/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.209 - (show annotations) (download)
Sun Feb 17 23:47:07 2008 UTC (6 years, 2 months ago) by solar
Branch: MAIN
Changes since 1.208: +7 -1 lines
- stable on x86 and remove old ebuilds
(Portage version: 2.1.3.19)

1 # ChangeLog for sys-kernel/hardened-sources
2 # Copyright 2000-2008 Gentoo Foundation; Distributed under the GPL v2
3 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.208 2008/02/15 19:08:54 solar Exp $
4
5 17 Feb 2008; <solar@gentoo.org> metadata.xml,
6 -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
7 -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
8 -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
9 - stable on x86 and remove old ebuilds
10
11 15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
12 - stable on amd64 per request of amd64 lead
13
14 *hardened-sources-2.6.23-r7 (11 Feb 2008)
15
16 11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
17 - version bump from kerin.millar
18 Changes:
19
20 * Bump to genpatches-base-2.6.23-9
21 * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
22 * Disables COMPAT_VDSO in x86/defconfig
23 * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
24
25 25 Jan 2008; Christian Heim <phreak@gentoo.org>
26 -hardened-sources-2.6.22-r8.ebuild:
27 Cleaning up old versions.
28
29 *hardened-sources-2.6.23-r6 (25 Jan 2008)
30
31 25 Jan 2008; Christian Heim <phreak@gentoo.org>
32 -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
33 Revision bump, pulling in the latest genpatches.
34
35 *hardened-sources-2.6.23-r5 (24 Dec 2007)
36
37 24 Dec 2007; Christian Heim <phreak@gentoo.org>
38 hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
39 hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
40 hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
41 Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
42
43 24 Dec 2007; Christian Heim <phreak@gentoo.org>
44 -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
45 -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
46 -hardened-sources-2.6.23-r3.ebuild:
47 Cleaning out some unused, old versions.
48
49 24 Dec 2007; Christian Heim <phreak@gentoo.org>
50 hardened-sources-2.6.23-r4.ebuild:
51 Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
52 in the tree for long, but there isn't much of a difference between this and
53 -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
54
55 *hardened-sources-2.6.23-r4 (23 Dec 2007)
56
57 23 Dec 2007; Christian Heim <phreak@gentoo.org>
58 +hardened-sources-2.6.23-r4.ebuild:
59 Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
60
61 *hardened-sources-2.6.23-r3 (04 Dec 2007)
62
63 04 Dec 2007; Christian Heim <phreak@gentoo.org>
64 +hardened-sources-2.6.23-r3.ebuild:
65 Revision bump, pulling in 2.6.23.9.
66
67 *hardened-sources-2.6.23-r2 (25 Nov 2007)
68
69 25 Nov 2007; Christian Heim <phreak@gentoo.org>
70 +hardened-sources-2.6.23-r2.ebuild:
71 Updated patchset, thanks to solar.
72
73 *hardened-sources-2.6.23-r1 (31 Oct 2007)
74
75 31 Oct 2007; Christian Heim <phreak@gentoo.org>
76 +hardened-sources-2.6.23-r1.ebuild:
77 Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
78
79 29 Oct 2007; <solar@gentoo.org> metadata.xml:
80 - update metadata.xml
81
82 25 Oct 2007; Christian Heim <phreak@gentoo.org>
83 hardened-sources-2.6.22-r8.ebuild:
84 Marking 2.6.22-r8 stable on amd64 and x86.
85
86 21 Oct 2007; Christian Heim <phreak@gentoo.org>
87 -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
88 -hardened-sources-2.6.21-r4.ebuild:
89 Removing old ebuilds.
90
91 *hardened-sources-2.4.35-r2 (21 Oct 2007)
92
93 21 Oct 2007; Christian Heim <phreak@gentoo.org>
94 +hardened-sources-2.4.35-r2.ebuild:
95 Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
96 patches.
97
98 *hardened-sources-2.6.22-r8 (21 Oct 2007)
99
100 21 Oct 2007; Christian Heim <phreak@gentoo.org>
101 +hardened-sources-2.6.22-r8.ebuild:
102 Yet another new patch, hopefully fixing the remaining issues we had w/
103 2.6.22. Candidate for stabling.
104
105 *hardened-sources-2.6.23 (13 Oct 2007)
106
107 13 Oct 2007; Christian Heim <phreak@gentoo.org>
108 +hardened-sources-2.6.23.ebuild:
109 Initial hardened-sources-2.6.23. If people still have problems w/ bug
110 194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
111
112 11 Oct 2007; Christian Heim <phreak@gentoo.org>
113 hardened-sources-2.6.20-r10.ebuild:
114 Pulling in yet another new genpatches version, fixing the PWC bug for real.
115
116 04 Oct 2007; Christian Heim <phreak@gentoo.org>
117 -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
118 Removing old versions.
119
120 *hardened-sources-2.6.22-r7 (01 Oct 2007)
121
122 01 Oct 2007; Christian Heim <phreak@gentoo.org>
123 +hardened-sources-2.6.22-r7.ebuild:
124 Revision bump, pulling in a newer patch. Should fix #194276.
125
126 30 Sep 2007; Christian Heim <phreak@gentoo.org>
127 hardened-sources-2.6.20-r10.ebuild:
128 Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
129 Mike Doty).
130
131 *hardened-sources-2.6.22-r6 (26 Sep 2007)
132
133 26 Sep 2007; Christian Heim <phreak@gentoo.org>
134 +hardened-sources-2.6.22-r6.ebuild:
135 Revision bump, grabbing up till Linux 2.6.22.9.
136
137 24 Sep 2007; Christian Heim <phreak@gentoo.org>
138 -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
139 Cleaning up further.
140
141 *hardened-sources-2.6.20-r10 (24 Sep 2007)
142
143 24 Sep 2007; Christian Heim <phreak@gentoo.org>
144 -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
145 +hardened-sources-2.6.20-r10.ebuild:
146 Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
147 revisions.
148
149 *hardened-sources-2.6.22-r5 (22 Sep 2007)
150
151 22 Sep 2007; Christian Heim <phreak@gentoo.org>
152 +hardened-sources-2.6.22-r5.ebuild:
153 Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
154
155 17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
156 Removing johnm from metadata.xml (see #186467 for reference).
157
158 *hardened-sources-2.6.22-r4 (17 Sep 2007)
159
160 17 Sep 2007; Christian Heim <phreak@gentoo.org>
161 +hardened-sources-2.6.22-r4.ebuild:
162 Revision bump, hopefully fixing all those weird PAX failures.
163
164 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
165 Updating the metadata.xml.
166
167 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
168 Removing tocharian from metadata due to his retirement (see #71718 for
169 reference).
170
171 *hardened-sources-2.6.20-r9 (30 Aug 2007)
172
173 30 Aug 2007; Christian Heim <phreak@gentoo.org>
174 +hardened-sources-2.6.20-r9.ebuild:
175 Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
176
177 29 Aug 2007; Christian Heim <phreak@gentoo.org>
178 -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
179 -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
180 -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
181 -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
182 -hardened-sources-2.6.22-r2.ebuild:
183 Removing some redundant versions.
184
185 *hardened-sources-2.4.35-r1 (29 Aug 2007)
186
187 29 Aug 2007; Christian Heim <phreak@gentoo.org>
188 +hardened-sources-2.4.35-r1.ebuild:
189 Revision bump, new grsecurity patch.
190
191 *hardened-sources-2.6.20-r8 (26 Aug 2007)
192
193 26 Aug 2007; Christian Heim <phreak@gentoo.org>
194 +hardened-sources-2.6.20-r8.ebuild:
195 Revision bump for Linux 2.6.20.17.
196
197 *hardened-sources-2.6.22-r3 (22 Aug 2007)
198
199 22 Aug 2007; Christian Heim <phreak@gentoo.org>
200 +hardened-sources-2.6.22-r3.ebuild:
201 Revision bump for Linux 2.6.22.4.
202
203 16 Aug 2007; Christian Heim <phreak@gentoo.org>
204 hardened-sources-2.6.22-r2.ebuild:
205 Updated patchset, to fix the alignment against 2.6.22.3.
206
207 *hardened-sources-2.6.22-r2 (16 Aug 2007)
208
209 16 Aug 2007; Christian Heim <phreak@gentoo.org>
210 +hardened-sources-2.6.22-r2.ebuild:
211 Revision bump for Linux 2.6.22.3.
212
213 *hardened-sources-2.4.35 (16 Aug 2007)
214
215 16 Aug 2007; Christian Heim <phreak@gentoo.org>
216 +hardened-sources-2.4.35.ebuild:
217 Version bump, initial version for Linux 2.4.35.
218
219 *hardened-sources-2.6.21-r4 (16 Aug 2007)
220
221 16 Aug 2007; Christian Heim <phreak@gentoo.org>
222 +hardened-sources-2.6.21-r4.ebuild:
223 Revision bump for Linux 2.6.21.6.
224
225 *hardened-sources-2.6.20-r7 (16 Aug 2007)
226
227 16 Aug 2007; Christian Heim <phreak@gentoo.org>
228 +hardened-sources-2.6.20-r7.ebuild:
229 Revision bump for Linux 2.6.20.16.
230
231 *hardened-sources-2.6.22-r1 (13 Aug 2007)
232
233 13 Aug 2007; Christian Heim <phreak@gentoo.org>
234 +hardened-sources-2.6.22-r1.ebuild:
235 Yet another revision bump.
236
237 *hardened-sources-2.6.22 (10 Aug 2007)
238
239 10 Aug 2007; Christian Heim <phreak@gentoo.org>
240 +hardened-sources-2.6.22.ebuild:
241 Initial release for 2.6.22. If you are using hardened-sources on a desktop
242 machine (P4 or newer), be aware you might need to disable
243 CONFIG_PAX_PAGEEXEC.
244
245 04 Aug 2007; Christian Heim <phreak@gentoo.org>
246 hardened-sources-2.6.20-r6.ebuild:
247 Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
248 2.6.20.15.
249
250 10 Jul 2007; Christian Heim <phreak@gentoo.org>
251 hardened-sources-2.6.20-r5.ebuild:
252 Marking hardened-sources-2.6.20-r5 stable on ppc.
253
254 10 Jul 2007; Christian Heim <phreak@gentoo.org>
255 -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
256 Cleanup.
257
258 *hardened-sources-2.6.20-r6 (08 Jul 2007)
259
260 08 Jul 2007; Christian Heim <phreak@gentoo.org>
261 +hardened-sources-2.6.20-r6.ebuild:
262 Revision bump, grabbing yet another stable release.
263
264 17 Jun 2007; Christian Heim <phreak@gentoo.org>
265 -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
266 -hardened-sources-2.6.21-r2.ebuild:
267 Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
268 alpha stable KEYWORD by mistake.
269
270 17 Jun 2007; Christian Heim <phreak@gentoo.org>
271 hardened-sources-2.6.20-r5.ebuild:
272 Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
273 genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
274
275 *hardened-sources-2.6.21-r3 (12 Jun 2007)
276
277 12 Jun 2007; Christian Heim <phreak@gentoo.org>
278 +hardened-sources-2.6.21-r3.ebuild:
279 Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
280 of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
281 love.
282
283 *hardened-sources-2.6.20-r5 (11 Jun 2007)
284
285 11 Jun 2007; Christian Heim <phreak@gentoo.org>
286 +hardened-sources-2.6.20-r5.ebuild:
287 Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
288 of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
289 love.
290
291 *hardened-sources-2.4.34.5 (11 Jun 2007)
292
293 11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
294 +hardened-sources-2.4.34.5.ebuild:
295 added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
296
297 30 May 2007; Christian Heim <phreak@gentoo.org>
298 -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
299 Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
300 stale ebuild(s).
301
302 30 May 2007; Christian Heim <phreak@gentoo.org>
303 -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
304 -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
305 -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
306 Doing some cleanups, remove stale ebuilds.
307
308 26 May 2007; Christian Heim <phreak@gentoo.org>
309 hardened-sources-2.6.21-r2.ebuild:
310 Fixing the grsecurity patch, had one '};' too much.
311
312 *hardened-sources-2.6.21-r2 (26 May 2007)
313
314 26 May 2007; Christian Heim <phreak@gentoo.org>
315 -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
316 +hardened-sources-2.6.21-r2.ebuild:
317 Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
318 grsecurity patch to 2.1.10-2.6.21.1-200705221918.
319
320 *hardened-sources-2.6.20-r4 (26 May 2007)
321
322 26 May 2007; Christian Heim <phreak@gentoo.org>
323 -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
324 Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
325 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
326
327 15 May 2007; Christian Heim <phreak@gentoo.org>
328 hardened-sources-2.6.20-r3.ebuild:
329 Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
330 introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
331 grsecurity patch fail in that exact same hunk.
332
333 *hardened-sources-2.6.20-r3 (15 May 2007)
334
335 15 May 2007; Christian Heim <phreak@gentoo.org>
336 +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
337 Revision bump, incorporating Linux 2.6.20.11.
338
339 *hardened-sources-2.6.21-r1 (11 May 2007)
340
341 11 May 2007; Christian Heim <phreak@gentoo.org>
342 +hardened-sources-2.6.21-r1.ebuild:
343 Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
344 mentioned in #177234.
345
346 07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
347 files/digest-hardened-sources-2.6.21, Manifest:
348 Fix Manifest/digest for linux-2.6.21.tar.bz2
349
350 06 May 2007; Christian Heim <phreak@gentoo.org>
351 hardened-sources-2.6.21.ebuild:
352 Bumping the hardened-patches version, needed for the fix for #177234.
353
354 *hardened-sources-2.6.21 (02 May 2007)
355
356 02 May 2007; Christian Heim <phreak@gentoo.org>
357 +hardened-sources-2.6.21.ebuild:
358 Version bump, Linux 2.6.21-hardened.
359
360 29 Apr 2007; Christian Heim <phreak@gentoo.org>
361 hardened-sources-2.6.20-r2.ebuild:
362 Adding ~ia64 on Ned's request.
363
364 29 Apr 2007; Christian Heim <phreak@gentoo.org>
365 hardened-sources-2.6.20-r2.ebuild:
366 Fixing the included grsecurity patch, wasn't alligning due to the Index:
367 header line(s).
368
369 29 Apr 2007; Christian Heim <phreak@gentoo.org>
370 hardened-sources-2.6.20-r2.ebuild:
371 Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
372
373 *hardened-sources-2.6.20-r2 (10 Apr 2007)
374
375 10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
376 +hardened-sources-2.6.20-r2.ebuild:
377 Version bump, on behalf of phreak
378
379 *hardened-sources-2.6.20-r1 (04 Apr 2007)
380
381 04 Apr 2007; Christian Heim <phreak@gentoo.org>
382 +hardened-sources-2.6.20-r1.ebuild:
383 Revision bump, grabbing a newer grsecurity snapshot.
384
385 *hardened-sources-2.6.20 (25 Mar 2007)
386
387 25 Mar 2007; Christian Heim <phreak@gentoo.org>
388 +hardened-sources-2.6.20.ebuild:
389 Finally a hardened-sources version for 2.6.20; many people have been waiting
390 for this. Thanks to Steve for preliminary testing, thanks to Ned for the
391 testbox.
392
393 16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
394 hardened-sources-2.6.18-r6.ebuild:
395 Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
396
397 *hardened-sources-2.6.18-r6 (16 Mar 2007)
398
399 16 Mar 2007; Christian Heim <phreak@gentoo.org>
400 -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
401 Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
402 yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
403 supposed to be.
404
405 06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
406 Fixing the Manifest, the previous one was broken (as in still had the
407 deleted ebuild in it).
408
409 06 Mar 2007; Christian Heim <phreak@gentoo.org>
410 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
411 +hardened-sources-2.6.18-r5.ebuild:
412 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
413 Linux 2.6.18.8. Also cleaning up the older version.
414
415 *hardened-sources-2.6.18-r5 (06 Mar 2007)
416
417 06 Mar 2007; Christian Heim <phreak@gentoo.org>
418 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
419 +hardened-sources-2.6.18-r5.ebuild:
420 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
421 Linux 2.6.18.8. Also cleaning up the older version.
422
423 24 Feb 2007; Christian Heim <phreak@gentoo.org>
424 -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
425 -hardened-sources-2.6.19-r5.ebuild:
426 Removing some of the old version, that didn't work.
427
428 *hardened-sources-2.6.19-r6 (12 Feb 2007)
429
430 12 Feb 2007; Christian Heim <phreak@gentoo.org>
431 +hardened-sources-2.6.19-r6.ebuild:
432 Revision bump, including a new grsec version fixing #166235.
433
434 *hardened-sources-2.4.34 (24 Jan 2007)
435
436 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
437 Manifest:
438 updating Manifest with checksums of new tarball and ebuild
439
440 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
441 +hardened-sources-2.4.34.ebuild:
442 I added new hardened sources 2.4 update, this is a critical path
443 security bugfix - all users of h-s are strongly advised
444 to update their existing hardened sources to this version.
445 It contains a fix for a kernel vulnerability that is pertaining
446 to the PaX changes to virtual memory management, possibly leading
447 to a local kernel exploit ... see grsecurity.net forums and homepage
448
449 23 Jan 2007; Christian Heim <phreak@gentoo.org>
450 files/digest-hardened-sources-2.6.19-r5, Manifest:
451 Fixing the patch-tarball digest.
452
453 *hardened-sources-2.6.19-r5 (23 Jan 2007)
454
455 23 Jan 2007; Christian Heim <phreak@gentoo.org>
456 +hardened-sources-2.6.19-r5.ebuild:
457 Revision bump, closing the recently discovered PaX expand_stack()
458 vulnerability.
459
460 *hardened-sources-2.6.19-r4 (14 Jan 2007)
461
462 14 Jan 2007; Christian Heim <phreak@gentoo.org>
463 +hardened-sources-2.6.19-r4.ebuild:
464 Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
465 dropping the randomized PID feature.
466
467 11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
468 hardened-sources-2.4.33.4.ebuild:
469 stable x86, bug #161171
470
471 *hardened-sources-2.6.19-r3 (27 Dec 2006)
472
473 27 Dec 2006; Christian Heim <phreak@gentoo.org>
474 -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
475 Revision bump for bug #157186 and #158786.
476
477 *hardened-sources-2.6.18-r4 (27 Dec 2006)
478
479 27 Dec 2006; Christian Heim <phreak@gentoo.org>
480 -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
481 Revision bump for bug #157186.
482
483 *hardened-sources-2.6.19-r2 (23 Dec 2006)
484
485 23 Dec 2006; Christian Heim <phreak@gentoo.org>
486 -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
487 Revision bump to pull in genpatches-2.6.19-3 for #157186.
488
489 17 Dec 2006; Christian Heim <phreak@gentoo.org>
490 hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
491 hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
492 hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
493 hardened-sources-2.6.19-r1.ebuild:
494 Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
495 adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
496
497 *hardened-sources-2.4.33.4 (17 Dec 2006)
498
499 17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
500 +hardened-sources-2.4.33.4.ebuild:
501 new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
502 and quilting
503
504 *hardened-sources-2.6.19-r1 (14 Dec 2006)
505
506 14 Dec 2006; Christian Heim <phreak@gentoo.org>
507 -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
508 Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
509 for reporting).
510
511 *hardened-sources-2.6.19 (13 Dec 2006)
512
513 13 Dec 2006; Christian Heim <phreak@gentoo.org>
514 +hardened-sources-2.6.19.ebuild:
515 And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
516 Brad for providing that prompt update.
517
518 *hardened-sources-2.6.18-r3 (13 Dec 2006)
519
520 13 Dec 2006; Christian Heim <phreak@gentoo.org>
521 -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
522 +hardened-sources-2.6.18-r3.ebuild:
523 Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
524 S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
525
526 09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
527 Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
528
529 08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
530 Stable on ppc wrt bug 157356
531
532 07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
533 hardened-sources-2.6.18.ebuild:
534 stable x86, bug #157356
535
536 *hardened-sources-2.6.18-r2 (06 Dec 2006)
537
538 06 Dec 2006; Christian Heim <phreak@gentoo.org>
539 +hardened-sources-2.6.18-r2.ebuild:
540 Revision bump, including 2.6.18.5 (via genpatches) and
541 4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
542 Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
543 redesign.
544
545 06 Dec 2006; Christian Heim <phreak@gentoo.org>
546 hardened-sources-2.6.18.ebuild:
547 Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
548 of Mike Doty).
549
550 *hardened-sources-2.6.18-r1 (23 Nov 2006)
551
552 23 Nov 2006; Christian Heim <phreak@gentoo.org>
553 +hardened-sources-2.6.18-r1.ebuild:
554 Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
555
556 *hardened-sources-2.6.18 (11 Nov 2006)
557
558 11 Nov 2006; Christian Heim <phreak@gentoo.org>
559 +hardened-sources-2.6.18.ebuild:
560 Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
561
562 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
563 - mark amd64 stable also. bug #151877
564
565 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
566 - mark 2.6.17-r1 stable
567
568 27 Aug 2006; Christian Heim <phreak@gentoo.org>
569 -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
570 Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
571
572 *hardened-sources-2.6.17-r1 (26 Aug 2006)
573
574 26 Aug 2006; Christian Heim <phreak@gentoo.org>
575 +hardened-sources-2.6.17-r1.ebuild:
576 Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
577 grsecurity patch.
578
579 *hardened-sources-2.6.17 (17 Aug 2006)
580
581 17 Aug 2006; Christian Heim <phreak@gentoo.org>
582 +hardened-sources-2.6.17.ebuild:
583 Bumping the hardened-sources-2.6 series to 2.6.17, using
584 genpatches-2.6.17-6.base.
585
586 07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
587 - stable on x86 and amd64
588
589 *hardened-sources-2.6.16-r11 (15 Jul 2006)
590
591 15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
592 -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
593 -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
594 -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
595 - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
596 crusty ebuilds
597
598 14 Jul 2006; John Mylchreest <johnm@gentoo.org>
599 hardened-sources-2.6.16-r10.ebuild:
600 marking stable on x86 and amd64
601
602 13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
603 - 2.4.32-r6 stable on x86. RSBAC state unknown
604
605 *hardened-sources-2.4.32-r7 (10 Jul 2006)
606
607 10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
608 +hardened-sources-2.4.32-r7.ebuild:
609 Bump PaX for RSBAC to test-17
610
611 *hardened-sources-2.6.16-r9 (03 Jul 2006)
612
613 03 Jul 2006; John Mylchreest <johnm@gentoo.org>
614 -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
615 hardened-sources-2.6.16 bump to latest -base.
616
617 *hardened-sources-2.4.32-r6 (30 Jun 2006)
618
619 30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
620 hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
621 - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
622 sysctl controlable resource logging
623
624 *hardened-sources-2.6.16-r7 (05 Jun 2006)
625
626 05 Jun 2006; John Mylchreest <johnm@gentoo.org>
627 -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
628 push new 2.6.16 release in preparation for stable
629
630 22 May 2006; <solar@gentoo.org> :
631 - redigest bug 134002
632
633 *hardened-sources-2.4.32-r5 (16 May 2006)
634
635 16 May 2006; Guillaume Destuynder <kang@gentoo.org>
636 +hardened-sources-2.4.32-r5.ebuild:
637 Fixes rsbac common patching (new patch in new -r5 patchset)
638
639 *hardened-sources-2.4.32-r4 (13 May 2006)
640
641 13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
642 +hardened-sources-2.4.32-r4.ebuild:
643 - security bumps
644
645 *hardened-sources-2.6.16-r6 (03 May 2006)
646
647 03 May 2006; John Mylchreest <johnm@gentoo.org>
648 +hardened-sources-2.6.16-r6.ebuild:
649 bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
650
651 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
652 hardened-sources-2.6.14-r8.ebuild:
653 fix x86_64 build problem, this will delay the digest issue again for a short
654 while but it will sort itself out
655
656 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
657 hardened-sources-2.6.14-r8.ebuild:
658 bump hardened patchset
659
660 27 Apr 2006; Alec Warner <antarus@gentoo.org>
661 files/digest-hardened-sources-2.4.32-r2,
662 files/digest-hardened-sources-2.4.32-r3,
663 files/digest-hardened-sources-2.6.14-r8, Manifest:
664 Fixing duff SHA256 digests: Bug # 131293
665
666 *hardened-sources-2.6.16-r5 (27 Apr 2006)
667
668 27 Apr 2006; John Mylchreest <johnm@gentoo.org>
669 -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
670 -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
671 stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
672 cleanup of old uneccessary sources
673
674 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
675 fix digest
676
677 *hardened-sources-2.6.14-r8 (20 Apr 2006)
678
679 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
680 +hardened-sources-2.6.14-r8.ebuild:
681 fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
682
683 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
684 Turning on gpg-signing again, and recomitting
685
686 *hardened-sources-2.6.16-r4 (20 Apr 2006)
687
688 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
689 -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
690 +hardened-sources-2.6.16-r4.ebuild:
691 Fix numerous security vulns
692
693 *hardened-sources-2.4.32-r3 (16 Apr 2006)
694
695 16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
696 -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
697 +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
698 - security bump for bug #112791. Removed old ebuilds
699
700 *hardened-sources-2.6.16-r3 (15 Apr 2006)
701
702 15 Apr 2006; John Mylchreest <johnm@gentoo.org>
703 +hardened-sources-2.6.16-r3.ebuild:
704 Removing silly localversion which I missed
705
706 *hardened-sources-2.6.14-r7 (14 Apr 2006)
707
708 14 Apr 2006; John Mylchreest <johnm@gentoo.org>
709 -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
710 Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
711
712 *hardened-sources-2.6.16-r2 (13 Apr 2006)
713
714 13 Apr 2006; John Mylchreest <johnm@gentoo.org>
715 -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
716 +hardened-sources-2.6.16-r2.ebuild:
717 Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
718 labels, dropping USERGROUP define fixes, since these were merged mainstream.
719
720 *hardened-sources-2.6.16-r1 (11 Apr 2006)
721
722 11 Apr 2006; John Mylchreest <johnm@gentoo.org>
723 +hardened-sources-2.6.16-r1.ebuild:
724 Bumping to include ppc build fix and 2.6.16.3
725
726 06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
727 hardened-sources-2.6.14-r6.ebuild:
728 Stable on x86; bug #127718
729
730 *hardened-sources-2.6.16 (31 Mar 2006)
731
732 31 Mar 2006; John Mylchreest <johnm@gentoo.org>
733 +hardened-sources-2.6.16.ebuild:
734 Bumping to new version of grsec, and kernel base. New squashfs. Based on
735 2.6.16.1
736
737 30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
738 hardened-sources-2.6.14-r6.ebuild:
739 Stable on amd64, bug 127718.
740
741 28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
742 Stable on ppc. Bug #127718
743
744 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
745 -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
746 -hardened-sources-2.6.14-r4.ebuild:
747 Cleanup.
748
749 *hardened-sources-2.6.14-r6 (15 Mar 2006)
750
751 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
752 +hardened-sources-2.6.14-r6.ebuild:
753 Fixes grsec policy recreation bug and adds a
754 >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
755
756 02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
757 - stable on x86
758
759 19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
760 hardened-sources-2.6.14-r5.ebuild:
761 Stable on ppc.
762
763 *hardened-sources-2.6.14-r5 (01 Feb 2006)
764
765 01 Feb 2006; John Mylchreest <johnm@gentoo.org>
766 +hardened-sources-2.6.14-r5.ebuild:
767 fixing every known exploit
768
769 *hardened-sources-2.4.32-r2 (26 Jan 2006)
770
771 26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
772 +hardened-sources-2.4.32-r2.ebuild:
773 - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
774
775 *hardened-sources-2.6.14-r4 (12 Jan 2006)
776
777 12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
778 - version bump for new genpatches which fix up a few sec holes
779
780 *hardened-sources-2.4.32-r1 (05 Jan 2006)
781
782 05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
783 - revision bump to add misc vital linux kernel security patches.
784
785 *hardened-sources-2.6.14-r3 (30 Dec 2005)
786
787 30 Dec 2005; John Mylchreest <johnm@gentoo.org>
788 -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
789 Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
790
791 28 Dec 2005; John Mylchreest <johnm@gentoo.org>
792 hardened-sources-2.6.14-r2.ebuild:
793 making x86 & amd64 stable following testing.
794
795 *hardened-sources-2.6.14-r2 (27 Dec 2005)
796
797 27 Dec 2005; John Mylchreest <johnm@gentoo.org>
798 -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
799 Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
800 network hooks.
801
802 06 Dec 2005; John Mylchreest <johnm@gentoo.org>
803 hardened-sources-2.6.14-r1.ebuild:
804 bumping to stable early for sec fix on x86 & amd64
805
806 *hardened-sources-2.6.14-r1 (05 Dec 2005)
807
808 05 Dec 2005; John Mylchreest <johnm@gentoo.org>
809 -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
810 bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
811
812 04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
813 - stable on x86 security bug #114227 CAN-2005-3257
814
815 *hardened-sources-2.4.32 (19 Nov 2005)
816
817 19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
818 +hardened-sources-2.4.32.ebuild:
819 Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
820 Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
821 have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
822 rsbac >> /etc/portage/package.use)
823
824 *hardened-sources-2.6.14 (14 Nov 2005)
825
826 14 Nov 2005; John Mylchreest <johnm@gentoo.org>
827 -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
828 Bumping 2.6 series to 2.6.14.2
829
830 *hardened-sources-2.6.13-r2 (20 Oct 2005)
831
832 20 Oct 2005; John Mylchreest <johnm@gentoo.org>
833 -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
834 +hardened-sources-2.6.13-r2.ebuild:
835 Fixes minor build error in ppc.
836
837 *hardened-sources-2.6.13-r1 (17 Oct 2005)
838
839 17 Oct 2005; John Mylchreest <johnm@gentoo.org>
840 +hardened-sources-2.6.13-r1.ebuild:
841 Updating grsec to latest snapshot. Fixes some minor issues. Updating to
842 2.6.13.4, fixes some major amd64 stability problems.
843
844 *hardened-sources-2.6.13 (16 Sep 2005)
845
846 16 Sep 2005; John Mylchreest <johnm@gentoo.org>
847 -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
848 2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
849 ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
850 users should test this thoroughly.
851
852 01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
853 - stable on x86
854
855 *hardened-sources-2.6.11-r15 (27 Jun 2005)
856
857 27 Jun 2005; John Mylchreest <johnm@gentoo.org>
858 +hardened-sources-2.6.11-r15.ebuild:
859 Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
860 grsec redefining curr_ip struct.
861
862 *hardened-sources-2.4.31 (20 Jun 2005)
863
864 20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
865 initial import of 2.4.31 tree
866
867 *hardened-sources-2.6.11-r14 (14 Jun 2005)
868
869 14 Jun 2005; John Mylchreest <johnm@gentoo.org>
870 -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
871 Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
872 naming scheme to abide by genpatches
873
874 *hardened-sources-2.6.11-r13 (18 May 2005)
875
876 18 May 2005; John Mylchreest <johnm@gentoo.org>
877 -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
878 Managed to mangle the Makefile patch from grsec, to miss out the grsec
879 target. sorry about that. Fixes bug #93022
880
881 *hardened-sources-2.6.11-r12 (17 May 2005)
882
883 17 May 2005; John Mylchreest <johnm@gentoo.org>
884 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
885 +hardened-sources-2.6.11-r12.ebuild:
886 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
887 merges in genpatches-base
888
889 *hardened-sources-2.6.11-r12 (17 May 2005)
890
891 17 May 2005; John Mylchreest <johnm@gentoo.org>
892 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
893 +hardened-sources-2.6.11-r12.ebuild:
894 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
895 merges in genpatches-base
896
897 29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
898 -files/2.4.27-cmdline-race.patch,
899 -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
900 -files/2.4.28-grsec-binfmt_a.out.patch,
901 -files/2.4.28-grsec-cmdline-race.patch,
902 -files/2.4.28-selinux-binfmt_a.out.patch,
903 -files/2.4.28-selinux-cmdline-race.patch,
904 -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
905 hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
906 - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
907 cleanup..
908
909 *hardened-sources-2.4.30-r1 (21 Apr 2005)
910
911 21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
912 - disable aout by default
913
914 *hardened-sources-2.4.30 (18 Apr 2005)
915
916 18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
917 - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
918 and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
919 use
920
921 *hardened-sources-2.4.29 (30 Mar 2005)
922
923 30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
924 +hardened-sources-2.4.29.ebuild:
925 New hardened-patches-2.4-29.0 patchball.
926 Removed SELinux support, upgraded GRSecurity to 2.1.4.
927
928 *hardened-sources-2.4.28-r5 (06 Mar 2005)
929
930 06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
931 +hardened-sources-2.4.28-r5.ebuild:
932 Added a fix for a PaX vulnerability.
933
934 26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
935 hardened-sources-2.4.28-r4.ebuild:
936 Stable on x86
937
938 23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
939 hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
940 hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
941 hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
942 - fixed/added RDEPEND= in all kernel-2 ebuilds
943
944 *hardened-sources-2.4.28-r4 (21 Jan 2005)
945
946 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
947 +hardened-sources-2.4.28-r4.ebuild:
948 Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
949 backport of neighbour hash updates.
950
951 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
952 hardened-sources-2.4.28-r3.ebuild:
953 Stable on x86
954
955 *hardened-sources-2.6.10-r3 (20 Jan 2005)
956
957 20 Jan 2005; Brandon Hale <tseng@gentoo.org>
958 +hardened-sources-2.6.10-r3.ebuild:
959 Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
960 in 2005.0
961
962 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
963 -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
964 hardened-sources-2.4.28-r2.ebuild:
965 Mark stable on x86
966
967 *hardened-sources-2.4.28-r3 (17 Jan 2005)
968
969 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
970 +hardened-sources-2.4.28-r3.ebuild:
971 Fix SMP page fault handler vuln, and update device-mapper and evms patches.
972
973 14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
974 hardened-sources-2.4.28.ebuild:
975 Mark stable on x86.
976
977 *hardened-sources-2.4.28-r2 (13 Jan 2005)
978
979 13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
980 +hardened-sources-2.4.28-r2.ebuild:
981 Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
982 Mazinger for grsecurity patches as well.
983
984 *hardened-sources-2.4.28-r1 (23 Dec 2004)
985
986 23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
987 Security bump. Thank tocharian for rolling a new patchset...
988
989 28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
990 +files/2.4.28-grsec-cmdline-race.patch,
991 +files/2.4.28-selinux-binfmt_a.out.patch,
992 +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
993 - Round up remaining security patches that appear to be missing in 2.4.28. -
994 PaX standalone updated to current. hgpv=28.1
995
996 *hardened-sources-2.4.28 (28 Nov 2004)
997
998 28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
999 security bump. Thank tocharian for rolling a new patchset
1000
1001 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1002
1003 08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1004 +hardened-sources-2.4.27-r3.ebuild:
1005 Applies the new 2.4-27.2 patchball which updates
1006 GRSecurity to the 2.0.1 version.
1007
1008 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1009
1010 31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1011 +hardened-sources-2.4.27-r2.ebuild:
1012 Version bump.
1013 This version uses the new 2.4-27.1 patchball which updates
1014 both the SELinux PaX hooks patch and the SELinux headers.
1015
1016 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1017
1018 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1019 +hardened-sources-2.4.27-r1.ebuild,
1020 -hardened-sources-2.4.27.ebuild,
1021 +files/2.4.27-cmdline-race.patch:
1022 Version bump, fix for cmdline race. See bug #59905.
1023
1024 *hardened-sources-2.4.26-r6 (09 Aug 2004)
1025
1026 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1027 +hardened-sources-2.4.26-r6.ebuild,
1028 -hardened-sources-2.4.26-r5.ebuild,
1029 -hardened-sources-2.4.26-r4.ebuild,
1030 +files/2.4.26-cmdline-race.patch:
1031 Version bump, fix for cmdline race. See bug #59905.
1032
1033 *hardened-sources-2.4.27 (08 Aug 2004)
1034
1035 08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1036 +hardened-sources-2.4.27.ebuild,
1037 +files/2.4.27-CAN-2004-0394.patch:
1038 Ported the patchball to the 2.4.27 kernel version.
1039
1040 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1041
1042 07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1043 +hardened-sources-2.4.26-r5.ebuild:
1044 Updated to use the new hardened-patches-2.4-26.1 patchball.
1045 It adds the following features:
1046 - Squashfs
1047 - Ebtables
1048 - Netdev random (core+drivers)
1049 - Watchdog Timer (WDT) fix.
1050
1051 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1052
1053 04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1054 +hardened-sources-2.4.26-r4.ebuild,
1055 +files/2.4.26-CAN-2004-0415.patch,
1056 -hardened-sources-2.4.26-3:
1057 Version bump, fix for CAN 0415, see bug #59378.
1058
1059 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1060
1061 22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1062 +hardened-sources-2.4.26-r3.ebuild,
1063 +files/2.4.26-CAN-2004-0497.patch,
1064 -hardened-sources-2.4.26-r2.ebuild:
1065 Version bump, fixed CAN 0497, see bug #56171.
1066
1067 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1068
1069 29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1070 +hardened-sources-2.4.26-r2.ebuild,
1071 +files/2.4.26-CAN-2004-0495.patch,
1072 +files/2.4.26-CAN-2004-0535.patch,
1073 -hardened-sources-2.4.26-r1.ebuild:
1074 Fixes for both CAN 0495 and 0535, see bug #54976
1075
1076 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1077 hardened-sources-2.4.26-r1.ebuild:
1078 QA - fix use invocation
1079
1080 *hardened-sources-2.4.26-r1 (22 June 2004)
1081
1082 22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1083 +hardened-sources-2.4.26-r1.ebuild,
1084 +files/2.4.26-CAN-2004-0394.patch,
1085 +files/2.4.26-signal-race.patch,
1086 -hardened-sources-2.4.26.ebuild,
1087 -hardened-sources-2.4.24-r3.ebuild:
1088 Version bump for the CAN-2004-0394 issue and bug #53804
1089 Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1090
1091
1092 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1093 hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1094 Masked hardened-sources-2.4.26.ebuild broken for ppc
1095
1096 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1097 hardened-sources-2.4.24-r3.ebuild:
1098 Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1099
1100 *hardened-sources-2.4.26 (29 May 2004)
1101
1102 29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1103 +hardened-sources-2.4.26.ebuild:
1104 Updated hardened-sources for the 2.4.26 kernel
1105 Removed broken components, updated almost everything.
1106
1107 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1108
1109 17 Apr 2004; <plasmaroo@gentoo.org>
1110 +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1111 +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1112 +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1113 +hardened-sources-2.4.24-r3.ebuild:
1114 Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1115 vulnerabilities. Old revisions removed.
1116
1117 *hardened-sources-2.4.24-r2 (15 Apr 2004)
1118
1119 15 Apr 2004; <plasmaroo@gentoo.org>
1120 +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1121 -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1122 Version bump for the CAN-2004-0109 issue; bug #47881.
1123
1124 12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1125 hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1126 Add eutils to inherit.
1127
1128 *hardened-sources-2.4.24-r1 (19 Feb 2004)
1129
1130 19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1131 files/hardened-sources-2.4.24.munmap.patch:
1132 Added the patch for the mremap/munmap vulnerability. Bug #42024.
1133
1134 *hardened-sources-2.4.24 (06 Feb 2004)
1135
1136 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1137 hardened-sources-2.4.24.ebuild:
1138 Version bump, updated most of the components.
1139 This release includes the following:
1140
1141 - Hardened security
1142 - Netfilter patch-o-matic 20031219
1143 - FreeSWAN 2.04 & x509 1.4.8
1144 - EVMS 2.2.2
1145 - XFS 1.3.1
1146 - cryptoloop jari
1147 - grsecurity 2.0-rc4
1148 - SELinux
1149 - PaX 200402060000
1150 - PaX Obscurity 200308302223
1151 - Others...
1152
1153 Neither -ck nor systrace are included anymore.
1154
1155 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1156
1157 05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1158 hardened-sources-2.4.22-r2.ebuild:
1159 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1160
1161 *hardened-sources-2.4.22-r1 (02 Dec 2003)
1162
1163 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1164 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1165
1166 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1167 hardened-sources-2.4.22-r1.ebuild:
1168 Version bump for the 'do_brk' vulnerability.
1169
1170 01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1171 hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1172 hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1173 hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1174 Fix the 'do_brk' vulnerability.
1175
1176 03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1177 hardened-sources-2.4.22.ebuild:
1178 - Removed the src_install() portion for SELinux flask
1179 components. These are no longer handled in the kernel
1180 so this code was not necessary.
1181
1182 29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1183 New 2.4.22 based hardened-sources thanks to
1184 Phil West <p.west@computer.org>.
1185
1186 These sources include:
1187 - New SELinux API
1188 - Updated CK-base
1189 - Updated GRSec
1190 - Systrace
1191 - SuperFreeS/WAN 1.99.8
1192 - Propolice kernel build support
1193 - EVMS
1194 - Other various security related patches
1195
1196 *hardened-sources-2.4.21 (14 Sep 2003)
1197
1198 14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1199 Updated hardened-sources based on the 2.4.21 Linux kernel.
1200 This includes updates to most major components such as:
1201 - ck-base-0306300059
1202 - selinux-2.4-2003071106
1203 - grsecurity-2.0-rc1
1204 - Updated IPTables patch-o-matic
1205 - Updated SuperFreeS/WAN
1206
1207 Thanks to Phil West <pwest@computer.org> for his work in getting this
1208 updated patch set ready for the 2.4.21 based kernel.
1209
1210 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1211 Initial import of hardened-sources-2.4.20-r4. This revision
1212 includes only a few changes, but one of these is an important
1213 security fix. It is recommended all users of hardened-sources
1214 upgrade to this release.
1215
1216 - ioperm bug fix
1217 - fixed compilation failure when building without GRSec
1218
1219 SAL (Secure Auditing for Linux) is NOT included in this revision
1220 due to time constraints, but is planned for inclusion in the near
1221 future.
1222
1223 *hardened-sources-2.4.20-r2 (12 Jun 2003)
1224
1225 12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1226 hardened-sources-2.4.20-r3.ebuild:
1227 Add Header...
1228
1229 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1230 hardened-sources-2.4.20-r3.ebuild:
1231 Removed warnings from ebuild. This kernel should be safe to
1232 use at this point.
1233
1234 *hardened-sources-2.4.20-r3 (08 Jun 2003)
1235
1236 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1237 hardened-sources-2.4.20-r3.ebuild:
1238 New revision. Includes the following changes over -r2:
1239
1240 - ck7-base (O(1), preempt, low latency)
1241 - Super FreeS/WAN 1.99.7rc2
1242 - PaX for the LSM/SELinux branch
1243 - GRSecurity 2.0-pre4 (role based access control)
1244 - Systrace 1.3
1245 - EXT3 fixes
1246 - EVMS 2.0.1
1247 - GCC 3.1+ compile optimizations
1248 - ProPolice kernel build support
1249 - Hashing table security fixes
1250
1251 *hardened-sources-2.4.20-r1 (09 Apr 2003)
1252
1253 23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1254 Initial import of hardened-sources-r2. This new
1255 ebuild includes many new performance and security
1256 related patches. As in -r1, it will patch in
1257 LSM/SELinux if "selinux" is in USE, otherwise it
1258 will patch in GRSecurity. The following patches
1259 are included in this revision:
1260
1261 - O(1) Scheduler, Low Latency, and Preempt
1262 (pulled from the base CK patch)
1263 - ptrace exploit patch for the LSM kernel
1264 (the GRSec patch already fixes this)
1265 - LSM 2.4-2003040709
1266 - SELinux 2.4-2003040709
1267 - Systrace v1.2
1268 - IPTables patch-o-matic base patches - 20030107
1269 - CryptoAPI 2.4.20.1 w/ loop-jari patch
1270 - Super FreeS/WAN 1.99.6.1
1271 - GRSecurity 1.9.9g
1272 - MPPE
1273 - EXT3 data journal fix
1274 - CIPE 1.5.4
1275
1276 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1277 hardened-sources-2.4.20-r1.ebuild, manifest:
1278 Updated to install flask components correctly for selinux.
1279
1280 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1281 hardened-sources-2.4.20-r1.ebuild:
1282 LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1283 is patched in instead. Ptrace patches for selinux have also been added. In
1284 either case, systrace support will be patched in as well.
1285
1286 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1287 hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1288 Revision bump for new sources.
1289
1290 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1291 hardened-sources-2.4.20-r1.ebuild:
1292 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1293
1294 *hardened-sources-2.4.20 (30 Mar 2003)
1295
1296 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1297 hardened-sources-2.4.20.ebuild:
1298 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20