/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.128 - (show annotations) (download)
Wed Dec 27 19:16:53 2006 UTC (7 years, 9 months ago) by phreak
Branch: MAIN
Changes since 1.127: +7 -1 lines
Revision bump for bug #157186.
(Portage version: 2.1.2_rc4-r1)

1 # ChangeLog for sys-kernel/hardened-sources
2 # Copyright 2000-2006 Gentoo Foundation; Distributed under the GPL v2
3 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.127 2006/12/23 19:08:24 phreak Exp $
4
5 *hardened-sources-2.6.18-r4 (27 Dec 2006)
6
7 27 Dec 2006; Christian Heim <phreak@gentoo.org>
8 -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
9 Revision bump for bug #157186.
10
11 *hardened-sources-2.6.19-r2 (23 Dec 2006)
12
13 23 Dec 2006; Christian Heim <phreak@gentoo.org>
14 -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
15 Revision bump to pull in genpatches-2.6.19-3 for #157186.
16
17 17 Dec 2006; Christian Heim <phreak@gentoo.org>
18 hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
19 hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
20 hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
21 hardened-sources-2.6.19-r1.ebuild:
22 Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
23 adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
24
25 *hardened-sources-2.4.33.4 (17 Dec 2006)
26
27 17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
28 +hardened-sources-2.4.33.4.ebuild:
29 new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
30 and quilting
31
32 *hardened-sources-2.6.19-r1 (14 Dec 2006)
33
34 14 Dec 2006; Christian Heim <phreak@gentoo.org>
35 -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
36 Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
37 for reporting).
38
39 *hardened-sources-2.6.19 (13 Dec 2006)
40
41 13 Dec 2006; Christian Heim <phreak@gentoo.org>
42 +hardened-sources-2.6.19.ebuild:
43 And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
44 Brad for providing that prompt update.
45
46 *hardened-sources-2.6.18-r3 (13 Dec 2006)
47
48 13 Dec 2006; Christian Heim <phreak@gentoo.org>
49 -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
50 +hardened-sources-2.6.18-r3.ebuild:
51 Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
52 S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
53
54 09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
55 Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
56
57 08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
58 Stable on ppc wrt bug 157356
59
60 07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
61 hardened-sources-2.6.18.ebuild:
62 stable x86, bug #157356
63
64 *hardened-sources-2.6.18-r2 (06 Dec 2006)
65
66 06 Dec 2006; Christian Heim <phreak@gentoo.org>
67 +hardened-sources-2.6.18-r2.ebuild:
68 Revision bump, including 2.6.18.5 (via genpatches) and
69 4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
70 Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
71 redesign.
72
73 06 Dec 2006; Christian Heim <phreak@gentoo.org>
74 hardened-sources-2.6.18.ebuild:
75 Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
76 of Mike Doty).
77
78 *hardened-sources-2.6.18-r1 (23 Nov 2006)
79
80 23 Nov 2006; Christian Heim <phreak@gentoo.org>
81 +hardened-sources-2.6.18-r1.ebuild:
82 Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
83
84 *hardened-sources-2.6.18 (11 Nov 2006)
85
86 11 Nov 2006; Christian Heim <phreak@gentoo.org>
87 +hardened-sources-2.6.18.ebuild:
88 Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
89
90 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
91 - mark amd64 stable also. bug #151877
92
93 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
94 - mark 2.6.17-r1 stable
95
96 27 Aug 2006; Christian Heim <phreak@gentoo.org>
97 -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
98 Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
99
100 *hardened-sources-2.6.17-r1 (26 Aug 2006)
101
102 26 Aug 2006; Christian Heim <phreak@gentoo.org>
103 +hardened-sources-2.6.17-r1.ebuild:
104 Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
105 grsecurity patch.
106
107 *hardened-sources-2.6.17 (17 Aug 2006)
108
109 17 Aug 2006; Christian Heim <phreak@gentoo.org>
110 +hardened-sources-2.6.17.ebuild:
111 Bumping the hardened-sources-2.6 series to 2.6.17, using
112 genpatches-2.6.17-6.base.
113
114 07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
115 - stable on x86 and amd64
116
117 *hardened-sources-2.6.16-r11 (15 Jul 2006)
118
119 15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
120 -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
121 -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
122 -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
123 - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
124 crusty ebuilds
125
126 14 Jul 2006; John Mylchreest <johnm@gentoo.org>
127 hardened-sources-2.6.16-r10.ebuild:
128 marking stable on x86 and amd64
129
130 13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
131 - 2.4.32-r6 stable on x86. RSBAC state unknown
132
133 *hardened-sources-2.4.32-r7 (10 Jul 2006)
134
135 10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
136 +hardened-sources-2.4.32-r7.ebuild:
137 Bump PaX for RSBAC to test-17
138
139 *hardened-sources-2.6.16-r9 (03 Jul 2006)
140
141 03 Jul 2006; John Mylchreest <johnm@gentoo.org>
142 -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
143 hardened-sources-2.6.16 bump to latest -base.
144
145 *hardened-sources-2.4.32-r6 (30 Jun 2006)
146
147 30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
148 hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
149 - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
150 sysctl controlable resource logging
151
152 *hardened-sources-2.6.16-r7 (05 Jun 2006)
153
154 05 Jun 2006; John Mylchreest <johnm@gentoo.org>
155 -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
156 push new 2.6.16 release in preparation for stable
157
158 22 May 2006; <solar@gentoo.org> :
159 - redigest bug 134002
160
161 *hardened-sources-2.4.32-r5 (16 May 2006)
162
163 16 May 2006; Guillaume Destuynder <kang@gentoo.org>
164 +hardened-sources-2.4.32-r5.ebuild:
165 Fixes rsbac common patching (new patch in new -r5 patchset)
166
167 *hardened-sources-2.4.32-r4 (13 May 2006)
168
169 13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
170 +hardened-sources-2.4.32-r4.ebuild:
171 - security bumps
172
173 *hardened-sources-2.6.16-r6 (03 May 2006)
174
175 03 May 2006; John Mylchreest <johnm@gentoo.org>
176 +hardened-sources-2.6.16-r6.ebuild:
177 bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
178
179 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
180 hardened-sources-2.6.14-r8.ebuild:
181 fix x86_64 build problem, this will delay the digest issue again for a short
182 while but it will sort itself out
183
184 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
185 hardened-sources-2.6.14-r8.ebuild:
186 bump hardened patchset
187
188 27 Apr 2006; Alec Warner <antarus@gentoo.org>
189 files/digest-hardened-sources-2.4.32-r2,
190 files/digest-hardened-sources-2.4.32-r3,
191 files/digest-hardened-sources-2.6.14-r8, Manifest:
192 Fixing duff SHA256 digests: Bug # 131293
193
194 *hardened-sources-2.6.16-r5 (27 Apr 2006)
195
196 27 Apr 2006; John Mylchreest <johnm@gentoo.org>
197 -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
198 -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
199 stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
200 cleanup of old uneccessary sources
201
202 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
203 fix digest
204
205 *hardened-sources-2.6.14-r8 (20 Apr 2006)
206
207 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
208 +hardened-sources-2.6.14-r8.ebuild:
209 fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
210
211 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
212 Turning on gpg-signing again, and recomitting
213
214 *hardened-sources-2.6.16-r4 (20 Apr 2006)
215
216 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
217 -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
218 +hardened-sources-2.6.16-r4.ebuild:
219 Fix numerous security vulns
220
221 *hardened-sources-2.4.32-r3 (16 Apr 2006)
222
223 16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
224 -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
225 +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
226 - security bump for bug #112791. Removed old ebuilds
227
228 *hardened-sources-2.6.16-r3 (15 Apr 2006)
229
230 15 Apr 2006; John Mylchreest <johnm@gentoo.org>
231 +hardened-sources-2.6.16-r3.ebuild:
232 Removing silly localversion which I missed
233
234 *hardened-sources-2.6.14-r7 (14 Apr 2006)
235
236 14 Apr 2006; John Mylchreest <johnm@gentoo.org>
237 -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
238 Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
239
240 *hardened-sources-2.6.16-r2 (13 Apr 2006)
241
242 13 Apr 2006; John Mylchreest <johnm@gentoo.org>
243 -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
244 +hardened-sources-2.6.16-r2.ebuild:
245 Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
246 labels, dropping USERGROUP define fixes, since these were merged mainstream.
247
248 *hardened-sources-2.6.16-r1 (11 Apr 2006)
249
250 11 Apr 2006; John Mylchreest <johnm@gentoo.org>
251 +hardened-sources-2.6.16-r1.ebuild:
252 Bumping to include ppc build fix and 2.6.16.3
253
254 06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
255 hardened-sources-2.6.14-r6.ebuild:
256 Stable on x86; bug #127718
257
258 *hardened-sources-2.6.16 (31 Mar 2006)
259
260 31 Mar 2006; John Mylchreest <johnm@gentoo.org>
261 +hardened-sources-2.6.16.ebuild:
262 Bumping to new version of grsec, and kernel base. New squashfs. Based on
263 2.6.16.1
264
265 30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
266 hardened-sources-2.6.14-r6.ebuild:
267 Stable on amd64, bug 127718.
268
269 28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
270 Stable on ppc. Bug #127718
271
272 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
273 -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
274 -hardened-sources-2.6.14-r4.ebuild:
275 Cleanup.
276
277 *hardened-sources-2.6.14-r6 (15 Mar 2006)
278
279 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
280 +hardened-sources-2.6.14-r6.ebuild:
281 Fixes grsec policy recreation bug and adds a
282 >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
283
284 02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
285 - stable on x86
286
287 19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
288 hardened-sources-2.6.14-r5.ebuild:
289 Stable on ppc.
290
291 *hardened-sources-2.6.14-r5 (01 Feb 2006)
292
293 01 Feb 2006; John Mylchreest <johnm@gentoo.org>
294 +hardened-sources-2.6.14-r5.ebuild:
295 fixing every known exploit
296
297 *hardened-sources-2.4.32-r2 (26 Jan 2006)
298
299 26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
300 +hardened-sources-2.4.32-r2.ebuild:
301 - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
302
303 *hardened-sources-2.6.14-r4 (12 Jan 2006)
304
305 12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
306 - version bump for new genpatches which fix up a few sec holes
307
308 *hardened-sources-2.4.32-r1 (05 Jan 2006)
309
310 05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
311 - revision bump to add misc vital linux kernel security patches.
312
313 *hardened-sources-2.6.14-r3 (30 Dec 2005)
314
315 30 Dec 2005; John Mylchreest <johnm@gentoo.org>
316 -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
317 Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
318
319 28 Dec 2005; John Mylchreest <johnm@gentoo.org>
320 hardened-sources-2.6.14-r2.ebuild:
321 making x86 & amd64 stable following testing.
322
323 *hardened-sources-2.6.14-r2 (27 Dec 2005)
324
325 27 Dec 2005; John Mylchreest <johnm@gentoo.org>
326 -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
327 Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
328 network hooks.
329
330 06 Dec 2005; John Mylchreest <johnm@gentoo.org>
331 hardened-sources-2.6.14-r1.ebuild:
332 bumping to stable early for sec fix on x86 & amd64
333
334 *hardened-sources-2.6.14-r1 (05 Dec 2005)
335
336 05 Dec 2005; John Mylchreest <johnm@gentoo.org>
337 -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
338 bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
339
340 04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
341 - stable on x86 security bug #114227 CAN-2005-3257
342
343 *hardened-sources-2.4.32 (19 Nov 2005)
344
345 19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
346 +hardened-sources-2.4.32.ebuild:
347 Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
348 Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
349 have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
350 rsbac >> /etc/portage/package.use)
351
352 *hardened-sources-2.6.14 (14 Nov 2005)
353
354 14 Nov 2005; John Mylchreest <johnm@gentoo.org>
355 -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
356 Bumping 2.6 series to 2.6.14.2
357
358 *hardened-sources-2.6.13-r2 (20 Oct 2005)
359
360 20 Oct 2005; John Mylchreest <johnm@gentoo.org>
361 -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
362 +hardened-sources-2.6.13-r2.ebuild:
363 Fixes minor build error in ppc.
364
365 *hardened-sources-2.6.13-r1 (17 Oct 2005)
366
367 17 Oct 2005; John Mylchreest <johnm@gentoo.org>
368 +hardened-sources-2.6.13-r1.ebuild:
369 Updating grsec to latest snapshot. Fixes some minor issues. Updating to
370 2.6.13.4, fixes some major amd64 stability problems.
371
372 *hardened-sources-2.6.13 (16 Sep 2005)
373
374 16 Sep 2005; John Mylchreest <johnm@gentoo.org>
375 -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
376 2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
377 ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
378 users should test this thoroughly.
379
380 01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
381 - stable on x86
382
383 *hardened-sources-2.6.11-r15 (27 Jun 2005)
384
385 27 Jun 2005; John Mylchreest <johnm@gentoo.org>
386 +hardened-sources-2.6.11-r15.ebuild:
387 Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
388 grsec redefining curr_ip struct.
389
390 *hardened-sources-2.4.31 (20 Jun 2005)
391
392 20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
393 initial import of 2.4.31 tree
394
395 *hardened-sources-2.6.11-r14 (14 Jun 2005)
396
397 14 Jun 2005; John Mylchreest <johnm@gentoo.org>
398 -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
399 Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
400 naming scheme to abide by genpatches
401
402 *hardened-sources-2.6.11-r13 (18 May 2005)
403
404 18 May 2005; John Mylchreest <johnm@gentoo.org>
405 -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
406 Managed to mangle the Makefile patch from grsec, to miss out the grsec
407 target. sorry about that. Fixes bug #93022
408
409 *hardened-sources-2.6.11-r12 (17 May 2005)
410
411 17 May 2005; John Mylchreest <johnm@gentoo.org>
412 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
413 +hardened-sources-2.6.11-r12.ebuild:
414 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
415 merges in genpatches-base
416
417 *hardened-sources-2.6.11-r12 (17 May 2005)
418
419 17 May 2005; John Mylchreest <johnm@gentoo.org>
420 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
421 +hardened-sources-2.6.11-r12.ebuild:
422 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
423 merges in genpatches-base
424
425 29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
426 -files/2.4.27-cmdline-race.patch,
427 -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
428 -files/2.4.28-grsec-binfmt_a.out.patch,
429 -files/2.4.28-grsec-cmdline-race.patch,
430 -files/2.4.28-selinux-binfmt_a.out.patch,
431 -files/2.4.28-selinux-cmdline-race.patch,
432 -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
433 hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
434 - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
435 cleanup..
436
437 *hardened-sources-2.4.30-r1 (21 Apr 2005)
438
439 21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
440 - disable aout by default
441
442 *hardened-sources-2.4.30 (18 Apr 2005)
443
444 18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
445 - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
446 and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
447 use
448
449 *hardened-sources-2.4.29 (30 Mar 2005)
450
451 30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
452 +hardened-sources-2.4.29.ebuild:
453 New hardened-patches-2.4-29.0 patchball.
454 Removed SELinux support, upgraded GRSecurity to 2.1.4.
455
456 *hardened-sources-2.4.28-r5 (06 Mar 2005)
457
458 06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
459 +hardened-sources-2.4.28-r5.ebuild:
460 Added a fix for a PaX vulnerability.
461
462 26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
463 hardened-sources-2.4.28-r4.ebuild:
464 Stable on x86
465
466 23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
467 hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
468 hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
469 hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
470 - fixed/added RDEPEND= in all kernel-2 ebuilds
471
472 *hardened-sources-2.4.28-r4 (21 Jan 2005)
473
474 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
475 +hardened-sources-2.4.28-r4.ebuild:
476 Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
477 backport of neighbour hash updates.
478
479 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
480 hardened-sources-2.4.28-r3.ebuild:
481 Stable on x86
482
483 *hardened-sources-2.6.10-r3 (20 Jan 2005)
484
485 20 Jan 2005; Brandon Hale <tseng@gentoo.org>
486 +hardened-sources-2.6.10-r3.ebuild:
487 Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
488 in 2005.0
489
490 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
491 -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
492 hardened-sources-2.4.28-r2.ebuild:
493 Mark stable on x86
494
495 *hardened-sources-2.4.28-r3 (17 Jan 2005)
496
497 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
498 +hardened-sources-2.4.28-r3.ebuild:
499 Fix SMP page fault handler vuln, and update device-mapper and evms patches.
500
501 14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
502 hardened-sources-2.4.28.ebuild:
503 Mark stable on x86.
504
505 *hardened-sources-2.4.28-r2 (13 Jan 2005)
506
507 13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
508 +hardened-sources-2.4.28-r2.ebuild:
509 Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
510 Mazinger for grsecurity patches as well.
511
512 *hardened-sources-2.4.28-r1 (23 Dec 2004)
513
514 23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
515 Security bump. Thank tocharian for rolling a new patchset...
516
517 28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
518 +files/2.4.28-grsec-cmdline-race.patch,
519 +files/2.4.28-selinux-binfmt_a.out.patch,
520 +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
521 - Round up remaining security patches that appear to be missing in 2.4.28. -
522 PaX standalone updated to current. hgpv=28.1
523
524 *hardened-sources-2.4.28 (28 Nov 2004)
525
526 28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
527 security bump. Thank tocharian for rolling a new patchset
528
529 *hardened-sources-2.4.27-r3 (08 Sep 2004)
530
531 08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
532 +hardened-sources-2.4.27-r3.ebuild:
533 Applies the new 2.4-27.2 patchball which updates
534 GRSecurity to the 2.0.1 version.
535
536 *hardened-sources-2.4.27-r2 (31 Aug 2004)
537
538 31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
539 +hardened-sources-2.4.27-r2.ebuild:
540 Version bump.
541 This version uses the new 2.4-27.1 patchball which updates
542 both the SELinux PaX hooks patch and the SELinux headers.
543
544 *hardened-sources-2.4.27-r1 (09 Aug 2004)
545
546 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
547 +hardened-sources-2.4.27-r1.ebuild,
548 -hardened-sources-2.4.27.ebuild,
549 +files/2.4.27-cmdline-race.patch:
550 Version bump, fix for cmdline race. See bug #59905.
551
552 *hardened-sources-2.4.26-r6 (09 Aug 2004)
553
554 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
555 +hardened-sources-2.4.26-r6.ebuild,
556 -hardened-sources-2.4.26-r5.ebuild,
557 -hardened-sources-2.4.26-r4.ebuild,
558 +files/2.4.26-cmdline-race.patch:
559 Version bump, fix for cmdline race. See bug #59905.
560
561 *hardened-sources-2.4.27 (08 Aug 2004)
562
563 08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
564 +hardened-sources-2.4.27.ebuild,
565 +files/2.4.27-CAN-2004-0394.patch:
566 Ported the patchball to the 2.4.27 kernel version.
567
568 *hardened-sources-2.4.26-r5 (07 Aug 2004)
569
570 07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
571 +hardened-sources-2.4.26-r5.ebuild:
572 Updated to use the new hardened-patches-2.4-26.1 patchball.
573 It adds the following features:
574 - Squashfs
575 - Ebtables
576 - Netdev random (core+drivers)
577 - Watchdog Timer (WDT) fix.
578
579 *hardened-sources-2.4.26-r4 (04 Aug 2004)
580
581 04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
582 +hardened-sources-2.4.26-r4.ebuild,
583 +files/2.4.26-CAN-2004-0415.patch,
584 -hardened-sources-2.4.26-3:
585 Version bump, fix for CAN 0415, see bug #59378.
586
587 *hardened-sources-2.4.26-r3 (22 Jul 2004)
588
589 22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
590 +hardened-sources-2.4.26-r3.ebuild,
591 +files/2.4.26-CAN-2004-0497.patch,
592 -hardened-sources-2.4.26-r2.ebuild:
593 Version bump, fixed CAN 0497, see bug #56171.
594
595 *hardened-sources-2.4.26-r2 (29 Jun 2004)
596
597 29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
598 +hardened-sources-2.4.26-r2.ebuild,
599 +files/2.4.26-CAN-2004-0495.patch,
600 +files/2.4.26-CAN-2004-0535.patch,
601 -hardened-sources-2.4.26-r1.ebuild:
602 Fixes for both CAN 0495 and 0535, see bug #54976
603
604 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
605 hardened-sources-2.4.26-r1.ebuild:
606 QA - fix use invocation
607
608 *hardened-sources-2.4.26-r1 (22 June 2004)
609
610 22 June 2004; Andrea Luzzardi <scox@gentoo.org>
611 +hardened-sources-2.4.26-r1.ebuild,
612 +files/2.4.26-CAN-2004-0394.patch,
613 +files/2.4.26-signal-race.patch,
614 -hardened-sources-2.4.26.ebuild,
615 -hardened-sources-2.4.24-r3.ebuild:
616 Version bump for the CAN-2004-0394 issue and bug #53804
617 Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
618
619
620 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
621 hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
622 Masked hardened-sources-2.4.26.ebuild broken for ppc
623
624 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
625 hardened-sources-2.4.24-r3.ebuild:
626 Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
627
628 *hardened-sources-2.4.26 (29 May 2004)
629
630 29 May 2004; Andrea Luzzardi <scox@gentoo.org>
631 +hardened-sources-2.4.26.ebuild:
632 Updated hardened-sources for the 2.4.26 kernel
633 Removed broken components, updated almost everything.
634
635 *hardened-sources-2.4.24-r3 (17 Apr 2004)
636
637 17 Apr 2004; <plasmaroo@gentoo.org>
638 +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
639 +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
640 +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
641 +hardened-sources-2.4.24-r3.ebuild:
642 Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
643 vulnerabilities. Old revisions removed.
644
645 *hardened-sources-2.4.24-r2 (15 Apr 2004)
646
647 15 Apr 2004; <plasmaroo@gentoo.org>
648 +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
649 -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
650 Version bump for the CAN-2004-0109 issue; bug #47881.
651
652 12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
653 hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
654 Add eutils to inherit.
655
656 *hardened-sources-2.4.24-r1 (19 Feb 2004)
657
658 19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
659 files/hardened-sources-2.4.24.munmap.patch:
660 Added the patch for the mremap/munmap vulnerability. Bug #42024.
661
662 *hardened-sources-2.4.24 (06 Feb 2004)
663
664 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
665 hardened-sources-2.4.24.ebuild:
666 Version bump, updated most of the components.
667 This release includes the following:
668
669 - Hardened security
670 - Netfilter patch-o-matic 20031219
671 - FreeSWAN 2.04 & x509 1.4.8
672 - EVMS 2.2.2
673 - XFS 1.3.1
674 - cryptoloop jari
675 - grsecurity 2.0-rc4
676 - SELinux
677 - PaX 200402060000
678 - PaX Obscurity 200308302223
679 - Others...
680
681 Neither -ck nor systrace are included anymore.
682
683 *hardened-sources-2.4.22-r2 (05 Jan 2004)
684
685 05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
686 hardened-sources-2.4.22-r2.ebuild:
687 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
688
689 *hardened-sources-2.4.22-r1 (02 Dec 2003)
690
691 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
692 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
693
694 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
695 hardened-sources-2.4.22-r1.ebuild:
696 Version bump for the 'do_brk' vulnerability.
697
698 01 Dec 2003; Brian Jackson <iggy@gentoo.org>
699 hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
700 hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
701 hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
702 Fix the 'do_brk' vulnerability.
703
704 03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
705 hardened-sources-2.4.22.ebuild:
706 - Removed the src_install() portion for SELinux flask
707 components. These are no longer handled in the kernel
708 so this code was not necessary.
709
710 29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
711 New 2.4.22 based hardened-sources thanks to
712 Phil West <p.west@computer.org>.
713
714 These sources include:
715 - New SELinux API
716 - Updated CK-base
717 - Updated GRSec
718 - Systrace
719 - SuperFreeS/WAN 1.99.8
720 - Propolice kernel build support
721 - EVMS
722 - Other various security related patches
723
724 *hardened-sources-2.4.21 (14 Sep 2003)
725
726 14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
727 Updated hardened-sources based on the 2.4.21 Linux kernel.
728 This includes updates to most major components such as:
729 - ck-base-0306300059
730 - selinux-2.4-2003071106
731 - grsecurity-2.0-rc1
732 - Updated IPTables patch-o-matic
733 - Updated SuperFreeS/WAN
734
735 Thanks to Phil West <pwest@computer.org> for his work in getting this
736 updated patch set ready for the 2.4.21 based kernel.
737
738 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
739 Initial import of hardened-sources-2.4.20-r4. This revision
740 includes only a few changes, but one of these is an important
741 security fix. It is recommended all users of hardened-sources
742 upgrade to this release.
743
744 - ioperm bug fix
745 - fixed compilation failure when building without GRSec
746
747 SAL (Secure Auditing for Linux) is NOT included in this revision
748 due to time constraints, but is planned for inclusion in the near
749 future.
750
751 *hardened-sources-2.4.20-r2 (12 Jun 2003)
752
753 12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
754 hardened-sources-2.4.20-r3.ebuild:
755 Add Header...
756
757 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
758 hardened-sources-2.4.20-r3.ebuild:
759 Removed warnings from ebuild. This kernel should be safe to
760 use at this point.
761
762 *hardened-sources-2.4.20-r3 (08 Jun 2003)
763
764 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
765 hardened-sources-2.4.20-r3.ebuild:
766 New revision. Includes the following changes over -r2:
767
768 - ck7-base (O(1), preempt, low latency)
769 - Super FreeS/WAN 1.99.7rc2
770 - PaX for the LSM/SELinux branch
771 - GRSecurity 2.0-pre4 (role based access control)
772 - Systrace 1.3
773 - EXT3 fixes
774 - EVMS 2.0.1
775 - GCC 3.1+ compile optimizations
776 - ProPolice kernel build support
777 - Hashing table security fixes
778
779 *hardened-sources-2.4.20-r1 (09 Apr 2003)
780
781 23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
782 Initial import of hardened-sources-r2. This new
783 ebuild includes many new performance and security
784 related patches. As in -r1, it will patch in
785 LSM/SELinux if "selinux" is in USE, otherwise it
786 will patch in GRSecurity. The following patches
787 are included in this revision:
788
789 - O(1) Scheduler, Low Latency, and Preempt
790 (pulled from the base CK patch)
791 - ptrace exploit patch for the LSM kernel
792 (the GRSec patch already fixes this)
793 - LSM 2.4-2003040709
794 - SELinux 2.4-2003040709
795 - Systrace v1.2
796 - IPTables patch-o-matic base patches - 20030107
797 - CryptoAPI 2.4.20.1 w/ loop-jari patch
798 - Super FreeS/WAN 1.99.6.1
799 - GRSecurity 1.9.9g
800 - MPPE
801 - EXT3 data journal fix
802 - CIPE 1.5.4
803
804 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
805 hardened-sources-2.4.20-r1.ebuild, manifest:
806 Updated to install flask components correctly for selinux.
807
808 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
809 hardened-sources-2.4.20-r1.ebuild:
810 LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
811 is patched in instead. Ptrace patches for selinux have also been added. In
812 either case, systrace support will be patched in as well.
813
814 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
815 hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
816 Revision bump for new sources.
817
818 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
819 hardened-sources-2.4.20-r1.ebuild:
820 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
821
822 *hardened-sources-2.4.20 (30 Mar 2003)
823
824 30 Mar 2003; Joshua Brindle <method@gentoo.org>
825 hardened-sources-2.4.20.ebuild:
826 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20