/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.182 - (show annotations) (download)
Mon Sep 17 20:57:14 2007 UTC (6 years, 7 months ago) by phreak
Branch: MAIN
Changes since 1.181: +4 -1 lines
Removing johnm from metadata.xml (see #186467 for reference).
(Portage version: 2.1.3.9)

1 # ChangeLog for sys-kernel/hardened-sources
2 # Copyright 2000-2007 Gentoo Foundation; Distributed under the GPL v2
3 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.181 2007/09/17 20:28:37 phreak Exp $
4
5 17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
6 Removing johnm from metadata.xml (see #186467 for reference).
7
8 *hardened-sources-2.6.22-r4 (17 Sep 2007)
9
10 17 Sep 2007; Christian Heim <phreak@gentoo.org>
11 +hardened-sources-2.6.22-r4.ebuild:
12 Revision bump, hopefully fixing all those weird PAX failures.
13
14 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
15 Updating the metadata.xml.
16
17 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
18 Removing tocharian from metadata due to his retirement (see #71718 for
19 reference).
20
21 *hardened-sources-2.6.20-r9 (30 Aug 2007)
22
23 30 Aug 2007; Christian Heim <phreak@gentoo.org>
24 +hardened-sources-2.6.20-r9.ebuild:
25 Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
26
27 29 Aug 2007; Christian Heim <phreak@gentoo.org>
28 -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
29 -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
30 -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
31 -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
32 -hardened-sources-2.6.22-r2.ebuild:
33 Removing some redundant versions.
34
35 *hardened-sources-2.4.35-r1 (29 Aug 2007)
36
37 29 Aug 2007; Christian Heim <phreak@gentoo.org>
38 +hardened-sources-2.4.35-r1.ebuild:
39 Revision bump, new grsecurity patch.
40
41 *hardened-sources-2.6.20-r8 (26 Aug 2007)
42
43 26 Aug 2007; Christian Heim <phreak@gentoo.org>
44 +hardened-sources-2.6.20-r8.ebuild:
45 Revision bump for Linux 2.6.20.17.
46
47 *hardened-sources-2.6.22-r3 (22 Aug 2007)
48
49 22 Aug 2007; Christian Heim <phreak@gentoo.org>
50 +hardened-sources-2.6.22-r3.ebuild:
51 Revision bump for Linux 2.6.22.4.
52
53 16 Aug 2007; Christian Heim <phreak@gentoo.org>
54 hardened-sources-2.6.22-r2.ebuild:
55 Updated patchset, to fix the alignment against 2.6.22.3.
56
57 *hardened-sources-2.6.22-r2 (16 Aug 2007)
58
59 16 Aug 2007; Christian Heim <phreak@gentoo.org>
60 +hardened-sources-2.6.22-r2.ebuild:
61 Revision bump for Linux 2.6.22.3.
62
63 *hardened-sources-2.4.35 (16 Aug 2007)
64
65 16 Aug 2007; Christian Heim <phreak@gentoo.org>
66 +hardened-sources-2.4.35.ebuild:
67 Version bump, initial version for Linux 2.4.35.
68
69 *hardened-sources-2.6.21-r4 (16 Aug 2007)
70
71 16 Aug 2007; Christian Heim <phreak@gentoo.org>
72 +hardened-sources-2.6.21-r4.ebuild:
73 Revision bump for Linux 2.6.21.6.
74
75 *hardened-sources-2.6.20-r7 (16 Aug 2007)
76
77 16 Aug 2007; Christian Heim <phreak@gentoo.org>
78 +hardened-sources-2.6.20-r7.ebuild:
79 Revision bump for Linux 2.6.20.16.
80
81 *hardened-sources-2.6.22-r1 (13 Aug 2007)
82
83 13 Aug 2007; Christian Heim <phreak@gentoo.org>
84 +hardened-sources-2.6.22-r1.ebuild:
85 Yet another revision bump.
86
87 *hardened-sources-2.6.22 (10 Aug 2007)
88
89 10 Aug 2007; Christian Heim <phreak@gentoo.org>
90 +hardened-sources-2.6.22.ebuild:
91 Initial release for 2.6.22. If you are using hardened-sources on a desktop
92 machine (P4 or newer), be aware you might need to disable
93 CONFIG_PAX_PAGEEXEC.
94
95 04 Aug 2007; Christian Heim <phreak@gentoo.org>
96 hardened-sources-2.6.20-r6.ebuild:
97 Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
98 2.6.20.15.
99
100 10 Jul 2007; Christian Heim <phreak@gentoo.org>
101 hardened-sources-2.6.20-r5.ebuild:
102 Marking hardened-sources-2.6.20-r5 stable on ppc.
103
104 10 Jul 2007; Christian Heim <phreak@gentoo.org>
105 -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
106 Cleanup.
107
108 *hardened-sources-2.6.20-r6 (08 Jul 2007)
109
110 08 Jul 2007; Christian Heim <phreak@gentoo.org>
111 +hardened-sources-2.6.20-r6.ebuild:
112 Revision bump, grabbing yet another stable release.
113
114 17 Jun 2007; Christian Heim <phreak@gentoo.org>
115 -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
116 -hardened-sources-2.6.21-r2.ebuild:
117 Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
118 alpha stable KEYWORD by mistake.
119
120 17 Jun 2007; Christian Heim <phreak@gentoo.org>
121 hardened-sources-2.6.20-r5.ebuild:
122 Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
123 genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
124
125 *hardened-sources-2.6.21-r3 (12 Jun 2007)
126
127 12 Jun 2007; Christian Heim <phreak@gentoo.org>
128 +hardened-sources-2.6.21-r3.ebuild:
129 Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
130 of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
131 love.
132
133 *hardened-sources-2.6.20-r5 (11 Jun 2007)
134
135 11 Jun 2007; Christian Heim <phreak@gentoo.org>
136 +hardened-sources-2.6.20-r5.ebuild:
137 Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
138 of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
139 love.
140
141 *hardened-sources-2.4.34.5 (11 Jun 2007)
142
143 11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
144 +hardened-sources-2.4.34.5.ebuild:
145 added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
146
147 30 May 2007; Christian Heim <phreak@gentoo.org>
148 -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
149 Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
150 stale ebuild(s).
151
152 30 May 2007; Christian Heim <phreak@gentoo.org>
153 -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
154 -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
155 -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
156 Doing some cleanups, remove stale ebuilds.
157
158 26 May 2007; Christian Heim <phreak@gentoo.org>
159 hardened-sources-2.6.21-r2.ebuild:
160 Fixing the grsecurity patch, had one '};' too much.
161
162 *hardened-sources-2.6.21-r2 (26 May 2007)
163
164 26 May 2007; Christian Heim <phreak@gentoo.org>
165 -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
166 +hardened-sources-2.6.21-r2.ebuild:
167 Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
168 grsecurity patch to 2.1.10-2.6.21.1-200705221918.
169
170 *hardened-sources-2.6.20-r4 (26 May 2007)
171
172 26 May 2007; Christian Heim <phreak@gentoo.org>
173 -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
174 Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
175 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
176
177 15 May 2007; Christian Heim <phreak@gentoo.org>
178 hardened-sources-2.6.20-r3.ebuild:
179 Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
180 introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
181 grsecurity patch fail in that exact same hunk.
182
183 *hardened-sources-2.6.20-r3 (15 May 2007)
184
185 15 May 2007; Christian Heim <phreak@gentoo.org>
186 +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
187 Revision bump, incorporating Linux 2.6.20.11.
188
189 *hardened-sources-2.6.21-r1 (11 May 2007)
190
191 11 May 2007; Christian Heim <phreak@gentoo.org>
192 +hardened-sources-2.6.21-r1.ebuild:
193 Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
194 mentioned in #177234.
195
196 07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
197 files/digest-hardened-sources-2.6.21, Manifest:
198 Fix Manifest/digest for linux-2.6.21.tar.bz2
199
200 06 May 2007; Christian Heim <phreak@gentoo.org>
201 hardened-sources-2.6.21.ebuild:
202 Bumping the hardened-patches version, needed for the fix for #177234.
203
204 *hardened-sources-2.6.21 (02 May 2007)
205
206 02 May 2007; Christian Heim <phreak@gentoo.org>
207 +hardened-sources-2.6.21.ebuild:
208 Version bump, Linux 2.6.21-hardened.
209
210 29 Apr 2007; Christian Heim <phreak@gentoo.org>
211 hardened-sources-2.6.20-r2.ebuild:
212 Adding ~ia64 on Ned's request.
213
214 29 Apr 2007; Christian Heim <phreak@gentoo.org>
215 hardened-sources-2.6.20-r2.ebuild:
216 Fixing the included grsecurity patch, wasn't alligning due to the Index:
217 header line(s).
218
219 29 Apr 2007; Christian Heim <phreak@gentoo.org>
220 hardened-sources-2.6.20-r2.ebuild:
221 Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
222
223 *hardened-sources-2.6.20-r2 (10 Apr 2007)
224
225 10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
226 +hardened-sources-2.6.20-r2.ebuild:
227 Version bump, on behalf of phreak
228
229 *hardened-sources-2.6.20-r1 (04 Apr 2007)
230
231 04 Apr 2007; Christian Heim <phreak@gentoo.org>
232 +hardened-sources-2.6.20-r1.ebuild:
233 Revision bump, grabbing a newer grsecurity snapshot.
234
235 *hardened-sources-2.6.20 (25 Mar 2007)
236
237 25 Mar 2007; Christian Heim <phreak@gentoo.org>
238 +hardened-sources-2.6.20.ebuild:
239 Finally a hardened-sources version for 2.6.20; many people have been waiting
240 for this. Thanks to Steve for preliminary testing, thanks to Ned for the
241 testbox.
242
243 16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
244 hardened-sources-2.6.18-r6.ebuild:
245 Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
246
247 *hardened-sources-2.6.18-r6 (16 Mar 2007)
248
249 16 Mar 2007; Christian Heim <phreak@gentoo.org>
250 -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
251 Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
252 yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
253 supposed to be.
254
255 06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
256 Fixing the Manifest, the previous one was broken (as in still had the
257 deleted ebuild in it).
258
259 06 Mar 2007; Christian Heim <phreak@gentoo.org>
260 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
261 +hardened-sources-2.6.18-r5.ebuild:
262 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
263 Linux 2.6.18.8. Also cleaning up the older version.
264
265 *hardened-sources-2.6.18-r5 (06 Mar 2007)
266
267 06 Mar 2007; Christian Heim <phreak@gentoo.org>
268 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
269 +hardened-sources-2.6.18-r5.ebuild:
270 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
271 Linux 2.6.18.8. Also cleaning up the older version.
272
273 24 Feb 2007; Christian Heim <phreak@gentoo.org>
274 -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
275 -hardened-sources-2.6.19-r5.ebuild:
276 Removing some of the old version, that didn't work.
277
278 *hardened-sources-2.6.19-r6 (12 Feb 2007)
279
280 12 Feb 2007; Christian Heim <phreak@gentoo.org>
281 +hardened-sources-2.6.19-r6.ebuild:
282 Revision bump, including a new grsec version fixing #166235.
283
284 *hardened-sources-2.4.34 (24 Jan 2007)
285
286 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
287 Manifest:
288 updating Manifest with checksums of new tarball and ebuild
289
290 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
291 +hardened-sources-2.4.34.ebuild:
292 I added new hardened sources 2.4 update, this is a critical path
293 security bugfix - all users of h-s are strongly advised
294 to update their existing hardened sources to this version.
295 It contains a fix for a kernel vulnerability that is pertaining
296 to the PaX changes to virtual memory management, possibly leading
297 to a local kernel exploit ... see grsecurity.net forums and homepage
298
299 23 Jan 2007; Christian Heim <phreak@gentoo.org>
300 files/digest-hardened-sources-2.6.19-r5, Manifest:
301 Fixing the patch-tarball digest.
302
303 *hardened-sources-2.6.19-r5 (23 Jan 2007)
304
305 23 Jan 2007; Christian Heim <phreak@gentoo.org>
306 +hardened-sources-2.6.19-r5.ebuild:
307 Revision bump, closing the recently discovered PaX expand_stack()
308 vulnerability.
309
310 *hardened-sources-2.6.19-r4 (14 Jan 2007)
311
312 14 Jan 2007; Christian Heim <phreak@gentoo.org>
313 +hardened-sources-2.6.19-r4.ebuild:
314 Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
315 dropping the randomized PID feature.
316
317 11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
318 hardened-sources-2.4.33.4.ebuild:
319 stable x86, bug #161171
320
321 *hardened-sources-2.6.19-r3 (27 Dec 2006)
322
323 27 Dec 2006; Christian Heim <phreak@gentoo.org>
324 -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
325 Revision bump for bug #157186 and #158786.
326
327 *hardened-sources-2.6.18-r4 (27 Dec 2006)
328
329 27 Dec 2006; Christian Heim <phreak@gentoo.org>
330 -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
331 Revision bump for bug #157186.
332
333 *hardened-sources-2.6.19-r2 (23 Dec 2006)
334
335 23 Dec 2006; Christian Heim <phreak@gentoo.org>
336 -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
337 Revision bump to pull in genpatches-2.6.19-3 for #157186.
338
339 17 Dec 2006; Christian Heim <phreak@gentoo.org>
340 hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
341 hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
342 hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
343 hardened-sources-2.6.19-r1.ebuild:
344 Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
345 adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
346
347 *hardened-sources-2.4.33.4 (17 Dec 2006)
348
349 17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
350 +hardened-sources-2.4.33.4.ebuild:
351 new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
352 and quilting
353
354 *hardened-sources-2.6.19-r1 (14 Dec 2006)
355
356 14 Dec 2006; Christian Heim <phreak@gentoo.org>
357 -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
358 Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
359 for reporting).
360
361 *hardened-sources-2.6.19 (13 Dec 2006)
362
363 13 Dec 2006; Christian Heim <phreak@gentoo.org>
364 +hardened-sources-2.6.19.ebuild:
365 And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
366 Brad for providing that prompt update.
367
368 *hardened-sources-2.6.18-r3 (13 Dec 2006)
369
370 13 Dec 2006; Christian Heim <phreak@gentoo.org>
371 -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
372 +hardened-sources-2.6.18-r3.ebuild:
373 Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
374 S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
375
376 09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
377 Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
378
379 08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
380 Stable on ppc wrt bug 157356
381
382 07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
383 hardened-sources-2.6.18.ebuild:
384 stable x86, bug #157356
385
386 *hardened-sources-2.6.18-r2 (06 Dec 2006)
387
388 06 Dec 2006; Christian Heim <phreak@gentoo.org>
389 +hardened-sources-2.6.18-r2.ebuild:
390 Revision bump, including 2.6.18.5 (via genpatches) and
391 4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
392 Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
393 redesign.
394
395 06 Dec 2006; Christian Heim <phreak@gentoo.org>
396 hardened-sources-2.6.18.ebuild:
397 Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
398 of Mike Doty).
399
400 *hardened-sources-2.6.18-r1 (23 Nov 2006)
401
402 23 Nov 2006; Christian Heim <phreak@gentoo.org>
403 +hardened-sources-2.6.18-r1.ebuild:
404 Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
405
406 *hardened-sources-2.6.18 (11 Nov 2006)
407
408 11 Nov 2006; Christian Heim <phreak@gentoo.org>
409 +hardened-sources-2.6.18.ebuild:
410 Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
411
412 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
413 - mark amd64 stable also. bug #151877
414
415 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
416 - mark 2.6.17-r1 stable
417
418 27 Aug 2006; Christian Heim <phreak@gentoo.org>
419 -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
420 Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
421
422 *hardened-sources-2.6.17-r1 (26 Aug 2006)
423
424 26 Aug 2006; Christian Heim <phreak@gentoo.org>
425 +hardened-sources-2.6.17-r1.ebuild:
426 Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
427 grsecurity patch.
428
429 *hardened-sources-2.6.17 (17 Aug 2006)
430
431 17 Aug 2006; Christian Heim <phreak@gentoo.org>
432 +hardened-sources-2.6.17.ebuild:
433 Bumping the hardened-sources-2.6 series to 2.6.17, using
434 genpatches-2.6.17-6.base.
435
436 07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
437 - stable on x86 and amd64
438
439 *hardened-sources-2.6.16-r11 (15 Jul 2006)
440
441 15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
442 -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
443 -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
444 -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
445 - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
446 crusty ebuilds
447
448 14 Jul 2006; John Mylchreest <johnm@gentoo.org>
449 hardened-sources-2.6.16-r10.ebuild:
450 marking stable on x86 and amd64
451
452 13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
453 - 2.4.32-r6 stable on x86. RSBAC state unknown
454
455 *hardened-sources-2.4.32-r7 (10 Jul 2006)
456
457 10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
458 +hardened-sources-2.4.32-r7.ebuild:
459 Bump PaX for RSBAC to test-17
460
461 *hardened-sources-2.6.16-r9 (03 Jul 2006)
462
463 03 Jul 2006; John Mylchreest <johnm@gentoo.org>
464 -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
465 hardened-sources-2.6.16 bump to latest -base.
466
467 *hardened-sources-2.4.32-r6 (30 Jun 2006)
468
469 30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
470 hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
471 - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
472 sysctl controlable resource logging
473
474 *hardened-sources-2.6.16-r7 (05 Jun 2006)
475
476 05 Jun 2006; John Mylchreest <johnm@gentoo.org>
477 -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
478 push new 2.6.16 release in preparation for stable
479
480 22 May 2006; <solar@gentoo.org> :
481 - redigest bug 134002
482
483 *hardened-sources-2.4.32-r5 (16 May 2006)
484
485 16 May 2006; Guillaume Destuynder <kang@gentoo.org>
486 +hardened-sources-2.4.32-r5.ebuild:
487 Fixes rsbac common patching (new patch in new -r5 patchset)
488
489 *hardened-sources-2.4.32-r4 (13 May 2006)
490
491 13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
492 +hardened-sources-2.4.32-r4.ebuild:
493 - security bumps
494
495 *hardened-sources-2.6.16-r6 (03 May 2006)
496
497 03 May 2006; John Mylchreest <johnm@gentoo.org>
498 +hardened-sources-2.6.16-r6.ebuild:
499 bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
500
501 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
502 hardened-sources-2.6.14-r8.ebuild:
503 fix x86_64 build problem, this will delay the digest issue again for a short
504 while but it will sort itself out
505
506 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
507 hardened-sources-2.6.14-r8.ebuild:
508 bump hardened patchset
509
510 27 Apr 2006; Alec Warner <antarus@gentoo.org>
511 files/digest-hardened-sources-2.4.32-r2,
512 files/digest-hardened-sources-2.4.32-r3,
513 files/digest-hardened-sources-2.6.14-r8, Manifest:
514 Fixing duff SHA256 digests: Bug # 131293
515
516 *hardened-sources-2.6.16-r5 (27 Apr 2006)
517
518 27 Apr 2006; John Mylchreest <johnm@gentoo.org>
519 -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
520 -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
521 stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
522 cleanup of old uneccessary sources
523
524 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
525 fix digest
526
527 *hardened-sources-2.6.14-r8 (20 Apr 2006)
528
529 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
530 +hardened-sources-2.6.14-r8.ebuild:
531 fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
532
533 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
534 Turning on gpg-signing again, and recomitting
535
536 *hardened-sources-2.6.16-r4 (20 Apr 2006)
537
538 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
539 -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
540 +hardened-sources-2.6.16-r4.ebuild:
541 Fix numerous security vulns
542
543 *hardened-sources-2.4.32-r3 (16 Apr 2006)
544
545 16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
546 -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
547 +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
548 - security bump for bug #112791. Removed old ebuilds
549
550 *hardened-sources-2.6.16-r3 (15 Apr 2006)
551
552 15 Apr 2006; John Mylchreest <johnm@gentoo.org>
553 +hardened-sources-2.6.16-r3.ebuild:
554 Removing silly localversion which I missed
555
556 *hardened-sources-2.6.14-r7 (14 Apr 2006)
557
558 14 Apr 2006; John Mylchreest <johnm@gentoo.org>
559 -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
560 Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
561
562 *hardened-sources-2.6.16-r2 (13 Apr 2006)
563
564 13 Apr 2006; John Mylchreest <johnm@gentoo.org>
565 -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
566 +hardened-sources-2.6.16-r2.ebuild:
567 Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
568 labels, dropping USERGROUP define fixes, since these were merged mainstream.
569
570 *hardened-sources-2.6.16-r1 (11 Apr 2006)
571
572 11 Apr 2006; John Mylchreest <johnm@gentoo.org>
573 +hardened-sources-2.6.16-r1.ebuild:
574 Bumping to include ppc build fix and 2.6.16.3
575
576 06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
577 hardened-sources-2.6.14-r6.ebuild:
578 Stable on x86; bug #127718
579
580 *hardened-sources-2.6.16 (31 Mar 2006)
581
582 31 Mar 2006; John Mylchreest <johnm@gentoo.org>
583 +hardened-sources-2.6.16.ebuild:
584 Bumping to new version of grsec, and kernel base. New squashfs. Based on
585 2.6.16.1
586
587 30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
588 hardened-sources-2.6.14-r6.ebuild:
589 Stable on amd64, bug 127718.
590
591 28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
592 Stable on ppc. Bug #127718
593
594 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
595 -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
596 -hardened-sources-2.6.14-r4.ebuild:
597 Cleanup.
598
599 *hardened-sources-2.6.14-r6 (15 Mar 2006)
600
601 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
602 +hardened-sources-2.6.14-r6.ebuild:
603 Fixes grsec policy recreation bug and adds a
604 >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
605
606 02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
607 - stable on x86
608
609 19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
610 hardened-sources-2.6.14-r5.ebuild:
611 Stable on ppc.
612
613 *hardened-sources-2.6.14-r5 (01 Feb 2006)
614
615 01 Feb 2006; John Mylchreest <johnm@gentoo.org>
616 +hardened-sources-2.6.14-r5.ebuild:
617 fixing every known exploit
618
619 *hardened-sources-2.4.32-r2 (26 Jan 2006)
620
621 26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
622 +hardened-sources-2.4.32-r2.ebuild:
623 - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
624
625 *hardened-sources-2.6.14-r4 (12 Jan 2006)
626
627 12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
628 - version bump for new genpatches which fix up a few sec holes
629
630 *hardened-sources-2.4.32-r1 (05 Jan 2006)
631
632 05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
633 - revision bump to add misc vital linux kernel security patches.
634
635 *hardened-sources-2.6.14-r3 (30 Dec 2005)
636
637 30 Dec 2005; John Mylchreest <johnm@gentoo.org>
638 -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
639 Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
640
641 28 Dec 2005; John Mylchreest <johnm@gentoo.org>
642 hardened-sources-2.6.14-r2.ebuild:
643 making x86 & amd64 stable following testing.
644
645 *hardened-sources-2.6.14-r2 (27 Dec 2005)
646
647 27 Dec 2005; John Mylchreest <johnm@gentoo.org>
648 -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
649 Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
650 network hooks.
651
652 06 Dec 2005; John Mylchreest <johnm@gentoo.org>
653 hardened-sources-2.6.14-r1.ebuild:
654 bumping to stable early for sec fix on x86 & amd64
655
656 *hardened-sources-2.6.14-r1 (05 Dec 2005)
657
658 05 Dec 2005; John Mylchreest <johnm@gentoo.org>
659 -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
660 bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
661
662 04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
663 - stable on x86 security bug #114227 CAN-2005-3257
664
665 *hardened-sources-2.4.32 (19 Nov 2005)
666
667 19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
668 +hardened-sources-2.4.32.ebuild:
669 Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
670 Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
671 have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
672 rsbac >> /etc/portage/package.use)
673
674 *hardened-sources-2.6.14 (14 Nov 2005)
675
676 14 Nov 2005; John Mylchreest <johnm@gentoo.org>
677 -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
678 Bumping 2.6 series to 2.6.14.2
679
680 *hardened-sources-2.6.13-r2 (20 Oct 2005)
681
682 20 Oct 2005; John Mylchreest <johnm@gentoo.org>
683 -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
684 +hardened-sources-2.6.13-r2.ebuild:
685 Fixes minor build error in ppc.
686
687 *hardened-sources-2.6.13-r1 (17 Oct 2005)
688
689 17 Oct 2005; John Mylchreest <johnm@gentoo.org>
690 +hardened-sources-2.6.13-r1.ebuild:
691 Updating grsec to latest snapshot. Fixes some minor issues. Updating to
692 2.6.13.4, fixes some major amd64 stability problems.
693
694 *hardened-sources-2.6.13 (16 Sep 2005)
695
696 16 Sep 2005; John Mylchreest <johnm@gentoo.org>
697 -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
698 2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
699 ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
700 users should test this thoroughly.
701
702 01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
703 - stable on x86
704
705 *hardened-sources-2.6.11-r15 (27 Jun 2005)
706
707 27 Jun 2005; John Mylchreest <johnm@gentoo.org>
708 +hardened-sources-2.6.11-r15.ebuild:
709 Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
710 grsec redefining curr_ip struct.
711
712 *hardened-sources-2.4.31 (20 Jun 2005)
713
714 20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
715 initial import of 2.4.31 tree
716
717 *hardened-sources-2.6.11-r14 (14 Jun 2005)
718
719 14 Jun 2005; John Mylchreest <johnm@gentoo.org>
720 -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
721 Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
722 naming scheme to abide by genpatches
723
724 *hardened-sources-2.6.11-r13 (18 May 2005)
725
726 18 May 2005; John Mylchreest <johnm@gentoo.org>
727 -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
728 Managed to mangle the Makefile patch from grsec, to miss out the grsec
729 target. sorry about that. Fixes bug #93022
730
731 *hardened-sources-2.6.11-r12 (17 May 2005)
732
733 17 May 2005; John Mylchreest <johnm@gentoo.org>
734 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
735 +hardened-sources-2.6.11-r12.ebuild:
736 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
737 merges in genpatches-base
738
739 *hardened-sources-2.6.11-r12 (17 May 2005)
740
741 17 May 2005; John Mylchreest <johnm@gentoo.org>
742 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
743 +hardened-sources-2.6.11-r12.ebuild:
744 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
745 merges in genpatches-base
746
747 29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
748 -files/2.4.27-cmdline-race.patch,
749 -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
750 -files/2.4.28-grsec-binfmt_a.out.patch,
751 -files/2.4.28-grsec-cmdline-race.patch,
752 -files/2.4.28-selinux-binfmt_a.out.patch,
753 -files/2.4.28-selinux-cmdline-race.patch,
754 -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
755 hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
756 - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
757 cleanup..
758
759 *hardened-sources-2.4.30-r1 (21 Apr 2005)
760
761 21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
762 - disable aout by default
763
764 *hardened-sources-2.4.30 (18 Apr 2005)
765
766 18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
767 - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
768 and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
769 use
770
771 *hardened-sources-2.4.29 (30 Mar 2005)
772
773 30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
774 +hardened-sources-2.4.29.ebuild:
775 New hardened-patches-2.4-29.0 patchball.
776 Removed SELinux support, upgraded GRSecurity to 2.1.4.
777
778 *hardened-sources-2.4.28-r5 (06 Mar 2005)
779
780 06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
781 +hardened-sources-2.4.28-r5.ebuild:
782 Added a fix for a PaX vulnerability.
783
784 26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
785 hardened-sources-2.4.28-r4.ebuild:
786 Stable on x86
787
788 23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
789 hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
790 hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
791 hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
792 - fixed/added RDEPEND= in all kernel-2 ebuilds
793
794 *hardened-sources-2.4.28-r4 (21 Jan 2005)
795
796 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
797 +hardened-sources-2.4.28-r4.ebuild:
798 Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
799 backport of neighbour hash updates.
800
801 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
802 hardened-sources-2.4.28-r3.ebuild:
803 Stable on x86
804
805 *hardened-sources-2.6.10-r3 (20 Jan 2005)
806
807 20 Jan 2005; Brandon Hale <tseng@gentoo.org>
808 +hardened-sources-2.6.10-r3.ebuild:
809 Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
810 in 2005.0
811
812 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
813 -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
814 hardened-sources-2.4.28-r2.ebuild:
815 Mark stable on x86
816
817 *hardened-sources-2.4.28-r3 (17 Jan 2005)
818
819 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
820 +hardened-sources-2.4.28-r3.ebuild:
821 Fix SMP page fault handler vuln, and update device-mapper and evms patches.
822
823 14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
824 hardened-sources-2.4.28.ebuild:
825 Mark stable on x86.
826
827 *hardened-sources-2.4.28-r2 (13 Jan 2005)
828
829 13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
830 +hardened-sources-2.4.28-r2.ebuild:
831 Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
832 Mazinger for grsecurity patches as well.
833
834 *hardened-sources-2.4.28-r1 (23 Dec 2004)
835
836 23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
837 Security bump. Thank tocharian for rolling a new patchset...
838
839 28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
840 +files/2.4.28-grsec-cmdline-race.patch,
841 +files/2.4.28-selinux-binfmt_a.out.patch,
842 +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
843 - Round up remaining security patches that appear to be missing in 2.4.28. -
844 PaX standalone updated to current. hgpv=28.1
845
846 *hardened-sources-2.4.28 (28 Nov 2004)
847
848 28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
849 security bump. Thank tocharian for rolling a new patchset
850
851 *hardened-sources-2.4.27-r3 (08 Sep 2004)
852
853 08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
854 +hardened-sources-2.4.27-r3.ebuild:
855 Applies the new 2.4-27.2 patchball which updates
856 GRSecurity to the 2.0.1 version.
857
858 *hardened-sources-2.4.27-r2 (31 Aug 2004)
859
860 31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
861 +hardened-sources-2.4.27-r2.ebuild:
862 Version bump.
863 This version uses the new 2.4-27.1 patchball which updates
864 both the SELinux PaX hooks patch and the SELinux headers.
865
866 *hardened-sources-2.4.27-r1 (09 Aug 2004)
867
868 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
869 +hardened-sources-2.4.27-r1.ebuild,
870 -hardened-sources-2.4.27.ebuild,
871 +files/2.4.27-cmdline-race.patch:
872 Version bump, fix for cmdline race. See bug #59905.
873
874 *hardened-sources-2.4.26-r6 (09 Aug 2004)
875
876 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
877 +hardened-sources-2.4.26-r6.ebuild,
878 -hardened-sources-2.4.26-r5.ebuild,
879 -hardened-sources-2.4.26-r4.ebuild,
880 +files/2.4.26-cmdline-race.patch:
881 Version bump, fix for cmdline race. See bug #59905.
882
883 *hardened-sources-2.4.27 (08 Aug 2004)
884
885 08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
886 +hardened-sources-2.4.27.ebuild,
887 +files/2.4.27-CAN-2004-0394.patch:
888 Ported the patchball to the 2.4.27 kernel version.
889
890 *hardened-sources-2.4.26-r5 (07 Aug 2004)
891
892 07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
893 +hardened-sources-2.4.26-r5.ebuild:
894 Updated to use the new hardened-patches-2.4-26.1 patchball.
895 It adds the following features:
896 - Squashfs
897 - Ebtables
898 - Netdev random (core+drivers)
899 - Watchdog Timer (WDT) fix.
900
901 *hardened-sources-2.4.26-r4 (04 Aug 2004)
902
903 04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
904 +hardened-sources-2.4.26-r4.ebuild,
905 +files/2.4.26-CAN-2004-0415.patch,
906 -hardened-sources-2.4.26-3:
907 Version bump, fix for CAN 0415, see bug #59378.
908
909 *hardened-sources-2.4.26-r3 (22 Jul 2004)
910
911 22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
912 +hardened-sources-2.4.26-r3.ebuild,
913 +files/2.4.26-CAN-2004-0497.patch,
914 -hardened-sources-2.4.26-r2.ebuild:
915 Version bump, fixed CAN 0497, see bug #56171.
916
917 *hardened-sources-2.4.26-r2 (29 Jun 2004)
918
919 29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
920 +hardened-sources-2.4.26-r2.ebuild,
921 +files/2.4.26-CAN-2004-0495.patch,
922 +files/2.4.26-CAN-2004-0535.patch,
923 -hardened-sources-2.4.26-r1.ebuild:
924 Fixes for both CAN 0495 and 0535, see bug #54976
925
926 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
927 hardened-sources-2.4.26-r1.ebuild:
928 QA - fix use invocation
929
930 *hardened-sources-2.4.26-r1 (22 June 2004)
931
932 22 June 2004; Andrea Luzzardi <scox@gentoo.org>
933 +hardened-sources-2.4.26-r1.ebuild,
934 +files/2.4.26-CAN-2004-0394.patch,
935 +files/2.4.26-signal-race.patch,
936 -hardened-sources-2.4.26.ebuild,
937 -hardened-sources-2.4.24-r3.ebuild:
938 Version bump for the CAN-2004-0394 issue and bug #53804
939 Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
940
941
942 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
943 hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
944 Masked hardened-sources-2.4.26.ebuild broken for ppc
945
946 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
947 hardened-sources-2.4.24-r3.ebuild:
948 Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
949
950 *hardened-sources-2.4.26 (29 May 2004)
951
952 29 May 2004; Andrea Luzzardi <scox@gentoo.org>
953 +hardened-sources-2.4.26.ebuild:
954 Updated hardened-sources for the 2.4.26 kernel
955 Removed broken components, updated almost everything.
956
957 *hardened-sources-2.4.24-r3 (17 Apr 2004)
958
959 17 Apr 2004; <plasmaroo@gentoo.org>
960 +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
961 +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
962 +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
963 +hardened-sources-2.4.24-r3.ebuild:
964 Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
965 vulnerabilities. Old revisions removed.
966
967 *hardened-sources-2.4.24-r2 (15 Apr 2004)
968
969 15 Apr 2004; <plasmaroo@gentoo.org>
970 +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
971 -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
972 Version bump for the CAN-2004-0109 issue; bug #47881.
973
974 12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
975 hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
976 Add eutils to inherit.
977
978 *hardened-sources-2.4.24-r1 (19 Feb 2004)
979
980 19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
981 files/hardened-sources-2.4.24.munmap.patch:
982 Added the patch for the mremap/munmap vulnerability. Bug #42024.
983
984 *hardened-sources-2.4.24 (06 Feb 2004)
985
986 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
987 hardened-sources-2.4.24.ebuild:
988 Version bump, updated most of the components.
989 This release includes the following:
990
991 - Hardened security
992 - Netfilter patch-o-matic 20031219
993 - FreeSWAN 2.04 & x509 1.4.8
994 - EVMS 2.2.2
995 - XFS 1.3.1
996 - cryptoloop jari
997 - grsecurity 2.0-rc4
998 - SELinux
999 - PaX 200402060000
1000 - PaX Obscurity 200308302223
1001 - Others...
1002
1003 Neither -ck nor systrace are included anymore.
1004
1005 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1006
1007 05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1008 hardened-sources-2.4.22-r2.ebuild:
1009 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1010
1011 *hardened-sources-2.4.22-r1 (02 Dec 2003)
1012
1013 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1014 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1015
1016 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1017 hardened-sources-2.4.22-r1.ebuild:
1018 Version bump for the 'do_brk' vulnerability.
1019
1020 01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1021 hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1022 hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1023 hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1024 Fix the 'do_brk' vulnerability.
1025
1026 03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1027 hardened-sources-2.4.22.ebuild:
1028 - Removed the src_install() portion for SELinux flask
1029 components. These are no longer handled in the kernel
1030 so this code was not necessary.
1031
1032 29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1033 New 2.4.22 based hardened-sources thanks to
1034 Phil West <p.west@computer.org>.
1035
1036 These sources include:
1037 - New SELinux API
1038 - Updated CK-base
1039 - Updated GRSec
1040 - Systrace
1041 - SuperFreeS/WAN 1.99.8
1042 - Propolice kernel build support
1043 - EVMS
1044 - Other various security related patches
1045
1046 *hardened-sources-2.4.21 (14 Sep 2003)
1047
1048 14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1049 Updated hardened-sources based on the 2.4.21 Linux kernel.
1050 This includes updates to most major components such as:
1051 - ck-base-0306300059
1052 - selinux-2.4-2003071106
1053 - grsecurity-2.0-rc1
1054 - Updated IPTables patch-o-matic
1055 - Updated SuperFreeS/WAN
1056
1057 Thanks to Phil West <pwest@computer.org> for his work in getting this
1058 updated patch set ready for the 2.4.21 based kernel.
1059
1060 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1061 Initial import of hardened-sources-2.4.20-r4. This revision
1062 includes only a few changes, but one of these is an important
1063 security fix. It is recommended all users of hardened-sources
1064 upgrade to this release.
1065
1066 - ioperm bug fix
1067 - fixed compilation failure when building without GRSec
1068
1069 SAL (Secure Auditing for Linux) is NOT included in this revision
1070 due to time constraints, but is planned for inclusion in the near
1071 future.
1072
1073 *hardened-sources-2.4.20-r2 (12 Jun 2003)
1074
1075 12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1076 hardened-sources-2.4.20-r3.ebuild:
1077 Add Header...
1078
1079 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1080 hardened-sources-2.4.20-r3.ebuild:
1081 Removed warnings from ebuild. This kernel should be safe to
1082 use at this point.
1083
1084 *hardened-sources-2.4.20-r3 (08 Jun 2003)
1085
1086 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1087 hardened-sources-2.4.20-r3.ebuild:
1088 New revision. Includes the following changes over -r2:
1089
1090 - ck7-base (O(1), preempt, low latency)
1091 - Super FreeS/WAN 1.99.7rc2
1092 - PaX for the LSM/SELinux branch
1093 - GRSecurity 2.0-pre4 (role based access control)
1094 - Systrace 1.3
1095 - EXT3 fixes
1096 - EVMS 2.0.1
1097 - GCC 3.1+ compile optimizations
1098 - ProPolice kernel build support
1099 - Hashing table security fixes
1100
1101 *hardened-sources-2.4.20-r1 (09 Apr 2003)
1102
1103 23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1104 Initial import of hardened-sources-r2. This new
1105 ebuild includes many new performance and security
1106 related patches. As in -r1, it will patch in
1107 LSM/SELinux if "selinux" is in USE, otherwise it
1108 will patch in GRSecurity. The following patches
1109 are included in this revision:
1110
1111 - O(1) Scheduler, Low Latency, and Preempt
1112 (pulled from the base CK patch)
1113 - ptrace exploit patch for the LSM kernel
1114 (the GRSec patch already fixes this)
1115 - LSM 2.4-2003040709
1116 - SELinux 2.4-2003040709
1117 - Systrace v1.2
1118 - IPTables patch-o-matic base patches - 20030107
1119 - CryptoAPI 2.4.20.1 w/ loop-jari patch
1120 - Super FreeS/WAN 1.99.6.1
1121 - GRSecurity 1.9.9g
1122 - MPPE
1123 - EXT3 data journal fix
1124 - CIPE 1.5.4
1125
1126 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1127 hardened-sources-2.4.20-r1.ebuild, manifest:
1128 Updated to install flask components correctly for selinux.
1129
1130 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1131 hardened-sources-2.4.20-r1.ebuild:
1132 LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1133 is patched in instead. Ptrace patches for selinux have also been added. In
1134 either case, systrace support will be patched in as well.
1135
1136 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1137 hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1138 Revision bump for new sources.
1139
1140 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1141 hardened-sources-2.4.20-r1.ebuild:
1142 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1143
1144 *hardened-sources-2.4.20 (30 Mar 2003)
1145
1146 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1147 hardened-sources-2.4.20.ebuild:
1148 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20