/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.116 - (show annotations) (download)
Thu Nov 23 19:53:04 2006 UTC (7 years, 9 months ago) by phreak
Branch: MAIN
Changes since 1.115: +7 -1 lines
Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
(Portage version: 2.1.2_rc2-r1)

1 # ChangeLog for sys-kernel/hardened-sources
2 # Copyright 2000-2006 Gentoo Foundation; Distributed under the GPL v2
3 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.115 2006/11/11 14:40:16 phreak Exp $
4
5 *hardened-sources-2.6.18-r1 (23 Nov 2006)
6
7 23 Nov 2006; Christian Heim <phreak@gentoo.org>
8 +hardened-sources-2.6.18-r1.ebuild:
9 Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
10
11 *hardened-sources-2.6.18 (11 Nov 2006)
12
13 11 Nov 2006; Christian Heim <phreak@gentoo.org>
14 +hardened-sources-2.6.18.ebuild:
15 Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
16
17 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
18 - mark amd64 stable also. bug #151877
19
20 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
21 - mark 2.6.17-r1 stable
22
23 27 Aug 2006; Christian Heim <phreak@gentoo.org>
24 -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
25 Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
26
27 *hardened-sources-2.6.17-r1 (26 Aug 2006)
28
29 26 Aug 2006; Christian Heim <phreak@gentoo.org>
30 +hardened-sources-2.6.17-r1.ebuild:
31 Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
32 grsecurity patch.
33
34 *hardened-sources-2.6.17 (17 Aug 2006)
35
36 17 Aug 2006; Christian Heim <phreak@gentoo.org>
37 +hardened-sources-2.6.17.ebuild:
38 Bumping the hardened-sources-2.6 series to 2.6.17, using
39 genpatches-2.6.17-6.base.
40
41 07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
42 - stable on x86 and amd64
43
44 *hardened-sources-2.6.16-r11 (15 Jul 2006)
45
46 15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
47 -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
48 -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
49 -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
50 - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
51 crusty ebuilds
52
53 14 Jul 2006; John Mylchreest <johnm@gentoo.org>
54 hardened-sources-2.6.16-r10.ebuild:
55 marking stable on x86 and amd64
56
57 13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
58 - 2.4.32-r6 stable on x86. RSBAC state unknown
59
60 *hardened-sources-2.4.32-r7 (10 Jul 2006)
61
62 10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
63 +hardened-sources-2.4.32-r7.ebuild:
64 Bump PaX for RSBAC to test-17
65
66 *hardened-sources-2.6.16-r9 (03 Jul 2006)
67
68 03 Jul 2006; John Mylchreest <johnm@gentoo.org>
69 -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
70 hardened-sources-2.6.16 bump to latest -base.
71
72 *hardened-sources-2.4.32-r6 (30 Jun 2006)
73
74 30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
75 hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
76 - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
77 sysctl controlable resource logging
78
79 *hardened-sources-2.6.16-r7 (05 Jun 2006)
80
81 05 Jun 2006; John Mylchreest <johnm@gentoo.org>
82 -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
83 push new 2.6.16 release in preparation for stable
84
85 22 May 2006; <solar@gentoo.org> :
86 - redigest bug 134002
87
88 *hardened-sources-2.4.32-r5 (16 May 2006)
89
90 16 May 2006; Guillaume Destuynder <kang@gentoo.org>
91 +hardened-sources-2.4.32-r5.ebuild:
92 Fixes rsbac common patching (new patch in new -r5 patchset)
93
94 *hardened-sources-2.4.32-r4 (13 May 2006)
95
96 13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
97 +hardened-sources-2.4.32-r4.ebuild:
98 - security bumps
99
100 *hardened-sources-2.6.16-r6 (03 May 2006)
101
102 03 May 2006; John Mylchreest <johnm@gentoo.org>
103 +hardened-sources-2.6.16-r6.ebuild:
104 bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
105
106 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
107 hardened-sources-2.6.14-r8.ebuild:
108 fix x86_64 build problem, this will delay the digest issue again for a short
109 while but it will sort itself out
110
111 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
112 hardened-sources-2.6.14-r8.ebuild:
113 bump hardened patchset
114
115 27 Apr 2006; Alec Warner <antarus@gentoo.org>
116 files/digest-hardened-sources-2.4.32-r2,
117 files/digest-hardened-sources-2.4.32-r3,
118 files/digest-hardened-sources-2.6.14-r8, Manifest:
119 Fixing duff SHA256 digests: Bug # 131293
120
121 *hardened-sources-2.6.16-r5 (27 Apr 2006)
122
123 27 Apr 2006; John Mylchreest <johnm@gentoo.org>
124 -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
125 -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
126 stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
127 cleanup of old uneccessary sources
128
129 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
130 fix digest
131
132 *hardened-sources-2.6.14-r8 (20 Apr 2006)
133
134 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
135 +hardened-sources-2.6.14-r8.ebuild:
136 fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
137
138 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
139 Turning on gpg-signing again, and recomitting
140
141 *hardened-sources-2.6.16-r4 (20 Apr 2006)
142
143 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
144 -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
145 +hardened-sources-2.6.16-r4.ebuild:
146 Fix numerous security vulns
147
148 *hardened-sources-2.4.32-r3 (16 Apr 2006)
149
150 16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
151 -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
152 +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
153 - security bump for bug #112791. Removed old ebuilds
154
155 *hardened-sources-2.6.16-r3 (15 Apr 2006)
156
157 15 Apr 2006; John Mylchreest <johnm@gentoo.org>
158 +hardened-sources-2.6.16-r3.ebuild:
159 Removing silly localversion which I missed
160
161 *hardened-sources-2.6.14-r7 (14 Apr 2006)
162
163 14 Apr 2006; John Mylchreest <johnm@gentoo.org>
164 -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
165 Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
166
167 *hardened-sources-2.6.16-r2 (13 Apr 2006)
168
169 13 Apr 2006; John Mylchreest <johnm@gentoo.org>
170 -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
171 +hardened-sources-2.6.16-r2.ebuild:
172 Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
173 labels, dropping USERGROUP define fixes, since these were merged mainstream.
174
175 *hardened-sources-2.6.16-r1 (11 Apr 2006)
176
177 11 Apr 2006; John Mylchreest <johnm@gentoo.org>
178 +hardened-sources-2.6.16-r1.ebuild:
179 Bumping to include ppc build fix and 2.6.16.3
180
181 06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
182 hardened-sources-2.6.14-r6.ebuild:
183 Stable on x86; bug #127718
184
185 *hardened-sources-2.6.16 (31 Mar 2006)
186
187 31 Mar 2006; John Mylchreest <johnm@gentoo.org>
188 +hardened-sources-2.6.16.ebuild:
189 Bumping to new version of grsec, and kernel base. New squashfs. Based on
190 2.6.16.1
191
192 30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
193 hardened-sources-2.6.14-r6.ebuild:
194 Stable on amd64, bug 127718.
195
196 28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
197 Stable on ppc. Bug #127718
198
199 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
200 -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
201 -hardened-sources-2.6.14-r4.ebuild:
202 Cleanup.
203
204 *hardened-sources-2.6.14-r6 (15 Mar 2006)
205
206 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
207 +hardened-sources-2.6.14-r6.ebuild:
208 Fixes grsec policy recreation bug and adds a
209 >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
210
211 02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
212 - stable on x86
213
214 19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
215 hardened-sources-2.6.14-r5.ebuild:
216 Stable on ppc.
217
218 *hardened-sources-2.6.14-r5 (01 Feb 2006)
219
220 01 Feb 2006; John Mylchreest <johnm@gentoo.org>
221 +hardened-sources-2.6.14-r5.ebuild:
222 fixing every known exploit
223
224 *hardened-sources-2.4.32-r2 (26 Jan 2006)
225
226 26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
227 +hardened-sources-2.4.32-r2.ebuild:
228 - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
229
230 *hardened-sources-2.6.14-r4 (12 Jan 2006)
231
232 12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
233 - version bump for new genpatches which fix up a few sec holes
234
235 *hardened-sources-2.4.32-r1 (05 Jan 2006)
236
237 05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
238 - revision bump to add misc vital linux kernel security patches.
239
240 *hardened-sources-2.6.14-r3 (30 Dec 2005)
241
242 30 Dec 2005; John Mylchreest <johnm@gentoo.org>
243 -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
244 Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
245
246 28 Dec 2005; John Mylchreest <johnm@gentoo.org>
247 hardened-sources-2.6.14-r2.ebuild:
248 making x86 & amd64 stable following testing.
249
250 *hardened-sources-2.6.14-r2 (27 Dec 2005)
251
252 27 Dec 2005; John Mylchreest <johnm@gentoo.org>
253 -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
254 Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
255 network hooks.
256
257 06 Dec 2005; John Mylchreest <johnm@gentoo.org>
258 hardened-sources-2.6.14-r1.ebuild:
259 bumping to stable early for sec fix on x86 & amd64
260
261 *hardened-sources-2.6.14-r1 (05 Dec 2005)
262
263 05 Dec 2005; John Mylchreest <johnm@gentoo.org>
264 -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
265 bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
266
267 04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
268 - stable on x86 security bug #114227 CAN-2005-3257
269
270 *hardened-sources-2.4.32 (19 Nov 2005)
271
272 19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
273 +hardened-sources-2.4.32.ebuild:
274 Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
275 Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
276 have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
277 rsbac >> /etc/portage/package.use)
278
279 *hardened-sources-2.6.14 (14 Nov 2005)
280
281 14 Nov 2005; John Mylchreest <johnm@gentoo.org>
282 -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
283 Bumping 2.6 series to 2.6.14.2
284
285 *hardened-sources-2.6.13-r2 (20 Oct 2005)
286
287 20 Oct 2005; John Mylchreest <johnm@gentoo.org>
288 -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
289 +hardened-sources-2.6.13-r2.ebuild:
290 Fixes minor build error in ppc.
291
292 *hardened-sources-2.6.13-r1 (17 Oct 2005)
293
294 17 Oct 2005; John Mylchreest <johnm@gentoo.org>
295 +hardened-sources-2.6.13-r1.ebuild:
296 Updating grsec to latest snapshot. Fixes some minor issues. Updating to
297 2.6.13.4, fixes some major amd64 stability problems.
298
299 *hardened-sources-2.6.13 (16 Sep 2005)
300
301 16 Sep 2005; John Mylchreest <johnm@gentoo.org>
302 -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
303 2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
304 ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
305 users should test this thoroughly.
306
307 01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
308 - stable on x86
309
310 *hardened-sources-2.6.11-r15 (27 Jun 2005)
311
312 27 Jun 2005; John Mylchreest <johnm@gentoo.org>
313 +hardened-sources-2.6.11-r15.ebuild:
314 Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
315 grsec redefining curr_ip struct.
316
317 *hardened-sources-2.4.31 (20 Jun 2005)
318
319 20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
320 initial import of 2.4.31 tree
321
322 *hardened-sources-2.6.11-r14 (14 Jun 2005)
323
324 14 Jun 2005; John Mylchreest <johnm@gentoo.org>
325 -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
326 Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
327 naming scheme to abide by genpatches
328
329 *hardened-sources-2.6.11-r13 (18 May 2005)
330
331 18 May 2005; John Mylchreest <johnm@gentoo.org>
332 -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
333 Managed to mangle the Makefile patch from grsec, to miss out the grsec
334 target. sorry about that. Fixes bug #93022
335
336 *hardened-sources-2.6.11-r12 (17 May 2005)
337
338 17 May 2005; John Mylchreest <johnm@gentoo.org>
339 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
340 +hardened-sources-2.6.11-r12.ebuild:
341 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
342 merges in genpatches-base
343
344 *hardened-sources-2.6.11-r12 (17 May 2005)
345
346 17 May 2005; John Mylchreest <johnm@gentoo.org>
347 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
348 +hardened-sources-2.6.11-r12.ebuild:
349 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
350 merges in genpatches-base
351
352 29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
353 -files/2.4.27-cmdline-race.patch,
354 -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
355 -files/2.4.28-grsec-binfmt_a.out.patch,
356 -files/2.4.28-grsec-cmdline-race.patch,
357 -files/2.4.28-selinux-binfmt_a.out.patch,
358 -files/2.4.28-selinux-cmdline-race.patch,
359 -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
360 hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
361 - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
362 cleanup..
363
364 *hardened-sources-2.4.30-r1 (21 Apr 2005)
365
366 21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
367 - disable aout by default
368
369 *hardened-sources-2.4.30 (18 Apr 2005)
370
371 18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
372 - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
373 and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
374 use
375
376 *hardened-sources-2.4.29 (30 Mar 2005)
377
378 30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
379 +hardened-sources-2.4.29.ebuild:
380 New hardened-patches-2.4-29.0 patchball.
381 Removed SELinux support, upgraded GRSecurity to 2.1.4.
382
383 *hardened-sources-2.4.28-r5 (06 Mar 2005)
384
385 06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
386 +hardened-sources-2.4.28-r5.ebuild:
387 Added a fix for a PaX vulnerability.
388
389 26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
390 hardened-sources-2.4.28-r4.ebuild:
391 Stable on x86
392
393 23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
394 hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
395 hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
396 hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
397 - fixed/added RDEPEND= in all kernel-2 ebuilds
398
399 *hardened-sources-2.4.28-r4 (21 Jan 2005)
400
401 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
402 +hardened-sources-2.4.28-r4.ebuild:
403 Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
404 backport of neighbour hash updates.
405
406 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
407 hardened-sources-2.4.28-r3.ebuild:
408 Stable on x86
409
410 *hardened-sources-2.6.10-r3 (20 Jan 2005)
411
412 20 Jan 2005; Brandon Hale <tseng@gentoo.org>
413 +hardened-sources-2.6.10-r3.ebuild:
414 Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
415 in 2005.0
416
417 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
418 -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
419 hardened-sources-2.4.28-r2.ebuild:
420 Mark stable on x86
421
422 *hardened-sources-2.4.28-r3 (17 Jan 2005)
423
424 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
425 +hardened-sources-2.4.28-r3.ebuild:
426 Fix SMP page fault handler vuln, and update device-mapper and evms patches.
427
428 14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
429 hardened-sources-2.4.28.ebuild:
430 Mark stable on x86.
431
432 *hardened-sources-2.4.28-r2 (13 Jan 2005)
433
434 13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
435 +hardened-sources-2.4.28-r2.ebuild:
436 Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
437 Mazinger for grsecurity patches as well.
438
439 *hardened-sources-2.4.28-r1 (23 Dec 2004)
440
441 23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
442 Security bump. Thank tocharian for rolling a new patchset...
443
444 28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
445 +files/2.4.28-grsec-cmdline-race.patch,
446 +files/2.4.28-selinux-binfmt_a.out.patch,
447 +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
448 - Round up remaining security patches that appear to be missing in 2.4.28. -
449 PaX standalone updated to current. hgpv=28.1
450
451 *hardened-sources-2.4.28 (28 Nov 2004)
452
453 28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
454 security bump. Thank tocharian for rolling a new patchset
455
456 *hardened-sources-2.4.27-r3 (08 Sep 2004)
457
458 08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
459 +hardened-sources-2.4.27-r3.ebuild:
460 Applies the new 2.4-27.2 patchball which updates
461 GRSecurity to the 2.0.1 version.
462
463 *hardened-sources-2.4.27-r2 (31 Aug 2004)
464
465 31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
466 +hardened-sources-2.4.27-r2.ebuild:
467 Version bump.
468 This version uses the new 2.4-27.1 patchball which updates
469 both the SELinux PaX hooks patch and the SELinux headers.
470
471 *hardened-sources-2.4.27-r1 (09 Aug 2004)
472
473 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
474 +hardened-sources-2.4.27-r1.ebuild,
475 -hardened-sources-2.4.27.ebuild,
476 +files/2.4.27-cmdline-race.patch:
477 Version bump, fix for cmdline race. See bug #59905.
478
479 *hardened-sources-2.4.26-r6 (09 Aug 2004)
480
481 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
482 +hardened-sources-2.4.26-r6.ebuild,
483 -hardened-sources-2.4.26-r5.ebuild,
484 -hardened-sources-2.4.26-r4.ebuild,
485 +files/2.4.26-cmdline-race.patch:
486 Version bump, fix for cmdline race. See bug #59905.
487
488 *hardened-sources-2.4.27 (08 Aug 2004)
489
490 08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
491 +hardened-sources-2.4.27.ebuild,
492 +files/2.4.27-CAN-2004-0394.patch:
493 Ported the patchball to the 2.4.27 kernel version.
494
495 *hardened-sources-2.4.26-r5 (07 Aug 2004)
496
497 07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
498 +hardened-sources-2.4.26-r5.ebuild:
499 Updated to use the new hardened-patches-2.4-26.1 patchball.
500 It adds the following features:
501 - Squashfs
502 - Ebtables
503 - Netdev random (core+drivers)
504 - Watchdog Timer (WDT) fix.
505
506 *hardened-sources-2.4.26-r4 (04 Aug 2004)
507
508 04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
509 +hardened-sources-2.4.26-r4.ebuild,
510 +files/2.4.26-CAN-2004-0415.patch,
511 -hardened-sources-2.4.26-3:
512 Version bump, fix for CAN 0415, see bug #59378.
513
514 *hardened-sources-2.4.26-r3 (22 Jul 2004)
515
516 22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
517 +hardened-sources-2.4.26-r3.ebuild,
518 +files/2.4.26-CAN-2004-0497.patch,
519 -hardened-sources-2.4.26-r2.ebuild:
520 Version bump, fixed CAN 0497, see bug #56171.
521
522 *hardened-sources-2.4.26-r2 (29 Jun 2004)
523
524 29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
525 +hardened-sources-2.4.26-r2.ebuild,
526 +files/2.4.26-CAN-2004-0495.patch,
527 +files/2.4.26-CAN-2004-0535.patch,
528 -hardened-sources-2.4.26-r1.ebuild:
529 Fixes for both CAN 0495 and 0535, see bug #54976
530
531 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
532 hardened-sources-2.4.26-r1.ebuild:
533 QA - fix use invocation
534
535 *hardened-sources-2.4.26-r1 (22 June 2004)
536
537 22 June 2004; Andrea Luzzardi <scox@gentoo.org>
538 +hardened-sources-2.4.26-r1.ebuild,
539 +files/2.4.26-CAN-2004-0394.patch,
540 +files/2.4.26-signal-race.patch,
541 -hardened-sources-2.4.26.ebuild,
542 -hardened-sources-2.4.24-r3.ebuild:
543 Version bump for the CAN-2004-0394 issue and bug #53804
544 Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
545
546
547 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
548 hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
549 Masked hardened-sources-2.4.26.ebuild broken for ppc
550
551 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
552 hardened-sources-2.4.24-r3.ebuild:
553 Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
554
555 *hardened-sources-2.4.26 (29 May 2004)
556
557 29 May 2004; Andrea Luzzardi <scox@gentoo.org>
558 +hardened-sources-2.4.26.ebuild:
559 Updated hardened-sources for the 2.4.26 kernel
560 Removed broken components, updated almost everything.
561
562 *hardened-sources-2.4.24-r3 (17 Apr 2004)
563
564 17 Apr 2004; <plasmaroo@gentoo.org>
565 +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
566 +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
567 +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
568 +hardened-sources-2.4.24-r3.ebuild:
569 Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
570 vulnerabilities. Old revisions removed.
571
572 *hardened-sources-2.4.24-r2 (15 Apr 2004)
573
574 15 Apr 2004; <plasmaroo@gentoo.org>
575 +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
576 -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
577 Version bump for the CAN-2004-0109 issue; bug #47881.
578
579 12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
580 hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
581 Add eutils to inherit.
582
583 *hardened-sources-2.4.24-r1 (19 Feb 2004)
584
585 19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
586 files/hardened-sources-2.4.24.munmap.patch:
587 Added the patch for the mremap/munmap vulnerability. Bug #42024.
588
589 *hardened-sources-2.4.24 (06 Feb 2004)
590
591 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
592 hardened-sources-2.4.24.ebuild:
593 Version bump, updated most of the components.
594 This release includes the following:
595
596 - Hardened security
597 - Netfilter patch-o-matic 20031219
598 - FreeSWAN 2.04 & x509 1.4.8
599 - EVMS 2.2.2
600 - XFS 1.3.1
601 - cryptoloop jari
602 - grsecurity 2.0-rc4
603 - SELinux
604 - PaX 200402060000
605 - PaX Obscurity 200308302223
606 - Others...
607
608 Neither -ck nor systrace are included anymore.
609
610 *hardened-sources-2.4.22-r2 (05 Jan 2004)
611
612 05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
613 hardened-sources-2.4.22-r2.ebuild:
614 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
615
616 *hardened-sources-2.4.22-r1 (02 Dec 2003)
617
618 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
619 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
620
621 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
622 hardened-sources-2.4.22-r1.ebuild:
623 Version bump for the 'do_brk' vulnerability.
624
625 01 Dec 2003; Brian Jackson <iggy@gentoo.org>
626 hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
627 hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
628 hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
629 Fix the 'do_brk' vulnerability.
630
631 03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
632 hardened-sources-2.4.22.ebuild:
633 - Removed the src_install() portion for SELinux flask
634 components. These are no longer handled in the kernel
635 so this code was not necessary.
636
637 29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
638 New 2.4.22 based hardened-sources thanks to
639 Phil West <p.west@computer.org>.
640
641 These sources include:
642 - New SELinux API
643 - Updated CK-base
644 - Updated GRSec
645 - Systrace
646 - SuperFreeS/WAN 1.99.8
647 - Propolice kernel build support
648 - EVMS
649 - Other various security related patches
650
651 *hardened-sources-2.4.21 (14 Sep 2003)
652
653 14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
654 Updated hardened-sources based on the 2.4.21 Linux kernel.
655 This includes updates to most major components such as:
656 - ck-base-0306300059
657 - selinux-2.4-2003071106
658 - grsecurity-2.0-rc1
659 - Updated IPTables patch-o-matic
660 - Updated SuperFreeS/WAN
661
662 Thanks to Phil West <pwest@computer.org> for his work in getting this
663 updated patch set ready for the 2.4.21 based kernel.
664
665 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
666 Initial import of hardened-sources-2.4.20-r4. This revision
667 includes only a few changes, but one of these is an important
668 security fix. It is recommended all users of hardened-sources
669 upgrade to this release.
670
671 - ioperm bug fix
672 - fixed compilation failure when building without GRSec
673
674 SAL (Secure Auditing for Linux) is NOT included in this revision
675 due to time constraints, but is planned for inclusion in the near
676 future.
677
678 *hardened-sources-2.4.20-r2 (12 Jun 2003)
679
680 12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
681 hardened-sources-2.4.20-r3.ebuild:
682 Add Header...
683
684 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
685 hardened-sources-2.4.20-r3.ebuild:
686 Removed warnings from ebuild. This kernel should be safe to
687 use at this point.
688
689 *hardened-sources-2.4.20-r3 (08 Jun 2003)
690
691 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
692 hardened-sources-2.4.20-r3.ebuild:
693 New revision. Includes the following changes over -r2:
694
695 - ck7-base (O(1), preempt, low latency)
696 - Super FreeS/WAN 1.99.7rc2
697 - PaX for the LSM/SELinux branch
698 - GRSecurity 2.0-pre4 (role based access control)
699 - Systrace 1.3
700 - EXT3 fixes
701 - EVMS 2.0.1
702 - GCC 3.1+ compile optimizations
703 - ProPolice kernel build support
704 - Hashing table security fixes
705
706 *hardened-sources-2.4.20-r1 (09 Apr 2003)
707
708 23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
709 Initial import of hardened-sources-r2. This new
710 ebuild includes many new performance and security
711 related patches. As in -r1, it will patch in
712 LSM/SELinux if "selinux" is in USE, otherwise it
713 will patch in GRSecurity. The following patches
714 are included in this revision:
715
716 - O(1) Scheduler, Low Latency, and Preempt
717 (pulled from the base CK patch)
718 - ptrace exploit patch for the LSM kernel
719 (the GRSec patch already fixes this)
720 - LSM 2.4-2003040709
721 - SELinux 2.4-2003040709
722 - Systrace v1.2
723 - IPTables patch-o-matic base patches - 20030107
724 - CryptoAPI 2.4.20.1 w/ loop-jari patch
725 - Super FreeS/WAN 1.99.6.1
726 - GRSecurity 1.9.9g
727 - MPPE
728 - EXT3 data journal fix
729 - CIPE 1.5.4
730
731 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
732 hardened-sources-2.4.20-r1.ebuild, manifest:
733 Updated to install flask components correctly for selinux.
734
735 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
736 hardened-sources-2.4.20-r1.ebuild:
737 LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
738 is patched in instead. Ptrace patches for selinux have also been added. In
739 either case, systrace support will be patched in as well.
740
741 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
742 hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
743 Revision bump for new sources.
744
745 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
746 hardened-sources-2.4.20-r1.ebuild:
747 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
748
749 *hardened-sources-2.4.20 (30 Mar 2003)
750
751 30 Mar 2003; Joshua Brindle <method@gentoo.org>
752 hardened-sources-2.4.20.ebuild:
753 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20