/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.202 - (show annotations) (download)
Mon Dec 24 13:09:01 2007 UTC (6 years, 9 months ago) by phreak
Branch: MAIN
Changes since 1.201: +7 -1 lines
Cleaning out some unused, old versions.
(Portage version: 2.1.3.19)

1 # ChangeLog for sys-kernel/hardened-sources
2 # Copyright 2000-2007 Gentoo Foundation; Distributed under the GPL v2
3 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.201 2007/12/24 11:52:00 phreak Exp $
4
5 24 Dec 2007; Christian Heim <phreak@gentoo.org>
6 -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
7 -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
8 -hardened-sources-2.6.23-r3.ebuild:
9 Cleaning out some unused, old versions.
10
11 24 Dec 2007; Christian Heim <phreak@gentoo.org>
12 hardened-sources-2.6.23-r4.ebuild:
13 Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
14 in the tree for long, but there isn't much of a difference between this and
15 -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
16
17 *hardened-sources-2.6.23-r4 (23 Dec 2007)
18
19 23 Dec 2007; Christian Heim <phreak@gentoo.org>
20 +hardened-sources-2.6.23-r4.ebuild:
21 Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
22
23 *hardened-sources-2.6.23-r3 (04 Dec 2007)
24
25 04 Dec 2007; Christian Heim <phreak@gentoo.org>
26 +hardened-sources-2.6.23-r3.ebuild:
27 Revision bump, pulling in 2.6.23.9.
28
29 *hardened-sources-2.6.23-r2 (25 Nov 2007)
30
31 25 Nov 2007; Christian Heim <phreak@gentoo.org>
32 +hardened-sources-2.6.23-r2.ebuild:
33 Updated patchset, thanks to solar.
34
35 *hardened-sources-2.6.23-r1 (31 Oct 2007)
36
37 31 Oct 2007; Christian Heim <phreak@gentoo.org>
38 +hardened-sources-2.6.23-r1.ebuild:
39 Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
40
41 29 Oct 2007; <solar@gentoo.org> metadata.xml:
42 - update metadata.xml
43
44 25 Oct 2007; Christian Heim <phreak@gentoo.org>
45 hardened-sources-2.6.22-r8.ebuild:
46 Marking 2.6.22-r8 stable on amd64 and x86.
47
48 21 Oct 2007; Christian Heim <phreak@gentoo.org>
49 -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
50 -hardened-sources-2.6.21-r4.ebuild:
51 Removing old ebuilds.
52
53 *hardened-sources-2.4.35-r2 (21 Oct 2007)
54
55 21 Oct 2007; Christian Heim <phreak@gentoo.org>
56 +hardened-sources-2.4.35-r2.ebuild:
57 Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
58 patches.
59
60 *hardened-sources-2.6.22-r8 (21 Oct 2007)
61
62 21 Oct 2007; Christian Heim <phreak@gentoo.org>
63 +hardened-sources-2.6.22-r8.ebuild:
64 Yet another new patch, hopefully fixing the remaining issues we had w/
65 2.6.22. Candidate for stabling.
66
67 *hardened-sources-2.6.23 (13 Oct 2007)
68
69 13 Oct 2007; Christian Heim <phreak@gentoo.org>
70 +hardened-sources-2.6.23.ebuild:
71 Initial hardened-sources-2.6.23. If people still have problems w/ bug
72 194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
73
74 11 Oct 2007; Christian Heim <phreak@gentoo.org>
75 hardened-sources-2.6.20-r10.ebuild:
76 Pulling in yet another new genpatches version, fixing the PWC bug for real.
77
78 04 Oct 2007; Christian Heim <phreak@gentoo.org>
79 -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
80 Removing old versions.
81
82 *hardened-sources-2.6.22-r7 (01 Oct 2007)
83
84 01 Oct 2007; Christian Heim <phreak@gentoo.org>
85 +hardened-sources-2.6.22-r7.ebuild:
86 Revision bump, pulling in a newer patch. Should fix #194276.
87
88 30 Sep 2007; Christian Heim <phreak@gentoo.org>
89 hardened-sources-2.6.20-r10.ebuild:
90 Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
91 Mike Doty).
92
93 *hardened-sources-2.6.22-r6 (26 Sep 2007)
94
95 26 Sep 2007; Christian Heim <phreak@gentoo.org>
96 +hardened-sources-2.6.22-r6.ebuild:
97 Revision bump, grabbing up till Linux 2.6.22.9.
98
99 24 Sep 2007; Christian Heim <phreak@gentoo.org>
100 -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
101 Cleaning up further.
102
103 *hardened-sources-2.6.20-r10 (24 Sep 2007)
104
105 24 Sep 2007; Christian Heim <phreak@gentoo.org>
106 -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
107 +hardened-sources-2.6.20-r10.ebuild:
108 Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
109 revisions.
110
111 *hardened-sources-2.6.22-r5 (22 Sep 2007)
112
113 22 Sep 2007; Christian Heim <phreak@gentoo.org>
114 +hardened-sources-2.6.22-r5.ebuild:
115 Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
116
117 17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
118 Removing johnm from metadata.xml (see #186467 for reference).
119
120 *hardened-sources-2.6.22-r4 (17 Sep 2007)
121
122 17 Sep 2007; Christian Heim <phreak@gentoo.org>
123 +hardened-sources-2.6.22-r4.ebuild:
124 Revision bump, hopefully fixing all those weird PAX failures.
125
126 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
127 Updating the metadata.xml.
128
129 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
130 Removing tocharian from metadata due to his retirement (see #71718 for
131 reference).
132
133 *hardened-sources-2.6.20-r9 (30 Aug 2007)
134
135 30 Aug 2007; Christian Heim <phreak@gentoo.org>
136 +hardened-sources-2.6.20-r9.ebuild:
137 Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
138
139 29 Aug 2007; Christian Heim <phreak@gentoo.org>
140 -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
141 -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
142 -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
143 -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
144 -hardened-sources-2.6.22-r2.ebuild:
145 Removing some redundant versions.
146
147 *hardened-sources-2.4.35-r1 (29 Aug 2007)
148
149 29 Aug 2007; Christian Heim <phreak@gentoo.org>
150 +hardened-sources-2.4.35-r1.ebuild:
151 Revision bump, new grsecurity patch.
152
153 *hardened-sources-2.6.20-r8 (26 Aug 2007)
154
155 26 Aug 2007; Christian Heim <phreak@gentoo.org>
156 +hardened-sources-2.6.20-r8.ebuild:
157 Revision bump for Linux 2.6.20.17.
158
159 *hardened-sources-2.6.22-r3 (22 Aug 2007)
160
161 22 Aug 2007; Christian Heim <phreak@gentoo.org>
162 +hardened-sources-2.6.22-r3.ebuild:
163 Revision bump for Linux 2.6.22.4.
164
165 16 Aug 2007; Christian Heim <phreak@gentoo.org>
166 hardened-sources-2.6.22-r2.ebuild:
167 Updated patchset, to fix the alignment against 2.6.22.3.
168
169 *hardened-sources-2.6.22-r2 (16 Aug 2007)
170
171 16 Aug 2007; Christian Heim <phreak@gentoo.org>
172 +hardened-sources-2.6.22-r2.ebuild:
173 Revision bump for Linux 2.6.22.3.
174
175 *hardened-sources-2.4.35 (16 Aug 2007)
176
177 16 Aug 2007; Christian Heim <phreak@gentoo.org>
178 +hardened-sources-2.4.35.ebuild:
179 Version bump, initial version for Linux 2.4.35.
180
181 *hardened-sources-2.6.21-r4 (16 Aug 2007)
182
183 16 Aug 2007; Christian Heim <phreak@gentoo.org>
184 +hardened-sources-2.6.21-r4.ebuild:
185 Revision bump for Linux 2.6.21.6.
186
187 *hardened-sources-2.6.20-r7 (16 Aug 2007)
188
189 16 Aug 2007; Christian Heim <phreak@gentoo.org>
190 +hardened-sources-2.6.20-r7.ebuild:
191 Revision bump for Linux 2.6.20.16.
192
193 *hardened-sources-2.6.22-r1 (13 Aug 2007)
194
195 13 Aug 2007; Christian Heim <phreak@gentoo.org>
196 +hardened-sources-2.6.22-r1.ebuild:
197 Yet another revision bump.
198
199 *hardened-sources-2.6.22 (10 Aug 2007)
200
201 10 Aug 2007; Christian Heim <phreak@gentoo.org>
202 +hardened-sources-2.6.22.ebuild:
203 Initial release for 2.6.22. If you are using hardened-sources on a desktop
204 machine (P4 or newer), be aware you might need to disable
205 CONFIG_PAX_PAGEEXEC.
206
207 04 Aug 2007; Christian Heim <phreak@gentoo.org>
208 hardened-sources-2.6.20-r6.ebuild:
209 Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
210 2.6.20.15.
211
212 10 Jul 2007; Christian Heim <phreak@gentoo.org>
213 hardened-sources-2.6.20-r5.ebuild:
214 Marking hardened-sources-2.6.20-r5 stable on ppc.
215
216 10 Jul 2007; Christian Heim <phreak@gentoo.org>
217 -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
218 Cleanup.
219
220 *hardened-sources-2.6.20-r6 (08 Jul 2007)
221
222 08 Jul 2007; Christian Heim <phreak@gentoo.org>
223 +hardened-sources-2.6.20-r6.ebuild:
224 Revision bump, grabbing yet another stable release.
225
226 17 Jun 2007; Christian Heim <phreak@gentoo.org>
227 -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
228 -hardened-sources-2.6.21-r2.ebuild:
229 Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
230 alpha stable KEYWORD by mistake.
231
232 17 Jun 2007; Christian Heim <phreak@gentoo.org>
233 hardened-sources-2.6.20-r5.ebuild:
234 Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
235 genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
236
237 *hardened-sources-2.6.21-r3 (12 Jun 2007)
238
239 12 Jun 2007; Christian Heim <phreak@gentoo.org>
240 +hardened-sources-2.6.21-r3.ebuild:
241 Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
242 of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
243 love.
244
245 *hardened-sources-2.6.20-r5 (11 Jun 2007)
246
247 11 Jun 2007; Christian Heim <phreak@gentoo.org>
248 +hardened-sources-2.6.20-r5.ebuild:
249 Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
250 of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
251 love.
252
253 *hardened-sources-2.4.34.5 (11 Jun 2007)
254
255 11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
256 +hardened-sources-2.4.34.5.ebuild:
257 added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
258
259 30 May 2007; Christian Heim <phreak@gentoo.org>
260 -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
261 Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
262 stale ebuild(s).
263
264 30 May 2007; Christian Heim <phreak@gentoo.org>
265 -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
266 -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
267 -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
268 Doing some cleanups, remove stale ebuilds.
269
270 26 May 2007; Christian Heim <phreak@gentoo.org>
271 hardened-sources-2.6.21-r2.ebuild:
272 Fixing the grsecurity patch, had one '};' too much.
273
274 *hardened-sources-2.6.21-r2 (26 May 2007)
275
276 26 May 2007; Christian Heim <phreak@gentoo.org>
277 -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
278 +hardened-sources-2.6.21-r2.ebuild:
279 Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
280 grsecurity patch to 2.1.10-2.6.21.1-200705221918.
281
282 *hardened-sources-2.6.20-r4 (26 May 2007)
283
284 26 May 2007; Christian Heim <phreak@gentoo.org>
285 -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
286 Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
287 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
288
289 15 May 2007; Christian Heim <phreak@gentoo.org>
290 hardened-sources-2.6.20-r3.ebuild:
291 Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
292 introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
293 grsecurity patch fail in that exact same hunk.
294
295 *hardened-sources-2.6.20-r3 (15 May 2007)
296
297 15 May 2007; Christian Heim <phreak@gentoo.org>
298 +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
299 Revision bump, incorporating Linux 2.6.20.11.
300
301 *hardened-sources-2.6.21-r1 (11 May 2007)
302
303 11 May 2007; Christian Heim <phreak@gentoo.org>
304 +hardened-sources-2.6.21-r1.ebuild:
305 Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
306 mentioned in #177234.
307
308 07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
309 files/digest-hardened-sources-2.6.21, Manifest:
310 Fix Manifest/digest for linux-2.6.21.tar.bz2
311
312 06 May 2007; Christian Heim <phreak@gentoo.org>
313 hardened-sources-2.6.21.ebuild:
314 Bumping the hardened-patches version, needed for the fix for #177234.
315
316 *hardened-sources-2.6.21 (02 May 2007)
317
318 02 May 2007; Christian Heim <phreak@gentoo.org>
319 +hardened-sources-2.6.21.ebuild:
320 Version bump, Linux 2.6.21-hardened.
321
322 29 Apr 2007; Christian Heim <phreak@gentoo.org>
323 hardened-sources-2.6.20-r2.ebuild:
324 Adding ~ia64 on Ned's request.
325
326 29 Apr 2007; Christian Heim <phreak@gentoo.org>
327 hardened-sources-2.6.20-r2.ebuild:
328 Fixing the included grsecurity patch, wasn't alligning due to the Index:
329 header line(s).
330
331 29 Apr 2007; Christian Heim <phreak@gentoo.org>
332 hardened-sources-2.6.20-r2.ebuild:
333 Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
334
335 *hardened-sources-2.6.20-r2 (10 Apr 2007)
336
337 10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
338 +hardened-sources-2.6.20-r2.ebuild:
339 Version bump, on behalf of phreak
340
341 *hardened-sources-2.6.20-r1 (04 Apr 2007)
342
343 04 Apr 2007; Christian Heim <phreak@gentoo.org>
344 +hardened-sources-2.6.20-r1.ebuild:
345 Revision bump, grabbing a newer grsecurity snapshot.
346
347 *hardened-sources-2.6.20 (25 Mar 2007)
348
349 25 Mar 2007; Christian Heim <phreak@gentoo.org>
350 +hardened-sources-2.6.20.ebuild:
351 Finally a hardened-sources version for 2.6.20; many people have been waiting
352 for this. Thanks to Steve for preliminary testing, thanks to Ned for the
353 testbox.
354
355 16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
356 hardened-sources-2.6.18-r6.ebuild:
357 Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
358
359 *hardened-sources-2.6.18-r6 (16 Mar 2007)
360
361 16 Mar 2007; Christian Heim <phreak@gentoo.org>
362 -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
363 Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
364 yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
365 supposed to be.
366
367 06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
368 Fixing the Manifest, the previous one was broken (as in still had the
369 deleted ebuild in it).
370
371 06 Mar 2007; Christian Heim <phreak@gentoo.org>
372 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
373 +hardened-sources-2.6.18-r5.ebuild:
374 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
375 Linux 2.6.18.8. Also cleaning up the older version.
376
377 *hardened-sources-2.6.18-r5 (06 Mar 2007)
378
379 06 Mar 2007; Christian Heim <phreak@gentoo.org>
380 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
381 +hardened-sources-2.6.18-r5.ebuild:
382 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
383 Linux 2.6.18.8. Also cleaning up the older version.
384
385 24 Feb 2007; Christian Heim <phreak@gentoo.org>
386 -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
387 -hardened-sources-2.6.19-r5.ebuild:
388 Removing some of the old version, that didn't work.
389
390 *hardened-sources-2.6.19-r6 (12 Feb 2007)
391
392 12 Feb 2007; Christian Heim <phreak@gentoo.org>
393 +hardened-sources-2.6.19-r6.ebuild:
394 Revision bump, including a new grsec version fixing #166235.
395
396 *hardened-sources-2.4.34 (24 Jan 2007)
397
398 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
399 Manifest:
400 updating Manifest with checksums of new tarball and ebuild
401
402 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
403 +hardened-sources-2.4.34.ebuild:
404 I added new hardened sources 2.4 update, this is a critical path
405 security bugfix - all users of h-s are strongly advised
406 to update their existing hardened sources to this version.
407 It contains a fix for a kernel vulnerability that is pertaining
408 to the PaX changes to virtual memory management, possibly leading
409 to a local kernel exploit ... see grsecurity.net forums and homepage
410
411 23 Jan 2007; Christian Heim <phreak@gentoo.org>
412 files/digest-hardened-sources-2.6.19-r5, Manifest:
413 Fixing the patch-tarball digest.
414
415 *hardened-sources-2.6.19-r5 (23 Jan 2007)
416
417 23 Jan 2007; Christian Heim <phreak@gentoo.org>
418 +hardened-sources-2.6.19-r5.ebuild:
419 Revision bump, closing the recently discovered PaX expand_stack()
420 vulnerability.
421
422 *hardened-sources-2.6.19-r4 (14 Jan 2007)
423
424 14 Jan 2007; Christian Heim <phreak@gentoo.org>
425 +hardened-sources-2.6.19-r4.ebuild:
426 Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
427 dropping the randomized PID feature.
428
429 11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
430 hardened-sources-2.4.33.4.ebuild:
431 stable x86, bug #161171
432
433 *hardened-sources-2.6.19-r3 (27 Dec 2006)
434
435 27 Dec 2006; Christian Heim <phreak@gentoo.org>
436 -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
437 Revision bump for bug #157186 and #158786.
438
439 *hardened-sources-2.6.18-r4 (27 Dec 2006)
440
441 27 Dec 2006; Christian Heim <phreak@gentoo.org>
442 -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
443 Revision bump for bug #157186.
444
445 *hardened-sources-2.6.19-r2 (23 Dec 2006)
446
447 23 Dec 2006; Christian Heim <phreak@gentoo.org>
448 -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
449 Revision bump to pull in genpatches-2.6.19-3 for #157186.
450
451 17 Dec 2006; Christian Heim <phreak@gentoo.org>
452 hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
453 hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
454 hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
455 hardened-sources-2.6.19-r1.ebuild:
456 Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
457 adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
458
459 *hardened-sources-2.4.33.4 (17 Dec 2006)
460
461 17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
462 +hardened-sources-2.4.33.4.ebuild:
463 new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
464 and quilting
465
466 *hardened-sources-2.6.19-r1 (14 Dec 2006)
467
468 14 Dec 2006; Christian Heim <phreak@gentoo.org>
469 -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
470 Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
471 for reporting).
472
473 *hardened-sources-2.6.19 (13 Dec 2006)
474
475 13 Dec 2006; Christian Heim <phreak@gentoo.org>
476 +hardened-sources-2.6.19.ebuild:
477 And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
478 Brad for providing that prompt update.
479
480 *hardened-sources-2.6.18-r3 (13 Dec 2006)
481
482 13 Dec 2006; Christian Heim <phreak@gentoo.org>
483 -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
484 +hardened-sources-2.6.18-r3.ebuild:
485 Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
486 S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
487
488 09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
489 Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
490
491 08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
492 Stable on ppc wrt bug 157356
493
494 07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
495 hardened-sources-2.6.18.ebuild:
496 stable x86, bug #157356
497
498 *hardened-sources-2.6.18-r2 (06 Dec 2006)
499
500 06 Dec 2006; Christian Heim <phreak@gentoo.org>
501 +hardened-sources-2.6.18-r2.ebuild:
502 Revision bump, including 2.6.18.5 (via genpatches) and
503 4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
504 Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
505 redesign.
506
507 06 Dec 2006; Christian Heim <phreak@gentoo.org>
508 hardened-sources-2.6.18.ebuild:
509 Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
510 of Mike Doty).
511
512 *hardened-sources-2.6.18-r1 (23 Nov 2006)
513
514 23 Nov 2006; Christian Heim <phreak@gentoo.org>
515 +hardened-sources-2.6.18-r1.ebuild:
516 Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
517
518 *hardened-sources-2.6.18 (11 Nov 2006)
519
520 11 Nov 2006; Christian Heim <phreak@gentoo.org>
521 +hardened-sources-2.6.18.ebuild:
522 Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
523
524 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
525 - mark amd64 stable also. bug #151877
526
527 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
528 - mark 2.6.17-r1 stable
529
530 27 Aug 2006; Christian Heim <phreak@gentoo.org>
531 -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
532 Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
533
534 *hardened-sources-2.6.17-r1 (26 Aug 2006)
535
536 26 Aug 2006; Christian Heim <phreak@gentoo.org>
537 +hardened-sources-2.6.17-r1.ebuild:
538 Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
539 grsecurity patch.
540
541 *hardened-sources-2.6.17 (17 Aug 2006)
542
543 17 Aug 2006; Christian Heim <phreak@gentoo.org>
544 +hardened-sources-2.6.17.ebuild:
545 Bumping the hardened-sources-2.6 series to 2.6.17, using
546 genpatches-2.6.17-6.base.
547
548 07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
549 - stable on x86 and amd64
550
551 *hardened-sources-2.6.16-r11 (15 Jul 2006)
552
553 15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
554 -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
555 -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
556 -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
557 - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
558 crusty ebuilds
559
560 14 Jul 2006; John Mylchreest <johnm@gentoo.org>
561 hardened-sources-2.6.16-r10.ebuild:
562 marking stable on x86 and amd64
563
564 13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
565 - 2.4.32-r6 stable on x86. RSBAC state unknown
566
567 *hardened-sources-2.4.32-r7 (10 Jul 2006)
568
569 10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
570 +hardened-sources-2.4.32-r7.ebuild:
571 Bump PaX for RSBAC to test-17
572
573 *hardened-sources-2.6.16-r9 (03 Jul 2006)
574
575 03 Jul 2006; John Mylchreest <johnm@gentoo.org>
576 -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
577 hardened-sources-2.6.16 bump to latest -base.
578
579 *hardened-sources-2.4.32-r6 (30 Jun 2006)
580
581 30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
582 hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
583 - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
584 sysctl controlable resource logging
585
586 *hardened-sources-2.6.16-r7 (05 Jun 2006)
587
588 05 Jun 2006; John Mylchreest <johnm@gentoo.org>
589 -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
590 push new 2.6.16 release in preparation for stable
591
592 22 May 2006; <solar@gentoo.org> :
593 - redigest bug 134002
594
595 *hardened-sources-2.4.32-r5 (16 May 2006)
596
597 16 May 2006; Guillaume Destuynder <kang@gentoo.org>
598 +hardened-sources-2.4.32-r5.ebuild:
599 Fixes rsbac common patching (new patch in new -r5 patchset)
600
601 *hardened-sources-2.4.32-r4 (13 May 2006)
602
603 13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
604 +hardened-sources-2.4.32-r4.ebuild:
605 - security bumps
606
607 *hardened-sources-2.6.16-r6 (03 May 2006)
608
609 03 May 2006; John Mylchreest <johnm@gentoo.org>
610 +hardened-sources-2.6.16-r6.ebuild:
611 bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
612
613 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
614 hardened-sources-2.6.14-r8.ebuild:
615 fix x86_64 build problem, this will delay the digest issue again for a short
616 while but it will sort itself out
617
618 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
619 hardened-sources-2.6.14-r8.ebuild:
620 bump hardened patchset
621
622 27 Apr 2006; Alec Warner <antarus@gentoo.org>
623 files/digest-hardened-sources-2.4.32-r2,
624 files/digest-hardened-sources-2.4.32-r3,
625 files/digest-hardened-sources-2.6.14-r8, Manifest:
626 Fixing duff SHA256 digests: Bug # 131293
627
628 *hardened-sources-2.6.16-r5 (27 Apr 2006)
629
630 27 Apr 2006; John Mylchreest <johnm@gentoo.org>
631 -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
632 -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
633 stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
634 cleanup of old uneccessary sources
635
636 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
637 fix digest
638
639 *hardened-sources-2.6.14-r8 (20 Apr 2006)
640
641 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
642 +hardened-sources-2.6.14-r8.ebuild:
643 fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
644
645 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
646 Turning on gpg-signing again, and recomitting
647
648 *hardened-sources-2.6.16-r4 (20 Apr 2006)
649
650 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
651 -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
652 +hardened-sources-2.6.16-r4.ebuild:
653 Fix numerous security vulns
654
655 *hardened-sources-2.4.32-r3 (16 Apr 2006)
656
657 16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
658 -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
659 +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
660 - security bump for bug #112791. Removed old ebuilds
661
662 *hardened-sources-2.6.16-r3 (15 Apr 2006)
663
664 15 Apr 2006; John Mylchreest <johnm@gentoo.org>
665 +hardened-sources-2.6.16-r3.ebuild:
666 Removing silly localversion which I missed
667
668 *hardened-sources-2.6.14-r7 (14 Apr 2006)
669
670 14 Apr 2006; John Mylchreest <johnm@gentoo.org>
671 -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
672 Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
673
674 *hardened-sources-2.6.16-r2 (13 Apr 2006)
675
676 13 Apr 2006; John Mylchreest <johnm@gentoo.org>
677 -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
678 +hardened-sources-2.6.16-r2.ebuild:
679 Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
680 labels, dropping USERGROUP define fixes, since these were merged mainstream.
681
682 *hardened-sources-2.6.16-r1 (11 Apr 2006)
683
684 11 Apr 2006; John Mylchreest <johnm@gentoo.org>
685 +hardened-sources-2.6.16-r1.ebuild:
686 Bumping to include ppc build fix and 2.6.16.3
687
688 06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
689 hardened-sources-2.6.14-r6.ebuild:
690 Stable on x86; bug #127718
691
692 *hardened-sources-2.6.16 (31 Mar 2006)
693
694 31 Mar 2006; John Mylchreest <johnm@gentoo.org>
695 +hardened-sources-2.6.16.ebuild:
696 Bumping to new version of grsec, and kernel base. New squashfs. Based on
697 2.6.16.1
698
699 30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
700 hardened-sources-2.6.14-r6.ebuild:
701 Stable on amd64, bug 127718.
702
703 28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
704 Stable on ppc. Bug #127718
705
706 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
707 -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
708 -hardened-sources-2.6.14-r4.ebuild:
709 Cleanup.
710
711 *hardened-sources-2.6.14-r6 (15 Mar 2006)
712
713 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
714 +hardened-sources-2.6.14-r6.ebuild:
715 Fixes grsec policy recreation bug and adds a
716 >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
717
718 02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
719 - stable on x86
720
721 19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
722 hardened-sources-2.6.14-r5.ebuild:
723 Stable on ppc.
724
725 *hardened-sources-2.6.14-r5 (01 Feb 2006)
726
727 01 Feb 2006; John Mylchreest <johnm@gentoo.org>
728 +hardened-sources-2.6.14-r5.ebuild:
729 fixing every known exploit
730
731 *hardened-sources-2.4.32-r2 (26 Jan 2006)
732
733 26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
734 +hardened-sources-2.4.32-r2.ebuild:
735 - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
736
737 *hardened-sources-2.6.14-r4 (12 Jan 2006)
738
739 12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
740 - version bump for new genpatches which fix up a few sec holes
741
742 *hardened-sources-2.4.32-r1 (05 Jan 2006)
743
744 05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
745 - revision bump to add misc vital linux kernel security patches.
746
747 *hardened-sources-2.6.14-r3 (30 Dec 2005)
748
749 30 Dec 2005; John Mylchreest <johnm@gentoo.org>
750 -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
751 Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
752
753 28 Dec 2005; John Mylchreest <johnm@gentoo.org>
754 hardened-sources-2.6.14-r2.ebuild:
755 making x86 & amd64 stable following testing.
756
757 *hardened-sources-2.6.14-r2 (27 Dec 2005)
758
759 27 Dec 2005; John Mylchreest <johnm@gentoo.org>
760 -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
761 Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
762 network hooks.
763
764 06 Dec 2005; John Mylchreest <johnm@gentoo.org>
765 hardened-sources-2.6.14-r1.ebuild:
766 bumping to stable early for sec fix on x86 & amd64
767
768 *hardened-sources-2.6.14-r1 (05 Dec 2005)
769
770 05 Dec 2005; John Mylchreest <johnm@gentoo.org>
771 -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
772 bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
773
774 04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
775 - stable on x86 security bug #114227 CAN-2005-3257
776
777 *hardened-sources-2.4.32 (19 Nov 2005)
778
779 19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
780 +hardened-sources-2.4.32.ebuild:
781 Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
782 Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
783 have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
784 rsbac >> /etc/portage/package.use)
785
786 *hardened-sources-2.6.14 (14 Nov 2005)
787
788 14 Nov 2005; John Mylchreest <johnm@gentoo.org>
789 -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
790 Bumping 2.6 series to 2.6.14.2
791
792 *hardened-sources-2.6.13-r2 (20 Oct 2005)
793
794 20 Oct 2005; John Mylchreest <johnm@gentoo.org>
795 -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
796 +hardened-sources-2.6.13-r2.ebuild:
797 Fixes minor build error in ppc.
798
799 *hardened-sources-2.6.13-r1 (17 Oct 2005)
800
801 17 Oct 2005; John Mylchreest <johnm@gentoo.org>
802 +hardened-sources-2.6.13-r1.ebuild:
803 Updating grsec to latest snapshot. Fixes some minor issues. Updating to
804 2.6.13.4, fixes some major amd64 stability problems.
805
806 *hardened-sources-2.6.13 (16 Sep 2005)
807
808 16 Sep 2005; John Mylchreest <johnm@gentoo.org>
809 -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
810 2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
811 ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
812 users should test this thoroughly.
813
814 01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
815 - stable on x86
816
817 *hardened-sources-2.6.11-r15 (27 Jun 2005)
818
819 27 Jun 2005; John Mylchreest <johnm@gentoo.org>
820 +hardened-sources-2.6.11-r15.ebuild:
821 Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
822 grsec redefining curr_ip struct.
823
824 *hardened-sources-2.4.31 (20 Jun 2005)
825
826 20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
827 initial import of 2.4.31 tree
828
829 *hardened-sources-2.6.11-r14 (14 Jun 2005)
830
831 14 Jun 2005; John Mylchreest <johnm@gentoo.org>
832 -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
833 Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
834 naming scheme to abide by genpatches
835
836 *hardened-sources-2.6.11-r13 (18 May 2005)
837
838 18 May 2005; John Mylchreest <johnm@gentoo.org>
839 -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
840 Managed to mangle the Makefile patch from grsec, to miss out the grsec
841 target. sorry about that. Fixes bug #93022
842
843 *hardened-sources-2.6.11-r12 (17 May 2005)
844
845 17 May 2005; John Mylchreest <johnm@gentoo.org>
846 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
847 +hardened-sources-2.6.11-r12.ebuild:
848 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
849 merges in genpatches-base
850
851 *hardened-sources-2.6.11-r12 (17 May 2005)
852
853 17 May 2005; John Mylchreest <johnm@gentoo.org>
854 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
855 +hardened-sources-2.6.11-r12.ebuild:
856 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
857 merges in genpatches-base
858
859 29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
860 -files/2.4.27-cmdline-race.patch,
861 -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
862 -files/2.4.28-grsec-binfmt_a.out.patch,
863 -files/2.4.28-grsec-cmdline-race.patch,
864 -files/2.4.28-selinux-binfmt_a.out.patch,
865 -files/2.4.28-selinux-cmdline-race.patch,
866 -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
867 hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
868 - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
869 cleanup..
870
871 *hardened-sources-2.4.30-r1 (21 Apr 2005)
872
873 21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
874 - disable aout by default
875
876 *hardened-sources-2.4.30 (18 Apr 2005)
877
878 18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
879 - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
880 and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
881 use
882
883 *hardened-sources-2.4.29 (30 Mar 2005)
884
885 30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
886 +hardened-sources-2.4.29.ebuild:
887 New hardened-patches-2.4-29.0 patchball.
888 Removed SELinux support, upgraded GRSecurity to 2.1.4.
889
890 *hardened-sources-2.4.28-r5 (06 Mar 2005)
891
892 06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
893 +hardened-sources-2.4.28-r5.ebuild:
894 Added a fix for a PaX vulnerability.
895
896 26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
897 hardened-sources-2.4.28-r4.ebuild:
898 Stable on x86
899
900 23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
901 hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
902 hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
903 hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
904 - fixed/added RDEPEND= in all kernel-2 ebuilds
905
906 *hardened-sources-2.4.28-r4 (21 Jan 2005)
907
908 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
909 +hardened-sources-2.4.28-r4.ebuild:
910 Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
911 backport of neighbour hash updates.
912
913 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
914 hardened-sources-2.4.28-r3.ebuild:
915 Stable on x86
916
917 *hardened-sources-2.6.10-r3 (20 Jan 2005)
918
919 20 Jan 2005; Brandon Hale <tseng@gentoo.org>
920 +hardened-sources-2.6.10-r3.ebuild:
921 Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
922 in 2005.0
923
924 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
925 -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
926 hardened-sources-2.4.28-r2.ebuild:
927 Mark stable on x86
928
929 *hardened-sources-2.4.28-r3 (17 Jan 2005)
930
931 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
932 +hardened-sources-2.4.28-r3.ebuild:
933 Fix SMP page fault handler vuln, and update device-mapper and evms patches.
934
935 14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
936 hardened-sources-2.4.28.ebuild:
937 Mark stable on x86.
938
939 *hardened-sources-2.4.28-r2 (13 Jan 2005)
940
941 13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
942 +hardened-sources-2.4.28-r2.ebuild:
943 Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
944 Mazinger for grsecurity patches as well.
945
946 *hardened-sources-2.4.28-r1 (23 Dec 2004)
947
948 23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
949 Security bump. Thank tocharian for rolling a new patchset...
950
951 28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
952 +files/2.4.28-grsec-cmdline-race.patch,
953 +files/2.4.28-selinux-binfmt_a.out.patch,
954 +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
955 - Round up remaining security patches that appear to be missing in 2.4.28. -
956 PaX standalone updated to current. hgpv=28.1
957
958 *hardened-sources-2.4.28 (28 Nov 2004)
959
960 28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
961 security bump. Thank tocharian for rolling a new patchset
962
963 *hardened-sources-2.4.27-r3 (08 Sep 2004)
964
965 08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
966 +hardened-sources-2.4.27-r3.ebuild:
967 Applies the new 2.4-27.2 patchball which updates
968 GRSecurity to the 2.0.1 version.
969
970 *hardened-sources-2.4.27-r2 (31 Aug 2004)
971
972 31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
973 +hardened-sources-2.4.27-r2.ebuild:
974 Version bump.
975 This version uses the new 2.4-27.1 patchball which updates
976 both the SELinux PaX hooks patch and the SELinux headers.
977
978 *hardened-sources-2.4.27-r1 (09 Aug 2004)
979
980 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
981 +hardened-sources-2.4.27-r1.ebuild,
982 -hardened-sources-2.4.27.ebuild,
983 +files/2.4.27-cmdline-race.patch:
984 Version bump, fix for cmdline race. See bug #59905.
985
986 *hardened-sources-2.4.26-r6 (09 Aug 2004)
987
988 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
989 +hardened-sources-2.4.26-r6.ebuild,
990 -hardened-sources-2.4.26-r5.ebuild,
991 -hardened-sources-2.4.26-r4.ebuild,
992 +files/2.4.26-cmdline-race.patch:
993 Version bump, fix for cmdline race. See bug #59905.
994
995 *hardened-sources-2.4.27 (08 Aug 2004)
996
997 08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
998 +hardened-sources-2.4.27.ebuild,
999 +files/2.4.27-CAN-2004-0394.patch:
1000 Ported the patchball to the 2.4.27 kernel version.
1001
1002 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1003
1004 07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1005 +hardened-sources-2.4.26-r5.ebuild:
1006 Updated to use the new hardened-patches-2.4-26.1 patchball.
1007 It adds the following features:
1008 - Squashfs
1009 - Ebtables
1010 - Netdev random (core+drivers)
1011 - Watchdog Timer (WDT) fix.
1012
1013 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1014
1015 04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1016 +hardened-sources-2.4.26-r4.ebuild,
1017 +files/2.4.26-CAN-2004-0415.patch,
1018 -hardened-sources-2.4.26-3:
1019 Version bump, fix for CAN 0415, see bug #59378.
1020
1021 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1022
1023 22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1024 +hardened-sources-2.4.26-r3.ebuild,
1025 +files/2.4.26-CAN-2004-0497.patch,
1026 -hardened-sources-2.4.26-r2.ebuild:
1027 Version bump, fixed CAN 0497, see bug #56171.
1028
1029 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1030
1031 29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1032 +hardened-sources-2.4.26-r2.ebuild,
1033 +files/2.4.26-CAN-2004-0495.patch,
1034 +files/2.4.26-CAN-2004-0535.patch,
1035 -hardened-sources-2.4.26-r1.ebuild:
1036 Fixes for both CAN 0495 and 0535, see bug #54976
1037
1038 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1039 hardened-sources-2.4.26-r1.ebuild:
1040 QA - fix use invocation
1041
1042 *hardened-sources-2.4.26-r1 (22 June 2004)
1043
1044 22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1045 +hardened-sources-2.4.26-r1.ebuild,
1046 +files/2.4.26-CAN-2004-0394.patch,
1047 +files/2.4.26-signal-race.patch,
1048 -hardened-sources-2.4.26.ebuild,
1049 -hardened-sources-2.4.24-r3.ebuild:
1050 Version bump for the CAN-2004-0394 issue and bug #53804
1051 Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1052
1053
1054 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1055 hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1056 Masked hardened-sources-2.4.26.ebuild broken for ppc
1057
1058 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1059 hardened-sources-2.4.24-r3.ebuild:
1060 Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1061
1062 *hardened-sources-2.4.26 (29 May 2004)
1063
1064 29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1065 +hardened-sources-2.4.26.ebuild:
1066 Updated hardened-sources for the 2.4.26 kernel
1067 Removed broken components, updated almost everything.
1068
1069 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1070
1071 17 Apr 2004; <plasmaroo@gentoo.org>
1072 +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1073 +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1074 +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1075 +hardened-sources-2.4.24-r3.ebuild:
1076 Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1077 vulnerabilities. Old revisions removed.
1078
1079 *hardened-sources-2.4.24-r2 (15 Apr 2004)
1080
1081 15 Apr 2004; <plasmaroo@gentoo.org>
1082 +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1083 -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1084 Version bump for the CAN-2004-0109 issue; bug #47881.
1085
1086 12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1087 hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1088 Add eutils to inherit.
1089
1090 *hardened-sources-2.4.24-r1 (19 Feb 2004)
1091
1092 19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1093 files/hardened-sources-2.4.24.munmap.patch:
1094 Added the patch for the mremap/munmap vulnerability. Bug #42024.
1095
1096 *hardened-sources-2.4.24 (06 Feb 2004)
1097
1098 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1099 hardened-sources-2.4.24.ebuild:
1100 Version bump, updated most of the components.
1101 This release includes the following:
1102
1103 - Hardened security
1104 - Netfilter patch-o-matic 20031219
1105 - FreeSWAN 2.04 & x509 1.4.8
1106 - EVMS 2.2.2
1107 - XFS 1.3.1
1108 - cryptoloop jari
1109 - grsecurity 2.0-rc4
1110 - SELinux
1111 - PaX 200402060000
1112 - PaX Obscurity 200308302223
1113 - Others...
1114
1115 Neither -ck nor systrace are included anymore.
1116
1117 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1118
1119 05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1120 hardened-sources-2.4.22-r2.ebuild:
1121 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1122
1123 *hardened-sources-2.4.22-r1 (02 Dec 2003)
1124
1125 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1126 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1127
1128 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1129 hardened-sources-2.4.22-r1.ebuild:
1130 Version bump for the 'do_brk' vulnerability.
1131
1132 01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1133 hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1134 hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1135 hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1136 Fix the 'do_brk' vulnerability.
1137
1138 03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1139 hardened-sources-2.4.22.ebuild:
1140 - Removed the src_install() portion for SELinux flask
1141 components. These are no longer handled in the kernel
1142 so this code was not necessary.
1143
1144 29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1145 New 2.4.22 based hardened-sources thanks to
1146 Phil West <p.west@computer.org>.
1147
1148 These sources include:
1149 - New SELinux API
1150 - Updated CK-base
1151 - Updated GRSec
1152 - Systrace
1153 - SuperFreeS/WAN 1.99.8
1154 - Propolice kernel build support
1155 - EVMS
1156 - Other various security related patches
1157
1158 *hardened-sources-2.4.21 (14 Sep 2003)
1159
1160 14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1161 Updated hardened-sources based on the 2.4.21 Linux kernel.
1162 This includes updates to most major components such as:
1163 - ck-base-0306300059
1164 - selinux-2.4-2003071106
1165 - grsecurity-2.0-rc1
1166 - Updated IPTables patch-o-matic
1167 - Updated SuperFreeS/WAN
1168
1169 Thanks to Phil West <pwest@computer.org> for his work in getting this
1170 updated patch set ready for the 2.4.21 based kernel.
1171
1172 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1173 Initial import of hardened-sources-2.4.20-r4. This revision
1174 includes only a few changes, but one of these is an important
1175 security fix. It is recommended all users of hardened-sources
1176 upgrade to this release.
1177
1178 - ioperm bug fix
1179 - fixed compilation failure when building without GRSec
1180
1181 SAL (Secure Auditing for Linux) is NOT included in this revision
1182 due to time constraints, but is planned for inclusion in the near
1183 future.
1184
1185 *hardened-sources-2.4.20-r2 (12 Jun 2003)
1186
1187 12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1188 hardened-sources-2.4.20-r3.ebuild:
1189 Add Header...
1190
1191 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1192 hardened-sources-2.4.20-r3.ebuild:
1193 Removed warnings from ebuild. This kernel should be safe to
1194 use at this point.
1195
1196 *hardened-sources-2.4.20-r3 (08 Jun 2003)
1197
1198 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1199 hardened-sources-2.4.20-r3.ebuild:
1200 New revision. Includes the following changes over -r2:
1201
1202 - ck7-base (O(1), preempt, low latency)
1203 - Super FreeS/WAN 1.99.7rc2
1204 - PaX for the LSM/SELinux branch
1205 - GRSecurity 2.0-pre4 (role based access control)
1206 - Systrace 1.3
1207 - EXT3 fixes
1208 - EVMS 2.0.1
1209 - GCC 3.1+ compile optimizations
1210 - ProPolice kernel build support
1211 - Hashing table security fixes
1212
1213 *hardened-sources-2.4.20-r1 (09 Apr 2003)
1214
1215 23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1216 Initial import of hardened-sources-r2. This new
1217 ebuild includes many new performance and security
1218 related patches. As in -r1, it will patch in
1219 LSM/SELinux if "selinux" is in USE, otherwise it
1220 will patch in GRSecurity. The following patches
1221 are included in this revision:
1222
1223 - O(1) Scheduler, Low Latency, and Preempt
1224 (pulled from the base CK patch)
1225 - ptrace exploit patch for the LSM kernel
1226 (the GRSec patch already fixes this)
1227 - LSM 2.4-2003040709
1228 - SELinux 2.4-2003040709
1229 - Systrace v1.2
1230 - IPTables patch-o-matic base patches - 20030107
1231 - CryptoAPI 2.4.20.1 w/ loop-jari patch
1232 - Super FreeS/WAN 1.99.6.1
1233 - GRSecurity 1.9.9g
1234 - MPPE
1235 - EXT3 data journal fix
1236 - CIPE 1.5.4
1237
1238 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1239 hardened-sources-2.4.20-r1.ebuild, manifest:
1240 Updated to install flask components correctly for selinux.
1241
1242 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1243 hardened-sources-2.4.20-r1.ebuild:
1244 LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1245 is patched in instead. Ptrace patches for selinux have also been added. In
1246 either case, systrace support will be patched in as well.
1247
1248 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1249 hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1250 Revision bump for new sources.
1251
1252 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1253 hardened-sources-2.4.20-r1.ebuild:
1254 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1255
1256 *hardened-sources-2.4.20 (30 Mar 2003)
1257
1258 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1259 hardened-sources-2.4.20.ebuild:
1260 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20