/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.99 - (hide annotations) (download)
Sat May 13 14:50:59 2006 UTC (7 years, 11 months ago) by solar
Branch: MAIN
Changes since 1.98: +7 -1 lines
- security bumps
(Portage version: 2.0.54-r2)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 solar 1.73 # Copyright 2000-2006 Gentoo Foundation; Distributed under the GPL v2
3 solar 1.99 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.98 2006/05/03 17:31:16 johnm Exp $
4    
5     *hardened-sources-2.4.32-r4 (13 May 2006)
6    
7     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
8     +hardened-sources-2.4.32-r4.ebuild:
9     - security bumps
10 johnm 1.98
11     *hardened-sources-2.6.16-r6 (03 May 2006)
12    
13     03 May 2006; John Mylchreest <johnm@gentoo.org>
14     +hardened-sources-2.6.16-r6.ebuild:
15     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
16 johnm 1.97
17     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
18     hardened-sources-2.6.14-r8.ebuild:
19     fix x86_64 build problem, this will delay the digest issue again for a short
20     while but it will sort itself out
21 johnm 1.96
22     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
23     hardened-sources-2.6.14-r8.ebuild:
24     bump hardened patchset
25 antarus 1.94
26     27 Apr 2006; Alec Warner <antarus@gentoo.org>
27     files/digest-hardened-sources-2.4.32-r2,
28     files/digest-hardened-sources-2.4.32-r3,
29     files/digest-hardened-sources-2.6.14-r8, Manifest:
30     Fixing duff SHA256 digests: Bug # 131293
31 johnm 1.93
32 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
33    
34     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
35     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
36     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
37     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
38     cleanup of old uneccessary sources
39    
40 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
41     fix digest
42 johnm 1.92
43     *hardened-sources-2.6.14-r8 (20 Apr 2006)
44    
45     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
46     +hardened-sources-2.6.14-r8.ebuild:
47     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
48 johnm 1.91
49     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
50     Turning on gpg-signing again, and recomitting
51 johnm 1.90
52     *hardened-sources-2.6.16-r4 (20 Apr 2006)
53    
54     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
55     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
56     +hardened-sources-2.6.16-r4.ebuild:
57     Fix numerous security vulns
58 solar 1.89
59     *hardened-sources-2.4.32-r3 (16 Apr 2006)
60    
61     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
62     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
63     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
64     - security bump for bug #112791. Removed old ebuilds
65 johnm 1.88
66     *hardened-sources-2.6.16-r3 (15 Apr 2006)
67    
68     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
69     +hardened-sources-2.6.16-r3.ebuild:
70     Removing silly localversion which I missed
71 johnm 1.87
72     *hardened-sources-2.6.14-r7 (14 Apr 2006)
73    
74     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
75     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
76     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
77 johnm 1.86
78     *hardened-sources-2.6.16-r2 (13 Apr 2006)
79    
80     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
81     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
82     +hardened-sources-2.6.16-r2.ebuild:
83     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
84     labels, dropping USERGROUP define fixes, since these were merged mainstream.
85 johnm 1.85
86     *hardened-sources-2.6.16-r1 (11 Apr 2006)
87    
88     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
89     +hardened-sources-2.6.16-r1.ebuild:
90     Bumping to include ppc build fix and 2.6.16.3
91 tsunam 1.84
92     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
93     hardened-sources-2.6.14-r6.ebuild:
94     Stable on x86; bug #127718
95 johnm 1.83
96     *hardened-sources-2.6.16 (31 Mar 2006)
97    
98     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
99     +hardened-sources-2.6.16.ebuild:
100     Bumping to new version of grsec, and kernel base. New squashfs. Based on
101     2.6.16.1
102 cryos 1.82
103     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
104     hardened-sources-2.6.14-r6.ebuild:
105     Stable on amd64, bug 127718.
106 nixnut 1.81
107     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
108     Stable on ppc. Bug #127718
109 johnm 1.80
110     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
111     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
112     -hardened-sources-2.6.14-r4.ebuild:
113     Cleanup.
114 johnm 1.79
115     *hardened-sources-2.6.14-r6 (15 Mar 2006)
116    
117     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
118     +hardened-sources-2.6.14-r6.ebuild:
119     Fixes grsec policy recreation bug and adds a
120     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
121 solar 1.78
122     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
123     - stable on x86
124 hansmi 1.77
125     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
126     hardened-sources-2.6.14-r5.ebuild:
127     Stable on ppc.
128 johnm 1.76
129     *hardened-sources-2.6.14-r5 (01 Feb 2006)
130    
131     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
132     +hardened-sources-2.6.14-r5.ebuild:
133     fixing every known exploit
134 solar 1.75
135     *hardened-sources-2.4.32-r2 (26 Jan 2006)
136    
137     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
138     +hardened-sources-2.4.32-r2.ebuild:
139     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
140 solar 1.74
141     *hardened-sources-2.6.14-r4 (12 Jan 2006)
142    
143     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
144     - version bump for new genpatches which fix up a few sec holes
145 solar 1.73
146     *hardened-sources-2.4.32-r1 (05 Jan 2006)
147    
148     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
149     - revision bump to add misc vital linux kernel security patches.
150 johnm 1.72
151     *hardened-sources-2.6.14-r3 (30 Dec 2005)
152    
153     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
154     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
155     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
156 johnm 1.71
157     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
158     hardened-sources-2.6.14-r2.ebuild:
159     making x86 & amd64 stable following testing.
160 johnm 1.70
161     *hardened-sources-2.6.14-r2 (27 Dec 2005)
162    
163     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
164     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
165     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
166     network hooks.
167 johnm 1.69
168     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
169     hardened-sources-2.6.14-r1.ebuild:
170     bumping to stable early for sec fix on x86 & amd64
171 johnm 1.68
172     *hardened-sources-2.6.14-r1 (05 Dec 2005)
173    
174     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
175     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
176     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
177 solar 1.67
178     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
179     - stable on x86 security bug #114227 CAN-2005-3257
180 kang 1.66
181     *hardened-sources-2.4.32 (19 Nov 2005)
182    
183     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
184     +hardened-sources-2.4.32.ebuild:
185     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
186     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
187     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
188     rsbac >> /etc/portage/package.use)
189 johnm 1.65
190     *hardened-sources-2.6.14 (14 Nov 2005)
191    
192     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
193     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
194     Bumping 2.6 series to 2.6.14.2
195 johnm 1.64
196     *hardened-sources-2.6.13-r2 (20 Oct 2005)
197    
198     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
199     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
200     +hardened-sources-2.6.13-r2.ebuild:
201     Fixes minor build error in ppc.
202 johnm 1.63
203     *hardened-sources-2.6.13-r1 (17 Oct 2005)
204    
205     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
206     +hardened-sources-2.6.13-r1.ebuild:
207     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
208     2.6.13.4, fixes some major amd64 stability problems.
209 johnm 1.62
210     *hardened-sources-2.6.13 (16 Sep 2005)
211    
212     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
213     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
214     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
215     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
216     users should test this thoroughly.
217 solar 1.61
218     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
219     - stable on x86
220 johnm 1.60
221     *hardened-sources-2.6.11-r15 (27 Jun 2005)
222    
223     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
224     +hardened-sources-2.6.11-r15.ebuild:
225     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
226     grsec redefining curr_ip struct.
227 solar 1.59
228     *hardened-sources-2.4.31 (20 Jun 2005)
229    
230     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
231     initial import of 2.4.31 tree
232 johnm 1.58
233     *hardened-sources-2.6.11-r14 (14 Jun 2005)
234    
235     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
236     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
237     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
238     naming scheme to abide by genpatches
239 johnm 1.57
240     *hardened-sources-2.6.11-r13 (18 May 2005)
241    
242     18 May 2005; John Mylchreest <johnm@gentoo.org>
243     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
244     Managed to mangle the Makefile patch from grsec, to miss out the grsec
245     target. sorry about that. Fixes bug #93022
246 johnm 1.56
247     *hardened-sources-2.6.11-r12 (17 May 2005)
248    
249     17 May 2005; John Mylchreest <johnm@gentoo.org>
250     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
251     +hardened-sources-2.6.11-r12.ebuild:
252     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
253     merges in genpatches-base
254 johnm 1.55
255     *hardened-sources-2.6.11-r12 (17 May 2005)
256    
257     17 May 2005; John Mylchreest <johnm@gentoo.org>
258     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
259     +hardened-sources-2.6.11-r12.ebuild:
260     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
261     merges in genpatches-base
262 solar 1.54
263     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
264     -files/2.4.27-cmdline-race.patch,
265     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
266     -files/2.4.28-grsec-binfmt_a.out.patch,
267     -files/2.4.28-grsec-cmdline-race.patch,
268     -files/2.4.28-selinux-binfmt_a.out.patch,
269     -files/2.4.28-selinux-cmdline-race.patch,
270     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
271     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
272     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
273     cleanup..
274 solar 1.53
275     *hardened-sources-2.4.30-r1 (21 Apr 2005)
276    
277     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
278     - disable aout by default
279 solar 1.52
280     *hardened-sources-2.4.30 (18 Apr 2005)
281    
282     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
283     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
284     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
285     use
286 tocharian 1.50
287 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
288    
289     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
290     +hardened-sources-2.4.29.ebuild:
291     New hardened-patches-2.4-29.0 patchball.
292     Removed SELinux support, upgraded GRSecurity to 2.1.4.
293    
294     *hardened-sources-2.4.28-r5 (06 Mar 2005)
295    
296     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
297     +hardened-sources-2.4.28-r5.ebuild:
298     Added a fix for a PaX vulnerability.
299    
300     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
301 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
302     Stable on x86
303 solar 1.49
304     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
305     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
306     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
307     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
308     - fixed/added RDEPEND= in all kernel-2 ebuilds
309 tocharian 1.48
310     *hardened-sources-2.4.28-r4 (21 Jan 2005)
311    
312     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
313     +hardened-sources-2.4.28-r4.ebuild:
314     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
315     backport of neighbour hash updates.
316 tocharian 1.47
317     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
318     hardened-sources-2.4.28-r3.ebuild:
319     Stable on x86
320 tseng 1.46
321     *hardened-sources-2.6.10-r3 (20 Jan 2005)
322    
323     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
324     +hardened-sources-2.6.10-r3.ebuild:
325     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
326     in 2005.0
327 tocharian 1.45
328     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
329     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
330     hardened-sources-2.4.28-r2.ebuild:
331     Mark stable on x86
332 tocharian 1.44
333     *hardened-sources-2.4.28-r3 (17 Jan 2005)
334    
335     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
336     +hardened-sources-2.4.28-r3.ebuild:
337     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
338 tocharian 1.43
339     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
340     hardened-sources-2.4.28.ebuild:
341     Mark stable on x86.
342 tocharian 1.42
343     *hardened-sources-2.4.28-r2 (13 Jan 2005)
344    
345     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
346     +hardened-sources-2.4.28-r2.ebuild:
347     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
348     Mazinger for grsecurity patches as well.
349 plasmaroo 1.41
350     *hardened-sources-2.4.28-r1 (23 Dec 2004)
351    
352     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
353     Security bump. Thank tocharian for rolling a new patchset...
354 solar 1.40
355     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
356     +files/2.4.28-grsec-cmdline-race.patch,
357     +files/2.4.28-selinux-binfmt_a.out.patch,
358     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
359     - Round up remaining security patches that appear to be missing in 2.4.28. -
360     PaX standalone updated to current. hgpv=28.1
361 solar 1.39
362     *hardened-sources-2.4.28 (28 Nov 2004)
363    
364     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
365     security bump. Thank tocharian for rolling a new patchset
366 scox 1.31
367 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
368    
369     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
370     +hardened-sources-2.4.27-r3.ebuild:
371     Applies the new 2.4-27.2 patchball which updates
372     GRSecurity to the 2.0.1 version.
373    
374 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
375    
376     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
377     +hardened-sources-2.4.27-r2.ebuild:
378     Version bump.
379     This version uses the new 2.4-27.1 patchball which updates
380     both the SELinux PaX hooks patch and the SELinux headers.
381    
382 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
383    
384     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
385     +hardened-sources-2.4.27-r1.ebuild,
386     -hardened-sources-2.4.27.ebuild,
387     +files/2.4.27-cmdline-race.patch:
388     Version bump, fix for cmdline race. See bug #59905.
389    
390     *hardened-sources-2.4.26-r6 (09 Aug 2004)
391    
392     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
393     +hardened-sources-2.4.26-r6.ebuild,
394     -hardened-sources-2.4.26-r5.ebuild,
395     -hardened-sources-2.4.26-r4.ebuild,
396     +files/2.4.26-cmdline-race.patch:
397     Version bump, fix for cmdline race. See bug #59905.
398    
399 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
400    
401     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
402     +hardened-sources-2.4.27.ebuild,
403     +files/2.4.27-CAN-2004-0394.patch:
404     Ported the patchball to the 2.4.27 kernel version.
405    
406 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
407    
408     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
409     +hardened-sources-2.4.26-r5.ebuild:
410 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
411 scox 1.34 It adds the following features:
412     - Squashfs
413     - Ebtables
414     - Netdev random (core+drivers)
415     - Watchdog Timer (WDT) fix.
416    
417 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
418    
419     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
420     +hardened-sources-2.4.26-r4.ebuild,
421     +files/2.4.26-CAN-2004-0415.patch,
422     -hardened-sources-2.4.26-3:
423     Version bump, fix for CAN 0415, see bug #59378.
424    
425 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
426    
427     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
428     +hardened-sources-2.4.26-r3.ebuild,
429     +files/2.4.26-CAN-2004-0497.patch,
430     -hardened-sources-2.4.26-r2.ebuild:
431     Version bump, fixed CAN 0497, see bug #56171.
432    
433 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
434    
435     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
436 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
437 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
438     +files/2.4.26-CAN-2004-0535.patch,
439     -hardened-sources-2.4.26-r1.ebuild:
440     Fixes for both CAN 0495 and 0535, see bug #54976
441 pvdabeel 1.27
442 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
443     hardened-sources-2.4.26-r1.ebuild:
444     QA - fix use invocation
445 scox 1.28
446     *hardened-sources-2.4.26-r1 (22 June 2004)
447    
448     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
449     +hardened-sources-2.4.26-r1.ebuild,
450     +files/2.4.26-CAN-2004-0394.patch,
451     +files/2.4.26-signal-race.patch,
452     -hardened-sources-2.4.26.ebuild,
453     -hardened-sources-2.4.24-r3.ebuild:
454     Version bump for the CAN-2004-0394 issue and bug #53804
455     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
456    
457    
458 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
459     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
460     Masked hardened-sources-2.4.26.ebuild broken for ppc
461    
462     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
463     hardened-sources-2.4.24-r3.ebuild:
464     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
465 plasmaroo 1.25
466 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
467    
468     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
469     +hardened-sources-2.4.26.ebuild:
470     Updated hardened-sources for the 2.4.26 kernel
471     Removed broken components, updated almost everything.
472    
473 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
474    
475     17 Apr 2004; <plasmaroo@gentoo.org>
476     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
477     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
478     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
479     +hardened-sources-2.4.24-r3.ebuild:
480     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
481     vulnerabilities. Old revisions removed.
482 plasmaroo 1.24
483     *hardened-sources-2.4.24-r2 (15 Apr 2004)
484    
485     15 Apr 2004; <plasmaroo@gentoo.org>
486     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
487     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
488     Version bump for the CAN-2004-0109 issue; bug #47881.
489 aliz 1.23
490     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
491     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
492     Add eutils to inherit.
493 plasmaroo 1.22
494     *hardened-sources-2.4.24-r1 (19 Feb 2004)
495    
496     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
497     files/hardened-sources-2.4.24.munmap.patch:
498     Added the patch for the mremap/munmap vulnerability. Bug #42024.
499 scox 1.19
500 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
501 scox 1.26
502 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
503     hardened-sources-2.4.24.ebuild:
504     Version bump, updated most of the components.
505     This release includes the following:
506    
507     - Hardened security
508     - Netfilter patch-o-matic 20031219
509     - FreeSWAN 2.04 & x509 1.4.8
510     - EVMS 2.2.2
511     - XFS 1.3.1
512     - cryptoloop jari
513     - grsecurity 2.0-rc4
514     - SELinux
515     - PaX 200402060000
516     - PaX Obscurity 200308302223
517     - Others...
518    
519     Neither -ck nor systrace are included anymore.
520    
521 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
522    
523     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
524     hardened-sources-2.4.22-r2.ebuild:
525 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
526 scox 1.19
527     *hardened-sources-2.4.22-r1 (02 Dec 2003)
528 iggy 1.17
529     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
530 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
531 iggy 1.16
532     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
533 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
534     Version bump for the 'do_brk' vulnerability.
535 iggy 1.15
536     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
537     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
538     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
539     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
540 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
541 frogger 1.14
542     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
543     hardened-sources-2.4.22.ebuild:
544 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
545     components. These are no longer handled in the kernel
546     so this code was not necessary.
547 frogger 1.13
548     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
549     New 2.4.22 based hardened-sources thanks to
550     Phil West <p.west@computer.org>.
551    
552     These sources include:
553 plasmaroo 1.18 - New SELinux API
554     - Updated CK-base
555     - Updated GRSec
556     - Systrace
557     - SuperFreeS/WAN 1.99.8
558     - Propolice kernel build support
559     - EVMS
560     - Other various security related patches
561 frogger 1.11
562 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
563    
564     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
565     Updated hardened-sources based on the 2.4.21 Linux kernel.
566     This includes updates to most major components such as:
567 plasmaroo 1.18 - ck-base-0306300059
568     - selinux-2.4-2003071106
569     - grsecurity-2.0-rc1
570     - Updated IPTables patch-o-matic
571     - Updated SuperFreeS/WAN
572    
573 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
574     updated patch set ready for the 2.4.21 based kernel.
575    
576 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
577     Initial import of hardened-sources-2.4.20-r4. This revision
578     includes only a few changes, but one of these is an important
579     security fix. It is recommended all users of hardened-sources
580     upgrade to this release.
581 plasmaroo 1.18
582 frogger 1.11 - ioperm bug fix
583     - fixed compilation failure when building without GRSec
584 plasmaroo 1.18
585 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
586     due to time constraints, but is planned for inclusion in the near
587     future.
588 msterret 1.10
589     *hardened-sources-2.4.20-r2 (12 Jun 2003)
590    
591     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
592     hardened-sources-2.4.20-r3.ebuild:
593 plasmaroo 1.18 Add Header...
594 frogger 1.9
595     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
596     hardened-sources-2.4.20-r3.ebuild:
597     Removed warnings from ebuild. This kernel should be safe to
598     use at this point.
599 frogger 1.8
600     *hardened-sources-2.4.20-r3 (08 Jun 2003)
601    
602     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
603     hardened-sources-2.4.20-r3.ebuild:
604     New revision. Includes the following changes over -r2:
605 plasmaroo 1.18
606 frogger 1.8 - ck7-base (O(1), preempt, low latency)
607     - Super FreeS/WAN 1.99.7rc2
608     - PaX for the LSM/SELinux branch
609     - GRSecurity 2.0-pre4 (role based access control)
610     - Systrace 1.3
611     - EXT3 fixes
612     - EVMS 2.0.1
613     - GCC 3.1+ compile optimizations
614     - ProPolice kernel build support
615     - Hashing table security fixes
616 frogger 1.3
617     *hardened-sources-2.4.20-r1 (09 Apr 2003)
618 frogger 1.7
619     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
620     Initial import of hardened-sources-r2. This new
621     ebuild includes many new performance and security
622     related patches. As in -r1, it will patch in
623     LSM/SELinux if "selinux" is in USE, otherwise it
624     will patch in GRSecurity. The following patches
625     are included in this revision:
626 plasmaroo 1.18
627 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
628     (pulled from the base CK patch)
629     - ptrace exploit patch for the LSM kernel
630     (the GRSec patch already fixes this)
631     - LSM 2.4-2003040709
632     - SELinux 2.4-2003040709
633     - Systrace v1.2
634     - IPTables patch-o-matic base patches - 20030107
635     - CryptoAPI 2.4.20.1 w/ loop-jari patch
636     - Super FreeS/WAN 1.99.6.1
637     - GRSecurity 1.9.9g
638     - MPPE
639     - EXT3 data journal fix
640     - CIPE 1.5.4
641 frogger 1.6
642     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
643     hardened-sources-2.4.20-r1.ebuild, manifest:
644 plasmaroo 1.18 Updated to install flask components correctly for selinux.
645 frogger 1.5
646     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
647     hardened-sources-2.4.20-r1.ebuild:
648     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
649     is patched in instead. Ptrace patches for selinux have also been added. In
650     either case, systrace support will be patched in as well.
651 frogger 1.3
652     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
653     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
654 plasmaroo 1.18 Revision bump for new sources.
655 frogger 1.4
656 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
657 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
658 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
659 method 1.1
660 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
661    
662 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
663     hardened-sources-2.4.20.ebuild:
664 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20