stable on x86
494 tocharian 1.44
495     *hardened-sources-2.4.28-r3 (17 Jan 2005)
496    
497     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
498     +hardened-sources-2.4.28-r3.ebuild:
499     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
500 tocharian 1.43
501     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
502     hardened-sources-2.4.28.ebuild:
503     Mark stable on x86.
504 tocharian 1.42
505     *hardened-sources-2.4.28-r2 (13 Jan 2005)
506    
507     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
508     +hardened-sources-2.4.28-r2.ebuild:
509     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
510     Mazinger for grsecurity patches as well.
511 plasmaroo 1.41
512     *hardened-sources-2.4.28-r1 (23 Dec 2004)
513    
514     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
515     Security bump. Thank tocharian for rolling a new patchset...
516 solar 1.40
517     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
518     +files/2.4.28-grsec-cmdline-race.patch,
519     +files/2.4.28-selinux-binfmt_a.out.patch,
520     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
521     - Round up remaining security patches that appear to be missing in 2.4.28. -
522     PaX standalone updated to current. hgpv=28.1
523 solar 1.39
524     *hardened-sources-2.4.28 (28 Nov 2004)
525    
526     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
527     security bump. Thank tocharian for rolling a new patchset
528 scox 1.31
529 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
530    
531     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
532     +hardened-sources-2.4.27-r3.ebuild:
533     Applies the new 2.4-27.2 patchball which updates
534     GRSecurity to the 2.0.1 version.
535    
536 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
537    
538     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
539     +hardened-sources-2.4.27-r2.ebuild:
540     Version bump.
541     This version uses the new 2.4-27.1 patchball which updates
542     both the SELinux PaX hooks patch and the SELinux headers.
543    
544 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
545    
546     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
547     +hardened-sources-2.4.27-r1.ebuild,
548     -hardened-sources-2.4.27.ebuild,
549     +files/2.4.27-cmdline-race.patch:
550     Version bump, fix for cmdline race. See bug #59905.
551    
552     *hardened-sources-2.4.26-r6 (09 Aug 2004)
553    
554     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
555     +hardened-sources-2.4.26-r6.ebuild,
556     -hardened-sources-2.4.26-r5.ebuild,
557     -hardened-sources-2.4.26-r4.ebuild,
558     +files/2.4.26-cmdline-race.patch:
559     Version bump, fix for cmdline race. See bug #59905.
560    
561 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
562    
563     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
564     +hardened-sources-2.4.27.ebuild,
565     +files/2.4.27-CAN-2004-0394.patch:
566     Ported the patchball to the 2.4.27 kernel version.
567    
568 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
569    
570     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
571     +hardened-sources-2.4.26-r5.ebuild:
572 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
573 scox 1.34 It adds the following features:
574     - Squashfs
575     - Ebtables
576     - Netdev random (core+drivers)
577     - Watchdog Timer (WDT) fix.
578    
579 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
580    
581     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
582     +hardened-sources-2.4.26-r4.ebuild,
583     +files/2.4.26-CAN-2004-0415.patch,
584     -hardened-sources-2.4.26-3:
585     Version bump, fix for CAN 0415, see bug #59378.
586    
587 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
588    
589     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
590     +hardened-sources-2.4.26-r3.ebuild,
591     +files/2.4.26-CAN-2004-0497.patch,
592     -hardened-sources-2.4.26-r2.ebuild:
593     Version bump, fixed CAN 0497, see bug #56171.
594    
595 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
596    
597     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
598 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
599 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
600     +files/2.4.26-CAN-2004-0535.patch,
601     -hardened-sources-2.4.26-r1.ebuild:
602     Fixes for both CAN 0495 and 0535, see bug #54976
603 pvdabeel 1.27
604 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
605     hardened-sources-2.4.26-r1.ebuild:
606     QA - fix use invocation
607 scox 1.28
608     *hardened-sources-2.4.26-r1 (22 June 2004)
609    
610     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
611     +hardened-sources-2.4.26-r1.ebuild,
612     +files/2.4.26-CAN-2004-0394.patch,
613     +files/2.4.26-signal-race.patch,
614     -hardened-sources-2.4.26.ebuild,
615     -hardened-sources-2.4.24-r3.ebuild:
616     Version bump for the CAN-2004-0394 issue and bug #53804
617     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
618    
619    
620 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
621     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
622     Masked hardened-sources-2.4.26.ebuild broken for ppc
623    
624     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
625     hardened-sources-2.4.24-r3.ebuild:
626     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
627 plasmaroo 1.25
628 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
629    
630     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
631     +hardened-sources-2.4.26.ebuild:
632     Updated hardened-sources for the 2.4.26 kernel
633     Removed broken components, updated almost everything.
634    
635 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
636    
637     17 Apr 2004; <plasmaroo@gentoo.org>
638     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
639     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
640     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
641     +hardened-sources-2.4.24-r3.ebuild:
642     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
643     vulnerabilities. Old revisions removed.
644 plasmaroo 1.24
645     *hardened-sources-2.4.24-r2 (15 Apr 2004)
646    
647     15 Apr 2004; <plasmaroo@gentoo.org>
648     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
649     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
650     Version bump for the CAN-2004-0109 issue; bug #47881.
651 aliz 1.23
652     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
653     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
654     Add eutils to inherit.
655 plasmaroo 1.22
656     *hardened-sources-2.4.24-r1 (19 Feb 2004)
657    
658     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
659     files/hardened-sources-2.4.24.munmap.patch:
660     Added the patch for the mremap/munmap vulnerability. Bug #42024.
661 scox 1.19
662 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
663 scox 1.26
664 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
665     hardened-sources-2.4.24.ebuild:
666     Version bump, updated most of the components.
667     This release includes the following:
668    
669     - Hardened security
670     - Netfilter patch-o-matic 20031219
671     - FreeSWAN 2.04 & x509 1.4.8
672     - EVMS 2.2.2
673     - XFS 1.3.1
674     - cryptoloop jari
675     - grsecurity 2.0-rc4
676     - SELinux
677     - PaX 200402060000
678     - PaX Obscurity 200308302223
679     - Others...
680    
681     Neither -ck nor systrace are included anymore.
682    
683 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
684    
685     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
686     hardened-sources-2.4.22-r2.ebuild:
687 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
688 scox 1.19
689     *hardened-sources-2.4.22-r1 (02 Dec 2003)
690 iggy 1.17
691     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
692 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
693 iggy 1.16
694     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
695 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
696     Version bump for the 'do_brk' vulnerability.
697 iggy 1.15
698     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
699     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
700     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
701     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
702 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
703 frogger 1.14
704     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
705     hardened-sources-2.4.22.ebuild:
706 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
707     components. These are no longer handled in the kernel
708     so this code was not necessary.
709 frogger 1.13
710     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
711     New 2.4.22 based hardened-sources thanks to
712     Phil West <p.west@computer.org>.
713    
714     These sources include:
715 plasmaroo 1.18 - New SELinux API
716     - Updated CK-base
717     - Updated GRSec
718     - Systrace
719     - SuperFreeS/WAN 1.99.8
720     - Propolice kernel build support
721     - EVMS
722     - Other various security related patches
723 frogger 1.11
724 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
725    
726     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
727     Updated hardened-sources based on the 2.4.21 Linux kernel.
728     This includes updates to most major components such as:
729 plasmaroo 1.18 - ck-base-0306300059
730     - selinux-2.4-2003071106
731     - grsecurity-2.0-rc1
732     - Updated IPTables patch-o-matic
733     - Updated SuperFreeS/WAN
734    
735 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
736     updated patch set ready for the 2.4.21 based kernel.
737    
738 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
739     Initial import of hardened-sources-2.4.20-r4. This revision
740     includes only a few changes, but one of these is an important
741     security fix. It is recommended all users of hardened-sources
742     upgrade to this release.
743 plasmaroo 1.18
744 frogger 1.11 - ioperm bug fix
745     - fixed compilation failure when building without GRSec
746 plasmaroo 1.18
747 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
748     due to time constraints, but is planned for inclusion in the near
749     future.
750 msterret 1.10
751     *hardened-sources-2.4.20-r2 (12 Jun 2003)
752    
753     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
754     hardened-sources-2.4.20-r3.ebuild:
755 plasmaroo 1.18 Add Header...
756 frogger 1.9
757     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
758     hardened-sources-2.4.20-r3.ebuild:
759     Removed warnings from ebuild. This kernel should be safe to
760     use at this point.
761 frogger 1.8
762     *hardened-sources-2.4.20-r3 (08 Jun 2003)
763    
764     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
765     hardened-sources-2.4.20-r3.ebuild:
766     New revision. Includes the following changes over -r2:
767 plasmaroo 1.18
768 frogger 1.8 - ck7-base (O(1), preempt, low latency)
769     - Super FreeS/WAN 1.99.7rc2
770     - PaX for the LSM/SELinux branch
771     - GRSecurity 2.0-pre4 (role based access control)
772     - Systrace 1.3
773     - EXT3 fixes
774     - EVMS 2.0.1
775     - GCC 3.1+ compile optimizations
776     - ProPolice kernel build support
777     - Hashing table security fixes
778 frogger 1.3
779     *hardened-sources-2.4.20-r1 (09 Apr 2003)
780 frogger 1.7
781     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
782     Initial import of hardened-sources-r2. This new
783     ebuild includes many new performance and security
784     related patches. As in -r1, it will patch in
785     LSM/SELinux if "selinux" is in USE, otherwise it
786     will patch in GRSecurity. The following patches
787     are included in this revision:
788 plasmaroo 1.18
789 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
790     (pulled from the base CK patch)
791     - ptrace exploit patch for the LSM kernel
792     (the GRSec patch already fixes this)
793     - LSM 2.4-2003040709
794     - SELinux 2.4-2003040709
795     - Systrace v1.2
796     - IPTables patch-o-matic base patches - 20030107
797     - CryptoAPI 2.4.20.1 w/ loop-jari patch
798     - Super FreeS/WAN 1.99.6.1
799     - GRSecurity 1.9.9g
800     - MPPE
801     - EXT3 data journal fix
802     - CIPE 1.5.4
803 frogger 1.6
804     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
805     hardened-sources-2.4.20-r1.ebuild, manifest:
806 plasmaroo 1.18 Updated to install flask components correctly for selinux.
807 frogger 1.5
808     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
809     hardened-sources-2.4.20-r1.ebuild:
810     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
811     is patched in instead. Ptrace patches for selinux have also been added. In
812     either case, systrace support will be patched in as well.
813 frogger 1.3
814     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
815     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
816 plasmaroo 1.18 Revision bump for new sources.
817 frogger 1.4
818 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
819 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
820 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
821 method 1.1
822 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
823    
824 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
825     hardened-sources-2.4.20.ebuild:
826 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20