/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.112 - (show annotations) (download)
Sun Aug 27 11:49:20 2006 UTC (8 years, 3 months ago) by phreak
Branch: MAIN
Changes since 1.111: +5 -1 lines
Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
(Portage version: 2.1.1_rc1)

1 # ChangeLog for sys-kernel/hardened-sources
2 # Copyright 2000-2006 Gentoo Foundation; Distributed under the GPL v2
3 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.111 2006/08/26 14:55:34 phreak Exp $
4
5 27 Aug 2006; Christian Heim <phreak@gentoo.org>
6 -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
7 Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
8
9 *hardened-sources-2.6.17-r1 (26 Aug 2006)
10
11 26 Aug 2006; Christian Heim <phreak@gentoo.org>
12 +hardened-sources-2.6.17-r1.ebuild:
13 Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
14 grsecurity patch.
15
16 *hardened-sources-2.6.17 (17 Aug 2006)
17
18 17 Aug 2006; Christian Heim <phreak@gentoo.org>
19 +hardened-sources-2.6.17.ebuild:
20 Bumping the hardened-sources-2.6 series to 2.6.17, using
21 genpatches-2.6.17-6.base.
22
23 07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
24 - stable on x86 and amd64
25
26 *hardened-sources-2.6.16-r11 (15 Jul 2006)
27
28 15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
29 -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
30 -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
31 -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
32 - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
33 crusty ebuilds
34
35 14 Jul 2006; John Mylchreest <johnm@gentoo.org>
36 hardened-sources-2.6.16-r10.ebuild:
37 marking stable on x86 and amd64
38
39 13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
40 - 2.4.32-r6 stable on x86. RSBAC state unknown
41
42 *hardened-sources-2.4.32-r7 (10 Jul 2006)
43
44 10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
45 +hardened-sources-2.4.32-r7.ebuild:
46 Bump PaX for RSBAC to test-17
47
48 *hardened-sources-2.6.16-r9 (03 Jul 2006)
49
50 03 Jul 2006; John Mylchreest <johnm@gentoo.org>
51 -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
52 hardened-sources-2.6.16 bump to latest -base.
53
54 *hardened-sources-2.4.32-r6 (30 Jun 2006)
55
56 30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
57 hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
58 - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
59 sysctl controlable resource logging
60
61 *hardened-sources-2.6.16-r7 (05 Jun 2006)
62
63 05 Jun 2006; John Mylchreest <johnm@gentoo.org>
64 -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
65 push new 2.6.16 release in preparation for stable
66
67 22 May 2006; <solar@gentoo.org> :
68 - redigest bug 134002
69
70 *hardened-sources-2.4.32-r5 (16 May 2006)
71
72 16 May 2006; Guillaume Destuynder <kang@gentoo.org>
73 +hardened-sources-2.4.32-r5.ebuild:
74 Fixes rsbac common patching (new patch in new -r5 patchset)
75
76 *hardened-sources-2.4.32-r4 (13 May 2006)
77
78 13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
79 +hardened-sources-2.4.32-r4.ebuild:
80 - security bumps
81
82 *hardened-sources-2.6.16-r6 (03 May 2006)
83
84 03 May 2006; John Mylchreest <johnm@gentoo.org>
85 +hardened-sources-2.6.16-r6.ebuild:
86 bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
87
88 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
89 hardened-sources-2.6.14-r8.ebuild:
90 fix x86_64 build problem, this will delay the digest issue again for a short
91 while but it will sort itself out
92
93 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
94 hardened-sources-2.6.14-r8.ebuild:
95 bump hardened patchset
96
97 27 Apr 2006; Alec Warner <antarus@gentoo.org>
98 files/digest-hardened-sources-2.4.32-r2,
99 files/digest-hardened-sources-2.4.32-r3,
100 files/digest-hardened-sources-2.6.14-r8, Manifest:
101 Fixing duff SHA256 digests: Bug # 131293
102
103 *hardened-sources-2.6.16-r5 (27 Apr 2006)
104
105 27 Apr 2006; John Mylchreest <johnm@gentoo.org>
106 -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
107 -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
108 stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
109 cleanup of old uneccessary sources
110
111 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
112 fix digest
113
114 *hardened-sources-2.6.14-r8 (20 Apr 2006)
115
116 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
117 +hardened-sources-2.6.14-r8.ebuild:
118 fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
119
120 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
121 Turning on gpg-signing again, and recomitting
122
123 *hardened-sources-2.6.16-r4 (20 Apr 2006)
124
125 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
126 -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
127 +hardened-sources-2.6.16-r4.ebuild:
128 Fix numerous security vulns
129
130 *hardened-sources-2.4.32-r3 (16 Apr 2006)
131
132 16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
133 -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
134 +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
135 - security bump for bug #112791. Removed old ebuilds
136
137 *hardened-sources-2.6.16-r3 (15 Apr 2006)
138
139 15 Apr 2006; John Mylchreest <johnm@gentoo.org>
140 +hardened-sources-2.6.16-r3.ebuild:
141 Removing silly localversion which I missed
142
143 *hardened-sources-2.6.14-r7 (14 Apr 2006)
144
145 14 Apr 2006; John Mylchreest <johnm@gentoo.org>
146 -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
147 Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
148
149 *hardened-sources-2.6.16-r2 (13 Apr 2006)
150
151 13 Apr 2006; John Mylchreest <johnm@gentoo.org>
152 -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
153 +hardened-sources-2.6.16-r2.ebuild:
154 Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
155 labels, dropping USERGROUP define fixes, since these were merged mainstream.
156
157 *hardened-sources-2.6.16-r1 (11 Apr 2006)
158
159 11 Apr 2006; John Mylchreest <johnm@gentoo.org>
160 +hardened-sources-2.6.16-r1.ebuild:
161 Bumping to include ppc build fix and 2.6.16.3
162
163 06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
164 hardened-sources-2.6.14-r6.ebuild:
165 Stable on x86; bug #127718
166
167 *hardened-sources-2.6.16 (31 Mar 2006)
168
169 31 Mar 2006; John Mylchreest <johnm@gentoo.org>
170 +hardened-sources-2.6.16.ebuild:
171 Bumping to new version of grsec, and kernel base. New squashfs. Based on
172 2.6.16.1
173
174 30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
175 hardened-sources-2.6.14-r6.ebuild:
176 Stable on amd64, bug 127718.
177
178 28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
179 Stable on ppc. Bug #127718
180
181 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
182 -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
183 -hardened-sources-2.6.14-r4.ebuild:
184 Cleanup.
185
186 *hardened-sources-2.6.14-r6 (15 Mar 2006)
187
188 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
189 +hardened-sources-2.6.14-r6.ebuild:
190 Fixes grsec policy recreation bug and adds a
191 >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
192
193 02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
194 - stable on x86
195
196 19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
197 hardened-sources-2.6.14-r5.ebuild:
198 Stable on ppc.
199
200 *hardened-sources-2.6.14-r5 (01 Feb 2006)
201
202 01 Feb 2006; John Mylchreest <johnm@gentoo.org>
203 +hardened-sources-2.6.14-r5.ebuild:
204 fixing every known exploit
205
206 *hardened-sources-2.4.32-r2 (26 Jan 2006)
207
208 26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
209 +hardened-sources-2.4.32-r2.ebuild:
210 - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
211
212 *hardened-sources-2.6.14-r4 (12 Jan 2006)
213
214 12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
215 - version bump for new genpatches which fix up a few sec holes
216
217 *hardened-sources-2.4.32-r1 (05 Jan 2006)
218
219 05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
220 - revision bump to add misc vital linux kernel security patches.
221
222 *hardened-sources-2.6.14-r3 (30 Dec 2005)
223
224 30 Dec 2005; John Mylchreest <johnm@gentoo.org>
225 -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
226 Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
227
228 28 Dec 2005; John Mylchreest <johnm@gentoo.org>
229 hardened-sources-2.6.14-r2.ebuild:
230 making x86 & amd64 stable following testing.
231
232 *hardened-sources-2.6.14-r2 (27 Dec 2005)
233
234 27 Dec 2005; John Mylchreest <johnm@gentoo.org>
235 -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
236 Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
237 network hooks.
238
239 06 Dec 2005; John Mylchreest <johnm@gentoo.org>
240 hardened-sources-2.6.14-r1.ebuild:
241 bumping to stable early for sec fix on x86 & amd64
242
243 *hardened-sources-2.6.14-r1 (05 Dec 2005)
244
245 05 Dec 2005; John Mylchreest <johnm@gentoo.org>
246 -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
247 bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
248
249 04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
250 - stable on x86 security bug #114227 CAN-2005-3257
251
252 *hardened-sources-2.4.32 (19 Nov 2005)
253
254 19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
255 +hardened-sources-2.4.32.ebuild:
256 Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
257 Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
258 have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
259 rsbac >> /etc/portage/package.use)
260
261 *hardened-sources-2.6.14 (14 Nov 2005)
262
263 14 Nov 2005; John Mylchreest <johnm@gentoo.org>
264 -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
265 Bumping 2.6 series to 2.6.14.2
266
267 *hardened-sources-2.6.13-r2 (20 Oct 2005)
268
269 20 Oct 2005; John Mylchreest <johnm@gentoo.org>
270 -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
271 +hardened-sources-2.6.13-r2.ebuild:
272 Fixes minor build error in ppc.
273
274 *hardened-sources-2.6.13-r1 (17 Oct 2005)
275
276 17 Oct 2005; John Mylchreest <johnm@gentoo.org>
277 +hardened-sources-2.6.13-r1.ebuild:
278 Updating grsec to latest snapshot. Fixes some minor issues. Updating to
279 2.6.13.4, fixes some major amd64 stability problems.
280
281 *hardened-sources-2.6.13 (16 Sep 2005)
282
283 16 Sep 2005; John Mylchreest <johnm@gentoo.org>
284 -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
285 2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
286 ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
287 users should test this thoroughly.
288
289 01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
290 - stable on x86
291
292 *hardened-sources-2.6.11-r15 (27 Jun 2005)
293
294 27 Jun 2005; John Mylchreest <johnm@gentoo.org>
295 +hardened-sources-2.6.11-r15.ebuild:
296 Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
297 grsec redefining curr_ip struct.
298
299 *hardened-sources-2.4.31 (20 Jun 2005)
300
301 20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
302 initial import of 2.4.31 tree
303
304 *hardened-sources-2.6.11-r14 (14 Jun 2005)
305
306 14 Jun 2005; John Mylchreest <johnm@gentoo.org>
307 -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
308 Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
309 naming scheme to abide by genpatches
310
311 *hardened-sources-2.6.11-r13 (18 May 2005)
312
313 18 May 2005; John Mylchreest <johnm@gentoo.org>
314 -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
315 Managed to mangle the Makefile patch from grsec, to miss out the grsec
316 target. sorry about that. Fixes bug #93022
317
318 *hardened-sources-2.6.11-r12 (17 May 2005)
319
320 17 May 2005; John Mylchreest <johnm@gentoo.org>
321 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
322 +hardened-sources-2.6.11-r12.ebuild:
323 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
324 merges in genpatches-base
325
326 *hardened-sources-2.6.11-r12 (17 May 2005)
327
328 17 May 2005; John Mylchreest <johnm@gentoo.org>
329 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
330 +hardened-sources-2.6.11-r12.ebuild:
331 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
332 merges in genpatches-base
333
334 29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
335 -files/2.4.27-cmdline-race.patch,
336 -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
337 -files/2.4.28-grsec-binfmt_a.out.patch,
338 -files/2.4.28-grsec-cmdline-race.patch,
339 -files/2.4.28-selinux-binfmt_a.out.patch,
340 -files/2.4.28-selinux-cmdline-race.patch,
341 -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
342 hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
343 - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
344 cleanup..
345
346 *hardened-sources-2.4.30-r1 (21 Apr 2005)
347
348 21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
349 - disable aout by default
350
351 *hardened-sources-2.4.30 (18 Apr 2005)
352
353 18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
354 - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
355 and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
356 use
357
358 *hardened-sources-2.4.29 (30 Mar 2005)
359
360 30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
361 +hardened-sources-2.4.29.ebuild:
362 New hardened-patches-2.4-29.0 patchball.
363 Removed SELinux support, upgraded GRSecurity to 2.1.4.
364
365 *hardened-sources-2.4.28-r5 (06 Mar 2005)
366
367 06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
368 +hardened-sources-2.4.28-r5.ebuild:
369 Added a fix for a PaX vulnerability.
370
371 26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
372 hardened-sources-2.4.28-r4.ebuild:
373 Stable on x86
374
375 23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
376 hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
377 hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
378 hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
379 - fixed/added RDEPEND= in all kernel-2 ebuilds
380
381 *hardened-sources-2.4.28-r4 (21 Jan 2005)
382
383 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
384 +hardened-sources-2.4.28-r4.ebuild:
385 Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
386 backport of neighbour hash updates.
387
388 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
389 hardened-sources-2.4.28-r3.ebuild:
390 Stable on x86
391
392 *hardened-sources-2.6.10-r3 (20 Jan 2005)
393
394 20 Jan 2005; Brandon Hale <tseng@gentoo.org>
395 +hardened-sources-2.6.10-r3.ebuild:
396 Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
397 in 2005.0
398
399 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
400 -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
401 hardened-sources-2.4.28-r2.ebuild:
402 Mark stable on x86
403
404 *hardened-sources-2.4.28-r3 (17 Jan 2005)
405
406 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
407 +hardened-sources-2.4.28-r3.ebuild:
408 Fix SMP page fault handler vuln, and update device-mapper and evms patches.
409
410 14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
411 hardened-sources-2.4.28.ebuild:
412 Mark stable on x86.
413
414 *hardened-sources-2.4.28-r2 (13 Jan 2005)
415
416 13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
417 +hardened-sources-2.4.28-r2.ebuild:
418 Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
419 Mazinger for grsecurity patches as well.
420
421 *hardened-sources-2.4.28-r1 (23 Dec 2004)
422
423 23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
424 Security bump. Thank tocharian for rolling a new patchset...
425
426 28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
427 +files/2.4.28-grsec-cmdline-race.patch,
428 +files/2.4.28-selinux-binfmt_a.out.patch,
429 +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
430 - Round up remaining security patches that appear to be missing in 2.4.28. -
431 PaX standalone updated to current. hgpv=28.1
432
433 *hardened-sources-2.4.28 (28 Nov 2004)
434
435 28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
436 security bump. Thank tocharian for rolling a new patchset
437
438 *hardened-sources-2.4.27-r3 (08 Sep 2004)
439
440 08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
441 +hardened-sources-2.4.27-r3.ebuild:
442 Applies the new 2.4-27.2 patchball which updates
443 GRSecurity to the 2.0.1 version.
444
445 *hardened-sources-2.4.27-r2 (31 Aug 2004)
446
447 31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
448 +hardened-sources-2.4.27-r2.ebuild:
449 Version bump.
450 This version uses the new 2.4-27.1 patchball which updates
451 both the SELinux PaX hooks patch and the SELinux headers.
452
453 *hardened-sources-2.4.27-r1 (09 Aug 2004)
454
455 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
456 +hardened-sources-2.4.27-r1.ebuild,
457 -hardened-sources-2.4.27.ebuild,
458 +files/2.4.27-cmdline-race.patch:
459 Version bump, fix for cmdline race. See bug #59905.
460
461 *hardened-sources-2.4.26-r6 (09 Aug 2004)
462
463 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
464 +hardened-sources-2.4.26-r6.ebuild,
465 -hardened-sources-2.4.26-r5.ebuild,
466 -hardened-sources-2.4.26-r4.ebuild,
467 +files/2.4.26-cmdline-race.patch:
468 Version bump, fix for cmdline race. See bug #59905.
469
470 *hardened-sources-2.4.27 (08 Aug 2004)
471
472 08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
473 +hardened-sources-2.4.27.ebuild,
474 +files/2.4.27-CAN-2004-0394.patch:
475 Ported the patchball to the 2.4.27 kernel version.
476
477 *hardened-sources-2.4.26-r5 (07 Aug 2004)
478
479 07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
480 +hardened-sources-2.4.26-r5.ebuild:
481 Updated to use the new hardened-patches-2.4-26.1 patchball.
482 It adds the following features:
483 - Squashfs
484 - Ebtables
485 - Netdev random (core+drivers)
486 - Watchdog Timer (WDT) fix.
487
488 *hardened-sources-2.4.26-r4 (04 Aug 2004)
489
490 04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
491 +hardened-sources-2.4.26-r4.ebuild,
492 +files/2.4.26-CAN-2004-0415.patch,
493 -hardened-sources-2.4.26-3:
494 Version bump, fix for CAN 0415, see bug #59378.
495
496 *hardened-sources-2.4.26-r3 (22 Jul 2004)
497
498 22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
499 +hardened-sources-2.4.26-r3.ebuild,
500 +files/2.4.26-CAN-2004-0497.patch,
501 -hardened-sources-2.4.26-r2.ebuild:
502 Version bump, fixed CAN 0497, see bug #56171.
503
504 *hardened-sources-2.4.26-r2 (29 Jun 2004)
505
506 29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
507 +hardened-sources-2.4.26-r2.ebuild,
508 +files/2.4.26-CAN-2004-0495.patch,
509 +files/2.4.26-CAN-2004-0535.patch,
510 -hardened-sources-2.4.26-r1.ebuild:
511 Fixes for both CAN 0495 and 0535, see bug #54976
512
513 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
514 hardened-sources-2.4.26-r1.ebuild:
515 QA - fix use invocation
516
517 *hardened-sources-2.4.26-r1 (22 June 2004)
518
519 22 June 2004; Andrea Luzzardi <scox@gentoo.org>
520 +hardened-sources-2.4.26-r1.ebuild,
521 +files/2.4.26-CAN-2004-0394.patch,
522 +files/2.4.26-signal-race.patch,
523 -hardened-sources-2.4.26.ebuild,
524 -hardened-sources-2.4.24-r3.ebuild:
525 Version bump for the CAN-2004-0394 issue and bug #53804
526 Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
527
528
529 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
530 hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
531 Masked hardened-sources-2.4.26.ebuild broken for ppc
532
533 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
534 hardened-sources-2.4.24-r3.ebuild:
535 Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
536
537 *hardened-sources-2.4.26 (29 May 2004)
538
539 29 May 2004; Andrea Luzzardi <scox@gentoo.org>
540 +hardened-sources-2.4.26.ebuild:
541 Updated hardened-sources for the 2.4.26 kernel
542 Removed broken components, updated almost everything.
543
544 *hardened-sources-2.4.24-r3 (17 Apr 2004)
545
546 17 Apr 2004; <plasmaroo@gentoo.org>
547 +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
548 +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
549 +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
550 +hardened-sources-2.4.24-r3.ebuild:
551 Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
552 vulnerabilities. Old revisions removed.
553
554 *hardened-sources-2.4.24-r2 (15 Apr 2004)
555
556 15 Apr 2004; <plasmaroo@gentoo.org>
557 +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
558 -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
559 Version bump for the CAN-2004-0109 issue; bug #47881.
560
561 12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
562 hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
563 Add eutils to inherit.
564
565 *hardened-sources-2.4.24-r1 (19 Feb 2004)
566
567 19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
568 files/hardened-sources-2.4.24.munmap.patch:
569 Added the patch for the mremap/munmap vulnerability. Bug #42024.
570
571 *hardened-sources-2.4.24 (06 Feb 2004)
572
573 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
574 hardened-sources-2.4.24.ebuild:
575 Version bump, updated most of the components.
576 This release includes the following:
577
578 - Hardened security
579 - Netfilter patch-o-matic 20031219
580 - FreeSWAN 2.04 & x509 1.4.8
581 - EVMS 2.2.2
582 - XFS 1.3.1
583 - cryptoloop jari
584 - grsecurity 2.0-rc4
585 - SELinux
586 - PaX 200402060000
587 - PaX Obscurity 200308302223
588 - Others...
589
590 Neither -ck nor systrace are included anymore.
591
592 *hardened-sources-2.4.22-r2 (05 Jan 2004)
593
594 05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
595 hardened-sources-2.4.22-r2.ebuild:
596 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
597
598 *hardened-sources-2.4.22-r1 (02 Dec 2003)
599
600 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
601 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
602
603 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
604 hardened-sources-2.4.22-r1.ebuild:
605 Version bump for the 'do_brk' vulnerability.
606
607 01 Dec 2003; Brian Jackson <iggy@gentoo.org>
608 hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
609 hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
610 hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
611 Fix the 'do_brk' vulnerability.
612
613 03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
614 hardened-sources-2.4.22.ebuild:
615 - Removed the src_install() portion for SELinux flask
616 components. These are no longer handled in the kernel
617 so this code was not necessary.
618
619 29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
620 New 2.4.22 based hardened-sources thanks to
621 Phil West <p.west@computer.org>.
622
623 These sources include:
624 - New SELinux API
625 - Updated CK-base
626 - Updated GRSec
627 - Systrace
628 - SuperFreeS/WAN 1.99.8
629 - Propolice kernel build support
630 - EVMS
631 - Other various security related patches
632
633 *hardened-sources-2.4.21 (14 Sep 2003)
634
635 14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
636 Updated hardened-sources based on the 2.4.21 Linux kernel.
637 This includes updates to most major components such as:
638 - ck-base-0306300059
639 - selinux-2.4-2003071106
640 - grsecurity-2.0-rc1
641 - Updated IPTables patch-o-matic
642 - Updated SuperFreeS/WAN
643
644 Thanks to Phil West <pwest@computer.org> for his work in getting this
645 updated patch set ready for the 2.4.21 based kernel.
646
647 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
648 Initial import of hardened-sources-2.4.20-r4. This revision
649 includes only a few changes, but one of these is an important
650 security fix. It is recommended all users of hardened-sources
651 upgrade to this release.
652
653 - ioperm bug fix
654 - fixed compilation failure when building without GRSec
655
656 SAL (Secure Auditing for Linux) is NOT included in this revision
657 due to time constraints, but is planned for inclusion in the near
658 future.
659
660 *hardened-sources-2.4.20-r2 (12 Jun 2003)
661
662 12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
663 hardened-sources-2.4.20-r3.ebuild:
664 Add Header...
665
666 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
667 hardened-sources-2.4.20-r3.ebuild:
668 Removed warnings from ebuild. This kernel should be safe to
669 use at this point.
670
671 *hardened-sources-2.4.20-r3 (08 Jun 2003)
672
673 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
674 hardened-sources-2.4.20-r3.ebuild:
675 New revision. Includes the following changes over -r2:
676
677 - ck7-base (O(1), preempt, low latency)
678 - Super FreeS/WAN 1.99.7rc2
679 - PaX for the LSM/SELinux branch
680 - GRSecurity 2.0-pre4 (role based access control)
681 - Systrace 1.3
682 - EXT3 fixes
683 - EVMS 2.0.1
684 - GCC 3.1+ compile optimizations
685 - ProPolice kernel build support
686 - Hashing table security fixes
687
688 *hardened-sources-2.4.20-r1 (09 Apr 2003)
689
690 23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
691 Initial import of hardened-sources-r2. This new
692 ebuild includes many new performance and security
693 related patches. As in -r1, it will patch in
694 LSM/SELinux if "selinux" is in USE, otherwise it
695 will patch in GRSecurity. The following patches
696 are included in this revision:
697
698 - O(1) Scheduler, Low Latency, and Preempt
699 (pulled from the base CK patch)
700 - ptrace exploit patch for the LSM kernel
701 (the GRSec patch already fixes this)
702 - LSM 2.4-2003040709
703 - SELinux 2.4-2003040709
704 - Systrace v1.2
705 - IPTables patch-o-matic base patches - 20030107
706 - CryptoAPI 2.4.20.1 w/ loop-jari patch
707 - Super FreeS/WAN 1.99.6.1
708 - GRSecurity 1.9.9g
709 - MPPE
710 - EXT3 data journal fix
711 - CIPE 1.5.4
712
713 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
714 hardened-sources-2.4.20-r1.ebuild, manifest:
715 Updated to install flask components correctly for selinux.
716
717 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
718 hardened-sources-2.4.20-r1.ebuild:
719 LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
720 is patched in instead. Ptrace patches for selinux have also been added. In
721 either case, systrace support will be patched in as well.
722
723 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
724 hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
725 Revision bump for new sources.
726
727 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
728 hardened-sources-2.4.20-r1.ebuild:
729 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
730
731 *hardened-sources-2.4.20 (30 Mar 2003)
732
733 30 Mar 2003; Joshua Brindle <method@gentoo.org>
734 hardened-sources-2.4.20.ebuild:
735 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20