/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.182 - (hide annotations) (download)
Mon Sep 17 20:57:14 2007 UTC (6 years, 10 months ago) by phreak
Branch: MAIN
Changes since 1.181: +4 -1 lines
Removing johnm from metadata.xml (see #186467 for reference).
(Portage version: 2.1.3.9)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 opfer 1.130 # Copyright 2000-2007 Gentoo Foundation; Distributed under the GPL v2
3 phreak 1.182 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.181 2007/09/17 20:28:37 phreak Exp $
4    
5     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
6     Removing johnm from metadata.xml (see #186467 for reference).
7 phreak 1.181
8     *hardened-sources-2.6.22-r4 (17 Sep 2007)
9    
10     17 Sep 2007; Christian Heim <phreak@gentoo.org>
11     +hardened-sources-2.6.22-r4.ebuild:
12     Revision bump, hopefully fixing all those weird PAX failures.
13 phreak 1.180
14     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
15     Updating the metadata.xml.
16 phreak 1.179
17     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
18     Removing tocharian from metadata due to his retirement (see #71718 for
19     reference).
20 phreak 1.178
21     *hardened-sources-2.6.20-r9 (30 Aug 2007)
22    
23     30 Aug 2007; Christian Heim <phreak@gentoo.org>
24     +hardened-sources-2.6.20-r9.ebuild:
25     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
26 phreak 1.177
27     29 Aug 2007; Christian Heim <phreak@gentoo.org>
28     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
29     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
30     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
31     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
32     -hardened-sources-2.6.22-r2.ebuild:
33     Removing some redundant versions.
34 phreak 1.176
35     *hardened-sources-2.4.35-r1 (29 Aug 2007)
36    
37     29 Aug 2007; Christian Heim <phreak@gentoo.org>
38     +hardened-sources-2.4.35-r1.ebuild:
39     Revision bump, new grsecurity patch.
40 phreak 1.175
41     *hardened-sources-2.6.20-r8 (26 Aug 2007)
42    
43     26 Aug 2007; Christian Heim <phreak@gentoo.org>
44     +hardened-sources-2.6.20-r8.ebuild:
45     Revision bump for Linux 2.6.20.17.
46 phreak 1.174
47     *hardened-sources-2.6.22-r3 (22 Aug 2007)
48    
49     22 Aug 2007; Christian Heim <phreak@gentoo.org>
50     +hardened-sources-2.6.22-r3.ebuild:
51     Revision bump for Linux 2.6.22.4.
52 phreak 1.173
53     16 Aug 2007; Christian Heim <phreak@gentoo.org>
54     hardened-sources-2.6.22-r2.ebuild:
55     Updated patchset, to fix the alignment against 2.6.22.3.
56 phreak 1.172
57     *hardened-sources-2.6.22-r2 (16 Aug 2007)
58    
59     16 Aug 2007; Christian Heim <phreak@gentoo.org>
60     +hardened-sources-2.6.22-r2.ebuild:
61     Revision bump for Linux 2.6.22.3.
62 phreak 1.171
63     *hardened-sources-2.4.35 (16 Aug 2007)
64    
65     16 Aug 2007; Christian Heim <phreak@gentoo.org>
66     +hardened-sources-2.4.35.ebuild:
67     Version bump, initial version for Linux 2.4.35.
68 phreak 1.170
69     *hardened-sources-2.6.21-r4 (16 Aug 2007)
70    
71     16 Aug 2007; Christian Heim <phreak@gentoo.org>
72     +hardened-sources-2.6.21-r4.ebuild:
73     Revision bump for Linux 2.6.21.6.
74 phreak 1.169
75     *hardened-sources-2.6.20-r7 (16 Aug 2007)
76    
77     16 Aug 2007; Christian Heim <phreak@gentoo.org>
78     +hardened-sources-2.6.20-r7.ebuild:
79     Revision bump for Linux 2.6.20.16.
80 phreak 1.168
81     *hardened-sources-2.6.22-r1 (13 Aug 2007)
82    
83     13 Aug 2007; Christian Heim <phreak@gentoo.org>
84     +hardened-sources-2.6.22-r1.ebuild:
85     Yet another revision bump.
86 phreak 1.167
87     *hardened-sources-2.6.22 (10 Aug 2007)
88    
89     10 Aug 2007; Christian Heim <phreak@gentoo.org>
90     +hardened-sources-2.6.22.ebuild:
91     Initial release for 2.6.22. If you are using hardened-sources on a desktop
92     machine (P4 or newer), be aware you might need to disable
93     CONFIG_PAX_PAGEEXEC.
94 phreak 1.166
95     04 Aug 2007; Christian Heim <phreak@gentoo.org>
96     hardened-sources-2.6.20-r6.ebuild:
97     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
98     2.6.20.15.
99 phreak 1.165
100     10 Jul 2007; Christian Heim <phreak@gentoo.org>
101     hardened-sources-2.6.20-r5.ebuild:
102     Marking hardened-sources-2.6.20-r5 stable on ppc.
103 phreak 1.164
104     10 Jul 2007; Christian Heim <phreak@gentoo.org>
105     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
106     Cleanup.
107 phreak 1.163
108     *hardened-sources-2.6.20-r6 (08 Jul 2007)
109    
110     08 Jul 2007; Christian Heim <phreak@gentoo.org>
111     +hardened-sources-2.6.20-r6.ebuild:
112     Revision bump, grabbing yet another stable release.
113 phreak 1.162
114     17 Jun 2007; Christian Heim <phreak@gentoo.org>
115     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
116     -hardened-sources-2.6.21-r2.ebuild:
117     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
118     alpha stable KEYWORD by mistake.
119 phreak 1.161
120     17 Jun 2007; Christian Heim <phreak@gentoo.org>
121     hardened-sources-2.6.20-r5.ebuild:
122     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
123     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
124 phreak 1.160
125     *hardened-sources-2.6.21-r3 (12 Jun 2007)
126    
127     12 Jun 2007; Christian Heim <phreak@gentoo.org>
128     +hardened-sources-2.6.21-r3.ebuild:
129     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
130     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
131     love.
132 phreak 1.159
133     *hardened-sources-2.6.20-r5 (11 Jun 2007)
134    
135     11 Jun 2007; Christian Heim <phreak@gentoo.org>
136     +hardened-sources-2.6.20-r5.ebuild:
137     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
138     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
139     love.
140 pappy 1.158
141     *hardened-sources-2.4.34.5 (11 Jun 2007)
142    
143     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
144     +hardened-sources-2.4.34.5.ebuild:
145     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
146 phreak 1.157
147     30 May 2007; Christian Heim <phreak@gentoo.org>
148     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
149     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
150     stale ebuild(s).
151 phreak 1.156
152     30 May 2007; Christian Heim <phreak@gentoo.org>
153     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
154     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
155     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
156     Doing some cleanups, remove stale ebuilds.
157 phreak 1.155
158     26 May 2007; Christian Heim <phreak@gentoo.org>
159     hardened-sources-2.6.21-r2.ebuild:
160     Fixing the grsecurity patch, had one '};' too much.
161 phreak 1.154
162     *hardened-sources-2.6.21-r2 (26 May 2007)
163    
164     26 May 2007; Christian Heim <phreak@gentoo.org>
165     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
166     +hardened-sources-2.6.21-r2.ebuild:
167     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
168     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
169 phreak 1.153
170     *hardened-sources-2.6.20-r4 (26 May 2007)
171    
172     26 May 2007; Christian Heim <phreak@gentoo.org>
173     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
174     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
175 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
176 phreak 1.152
177     15 May 2007; Christian Heim <phreak@gentoo.org>
178     hardened-sources-2.6.20-r3.ebuild:
179     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
180     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
181     grsecurity patch fail in that exact same hunk.
182 phreak 1.151
183     *hardened-sources-2.6.20-r3 (15 May 2007)
184    
185     15 May 2007; Christian Heim <phreak@gentoo.org>
186     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
187     Revision bump, incorporating Linux 2.6.20.11.
188    
189     *hardened-sources-2.6.21-r1 (11 May 2007)
190    
191     11 May 2007; Christian Heim <phreak@gentoo.org>
192     +hardened-sources-2.6.21-r1.ebuild:
193     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
194     mentioned in #177234.
195 kevquinn 1.150
196     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
197     files/digest-hardened-sources-2.6.21, Manifest:
198     Fix Manifest/digest for linux-2.6.21.tar.bz2
199 phreak 1.149
200     06 May 2007; Christian Heim <phreak@gentoo.org>
201     hardened-sources-2.6.21.ebuild:
202     Bumping the hardened-patches version, needed for the fix for #177234.
203 phreak 1.148
204     *hardened-sources-2.6.21 (02 May 2007)
205    
206     02 May 2007; Christian Heim <phreak@gentoo.org>
207     +hardened-sources-2.6.21.ebuild:
208     Version bump, Linux 2.6.21-hardened.
209 phreak 1.147
210     29 Apr 2007; Christian Heim <phreak@gentoo.org>
211     hardened-sources-2.6.20-r2.ebuild:
212     Adding ~ia64 on Ned's request.
213 phreak 1.146
214     29 Apr 2007; Christian Heim <phreak@gentoo.org>
215     hardened-sources-2.6.20-r2.ebuild:
216     Fixing the included grsecurity patch, wasn't alligning due to the Index:
217     header line(s).
218 phreak 1.145
219     29 Apr 2007; Christian Heim <phreak@gentoo.org>
220     hardened-sources-2.6.20-r2.ebuild:
221     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
222 armin76 1.144
223     *hardened-sources-2.6.20-r2 (10 Apr 2007)
224    
225     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
226     +hardened-sources-2.6.20-r2.ebuild:
227     Version bump, on behalf of phreak
228 phreak 1.143
229     *hardened-sources-2.6.20-r1 (04 Apr 2007)
230    
231     04 Apr 2007; Christian Heim <phreak@gentoo.org>
232     +hardened-sources-2.6.20-r1.ebuild:
233     Revision bump, grabbing a newer grsecurity snapshot.
234 phreak 1.142
235     *hardened-sources-2.6.20 (25 Mar 2007)
236    
237     25 Mar 2007; Christian Heim <phreak@gentoo.org>
238     +hardened-sources-2.6.20.ebuild:
239     Finally a hardened-sources version for 2.6.20; many people have been waiting
240     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
241     testbox.
242 chainsaw 1.141
243     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
244     hardened-sources-2.6.18-r6.ebuild:
245     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
246 phreak 1.140
247     *hardened-sources-2.6.18-r6 (16 Mar 2007)
248    
249     16 Mar 2007; Christian Heim <phreak@gentoo.org>
250     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
251     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
252     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
253     supposed to be.
254 phreak 1.139
255     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
256     Fixing the Manifest, the previous one was broken (as in still had the
257     deleted ebuild in it).
258 phreak 1.138
259     06 Mar 2007; Christian Heim <phreak@gentoo.org>
260     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
261     +hardened-sources-2.6.18-r5.ebuild:
262     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
263     Linux 2.6.18.8. Also cleaning up the older version.
264    
265     *hardened-sources-2.6.18-r5 (06 Mar 2007)
266    
267     06 Mar 2007; Christian Heim <phreak@gentoo.org>
268     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
269     +hardened-sources-2.6.18-r5.ebuild:
270     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
271     Linux 2.6.18.8. Also cleaning up the older version.
272 phreak 1.137
273     24 Feb 2007; Christian Heim <phreak@gentoo.org>
274     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
275     -hardened-sources-2.6.19-r5.ebuild:
276     Removing some of the old version, that didn't work.
277 phreak 1.136
278     *hardened-sources-2.6.19-r6 (12 Feb 2007)
279    
280     12 Feb 2007; Christian Heim <phreak@gentoo.org>
281     +hardened-sources-2.6.19-r6.ebuild:
282     Revision bump, including a new grsec version fixing #166235.
283 pappy 1.134
284     *hardened-sources-2.4.34 (24 Jan 2007)
285    
286     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
287 pappy 1.135 Manifest:
288     updating Manifest with checksums of new tarball and ebuild
289    
290     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
291 pappy 1.134 +hardened-sources-2.4.34.ebuild:
292     I added new hardened sources 2.4 update, this is a critical path
293     security bugfix - all users of h-s are strongly advised
294     to update their existing hardened sources to this version.
295     It contains a fix for a kernel vulnerability that is pertaining
296     to the PaX changes to virtual memory management, possibly leading
297     to a local kernel exploit ... see grsecurity.net forums and homepage
298 phreak 1.133
299     23 Jan 2007; Christian Heim <phreak@gentoo.org>
300     files/digest-hardened-sources-2.6.19-r5, Manifest:
301     Fixing the patch-tarball digest.
302 phreak 1.132
303     *hardened-sources-2.6.19-r5 (23 Jan 2007)
304    
305     23 Jan 2007; Christian Heim <phreak@gentoo.org>
306     +hardened-sources-2.6.19-r5.ebuild:
307     Revision bump, closing the recently discovered PaX expand_stack()
308     vulnerability.
309 phreak 1.131
310     *hardened-sources-2.6.19-r4 (14 Jan 2007)
311    
312     14 Jan 2007; Christian Heim <phreak@gentoo.org>
313     +hardened-sources-2.6.19-r4.ebuild:
314     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
315     dropping the randomized PID feature.
316 opfer 1.130
317     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
318     hardened-sources-2.4.33.4.ebuild:
319     stable x86, bug #161171
320 phreak 1.129
321     *hardened-sources-2.6.19-r3 (27 Dec 2006)
322    
323     27 Dec 2006; Christian Heim <phreak@gentoo.org>
324     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
325     Revision bump for bug #157186 and #158786.
326 phreak 1.128
327     *hardened-sources-2.6.18-r4 (27 Dec 2006)
328    
329     27 Dec 2006; Christian Heim <phreak@gentoo.org>
330     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
331     Revision bump for bug #157186.
332 phreak 1.127
333     *hardened-sources-2.6.19-r2 (23 Dec 2006)
334    
335     23 Dec 2006; Christian Heim <phreak@gentoo.org>
336     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
337     Revision bump to pull in genpatches-2.6.19-3 for #157186.
338 phreak 1.126
339     17 Dec 2006; Christian Heim <phreak@gentoo.org>
340     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
341     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
342     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
343     hardened-sources-2.6.19-r1.ebuild:
344     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
345     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
346 pappy 1.125
347     *hardened-sources-2.4.33.4 (17 Dec 2006)
348    
349     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
350     +hardened-sources-2.4.33.4.ebuild:
351     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
352     and quilting
353 phreak 1.124
354     *hardened-sources-2.6.19-r1 (14 Dec 2006)
355    
356     14 Dec 2006; Christian Heim <phreak@gentoo.org>
357     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
358     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
359     for reporting).
360 phreak 1.123
361     *hardened-sources-2.6.19 (13 Dec 2006)
362    
363     13 Dec 2006; Christian Heim <phreak@gentoo.org>
364     +hardened-sources-2.6.19.ebuild:
365     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
366     Brad for providing that prompt update.
367 phreak 1.122
368     *hardened-sources-2.6.18-r3 (13 Dec 2006)
369    
370     13 Dec 2006; Christian Heim <phreak@gentoo.org>
371     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
372     +hardened-sources-2.6.18-r3.ebuild:
373     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
374     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
375 phreak 1.121
376     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
377     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
378 nixnut 1.120
379     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
380     Stable on ppc wrt bug 157356
381 opfer 1.119
382     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
383     hardened-sources-2.6.18.ebuild:
384     stable x86, bug #157356
385 phreak 1.118
386     *hardened-sources-2.6.18-r2 (06 Dec 2006)
387    
388     06 Dec 2006; Christian Heim <phreak@gentoo.org>
389     +hardened-sources-2.6.18-r2.ebuild:
390     Revision bump, including 2.6.18.5 (via genpatches) and
391     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
392     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
393     redesign.
394 phreak 1.117
395     06 Dec 2006; Christian Heim <phreak@gentoo.org>
396     hardened-sources-2.6.18.ebuild:
397     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
398     of Mike Doty).
399 phreak 1.116
400     *hardened-sources-2.6.18-r1 (23 Nov 2006)
401    
402     23 Nov 2006; Christian Heim <phreak@gentoo.org>
403     +hardened-sources-2.6.18-r1.ebuild:
404     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
405 phreak 1.115
406     *hardened-sources-2.6.18 (11 Nov 2006)
407    
408     11 Nov 2006; Christian Heim <phreak@gentoo.org>
409     +hardened-sources-2.6.18.ebuild:
410     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
411 solar 1.114
412     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
413     - mark amd64 stable also. bug #151877
414 solar 1.113
415     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
416     - mark 2.6.17-r1 stable
417 phreak 1.112
418     27 Aug 2006; Christian Heim <phreak@gentoo.org>
419     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
420     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
421 phreak 1.111
422     *hardened-sources-2.6.17-r1 (26 Aug 2006)
423    
424     26 Aug 2006; Christian Heim <phreak@gentoo.org>
425     +hardened-sources-2.6.17-r1.ebuild:
426     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
427     grsecurity patch.
428 phreak 1.110
429     *hardened-sources-2.6.17 (17 Aug 2006)
430    
431     17 Aug 2006; Christian Heim <phreak@gentoo.org>
432     +hardened-sources-2.6.17.ebuild:
433     Bumping the hardened-sources-2.6 series to 2.6.17, using
434     genpatches-2.6.17-6.base.
435 solar 1.109
436     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
437     - stable on x86 and amd64
438 solar 1.108
439     *hardened-sources-2.6.16-r11 (15 Jul 2006)
440    
441     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
442     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
443     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
444     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
445     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
446     crusty ebuilds
447 johnm 1.107
448     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
449     hardened-sources-2.6.16-r10.ebuild:
450     marking stable on x86 and amd64
451 solar 1.106
452     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
453     - 2.4.32-r6 stable on x86. RSBAC state unknown
454 kang 1.105
455     *hardened-sources-2.4.32-r7 (10 Jul 2006)
456    
457     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
458     +hardened-sources-2.4.32-r7.ebuild:
459     Bump PaX for RSBAC to test-17
460 johnm 1.104
461     *hardened-sources-2.6.16-r9 (03 Jul 2006)
462    
463     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
464     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
465     hardened-sources-2.6.16 bump to latest -base.
466 solar 1.103
467     *hardened-sources-2.4.32-r6 (30 Jun 2006)
468    
469     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
470     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
471     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
472     sysctl controlable resource logging
473 johnm 1.102
474     *hardened-sources-2.6.16-r7 (05 Jun 2006)
475    
476     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
477     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
478     push new 2.6.16 release in preparation for stable
479 solar 1.101
480     22 May 2006; <solar@gentoo.org> :
481     - redigest bug 134002
482 kang 1.100
483     *hardened-sources-2.4.32-r5 (16 May 2006)
484    
485     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
486     +hardened-sources-2.4.32-r5.ebuild:
487     Fixes rsbac common patching (new patch in new -r5 patchset)
488 solar 1.99
489     *hardened-sources-2.4.32-r4 (13 May 2006)
490    
491     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
492     +hardened-sources-2.4.32-r4.ebuild:
493     - security bumps
494 johnm 1.98
495     *hardened-sources-2.6.16-r6 (03 May 2006)
496    
497     03 May 2006; John Mylchreest <johnm@gentoo.org>
498     +hardened-sources-2.6.16-r6.ebuild:
499     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
500 johnm 1.97
501     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
502     hardened-sources-2.6.14-r8.ebuild:
503     fix x86_64 build problem, this will delay the digest issue again for a short
504     while but it will sort itself out
505 johnm 1.96
506     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
507     hardened-sources-2.6.14-r8.ebuild:
508     bump hardened patchset
509 antarus 1.94
510     27 Apr 2006; Alec Warner <antarus@gentoo.org>
511     files/digest-hardened-sources-2.4.32-r2,
512     files/digest-hardened-sources-2.4.32-r3,
513     files/digest-hardened-sources-2.6.14-r8, Manifest:
514     Fixing duff SHA256 digests: Bug # 131293
515 johnm 1.93
516 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
517    
518     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
519     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
520     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
521     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
522     cleanup of old uneccessary sources
523    
524 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
525     fix digest
526 johnm 1.92
527     *hardened-sources-2.6.14-r8 (20 Apr 2006)
528    
529     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
530     +hardened-sources-2.6.14-r8.ebuild:
531     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
532 johnm 1.91
533     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
534     Turning on gpg-signing again, and recomitting
535 johnm 1.90
536     *hardened-sources-2.6.16-r4 (20 Apr 2006)
537    
538     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
539     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
540     +hardened-sources-2.6.16-r4.ebuild:
541     Fix numerous security vulns
542 solar 1.89
543     *hardened-sources-2.4.32-r3 (16 Apr 2006)
544    
545     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
546     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
547     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
548     - security bump for bug #112791. Removed old ebuilds
549 johnm 1.88
550     *hardened-sources-2.6.16-r3 (15 Apr 2006)
551    
552     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
553     +hardened-sources-2.6.16-r3.ebuild:
554     Removing silly localversion which I missed
555 johnm 1.87
556     *hardened-sources-2.6.14-r7 (14 Apr 2006)
557    
558     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
559     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
560     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
561 johnm 1.86
562     *hardened-sources-2.6.16-r2 (13 Apr 2006)
563    
564     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
565     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
566     +hardened-sources-2.6.16-r2.ebuild:
567     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
568     labels, dropping USERGROUP define fixes, since these were merged mainstream.
569 johnm 1.85
570     *hardened-sources-2.6.16-r1 (11 Apr 2006)
571    
572     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
573     +hardened-sources-2.6.16-r1.ebuild:
574     Bumping to include ppc build fix and 2.6.16.3
575 tsunam 1.84
576     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
577     hardened-sources-2.6.14-r6.ebuild:
578     Stable on x86; bug #127718
579 johnm 1.83
580     *hardened-sources-2.6.16 (31 Mar 2006)
581    
582     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
583     +hardened-sources-2.6.16.ebuild:
584     Bumping to new version of grsec, and kernel base. New squashfs. Based on
585     2.6.16.1
586 cryos 1.82
587     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
588     hardened-sources-2.6.14-r6.ebuild:
589     Stable on amd64, bug 127718.
590 nixnut 1.81
591     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
592     Stable on ppc. Bug #127718
593 johnm 1.80
594     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
595     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
596     -hardened-sources-2.6.14-r4.ebuild:
597     Cleanup.
598 johnm 1.79
599     *hardened-sources-2.6.14-r6 (15 Mar 2006)
600    
601     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
602     +hardened-sources-2.6.14-r6.ebuild:
603     Fixes grsec policy recreation bug and adds a
604     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
605 solar 1.78
606     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
607     - stable on x86
608 hansmi 1.77
609     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
610     hardened-sources-2.6.14-r5.ebuild:
611     Stable on ppc.
612 johnm 1.76
613     *hardened-sources-2.6.14-r5 (01 Feb 2006)
614    
615     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
616     +hardened-sources-2.6.14-r5.ebuild:
617     fixing every known exploit
618 solar 1.75
619     *hardened-sources-2.4.32-r2 (26 Jan 2006)
620    
621     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
622     +hardened-sources-2.4.32-r2.ebuild:
623     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
624 solar 1.74
625     *hardened-sources-2.6.14-r4 (12 Jan 2006)
626    
627     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
628     - version bump for new genpatches which fix up a few sec holes
629 solar 1.73
630     *hardened-sources-2.4.32-r1 (05 Jan 2006)
631    
632     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
633     - revision bump to add misc vital linux kernel security patches.
634 johnm 1.72
635     *hardened-sources-2.6.14-r3 (30 Dec 2005)
636    
637     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
638     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
639     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
640 johnm 1.71
641     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
642     hardened-sources-2.6.14-r2.ebuild:
643     making x86 & amd64 stable following testing.
644 johnm 1.70
645     *hardened-sources-2.6.14-r2 (27 Dec 2005)
646    
647     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
648     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
649     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
650     network hooks.
651 johnm 1.69
652     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
653     hardened-sources-2.6.14-r1.ebuild:
654     bumping to stable early for sec fix on x86 & amd64
655 johnm 1.68
656     *hardened-sources-2.6.14-r1 (05 Dec 2005)
657    
658     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
659     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
660     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
661 solar 1.67
662     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
663     - stable on x86 security bug #114227 CAN-2005-3257
664 kang 1.66
665     *hardened-sources-2.4.32 (19 Nov 2005)
666    
667     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
668     +hardened-sources-2.4.32.ebuild:
669     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
670     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
671     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
672     rsbac >> /etc/portage/package.use)
673 johnm 1.65
674     *hardened-sources-2.6.14 (14 Nov 2005)
675    
676     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
677     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
678     Bumping 2.6 series to 2.6.14.2
679 johnm 1.64
680     *hardened-sources-2.6.13-r2 (20 Oct 2005)
681    
682     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
683     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
684     +hardened-sources-2.6.13-r2.ebuild:
685     Fixes minor build error in ppc.
686 johnm 1.63
687     *hardened-sources-2.6.13-r1 (17 Oct 2005)
688    
689     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
690     +hardened-sources-2.6.13-r1.ebuild:
691     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
692     2.6.13.4, fixes some major amd64 stability problems.
693 johnm 1.62
694     *hardened-sources-2.6.13 (16 Sep 2005)
695    
696     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
697     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
698     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
699     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
700     users should test this thoroughly.
701 solar 1.61
702     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
703     - stable on x86
704 johnm 1.60
705     *hardened-sources-2.6.11-r15 (27 Jun 2005)
706    
707     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
708     +hardened-sources-2.6.11-r15.ebuild:
709     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
710     grsec redefining curr_ip struct.
711 solar 1.59
712     *hardened-sources-2.4.31 (20 Jun 2005)
713    
714     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
715     initial import of 2.4.31 tree
716 johnm 1.58
717     *hardened-sources-2.6.11-r14 (14 Jun 2005)
718    
719     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
720     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
721     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
722     naming scheme to abide by genpatches
723 johnm 1.57
724     *hardened-sources-2.6.11-r13 (18 May 2005)
725    
726     18 May 2005; John Mylchreest <johnm@gentoo.org>
727     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
728     Managed to mangle the Makefile patch from grsec, to miss out the grsec
729     target. sorry about that. Fixes bug #93022
730 johnm 1.56
731     *hardened-sources-2.6.11-r12 (17 May 2005)
732    
733     17 May 2005; John Mylchreest <johnm@gentoo.org>
734     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
735     +hardened-sources-2.6.11-r12.ebuild:
736     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
737     merges in genpatches-base
738 johnm 1.55
739     *hardened-sources-2.6.11-r12 (17 May 2005)
740    
741     17 May 2005; John Mylchreest <johnm@gentoo.org>
742     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
743     +hardened-sources-2.6.11-r12.ebuild:
744     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
745     merges in genpatches-base
746 solar 1.54
747     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
748     -files/2.4.27-cmdline-race.patch,
749     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
750     -files/2.4.28-grsec-binfmt_a.out.patch,
751     -files/2.4.28-grsec-cmdline-race.patch,
752     -files/2.4.28-selinux-binfmt_a.out.patch,
753     -files/2.4.28-selinux-cmdline-race.patch,
754     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
755     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
756     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
757     cleanup..
758 solar 1.53
759     *hardened-sources-2.4.30-r1 (21 Apr 2005)
760    
761     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
762     - disable aout by default
763 solar 1.52
764     *hardened-sources-2.4.30 (18 Apr 2005)
765    
766     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
767     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
768     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
769     use
770 tocharian 1.50
771 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
772    
773     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
774     +hardened-sources-2.4.29.ebuild:
775     New hardened-patches-2.4-29.0 patchball.
776     Removed SELinux support, upgraded GRSecurity to 2.1.4.
777    
778     *hardened-sources-2.4.28-r5 (06 Mar 2005)
779    
780     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
781     +hardened-sources-2.4.28-r5.ebuild:
782     Added a fix for a PaX vulnerability.
783    
784     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
785 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
786     Stable on x86
787 solar 1.49
788     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
789     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
790     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
791     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
792     - fixed/added RDEPEND= in all kernel-2 ebuilds
793 tocharian 1.48
794     *hardened-sources-2.4.28-r4 (21 Jan 2005)
795    
796     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
797     +hardened-sources-2.4.28-r4.ebuild:
798     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
799     backport of neighbour hash updates.
800 tocharian 1.47
801     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
802     hardened-sources-2.4.28-r3.ebuild:
803     Stable on x86
804 tseng 1.46
805     *hardened-sources-2.6.10-r3 (20 Jan 2005)
806    
807     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
808     +hardened-sources-2.6.10-r3.ebuild:
809     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
810     in 2005.0
811 tocharian 1.45
812     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
813     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
814     hardened-sources-2.4.28-r2.ebuild:
815     Mark stable on x86
816 tocharian 1.44
817     *hardened-sources-2.4.28-r3 (17 Jan 2005)
818    
819     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
820     +hardened-sources-2.4.28-r3.ebuild:
821     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
822 tocharian 1.43
823     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
824     hardened-sources-2.4.28.ebuild:
825     Mark stable on x86.
826 tocharian 1.42
827     *hardened-sources-2.4.28-r2 (13 Jan 2005)
828    
829     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
830     +hardened-sources-2.4.28-r2.ebuild:
831     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
832     Mazinger for grsecurity patches as well.
833 plasmaroo 1.41
834     *hardened-sources-2.4.28-r1 (23 Dec 2004)
835    
836     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
837     Security bump. Thank tocharian for rolling a new patchset...
838 solar 1.40
839     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
840     +files/2.4.28-grsec-cmdline-race.patch,
841     +files/2.4.28-selinux-binfmt_a.out.patch,
842     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
843     - Round up remaining security patches that appear to be missing in 2.4.28. -
844     PaX standalone updated to current. hgpv=28.1
845 solar 1.39
846     *hardened-sources-2.4.28 (28 Nov 2004)
847    
848     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
849     security bump. Thank tocharian for rolling a new patchset
850 scox 1.31
851 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
852    
853     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
854     +hardened-sources-2.4.27-r3.ebuild:
855     Applies the new 2.4-27.2 patchball which updates
856     GRSecurity to the 2.0.1 version.
857    
858 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
859    
860     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
861     +hardened-sources-2.4.27-r2.ebuild:
862     Version bump.
863     This version uses the new 2.4-27.1 patchball which updates
864     both the SELinux PaX hooks patch and the SELinux headers.
865    
866 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
867    
868     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
869     +hardened-sources-2.4.27-r1.ebuild,
870     -hardened-sources-2.4.27.ebuild,
871     +files/2.4.27-cmdline-race.patch:
872     Version bump, fix for cmdline race. See bug #59905.
873    
874     *hardened-sources-2.4.26-r6 (09 Aug 2004)
875    
876     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
877     +hardened-sources-2.4.26-r6.ebuild,
878     -hardened-sources-2.4.26-r5.ebuild,
879     -hardened-sources-2.4.26-r4.ebuild,
880     +files/2.4.26-cmdline-race.patch:
881     Version bump, fix for cmdline race. See bug #59905.
882    
883 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
884    
885     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
886     +hardened-sources-2.4.27.ebuild,
887     +files/2.4.27-CAN-2004-0394.patch:
888     Ported the patchball to the 2.4.27 kernel version.
889    
890 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
891    
892     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
893     +hardened-sources-2.4.26-r5.ebuild:
894 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
895 scox 1.34 It adds the following features:
896     - Squashfs
897     - Ebtables
898     - Netdev random (core+drivers)
899     - Watchdog Timer (WDT) fix.
900    
901 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
902    
903     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
904     +hardened-sources-2.4.26-r4.ebuild,
905     +files/2.4.26-CAN-2004-0415.patch,
906     -hardened-sources-2.4.26-3:
907     Version bump, fix for CAN 0415, see bug #59378.
908    
909 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
910    
911     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
912     +hardened-sources-2.4.26-r3.ebuild,
913     +files/2.4.26-CAN-2004-0497.patch,
914     -hardened-sources-2.4.26-r2.ebuild:
915     Version bump, fixed CAN 0497, see bug #56171.
916    
917 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
918    
919     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
920 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
921 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
922     +files/2.4.26-CAN-2004-0535.patch,
923     -hardened-sources-2.4.26-r1.ebuild:
924     Fixes for both CAN 0495 and 0535, see bug #54976
925 pvdabeel 1.27
926 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
927     hardened-sources-2.4.26-r1.ebuild:
928     QA - fix use invocation
929 scox 1.28
930     *hardened-sources-2.4.26-r1 (22 June 2004)
931    
932     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
933     +hardened-sources-2.4.26-r1.ebuild,
934     +files/2.4.26-CAN-2004-0394.patch,
935     +files/2.4.26-signal-race.patch,
936     -hardened-sources-2.4.26.ebuild,
937     -hardened-sources-2.4.24-r3.ebuild:
938     Version bump for the CAN-2004-0394 issue and bug #53804
939     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
940    
941    
942 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
943     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
944     Masked hardened-sources-2.4.26.ebuild broken for ppc
945    
946     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
947     hardened-sources-2.4.24-r3.ebuild:
948     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
949 plasmaroo 1.25
950 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
951    
952     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
953     +hardened-sources-2.4.26.ebuild:
954     Updated hardened-sources for the 2.4.26 kernel
955     Removed broken components, updated almost everything.
956    
957 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
958    
959     17 Apr 2004; <plasmaroo@gentoo.org>
960     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
961     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
962     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
963     +hardened-sources-2.4.24-r3.ebuild:
964     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
965     vulnerabilities. Old revisions removed.
966 plasmaroo 1.24
967     *hardened-sources-2.4.24-r2 (15 Apr 2004)
968    
969     15 Apr 2004; <plasmaroo@gentoo.org>
970     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
971     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
972     Version bump for the CAN-2004-0109 issue; bug #47881.
973 aliz 1.23
974     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
975     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
976     Add eutils to inherit.
977 plasmaroo 1.22
978     *hardened-sources-2.4.24-r1 (19 Feb 2004)
979    
980     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
981     files/hardened-sources-2.4.24.munmap.patch:
982     Added the patch for the mremap/munmap vulnerability. Bug #42024.
983 scox 1.19
984 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
985 scox 1.26
986 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
987     hardened-sources-2.4.24.ebuild:
988     Version bump, updated most of the components.
989     This release includes the following:
990    
991     - Hardened security
992     - Netfilter patch-o-matic 20031219
993     - FreeSWAN 2.04 & x509 1.4.8
994     - EVMS 2.2.2
995     - XFS 1.3.1
996     - cryptoloop jari
997     - grsecurity 2.0-rc4
998     - SELinux
999     - PaX 200402060000
1000     - PaX Obscurity 200308302223
1001     - Others...
1002    
1003     Neither -ck nor systrace are included anymore.
1004    
1005 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1006    
1007     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1008     hardened-sources-2.4.22-r2.ebuild:
1009 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1010 scox 1.19
1011     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1012 iggy 1.17
1013     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1014 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1015 iggy 1.16
1016     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1017 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1018     Version bump for the 'do_brk' vulnerability.
1019 iggy 1.15
1020     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1021     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1022     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1023     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1024 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1025 frogger 1.14
1026     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1027     hardened-sources-2.4.22.ebuild:
1028 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1029     components. These are no longer handled in the kernel
1030     so this code was not necessary.
1031 frogger 1.13
1032     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1033     New 2.4.22 based hardened-sources thanks to
1034     Phil West <p.west@computer.org>.
1035    
1036     These sources include:
1037 plasmaroo 1.18 - New SELinux API
1038     - Updated CK-base
1039     - Updated GRSec
1040     - Systrace
1041     - SuperFreeS/WAN 1.99.8
1042     - Propolice kernel build support
1043     - EVMS
1044     - Other various security related patches
1045 frogger 1.11
1046 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1047    
1048     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1049     Updated hardened-sources based on the 2.4.21 Linux kernel.
1050     This includes updates to most major components such as:
1051 plasmaroo 1.18 - ck-base-0306300059
1052     - selinux-2.4-2003071106
1053     - grsecurity-2.0-rc1
1054     - Updated IPTables patch-o-matic
1055     - Updated SuperFreeS/WAN
1056    
1057 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1058     updated patch set ready for the 2.4.21 based kernel.
1059    
1060 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1061     Initial import of hardened-sources-2.4.20-r4. This revision
1062     includes only a few changes, but one of these is an important
1063     security fix. It is recommended all users of hardened-sources
1064     upgrade to this release.
1065 plasmaroo 1.18
1066 frogger 1.11 - ioperm bug fix
1067     - fixed compilation failure when building without GRSec
1068 plasmaroo 1.18
1069 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1070     due to time constraints, but is planned for inclusion in the near
1071     future.
1072 msterret 1.10
1073     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1074    
1075     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1076     hardened-sources-2.4.20-r3.ebuild:
1077 plasmaroo 1.18 Add Header...
1078 frogger 1.9
1079     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1080     hardened-sources-2.4.20-r3.ebuild:
1081     Removed warnings from ebuild. This kernel should be safe to
1082     use at this point.
1083 frogger 1.8
1084     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1085    
1086     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1087     hardened-sources-2.4.20-r3.ebuild:
1088     New revision. Includes the following changes over -r2:
1089 plasmaroo 1.18
1090 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1091     - Super FreeS/WAN 1.99.7rc2
1092     - PaX for the LSM/SELinux branch
1093     - GRSecurity 2.0-pre4 (role based access control)
1094     - Systrace 1.3
1095     - EXT3 fixes
1096     - EVMS 2.0.1
1097     - GCC 3.1+ compile optimizations
1098     - ProPolice kernel build support
1099     - Hashing table security fixes
1100 frogger 1.3
1101     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1102 frogger 1.7
1103     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1104     Initial import of hardened-sources-r2. This new
1105     ebuild includes many new performance and security
1106     related patches. As in -r1, it will patch in
1107     LSM/SELinux if "selinux" is in USE, otherwise it
1108     will patch in GRSecurity. The following patches
1109     are included in this revision:
1110 plasmaroo 1.18
1111 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1112     (pulled from the base CK patch)
1113     - ptrace exploit patch for the LSM kernel
1114     (the GRSec patch already fixes this)
1115     - LSM 2.4-2003040709
1116     - SELinux 2.4-2003040709
1117     - Systrace v1.2
1118     - IPTables patch-o-matic base patches - 20030107
1119     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1120     - Super FreeS/WAN 1.99.6.1
1121     - GRSecurity 1.9.9g
1122     - MPPE
1123     - EXT3 data journal fix
1124     - CIPE 1.5.4
1125 frogger 1.6
1126     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1127     hardened-sources-2.4.20-r1.ebuild, manifest:
1128 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1129 frogger 1.5
1130     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1131     hardened-sources-2.4.20-r1.ebuild:
1132     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1133     is patched in instead. Ptrace patches for selinux have also been added. In
1134     either case, systrace support will be patched in as well.
1135 frogger 1.3
1136     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1137     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1138 plasmaroo 1.18 Revision bump for new sources.
1139 frogger 1.4
1140 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1141 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1142 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1143 method 1.1
1144 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1145    
1146 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1147     hardened-sources-2.4.20.ebuild:
1148 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20