/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.114 - (show annotations) (download)
Wed Oct 18 21:45:47 2006 UTC (8 years, 1 month ago) by solar
Branch: MAIN
Changes since 1.113: +4 -1 lines
- mark 2.6.17-r1 stable on amd64 also. bug #151877
(Portage version: 2.1.2_pre1)

1 # ChangeLog for sys-kernel/hardened-sources
2 # Copyright 2000-2006 Gentoo Foundation; Distributed under the GPL v2
3 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.113 2006/10/18 21:31:32 solar Exp $
4
5 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
6 - mark amd64 stable also. bug #151877
7
8 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
9 - mark 2.6.17-r1 stable
10
11 27 Aug 2006; Christian Heim <phreak@gentoo.org>
12 -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
13 Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
14
15 *hardened-sources-2.6.17-r1 (26 Aug 2006)
16
17 26 Aug 2006; Christian Heim <phreak@gentoo.org>
18 +hardened-sources-2.6.17-r1.ebuild:
19 Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
20 grsecurity patch.
21
22 *hardened-sources-2.6.17 (17 Aug 2006)
23
24 17 Aug 2006; Christian Heim <phreak@gentoo.org>
25 +hardened-sources-2.6.17.ebuild:
26 Bumping the hardened-sources-2.6 series to 2.6.17, using
27 genpatches-2.6.17-6.base.
28
29 07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
30 - stable on x86 and amd64
31
32 *hardened-sources-2.6.16-r11 (15 Jul 2006)
33
34 15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
35 -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
36 -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
37 -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
38 - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
39 crusty ebuilds
40
41 14 Jul 2006; John Mylchreest <johnm@gentoo.org>
42 hardened-sources-2.6.16-r10.ebuild:
43 marking stable on x86 and amd64
44
45 13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
46 - 2.4.32-r6 stable on x86. RSBAC state unknown
47
48 *hardened-sources-2.4.32-r7 (10 Jul 2006)
49
50 10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
51 +hardened-sources-2.4.32-r7.ebuild:
52 Bump PaX for RSBAC to test-17
53
54 *hardened-sources-2.6.16-r9 (03 Jul 2006)
55
56 03 Jul 2006; John Mylchreest <johnm@gentoo.org>
57 -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
58 hardened-sources-2.6.16 bump to latest -base.
59
60 *hardened-sources-2.4.32-r6 (30 Jun 2006)
61
62 30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
63 hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
64 - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
65 sysctl controlable resource logging
66
67 *hardened-sources-2.6.16-r7 (05 Jun 2006)
68
69 05 Jun 2006; John Mylchreest <johnm@gentoo.org>
70 -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
71 push new 2.6.16 release in preparation for stable
72
73 22 May 2006; <solar@gentoo.org> :
74 - redigest bug 134002
75
76 *hardened-sources-2.4.32-r5 (16 May 2006)
77
78 16 May 2006; Guillaume Destuynder <kang@gentoo.org>
79 +hardened-sources-2.4.32-r5.ebuild:
80 Fixes rsbac common patching (new patch in new -r5 patchset)
81
82 *hardened-sources-2.4.32-r4 (13 May 2006)
83
84 13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
85 +hardened-sources-2.4.32-r4.ebuild:
86 - security bumps
87
88 *hardened-sources-2.6.16-r6 (03 May 2006)
89
90 03 May 2006; John Mylchreest <johnm@gentoo.org>
91 +hardened-sources-2.6.16-r6.ebuild:
92 bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
93
94 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
95 hardened-sources-2.6.14-r8.ebuild:
96 fix x86_64 build problem, this will delay the digest issue again for a short
97 while but it will sort itself out
98
99 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
100 hardened-sources-2.6.14-r8.ebuild:
101 bump hardened patchset
102
103 27 Apr 2006; Alec Warner <antarus@gentoo.org>
104 files/digest-hardened-sources-2.4.32-r2,
105 files/digest-hardened-sources-2.4.32-r3,
106 files/digest-hardened-sources-2.6.14-r8, Manifest:
107 Fixing duff SHA256 digests: Bug # 131293
108
109 *hardened-sources-2.6.16-r5 (27 Apr 2006)
110
111 27 Apr 2006; John Mylchreest <johnm@gentoo.org>
112 -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
113 -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
114 stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
115 cleanup of old uneccessary sources
116
117 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
118 fix digest
119
120 *hardened-sources-2.6.14-r8 (20 Apr 2006)
121
122 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
123 +hardened-sources-2.6.14-r8.ebuild:
124 fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
125
126 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
127 Turning on gpg-signing again, and recomitting
128
129 *hardened-sources-2.6.16-r4 (20 Apr 2006)
130
131 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
132 -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
133 +hardened-sources-2.6.16-r4.ebuild:
134 Fix numerous security vulns
135
136 *hardened-sources-2.4.32-r3 (16 Apr 2006)
137
138 16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
139 -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
140 +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
141 - security bump for bug #112791. Removed old ebuilds
142
143 *hardened-sources-2.6.16-r3 (15 Apr 2006)
144
145 15 Apr 2006; John Mylchreest <johnm@gentoo.org>
146 +hardened-sources-2.6.16-r3.ebuild:
147 Removing silly localversion which I missed
148
149 *hardened-sources-2.6.14-r7 (14 Apr 2006)
150
151 14 Apr 2006; John Mylchreest <johnm@gentoo.org>
152 -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
153 Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
154
155 *hardened-sources-2.6.16-r2 (13 Apr 2006)
156
157 13 Apr 2006; John Mylchreest <johnm@gentoo.org>
158 -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
159 +hardened-sources-2.6.16-r2.ebuild:
160 Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
161 labels, dropping USERGROUP define fixes, since these were merged mainstream.
162
163 *hardened-sources-2.6.16-r1 (11 Apr 2006)
164
165 11 Apr 2006; John Mylchreest <johnm@gentoo.org>
166 +hardened-sources-2.6.16-r1.ebuild:
167 Bumping to include ppc build fix and 2.6.16.3
168
169 06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
170 hardened-sources-2.6.14-r6.ebuild:
171 Stable on x86; bug #127718
172
173 *hardened-sources-2.6.16 (31 Mar 2006)
174
175 31 Mar 2006; John Mylchreest <johnm@gentoo.org>
176 +hardened-sources-2.6.16.ebuild:
177 Bumping to new version of grsec, and kernel base. New squashfs. Based on
178 2.6.16.1
179
180 30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
181 hardened-sources-2.6.14-r6.ebuild:
182 Stable on amd64, bug 127718.
183
184 28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
185 Stable on ppc. Bug #127718
186
187 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
188 -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
189 -hardened-sources-2.6.14-r4.ebuild:
190 Cleanup.
191
192 *hardened-sources-2.6.14-r6 (15 Mar 2006)
193
194 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
195 +hardened-sources-2.6.14-r6.ebuild:
196 Fixes grsec policy recreation bug and adds a
197 >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
198
199 02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
200 - stable on x86
201
202 19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
203 hardened-sources-2.6.14-r5.ebuild:
204 Stable on ppc.
205
206 *hardened-sources-2.6.14-r5 (01 Feb 2006)
207
208 01 Feb 2006; John Mylchreest <johnm@gentoo.org>
209 +hardened-sources-2.6.14-r5.ebuild:
210 fixing every known exploit
211
212 *hardened-sources-2.4.32-r2 (26 Jan 2006)
213
214 26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
215 +hardened-sources-2.4.32-r2.ebuild:
216 - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
217
218 *hardened-sources-2.6.14-r4 (12 Jan 2006)
219
220 12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
221 - version bump for new genpatches which fix up a few sec holes
222
223 *hardened-sources-2.4.32-r1 (05 Jan 2006)
224
225 05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
226 - revision bump to add misc vital linux kernel security patches.
227
228 *hardened-sources-2.6.14-r3 (30 Dec 2005)
229
230 30 Dec 2005; John Mylchreest <johnm@gentoo.org>
231 -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
232 Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
233
234 28 Dec 2005; John Mylchreest <johnm@gentoo.org>
235 hardened-sources-2.6.14-r2.ebuild:
236 making x86 & amd64 stable following testing.
237
238 *hardened-sources-2.6.14-r2 (27 Dec 2005)
239
240 27 Dec 2005; John Mylchreest <johnm@gentoo.org>
241 -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
242 Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
243 network hooks.
244
245 06 Dec 2005; John Mylchreest <johnm@gentoo.org>
246 hardened-sources-2.6.14-r1.ebuild:
247 bumping to stable early for sec fix on x86 & amd64
248
249 *hardened-sources-2.6.14-r1 (05 Dec 2005)
250
251 05 Dec 2005; John Mylchreest <johnm@gentoo.org>
252 -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
253 bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
254
255 04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
256 - stable on x86 security bug #114227 CAN-2005-3257
257
258 *hardened-sources-2.4.32 (19 Nov 2005)
259
260 19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
261 +hardened-sources-2.4.32.ebuild:
262 Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
263 Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
264 have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
265 rsbac >> /etc/portage/package.use)
266
267 *hardened-sources-2.6.14 (14 Nov 2005)
268
269 14 Nov 2005; John Mylchreest <johnm@gentoo.org>
270 -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
271 Bumping 2.6 series to 2.6.14.2
272
273 *hardened-sources-2.6.13-r2 (20 Oct 2005)
274
275 20 Oct 2005; John Mylchreest <johnm@gentoo.org>
276 -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
277 +hardened-sources-2.6.13-r2.ebuild:
278 Fixes minor build error in ppc.
279
280 *hardened-sources-2.6.13-r1 (17 Oct 2005)
281
282 17 Oct 2005; John Mylchreest <johnm@gentoo.org>
283 +hardened-sources-2.6.13-r1.ebuild:
284 Updating grsec to latest snapshot. Fixes some minor issues. Updating to
285 2.6.13.4, fixes some major amd64 stability problems.
286
287 *hardened-sources-2.6.13 (16 Sep 2005)
288
289 16 Sep 2005; John Mylchreest <johnm@gentoo.org>
290 -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
291 2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
292 ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
293 users should test this thoroughly.
294
295 01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
296 - stable on x86
297
298 *hardened-sources-2.6.11-r15 (27 Jun 2005)
299
300 27 Jun 2005; John Mylchreest <johnm@gentoo.org>
301 +hardened-sources-2.6.11-r15.ebuild:
302 Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
303 grsec redefining curr_ip struct.
304
305 *hardened-sources-2.4.31 (20 Jun 2005)
306
307 20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
308 initial import of 2.4.31 tree
309
310 *hardened-sources-2.6.11-r14 (14 Jun 2005)
311
312 14 Jun 2005; John Mylchreest <johnm@gentoo.org>
313 -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
314 Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
315 naming scheme to abide by genpatches
316
317 *hardened-sources-2.6.11-r13 (18 May 2005)
318
319 18 May 2005; John Mylchreest <johnm@gentoo.org>
320 -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
321 Managed to mangle the Makefile patch from grsec, to miss out the grsec
322 target. sorry about that. Fixes bug #93022
323
324 *hardened-sources-2.6.11-r12 (17 May 2005)
325
326 17 May 2005; John Mylchreest <johnm@gentoo.org>
327 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
328 +hardened-sources-2.6.11-r12.ebuild:
329 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
330 merges in genpatches-base
331
332 *hardened-sources-2.6.11-r12 (17 May 2005)
333
334 17 May 2005; John Mylchreest <johnm@gentoo.org>
335 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
336 +hardened-sources-2.6.11-r12.ebuild:
337 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
338 merges in genpatches-base
339
340 29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
341 -files/2.4.27-cmdline-race.patch,
342 -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
343 -files/2.4.28-grsec-binfmt_a.out.patch,
344 -files/2.4.28-grsec-cmdline-race.patch,
345 -files/2.4.28-selinux-binfmt_a.out.patch,
346 -files/2.4.28-selinux-cmdline-race.patch,
347 -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
348 hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
349 - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
350 cleanup..
351
352 *hardened-sources-2.4.30-r1 (21 Apr 2005)
353
354 21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
355 - disable aout by default
356
357 *hardened-sources-2.4.30 (18 Apr 2005)
358
359 18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
360 - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
361 and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
362 use
363
364 *hardened-sources-2.4.29 (30 Mar 2005)
365
366 30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
367 +hardened-sources-2.4.29.ebuild:
368 New hardened-patches-2.4-29.0 patchball.
369 Removed SELinux support, upgraded GRSecurity to 2.1.4.
370
371 *hardened-sources-2.4.28-r5 (06 Mar 2005)
372
373 06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
374 +hardened-sources-2.4.28-r5.ebuild:
375 Added a fix for a PaX vulnerability.
376
377 26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
378 hardened-sources-2.4.28-r4.ebuild:
379 Stable on x86
380
381 23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
382 hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
383 hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
384 hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
385 - fixed/added RDEPEND= in all kernel-2 ebuilds
386
387 *hardened-sources-2.4.28-r4 (21 Jan 2005)
388
389 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
390 +hardened-sources-2.4.28-r4.ebuild:
391 Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
392 backport of neighbour hash updates.
393
394 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
395 hardened-sources-2.4.28-r3.ebuild:
396 Stable on x86
397
398 *hardened-sources-2.6.10-r3 (20 Jan 2005)
399
400 20 Jan 2005; Brandon Hale <tseng@gentoo.org>
401 +hardened-sources-2.6.10-r3.ebuild:
402 Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
403 in 2005.0
404
405 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
406 -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
407 hardened-sources-2.4.28-r2.ebuild:
408 Mark stable on x86
409
410 *hardened-sources-2.4.28-r3 (17 Jan 2005)
411
412 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
413 +hardened-sources-2.4.28-r3.ebuild:
414 Fix SMP page fault handler vuln, and update device-mapper and evms patches.
415
416 14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
417 hardened-sources-2.4.28.ebuild:
418 Mark stable on x86.
419
420 *hardened-sources-2.4.28-r2 (13 Jan 2005)
421
422 13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
423 +hardened-sources-2.4.28-r2.ebuild:
424 Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
425 Mazinger for grsecurity patches as well.
426
427 *hardened-sources-2.4.28-r1 (23 Dec 2004)
428
429 23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
430 Security bump. Thank tocharian for rolling a new patchset...
431
432 28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
433 +files/2.4.28-grsec-cmdline-race.patch,
434 +files/2.4.28-selinux-binfmt_a.out.patch,
435 +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
436 - Round up remaining security patches that appear to be missing in 2.4.28. -
437 PaX standalone updated to current. hgpv=28.1
438
439 *hardened-sources-2.4.28 (28 Nov 2004)
440
441 28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
442 security bump. Thank tocharian for rolling a new patchset
443
444 *hardened-sources-2.4.27-r3 (08 Sep 2004)
445
446 08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
447 +hardened-sources-2.4.27-r3.ebuild:
448 Applies the new 2.4-27.2 patchball which updates
449 GRSecurity to the 2.0.1 version.
450
451 *hardened-sources-2.4.27-r2 (31 Aug 2004)
452
453 31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
454 +hardened-sources-2.4.27-r2.ebuild:
455 Version bump.
456 This version uses the new 2.4-27.1 patchball which updates
457 both the SELinux PaX hooks patch and the SELinux headers.
458
459 *hardened-sources-2.4.27-r1 (09 Aug 2004)
460
461 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
462 +hardened-sources-2.4.27-r1.ebuild,
463 -hardened-sources-2.4.27.ebuild,
464 +files/2.4.27-cmdline-race.patch:
465 Version bump, fix for cmdline race. See bug #59905.
466
467 *hardened-sources-2.4.26-r6 (09 Aug 2004)
468
469 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
470 +hardened-sources-2.4.26-r6.ebuild,
471 -hardened-sources-2.4.26-r5.ebuild,
472 -hardened-sources-2.4.26-r4.ebuild,
473 +files/2.4.26-cmdline-race.patch:
474 Version bump, fix for cmdline race. See bug #59905.
475
476 *hardened-sources-2.4.27 (08 Aug 2004)
477
478 08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
479 +hardened-sources-2.4.27.ebuild,
480 +files/2.4.27-CAN-2004-0394.patch:
481 Ported the patchball to the 2.4.27 kernel version.
482
483 *hardened-sources-2.4.26-r5 (07 Aug 2004)
484
485 07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
486 +hardened-sources-2.4.26-r5.ebuild:
487 Updated to use the new hardened-patches-2.4-26.1 patchball.
488 It adds the following features:
489 - Squashfs
490 - Ebtables
491 - Netdev random (core+drivers)
492 - Watchdog Timer (WDT) fix.
493
494 *hardened-sources-2.4.26-r4 (04 Aug 2004)
495
496 04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
497 +hardened-sources-2.4.26-r4.ebuild,
498 +files/2.4.26-CAN-2004-0415.patch,
499 -hardened-sources-2.4.26-3:
500 Version bump, fix for CAN 0415, see bug #59378.
501
502 *hardened-sources-2.4.26-r3 (22 Jul 2004)
503
504 22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
505 +hardened-sources-2.4.26-r3.ebuild,
506 +files/2.4.26-CAN-2004-0497.patch,
507 -hardened-sources-2.4.26-r2.ebuild:
508 Version bump, fixed CAN 0497, see bug #56171.
509
510 *hardened-sources-2.4.26-r2 (29 Jun 2004)
511
512 29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
513 +hardened-sources-2.4.26-r2.ebuild,
514 +files/2.4.26-CAN-2004-0495.patch,
515 +files/2.4.26-CAN-2004-0535.patch,
516 -hardened-sources-2.4.26-r1.ebuild:
517 Fixes for both CAN 0495 and 0535, see bug #54976
518
519 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
520 hardened-sources-2.4.26-r1.ebuild:
521 QA - fix use invocation
522
523 *hardened-sources-2.4.26-r1 (22 June 2004)
524
525 22 June 2004; Andrea Luzzardi <scox@gentoo.org>
526 +hardened-sources-2.4.26-r1.ebuild,
527 +files/2.4.26-CAN-2004-0394.patch,
528 +files/2.4.26-signal-race.patch,
529 -hardened-sources-2.4.26.ebuild,
530 -hardened-sources-2.4.24-r3.ebuild:
531 Version bump for the CAN-2004-0394 issue and bug #53804
532 Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
533
534
535 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
536 hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
537 Masked hardened-sources-2.4.26.ebuild broken for ppc
538
539 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
540 hardened-sources-2.4.24-r3.ebuild:
541 Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
542
543 *hardened-sources-2.4.26 (29 May 2004)
544
545 29 May 2004; Andrea Luzzardi <scox@gentoo.org>
546 +hardened-sources-2.4.26.ebuild:
547 Updated hardened-sources for the 2.4.26 kernel
548 Removed broken components, updated almost everything.
549
550 *hardened-sources-2.4.24-r3 (17 Apr 2004)
551
552 17 Apr 2004; <plasmaroo@gentoo.org>
553 +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
554 +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
555 +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
556 +hardened-sources-2.4.24-r3.ebuild:
557 Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
558 vulnerabilities. Old revisions removed.
559
560 *hardened-sources-2.4.24-r2 (15 Apr 2004)
561
562 15 Apr 2004; <plasmaroo@gentoo.org>
563 +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
564 -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
565 Version bump for the CAN-2004-0109 issue; bug #47881.
566
567 12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
568 hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
569 Add eutils to inherit.
570
571 *hardened-sources-2.4.24-r1 (19 Feb 2004)
572
573 19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
574 files/hardened-sources-2.4.24.munmap.patch:
575 Added the patch for the mremap/munmap vulnerability. Bug #42024.
576
577 *hardened-sources-2.4.24 (06 Feb 2004)
578
579 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
580 hardened-sources-2.4.24.ebuild:
581 Version bump, updated most of the components.
582 This release includes the following:
583
584 - Hardened security
585 - Netfilter patch-o-matic 20031219
586 - FreeSWAN 2.04 & x509 1.4.8
587 - EVMS 2.2.2
588 - XFS 1.3.1
589 - cryptoloop jari
590 - grsecurity 2.0-rc4
591 - SELinux
592 - PaX 200402060000
593 - PaX Obscurity 200308302223
594 - Others...
595
596 Neither -ck nor systrace are included anymore.
597
598 *hardened-sources-2.4.22-r2 (05 Jan 2004)
599
600 05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
601 hardened-sources-2.4.22-r2.ebuild:
602 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
603
604 *hardened-sources-2.4.22-r1 (02 Dec 2003)
605
606 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
607 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
608
609 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
610 hardened-sources-2.4.22-r1.ebuild:
611 Version bump for the 'do_brk' vulnerability.
612
613 01 Dec 2003; Brian Jackson <iggy@gentoo.org>
614 hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
615 hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
616 hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
617 Fix the 'do_brk' vulnerability.
618
619 03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
620 hardened-sources-2.4.22.ebuild:
621 - Removed the src_install() portion for SELinux flask
622 components. These are no longer handled in the kernel
623 so this code was not necessary.
624
625 29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
626 New 2.4.22 based hardened-sources thanks to
627 Phil West <p.west@computer.org>.
628
629 These sources include:
630 - New SELinux API
631 - Updated CK-base
632 - Updated GRSec
633 - Systrace
634 - SuperFreeS/WAN 1.99.8
635 - Propolice kernel build support
636 - EVMS
637 - Other various security related patches
638
639 *hardened-sources-2.4.21 (14 Sep 2003)
640
641 14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
642 Updated hardened-sources based on the 2.4.21 Linux kernel.
643 This includes updates to most major components such as:
644 - ck-base-0306300059
645 - selinux-2.4-2003071106
646 - grsecurity-2.0-rc1
647 - Updated IPTables patch-o-matic
648 - Updated SuperFreeS/WAN
649
650 Thanks to Phil West <pwest@computer.org> for his work in getting this
651 updated patch set ready for the 2.4.21 based kernel.
652
653 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
654 Initial import of hardened-sources-2.4.20-r4. This revision
655 includes only a few changes, but one of these is an important
656 security fix. It is recommended all users of hardened-sources
657 upgrade to this release.
658
659 - ioperm bug fix
660 - fixed compilation failure when building without GRSec
661
662 SAL (Secure Auditing for Linux) is NOT included in this revision
663 due to time constraints, but is planned for inclusion in the near
664 future.
665
666 *hardened-sources-2.4.20-r2 (12 Jun 2003)
667
668 12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
669 hardened-sources-2.4.20-r3.ebuild:
670 Add Header...
671
672 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
673 hardened-sources-2.4.20-r3.ebuild:
674 Removed warnings from ebuild. This kernel should be safe to
675 use at this point.
676
677 *hardened-sources-2.4.20-r3 (08 Jun 2003)
678
679 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
680 hardened-sources-2.4.20-r3.ebuild:
681 New revision. Includes the following changes over -r2:
682
683 - ck7-base (O(1), preempt, low latency)
684 - Super FreeS/WAN 1.99.7rc2
685 - PaX for the LSM/SELinux branch
686 - GRSecurity 2.0-pre4 (role based access control)
687 - Systrace 1.3
688 - EXT3 fixes
689 - EVMS 2.0.1
690 - GCC 3.1+ compile optimizations
691 - ProPolice kernel build support
692 - Hashing table security fixes
693
694 *hardened-sources-2.4.20-r1 (09 Apr 2003)
695
696 23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
697 Initial import of hardened-sources-r2. This new
698 ebuild includes many new performance and security
699 related patches. As in -r1, it will patch in
700 LSM/SELinux if "selinux" is in USE, otherwise it
701 will patch in GRSecurity. The following patches
702 are included in this revision:
703
704 - O(1) Scheduler, Low Latency, and Preempt
705 (pulled from the base CK patch)
706 - ptrace exploit patch for the LSM kernel
707 (the GRSec patch already fixes this)
708 - LSM 2.4-2003040709
709 - SELinux 2.4-2003040709
710 - Systrace v1.2
711 - IPTables patch-o-matic base patches - 20030107
712 - CryptoAPI 2.4.20.1 w/ loop-jari patch
713 - Super FreeS/WAN 1.99.6.1
714 - GRSecurity 1.9.9g
715 - MPPE
716 - EXT3 data journal fix
717 - CIPE 1.5.4
718
719 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
720 hardened-sources-2.4.20-r1.ebuild, manifest:
721 Updated to install flask components correctly for selinux.
722
723 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
724 hardened-sources-2.4.20-r1.ebuild:
725 LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
726 is patched in instead. Ptrace patches for selinux have also been added. In
727 either case, systrace support will be patched in as well.
728
729 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
730 hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
731 Revision bump for new sources.
732
733 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
734 hardened-sources-2.4.20-r1.ebuild:
735 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
736
737 *hardened-sources-2.4.20 (30 Mar 2003)
738
739 30 Mar 2003; Joshua Brindle <method@gentoo.org>
740 hardened-sources-2.4.20.ebuild:
741 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20