/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.270 - (show annotations) (download)
Sat Jan 17 21:25:25 2009 UTC (5 years, 3 months ago) by gengor
Branch: MAIN
Changes since 1.269: +5 -1 lines
Stable 2.6.25-r12 on amd64/x86
(Portage version: 2.1.6.4/cvs/Linux 2.6.27-hardened-r4-rc1-2009011401 i686)

1 # ChangeLog for sys-kernel/hardened-sources
2 # Copyright 2000-2009 Gentoo Foundation; Distributed under the GPL v2
3 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.269 2009/01/14 16:44:34 gengor Exp $
4
5 17 Jan 2009; Gordon Malm <gengor@gentoo.org>
6 hardened-sources-2.6.25-r12.ebuild:
7 Stable amd64/x86.
8
9 14 Jan 2009; Gordon Malm <gengor@gentoo.org>
10 -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
11 -hardened-sources-2.6.27-r2.ebuild:
12 Clean out old versions.
13
14 *hardened-sources-2.6.27-r4 (14 Jan 2009)
15 *hardened-sources-2.6.26-r8 (14 Jan 2009)
16 *hardened-sources-2.6.25-r12 (14 Jan 2009)
17
18 14 Jan 2009; Gordon Malm <gengor@gentoo.org>
19 +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
20 +hardened-sources-2.6.27-r4.ebuild:
21 2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
22 2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
23 2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
24 grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
25
26 15 Dec 2008; nixnut <nixnut@gentoo.org>
27 hardened-sources-2.6.25-r11.ebuild:
28 Stable on ppc
29
30 09 Dec 2008; Gordon Malm <gengor@gentoo.org>
31 hardened-sources-2.6.25-r11.ebuild:
32 Stable amd64/x86.
33
34 *hardened-sources-2.6.27-r3 (07 Dec 2008)
35
36 07 Dec 2008; Gordon Malm <gengor@gentoo.org>
37 +hardened-sources-2.6.27-r3.ebuild:
38 Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
39 Fixes bug #248754, #249729 and #246607.
40
41 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
42 -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
43 Remove old versions.
44
45 *hardened-sources-2.6.26-r7 (03 Dec 2008)
46 *hardened-sources-2.6.25-r11 (03 Dec 2008)
47
48 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
49 +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
50 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
51 2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
52 Both include many backports from 2.6.27.{6,7} -stable releases.
53
54 24 Nov 2008; Gordon Malm <gengor@gentoo.org>
55 -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
56 Remove versions broken on ARCHes != x86/amd64.
57
58 *hardened-sources-2.6.27-r2 (24 Nov 2008)
59
60 24 Nov 2008; Gordon Malm <gengor@gentoo.org>
61 +hardened-sources-2.6.27-r2.ebuild:
62 Bump to Linux 2.6.27.7 and latest grsecurity patch.
63
64 19 Nov 2008; Gordon Malm <gengor@gentoo.org>
65 -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
66 Remove old versions.
67
68 19 Nov 2008; Gordon Malm <gengor@gentoo.org>
69 hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
70 Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
71
72 16 Nov 2008; nixnut <nixnut@gentoo.org>
73 hardened-sources-2.6.25-r10.ebuild:
74 Stable on ppc
75
76 15 Nov 2008; Gordon Malm <gengor@gentoo.org>
77 hardened-sources-2.6.25-r10.ebuild:
78 Stable amd64/x86.
79
80 *hardened-sources-2.6.26-r6 (12 Nov 2008)
81
82 12 Nov 2008; Gordon Malm <gengor@gentoo.org>
83 +hardened-sources-2.6.26-r6.ebuild:
84 Bump to Linux 2.6.26.8 and fix security bug #245650.
85
86 *hardened-sources-2.6.25-r10 (12 Nov 2008)
87
88 12 Nov 2008; Gordon Malm <gengor@gentoo.org>
89 +hardened-sources-2.6.25-r10.ebuild:
90 Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
91
92 *hardened-sources-2.6.27-r1 (09 Nov 2008)
93
94 09 Nov 2008; Gordon Malm <gengor@gentoo.org>
95 +hardened-sources-2.6.27-r1.ebuild:
96 Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
97
98 *hardened-sources-2.6.27 (04 Nov 2008)
99
100 04 Nov 2008; Gordon Malm <gengor@gentoo.org>
101 +hardened-sources-2.6.27.ebuild:
102 Initial 2.6.27 release.
103
104 *hardened-sources-2.6.26-r5 (03 Nov 2008)
105
106 03 Nov 2008; Gordon Malm <gengor@gentoo.org>
107 -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
108 +hardened-sources-2.6.26-r5.ebuild:
109 2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
110 Clean out some old versions.
111
112 02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
113 Stable on ppc
114
115 30 Oct 2008; Gordon Malm <gengor@gentoo.org>
116 hardened-sources-2.6.25-r9.ebuild:
117 Stable on amd64/x86.
118
119 *hardened-sources-2.6.25-r9 (26 Oct 2008)
120
121 26 Oct 2008; Gordon Malm <gengor@gentoo.org>
122 +hardened-sources-2.6.25-r9.ebuild:
123 Update to Linux 2.6.25.19
124
125 15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
126 Stable on ppc
127
128 *hardened-sources-2.6.26-r4 (14 Oct 2008)
129
130 14 Oct 2008; Gordon Malm <gengor@gentoo.org>
131 -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
132 Update to latest grsecurity patch, fixing building of non-modular kernels.
133
134 *hardened-sources-2.6.26-r3 (12 Oct 2008)
135
136 12 Oct 2008; Gordon Malm <gengor@gentoo.org>
137 hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
138 +hardened-sources-2.6.26-r3.ebuild:
139 2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
140 2.6.26-r1: Removed.
141 2.6.25-r8: Stable amd64/x86.
142
143 *hardened-sources-2.6.25-r8 (09 Oct 2008)
144
145 09 Oct 2008; Gordon Malm <gengor@gentoo.org>
146 -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
147 -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
148 Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
149
150 20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
151 Stable on ppc
152
153 17 Sep 2008; Gordon Malm <gengor@gentoo.org>
154 hardened-sources-2.6.25-r7.ebuild:
155 Stable amd64/x86.
156
157 *hardened-sources-2.6.26-r2 (13 Sep 2008)
158
159 13 Sep 2008; Gordon Malm <gengor@gentoo.org>
160 -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
161 2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
162 PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
163
164 *hardened-sources-2.6.25-r7 (13 Sep 2008)
165
166 13 Sep 2008; Gordon Malm <gengor@gentoo.org>
167 +hardened-sources-2.6.25-r7.ebuild:
168 Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
169
170 10 Sep 2008; Gordon Malm <gengor@gentoo.org>
171 hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
172 hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
173 hardened-sources-2.6.26-r1.ebuild:
174 Update DESCRIPTION and HGPV_URI.
175
176 *hardened-sources-2.6.25-r6 (09 Sep 2008)
177
178 09 Sep 2008; Gordon Malm <gengor@gentoo.org>
179 -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
180 2.6.25-r6: Update to Linux 2.6.25.17.
181 2.6.24-r3: Removed.
182
183 08 Sep 2008; Gordon Malm <gengor@gentoo.org>
184 hardened-sources-2.6.25-r5.ebuild:
185 Stable on amd64/x86
186
187 07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
188 Update my email address.
189
190 31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
191 stable on ppc
192
193 *hardened-sources-2.6.26-r1 (23 Aug 2008)
194 *hardened-sources-2.6.25-r5 (23 Aug 2008)
195
196 23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
197 -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
198 hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
199 +hardened-sources-2.6.26-r1.ebuild:
200 Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
201 security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
202 fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
203 Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
204 (gengor).
205
206 *hardened-sources-2.6.26 (18 Aug 2008)
207 *hardened-sources-2.6.25-r4 (18 Aug 2008)
208
209 18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
210 +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
211 - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
212 to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
213 2.6.25-r2: Removed.
214
215 16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
216 Remove phreak from metadata.xml (#96398)
217
218 *hardened-sources-2.6.25-r3 (31 Jul 2008)
219
220 31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
221 -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
222 +hardened-sources-2.6.25-r3.ebuild:
223 - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
224 fixes, including security bug #231750.
225
226 28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
227 Stable on ppc
228
229 *hardened-sources-2.6.25-r2 (05 Jul 2008)
230
231 05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
232 -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
233 +hardened-sources-2.6.25-r2.ebuild:
234 2.6.23-r4: Stable x86/amd64
235 2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
236 2.6.23-r{11,12}: Removed due to multiple vulns.
237 (gengor & kerframil)
238
239 04 Jul 2008; nixnut <nixnut@gentoo.org>
240 hardened-sources-2.6.23-r13.ebuild:
241 Stable on ppc
242
243 *hardened-sources-2.6.25-r1 (30 Jun 2008)
244
245 30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
246 +hardened-sources-2.6.25-r1.ebuild:
247 2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
248 grsecurity release. 2.6.23-r13: x86/amd64 stable
249
250 *hardened-sources-2.6.25 (17 Jun 2008)
251 *hardened-sources-2.6.24-r3 (17 Jun 2008)
252 *hardened-sources-2.6.23-r13 (17 Jun 2008)
253
254 17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
255 +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
256 * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
257 #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
258 #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
259 2.6.25: Initial 2.6.25 release.
260
261 15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
262 - fasttrack to stable x86/amd64
263
264 11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
265 Fix broken digest for linux-2.6.24.tar.bz2.
266
267 *hardened-sources-2.6.24-r2 (11 May 2008)
268 *hardened-sources-2.6.23-r12 (11 May 2008)
269
270 11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
271 -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
272 +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
273 -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
274 proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
275 220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
276 security bugs 219901, 220691, 220975, 220979, 221123. New
277 genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
278 should be removed as far as I'm concerned, everything else remove due to
279 vulnerable to numerous security bugs or brokeness.
280
281 10 May 2008; nixnut <nixnut@gentoo.org>
282 hardened-sources-2.6.23-r11.ebuild:
283 Stable on ppc
284
285 05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
286 - -r11 stable on x86/amd64
287
288 *hardened-sources-2.6.23-r11 (01 May 2008)
289
290 01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
291 - version bump to fix ulgy linux bugs
292
293 *hardened-sources-2.6.24-r1 (30 Apr 2008)
294
295 30 Apr 2008; Christian Heim <phreak@gentoo.org>
296 +hardened-sources-2.6.24-r1.ebuild:
297 Revision bump (thanks to Kerin and Gordon, again), pulling
298 genpatches-2.6.24-7, solving #219089. Additionally contains further security
299 fixes plus some minor updates.
300
301 *hardened-sources-2.6.23-r10 (30 Apr 2008)
302
303 30 Apr 2008; Christian Heim <phreak@gentoo.org>
304 +hardened-sources-2.6.23-r10.ebuild:
305 Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
306 Additional contains "various other fixes".
307
308 09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
309 Update the longdescription in metadata, thanks to Gordon Malm.
310
311 08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
312 Stable on ppc wrt bug #213255
313
314 07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
315 -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
316 - stable on x86/amd64 per request. Removed obsolete ebuilds
317
318 *hardened-sources-2.6.24 (07 Apr 2008)
319
320 07 Apr 2008; Christian Heim <phreak@gentoo.org>
321 +hardened-sources-2.6.24.ebuild:
322 Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
323 <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
324 for the many contributions and their continued effort in #216612) based on
325 2.6.24 and genpatches-2.6.24-5.
326
327 The current ebuild/patchset contains these things:
328 * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
329 * Introduces bespoke server and workstation oriented security levels
330 * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
331
332 30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
333 Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
334 maintaining it).
335
336 24 Mar 2008; Christian Heim <phreak@gentoo.org>
337 hardened-sources-2.4.35-r2.ebuild:
338 Fixing SRC_URI for 2.4.35-r2.
339
340 *hardened-sources-2.6.23-r9 (22 Mar 2008)
341
342 22 Mar 2008; Christian Heim <phreak@gentoo.org>
343 +hardened-sources-2.6.23-r9.ebuild:
344 * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
345 * Change the default GIDs for some grsecurity options
346 * Revamp the Hardened [Gentoo] security level and make it the default level
347 * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
348 * Fix a recursive lock -- call to capable() within ptrace_attach()
349 * Fix bug that allows audit and iscsi operations to be controlled via netlink
350
351 *hardened-sources-2.6.23-r8 (27 Feb 2008)
352
353 27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
354 - version bump from Kerin Millar bug 210026
355
356 17 Feb 2008; <solar@gentoo.org> metadata.xml,
357 -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
358 -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
359 -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
360 - stable on x86 and remove old ebuilds
361
362 15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
363 - stable on amd64 per request of amd64 lead
364
365 *hardened-sources-2.6.23-r7 (11 Feb 2008)
366
367 11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
368 - version bump from kerin.millar
369 Changes:
370
371 * Bump to genpatches-base-2.6.23-9
372 * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
373 * Disables COMPAT_VDSO in x86/defconfig
374 * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
375
376 25 Jan 2008; Christian Heim <phreak@gentoo.org>
377 -hardened-sources-2.6.22-r8.ebuild:
378 Cleaning up old versions.
379
380 *hardened-sources-2.6.23-r6 (25 Jan 2008)
381
382 25 Jan 2008; Christian Heim <phreak@gentoo.org>
383 -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
384 Revision bump, pulling in the latest genpatches.
385
386 *hardened-sources-2.6.23-r5 (24 Dec 2007)
387
388 24 Dec 2007; Christian Heim <phreak@gentoo.org>
389 hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
390 hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
391 hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
392 Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
393
394 24 Dec 2007; Christian Heim <phreak@gentoo.org>
395 -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
396 -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
397 -hardened-sources-2.6.23-r3.ebuild:
398 Cleaning out some unused, old versions.
399
400 24 Dec 2007; Christian Heim <phreak@gentoo.org>
401 hardened-sources-2.6.23-r4.ebuild:
402 Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
403 in the tree for long, but there isn't much of a difference between this and
404 -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
405
406 *hardened-sources-2.6.23-r4 (23 Dec 2007)
407
408 23 Dec 2007; Christian Heim <phreak@gentoo.org>
409 +hardened-sources-2.6.23-r4.ebuild:
410 Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
411
412 *hardened-sources-2.6.23-r3 (04 Dec 2007)
413
414 04 Dec 2007; Christian Heim <phreak@gentoo.org>
415 +hardened-sources-2.6.23-r3.ebuild:
416 Revision bump, pulling in 2.6.23.9.
417
418 *hardened-sources-2.6.23-r2 (25 Nov 2007)
419
420 25 Nov 2007; Christian Heim <phreak@gentoo.org>
421 +hardened-sources-2.6.23-r2.ebuild:
422 Updated patchset, thanks to solar.
423
424 *hardened-sources-2.6.23-r1 (31 Oct 2007)
425
426 31 Oct 2007; Christian Heim <phreak@gentoo.org>
427 +hardened-sources-2.6.23-r1.ebuild:
428 Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
429
430 29 Oct 2007; <solar@gentoo.org> metadata.xml:
431 - update metadata.xml
432
433 25 Oct 2007; Christian Heim <phreak@gentoo.org>
434 hardened-sources-2.6.22-r8.ebuild:
435 Marking 2.6.22-r8 stable on amd64 and x86.
436
437 21 Oct 2007; Christian Heim <phreak@gentoo.org>
438 -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
439 -hardened-sources-2.6.21-r4.ebuild:
440 Removing old ebuilds.
441
442 *hardened-sources-2.4.35-r2 (21 Oct 2007)
443
444 21 Oct 2007; Christian Heim <phreak@gentoo.org>
445 +hardened-sources-2.4.35-r2.ebuild:
446 Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
447 patches.
448
449 *hardened-sources-2.6.22-r8 (21 Oct 2007)
450
451 21 Oct 2007; Christian Heim <phreak@gentoo.org>
452 +hardened-sources-2.6.22-r8.ebuild:
453 Yet another new patch, hopefully fixing the remaining issues we had w/
454 2.6.22. Candidate for stabling.
455
456 *hardened-sources-2.6.23 (13 Oct 2007)
457
458 13 Oct 2007; Christian Heim <phreak@gentoo.org>
459 +hardened-sources-2.6.23.ebuild:
460 Initial hardened-sources-2.6.23. If people still have problems w/ bug
461 194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
462
463 11 Oct 2007; Christian Heim <phreak@gentoo.org>
464 hardened-sources-2.6.20-r10.ebuild:
465 Pulling in yet another new genpatches version, fixing the PWC bug for real.
466
467 04 Oct 2007; Christian Heim <phreak@gentoo.org>
468 -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
469 Removing old versions.
470
471 *hardened-sources-2.6.22-r7 (01 Oct 2007)
472
473 01 Oct 2007; Christian Heim <phreak@gentoo.org>
474 +hardened-sources-2.6.22-r7.ebuild:
475 Revision bump, pulling in a newer patch. Should fix #194276.
476
477 30 Sep 2007; Christian Heim <phreak@gentoo.org>
478 hardened-sources-2.6.20-r10.ebuild:
479 Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
480 Mike Doty).
481
482 *hardened-sources-2.6.22-r6 (26 Sep 2007)
483
484 26 Sep 2007; Christian Heim <phreak@gentoo.org>
485 +hardened-sources-2.6.22-r6.ebuild:
486 Revision bump, grabbing up till Linux 2.6.22.9.
487
488 24 Sep 2007; Christian Heim <phreak@gentoo.org>
489 -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
490 Cleaning up further.
491
492 *hardened-sources-2.6.20-r10 (24 Sep 2007)
493
494 24 Sep 2007; Christian Heim <phreak@gentoo.org>
495 -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
496 +hardened-sources-2.6.20-r10.ebuild:
497 Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
498 revisions.
499
500 *hardened-sources-2.6.22-r5 (22 Sep 2007)
501
502 22 Sep 2007; Christian Heim <phreak@gentoo.org>
503 +hardened-sources-2.6.22-r5.ebuild:
504 Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
505
506 17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
507 Removing johnm from metadata.xml (see #186467 for reference).
508
509 *hardened-sources-2.6.22-r4 (17 Sep 2007)
510
511 17 Sep 2007; Christian Heim <phreak@gentoo.org>
512 +hardened-sources-2.6.22-r4.ebuild:
513 Revision bump, hopefully fixing all those weird PAX failures.
514
515 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
516 Updating the metadata.xml.
517
518 01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
519 Removing tocharian from metadata due to his retirement (see #71718 for
520 reference).
521
522 *hardened-sources-2.6.20-r9 (30 Aug 2007)
523
524 30 Aug 2007; Christian Heim <phreak@gentoo.org>
525 +hardened-sources-2.6.20-r9.ebuild:
526 Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
527
528 29 Aug 2007; Christian Heim <phreak@gentoo.org>
529 -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
530 -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
531 -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
532 -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
533 -hardened-sources-2.6.22-r2.ebuild:
534 Removing some redundant versions.
535
536 *hardened-sources-2.4.35-r1 (29 Aug 2007)
537
538 29 Aug 2007; Christian Heim <phreak@gentoo.org>
539 +hardened-sources-2.4.35-r1.ebuild:
540 Revision bump, new grsecurity patch.
541
542 *hardened-sources-2.6.20-r8 (26 Aug 2007)
543
544 26 Aug 2007; Christian Heim <phreak@gentoo.org>
545 +hardened-sources-2.6.20-r8.ebuild:
546 Revision bump for Linux 2.6.20.17.
547
548 *hardened-sources-2.6.22-r3 (22 Aug 2007)
549
550 22 Aug 2007; Christian Heim <phreak@gentoo.org>
551 +hardened-sources-2.6.22-r3.ebuild:
552 Revision bump for Linux 2.6.22.4.
553
554 16 Aug 2007; Christian Heim <phreak@gentoo.org>
555 hardened-sources-2.6.22-r2.ebuild:
556 Updated patchset, to fix the alignment against 2.6.22.3.
557
558 *hardened-sources-2.6.22-r2 (16 Aug 2007)
559
560 16 Aug 2007; Christian Heim <phreak@gentoo.org>
561 +hardened-sources-2.6.22-r2.ebuild:
562 Revision bump for Linux 2.6.22.3.
563
564 *hardened-sources-2.4.35 (16 Aug 2007)
565
566 16 Aug 2007; Christian Heim <phreak@gentoo.org>
567 +hardened-sources-2.4.35.ebuild:
568 Version bump, initial version for Linux 2.4.35.
569
570 *hardened-sources-2.6.21-r4 (16 Aug 2007)
571
572 16 Aug 2007; Christian Heim <phreak@gentoo.org>
573 +hardened-sources-2.6.21-r4.ebuild:
574 Revision bump for Linux 2.6.21.6.
575
576 *hardened-sources-2.6.20-r7 (16 Aug 2007)
577
578 16 Aug 2007; Christian Heim <phreak@gentoo.org>
579 +hardened-sources-2.6.20-r7.ebuild:
580 Revision bump for Linux 2.6.20.16.
581
582 *hardened-sources-2.6.22-r1 (13 Aug 2007)
583
584 13 Aug 2007; Christian Heim <phreak@gentoo.org>
585 +hardened-sources-2.6.22-r1.ebuild:
586 Yet another revision bump.
587
588 *hardened-sources-2.6.22 (10 Aug 2007)
589
590 10 Aug 2007; Christian Heim <phreak@gentoo.org>
591 +hardened-sources-2.6.22.ebuild:
592 Initial release for 2.6.22. If you are using hardened-sources on a desktop
593 machine (P4 or newer), be aware you might need to disable
594 CONFIG_PAX_PAGEEXEC.
595
596 04 Aug 2007; Christian Heim <phreak@gentoo.org>
597 hardened-sources-2.6.20-r6.ebuild:
598 Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
599 2.6.20.15.
600
601 10 Jul 2007; Christian Heim <phreak@gentoo.org>
602 hardened-sources-2.6.20-r5.ebuild:
603 Marking hardened-sources-2.6.20-r5 stable on ppc.
604
605 10 Jul 2007; Christian Heim <phreak@gentoo.org>
606 -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
607 Cleanup.
608
609 *hardened-sources-2.6.20-r6 (08 Jul 2007)
610
611 08 Jul 2007; Christian Heim <phreak@gentoo.org>
612 +hardened-sources-2.6.20-r6.ebuild:
613 Revision bump, grabbing yet another stable release.
614
615 17 Jun 2007; Christian Heim <phreak@gentoo.org>
616 -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
617 -hardened-sources-2.6.21-r2.ebuild:
618 Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
619 alpha stable KEYWORD by mistake.
620
621 17 Jun 2007; Christian Heim <phreak@gentoo.org>
622 hardened-sources-2.6.20-r5.ebuild:
623 Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
624 genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
625
626 *hardened-sources-2.6.21-r3 (12 Jun 2007)
627
628 12 Jun 2007; Christian Heim <phreak@gentoo.org>
629 +hardened-sources-2.6.21-r3.ebuild:
630 Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
631 of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
632 love.
633
634 *hardened-sources-2.6.20-r5 (11 Jun 2007)
635
636 11 Jun 2007; Christian Heim <phreak@gentoo.org>
637 +hardened-sources-2.6.20-r5.ebuild:
638 Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
639 of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
640 love.
641
642 *hardened-sources-2.4.34.5 (11 Jun 2007)
643
644 11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
645 +hardened-sources-2.4.34.5.ebuild:
646 added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
647
648 30 May 2007; Christian Heim <phreak@gentoo.org>
649 -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
650 Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
651 stale ebuild(s).
652
653 30 May 2007; Christian Heim <phreak@gentoo.org>
654 -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
655 -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
656 -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
657 Doing some cleanups, remove stale ebuilds.
658
659 26 May 2007; Christian Heim <phreak@gentoo.org>
660 hardened-sources-2.6.21-r2.ebuild:
661 Fixing the grsecurity patch, had one '};' too much.
662
663 *hardened-sources-2.6.21-r2 (26 May 2007)
664
665 26 May 2007; Christian Heim <phreak@gentoo.org>
666 -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
667 +hardened-sources-2.6.21-r2.ebuild:
668 Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
669 grsecurity patch to 2.1.10-2.6.21.1-200705221918.
670
671 *hardened-sources-2.6.20-r4 (26 May 2007)
672
673 26 May 2007; Christian Heim <phreak@gentoo.org>
674 -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
675 Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
676 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
677
678 15 May 2007; Christian Heim <phreak@gentoo.org>
679 hardened-sources-2.6.20-r3.ebuild:
680 Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
681 introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
682 grsecurity patch fail in that exact same hunk.
683
684 *hardened-sources-2.6.20-r3 (15 May 2007)
685
686 15 May 2007; Christian Heim <phreak@gentoo.org>
687 +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
688 Revision bump, incorporating Linux 2.6.20.11.
689
690 *hardened-sources-2.6.21-r1 (11 May 2007)
691
692 11 May 2007; Christian Heim <phreak@gentoo.org>
693 +hardened-sources-2.6.21-r1.ebuild:
694 Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
695 mentioned in #177234.
696
697 07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
698 files/digest-hardened-sources-2.6.21, Manifest:
699 Fix Manifest/digest for linux-2.6.21.tar.bz2
700
701 06 May 2007; Christian Heim <phreak@gentoo.org>
702 hardened-sources-2.6.21.ebuild:
703 Bumping the hardened-patches version, needed for the fix for #177234.
704
705 *hardened-sources-2.6.21 (02 May 2007)
706
707 02 May 2007; Christian Heim <phreak@gentoo.org>
708 +hardened-sources-2.6.21.ebuild:
709 Version bump, Linux 2.6.21-hardened.
710
711 29 Apr 2007; Christian Heim <phreak@gentoo.org>
712 hardened-sources-2.6.20-r2.ebuild:
713 Adding ~ia64 on Ned's request.
714
715 29 Apr 2007; Christian Heim <phreak@gentoo.org>
716 hardened-sources-2.6.20-r2.ebuild:
717 Fixing the included grsecurity patch, wasn't alligning due to the Index:
718 header line(s).
719
720 29 Apr 2007; Christian Heim <phreak@gentoo.org>
721 hardened-sources-2.6.20-r2.ebuild:
722 Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
723
724 *hardened-sources-2.6.20-r2 (10 Apr 2007)
725
726 10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
727 +hardened-sources-2.6.20-r2.ebuild:
728 Version bump, on behalf of phreak
729
730 *hardened-sources-2.6.20-r1 (04 Apr 2007)
731
732 04 Apr 2007; Christian Heim <phreak@gentoo.org>
733 +hardened-sources-2.6.20-r1.ebuild:
734 Revision bump, grabbing a newer grsecurity snapshot.
735
736 *hardened-sources-2.6.20 (25 Mar 2007)
737
738 25 Mar 2007; Christian Heim <phreak@gentoo.org>
739 +hardened-sources-2.6.20.ebuild:
740 Finally a hardened-sources version for 2.6.20; many people have been waiting
741 for this. Thanks to Steve for preliminary testing, thanks to Ned for the
742 testbox.
743
744 16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
745 hardened-sources-2.6.18-r6.ebuild:
746 Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
747
748 *hardened-sources-2.6.18-r6 (16 Mar 2007)
749
750 16 Mar 2007; Christian Heim <phreak@gentoo.org>
751 -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
752 Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
753 yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
754 supposed to be.
755
756 06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
757 Fixing the Manifest, the previous one was broken (as in still had the
758 deleted ebuild in it).
759
760 06 Mar 2007; Christian Heim <phreak@gentoo.org>
761 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
762 +hardened-sources-2.6.18-r5.ebuild:
763 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
764 Linux 2.6.18.8. Also cleaning up the older version.
765
766 *hardened-sources-2.6.18-r5 (06 Mar 2007)
767
768 06 Mar 2007; Christian Heim <phreak@gentoo.org>
769 -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
770 +hardened-sources-2.6.18-r5.ebuild:
771 Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
772 Linux 2.6.18.8. Also cleaning up the older version.
773
774 24 Feb 2007; Christian Heim <phreak@gentoo.org>
775 -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
776 -hardened-sources-2.6.19-r5.ebuild:
777 Removing some of the old version, that didn't work.
778
779 *hardened-sources-2.6.19-r6 (12 Feb 2007)
780
781 12 Feb 2007; Christian Heim <phreak@gentoo.org>
782 +hardened-sources-2.6.19-r6.ebuild:
783 Revision bump, including a new grsec version fixing #166235.
784
785 *hardened-sources-2.4.34 (24 Jan 2007)
786
787 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
788 Manifest:
789 updating Manifest with checksums of new tarball and ebuild
790
791 24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
792 +hardened-sources-2.4.34.ebuild:
793 I added new hardened sources 2.4 update, this is a critical path
794 security bugfix - all users of h-s are strongly advised
795 to update their existing hardened sources to this version.
796 It contains a fix for a kernel vulnerability that is pertaining
797 to the PaX changes to virtual memory management, possibly leading
798 to a local kernel exploit ... see grsecurity.net forums and homepage
799
800 23 Jan 2007; Christian Heim <phreak@gentoo.org>
801 files/digest-hardened-sources-2.6.19-r5, Manifest:
802 Fixing the patch-tarball digest.
803
804 *hardened-sources-2.6.19-r5 (23 Jan 2007)
805
806 23 Jan 2007; Christian Heim <phreak@gentoo.org>
807 +hardened-sources-2.6.19-r5.ebuild:
808 Revision bump, closing the recently discovered PaX expand_stack()
809 vulnerability.
810
811 *hardened-sources-2.6.19-r4 (14 Jan 2007)
812
813 14 Jan 2007; Christian Heim <phreak@gentoo.org>
814 +hardened-sources-2.6.19-r4.ebuild:
815 Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
816 dropping the randomized PID feature.
817
818 11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
819 hardened-sources-2.4.33.4.ebuild:
820 stable x86, bug #161171
821
822 *hardened-sources-2.6.19-r3 (27 Dec 2006)
823
824 27 Dec 2006; Christian Heim <phreak@gentoo.org>
825 -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
826 Revision bump for bug #157186 and #158786.
827
828 *hardened-sources-2.6.18-r4 (27 Dec 2006)
829
830 27 Dec 2006; Christian Heim <phreak@gentoo.org>
831 -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
832 Revision bump for bug #157186.
833
834 *hardened-sources-2.6.19-r2 (23 Dec 2006)
835
836 23 Dec 2006; Christian Heim <phreak@gentoo.org>
837 -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
838 Revision bump to pull in genpatches-2.6.19-3 for #157186.
839
840 17 Dec 2006; Christian Heim <phreak@gentoo.org>
841 hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
842 hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
843 hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
844 hardened-sources-2.6.19-r1.ebuild:
845 Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
846 adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
847
848 *hardened-sources-2.4.33.4 (17 Dec 2006)
849
850 17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
851 +hardened-sources-2.4.33.4.ebuild:
852 new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
853 and quilting
854
855 *hardened-sources-2.6.19-r1 (14 Dec 2006)
856
857 14 Dec 2006; Christian Heim <phreak@gentoo.org>
858 -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
859 Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
860 for reporting).
861
862 *hardened-sources-2.6.19 (13 Dec 2006)
863
864 13 Dec 2006; Christian Heim <phreak@gentoo.org>
865 +hardened-sources-2.6.19.ebuild:
866 And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
867 Brad for providing that prompt update.
868
869 *hardened-sources-2.6.18-r3 (13 Dec 2006)
870
871 13 Dec 2006; Christian Heim <phreak@gentoo.org>
872 -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
873 +hardened-sources-2.6.18-r3.ebuild:
874 Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
875 S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
876
877 09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
878 Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
879
880 08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
881 Stable on ppc wrt bug 157356
882
883 07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
884 hardened-sources-2.6.18.ebuild:
885 stable x86, bug #157356
886
887 *hardened-sources-2.6.18-r2 (06 Dec 2006)
888
889 06 Dec 2006; Christian Heim <phreak@gentoo.org>
890 +hardened-sources-2.6.18-r2.ebuild:
891 Revision bump, including 2.6.18.5 (via genpatches) and
892 4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
893 Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
894 redesign.
895
896 06 Dec 2006; Christian Heim <phreak@gentoo.org>
897 hardened-sources-2.6.18.ebuild:
898 Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
899 of Mike Doty).
900
901 *hardened-sources-2.6.18-r1 (23 Nov 2006)
902
903 23 Nov 2006; Christian Heim <phreak@gentoo.org>
904 +hardened-sources-2.6.18-r1.ebuild:
905 Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
906
907 *hardened-sources-2.6.18 (11 Nov 2006)
908
909 11 Nov 2006; Christian Heim <phreak@gentoo.org>
910 +hardened-sources-2.6.18.ebuild:
911 Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
912
913 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
914 - mark amd64 stable also. bug #151877
915
916 18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
917 - mark 2.6.17-r1 stable
918
919 27 Aug 2006; Christian Heim <phreak@gentoo.org>
920 -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
921 Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
922
923 *hardened-sources-2.6.17-r1 (26 Aug 2006)
924
925 26 Aug 2006; Christian Heim <phreak@gentoo.org>
926 +hardened-sources-2.6.17-r1.ebuild:
927 Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
928 grsecurity patch.
929
930 *hardened-sources-2.6.17 (17 Aug 2006)
931
932 17 Aug 2006; Christian Heim <phreak@gentoo.org>
933 +hardened-sources-2.6.17.ebuild:
934 Bumping the hardened-sources-2.6 series to 2.6.17, using
935 genpatches-2.6.17-6.base.
936
937 07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
938 - stable on x86 and amd64
939
940 *hardened-sources-2.6.16-r11 (15 Jul 2006)
941
942 15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
943 -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
944 -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
945 -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
946 - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
947 crusty ebuilds
948
949 14 Jul 2006; John Mylchreest <johnm@gentoo.org>
950 hardened-sources-2.6.16-r10.ebuild:
951 marking stable on x86 and amd64
952
953 13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
954 - 2.4.32-r6 stable on x86. RSBAC state unknown
955
956 *hardened-sources-2.4.32-r7 (10 Jul 2006)
957
958 10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
959 +hardened-sources-2.4.32-r7.ebuild:
960 Bump PaX for RSBAC to test-17
961
962 *hardened-sources-2.6.16-r9 (03 Jul 2006)
963
964 03 Jul 2006; John Mylchreest <johnm@gentoo.org>
965 -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
966 hardened-sources-2.6.16 bump to latest -base.
967
968 *hardened-sources-2.4.32-r6 (30 Jun 2006)
969
970 30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
971 hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
972 - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
973 sysctl controlable resource logging
974
975 *hardened-sources-2.6.16-r7 (05 Jun 2006)
976
977 05 Jun 2006; John Mylchreest <johnm@gentoo.org>
978 -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
979 push new 2.6.16 release in preparation for stable
980
981 22 May 2006; <solar@gentoo.org> :
982 - redigest bug 134002
983
984 *hardened-sources-2.4.32-r5 (16 May 2006)
985
986 16 May 2006; Guillaume Destuynder <kang@gentoo.org>
987 +hardened-sources-2.4.32-r5.ebuild:
988 Fixes rsbac common patching (new patch in new -r5 patchset)
989
990 *hardened-sources-2.4.32-r4 (13 May 2006)
991
992 13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
993 +hardened-sources-2.4.32-r4.ebuild:
994 - security bumps
995
996 *hardened-sources-2.6.16-r6 (03 May 2006)
997
998 03 May 2006; John Mylchreest <johnm@gentoo.org>
999 +hardened-sources-2.6.16-r6.ebuild:
1000 bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1001
1002 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1003 hardened-sources-2.6.14-r8.ebuild:
1004 fix x86_64 build problem, this will delay the digest issue again for a short
1005 while but it will sort itself out
1006
1007 28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1008 hardened-sources-2.6.14-r8.ebuild:
1009 bump hardened patchset
1010
1011 27 Apr 2006; Alec Warner <antarus@gentoo.org>
1012 files/digest-hardened-sources-2.4.32-r2,
1013 files/digest-hardened-sources-2.4.32-r3,
1014 files/digest-hardened-sources-2.6.14-r8, Manifest:
1015 Fixing duff SHA256 digests: Bug # 131293
1016
1017 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1018
1019 27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1020 -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1021 -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1022 stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1023 cleanup of old uneccessary sources
1024
1025 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1026 fix digest
1027
1028 *hardened-sources-2.6.14-r8 (20 Apr 2006)
1029
1030 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1031 +hardened-sources-2.6.14-r8.ebuild:
1032 fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1033
1034 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1035 Turning on gpg-signing again, and recomitting
1036
1037 *hardened-sources-2.6.16-r4 (20 Apr 2006)
1038
1039 20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1040 -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1041 +hardened-sources-2.6.16-r4.ebuild:
1042 Fix numerous security vulns
1043
1044 *hardened-sources-2.4.32-r3 (16 Apr 2006)
1045
1046 16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1047 -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1048 +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1049 - security bump for bug #112791. Removed old ebuilds
1050
1051 *hardened-sources-2.6.16-r3 (15 Apr 2006)
1052
1053 15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1054 +hardened-sources-2.6.16-r3.ebuild:
1055 Removing silly localversion which I missed
1056
1057 *hardened-sources-2.6.14-r7 (14 Apr 2006)
1058
1059 14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1060 -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1061 Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1062
1063 *hardened-sources-2.6.16-r2 (13 Apr 2006)
1064
1065 13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1066 -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1067 +hardened-sources-2.6.16-r2.ebuild:
1068 Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1069 labels, dropping USERGROUP define fixes, since these were merged mainstream.
1070
1071 *hardened-sources-2.6.16-r1 (11 Apr 2006)
1072
1073 11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1074 +hardened-sources-2.6.16-r1.ebuild:
1075 Bumping to include ppc build fix and 2.6.16.3
1076
1077 06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1078 hardened-sources-2.6.14-r6.ebuild:
1079 Stable on x86; bug #127718
1080
1081 *hardened-sources-2.6.16 (31 Mar 2006)
1082
1083 31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1084 +hardened-sources-2.6.16.ebuild:
1085 Bumping to new version of grsec, and kernel base. New squashfs. Based on
1086 2.6.16.1
1087
1088 30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1089 hardened-sources-2.6.14-r6.ebuild:
1090 Stable on amd64, bug 127718.
1091
1092 28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1093 Stable on ppc. Bug #127718
1094
1095 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1096 -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1097 -hardened-sources-2.6.14-r4.ebuild:
1098 Cleanup.
1099
1100 *hardened-sources-2.6.14-r6 (15 Mar 2006)
1101
1102 15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1103 +hardened-sources-2.6.14-r6.ebuild:
1104 Fixes grsec policy recreation bug and adds a
1105 >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1106
1107 02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1108 - stable on x86
1109
1110 19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1111 hardened-sources-2.6.14-r5.ebuild:
1112 Stable on ppc.
1113
1114 *hardened-sources-2.6.14-r5 (01 Feb 2006)
1115
1116 01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1117 +hardened-sources-2.6.14-r5.ebuild:
1118 fixing every known exploit
1119
1120 *hardened-sources-2.4.32-r2 (26 Jan 2006)
1121
1122 26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1123 +hardened-sources-2.4.32-r2.ebuild:
1124 - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1125
1126 *hardened-sources-2.6.14-r4 (12 Jan 2006)
1127
1128 12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1129 - version bump for new genpatches which fix up a few sec holes
1130
1131 *hardened-sources-2.4.32-r1 (05 Jan 2006)
1132
1133 05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1134 - revision bump to add misc vital linux kernel security patches.
1135
1136 *hardened-sources-2.6.14-r3 (30 Dec 2005)
1137
1138 30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1139 -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1140 Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1141
1142 28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1143 hardened-sources-2.6.14-r2.ebuild:
1144 making x86 & amd64 stable following testing.
1145
1146 *hardened-sources-2.6.14-r2 (27 Dec 2005)
1147
1148 27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1149 -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1150 Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1151 network hooks.
1152
1153 06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1154 hardened-sources-2.6.14-r1.ebuild:
1155 bumping to stable early for sec fix on x86 & amd64
1156
1157 *hardened-sources-2.6.14-r1 (05 Dec 2005)
1158
1159 05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1160 -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1161 bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1162
1163 04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1164 - stable on x86 security bug #114227 CAN-2005-3257
1165
1166 *hardened-sources-2.4.32 (19 Nov 2005)
1167
1168 19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1169 +hardened-sources-2.4.32.ebuild:
1170 Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1171 Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1172 have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1173 rsbac >> /etc/portage/package.use)
1174
1175 *hardened-sources-2.6.14 (14 Nov 2005)
1176
1177 14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1178 -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1179 Bumping 2.6 series to 2.6.14.2
1180
1181 *hardened-sources-2.6.13-r2 (20 Oct 2005)
1182
1183 20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1184 -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1185 +hardened-sources-2.6.13-r2.ebuild:
1186 Fixes minor build error in ppc.
1187
1188 *hardened-sources-2.6.13-r1 (17 Oct 2005)
1189
1190 17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1191 +hardened-sources-2.6.13-r1.ebuild:
1192 Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1193 2.6.13.4, fixes some major amd64 stability problems.
1194
1195 *hardened-sources-2.6.13 (16 Sep 2005)
1196
1197 16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1198 -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1199 2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1200 ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1201 users should test this thoroughly.
1202
1203 01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1204 - stable on x86
1205
1206 *hardened-sources-2.6.11-r15 (27 Jun 2005)
1207
1208 27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1209 +hardened-sources-2.6.11-r15.ebuild:
1210 Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1211 grsec redefining curr_ip struct.
1212
1213 *hardened-sources-2.4.31 (20 Jun 2005)
1214
1215 20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1216 initial import of 2.4.31 tree
1217
1218 *hardened-sources-2.6.11-r14 (14 Jun 2005)
1219
1220 14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1221 -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1222 Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1223 naming scheme to abide by genpatches
1224
1225 *hardened-sources-2.6.11-r13 (18 May 2005)
1226
1227 18 May 2005; John Mylchreest <johnm@gentoo.org>
1228 -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1229 Managed to mangle the Makefile patch from grsec, to miss out the grsec
1230 target. sorry about that. Fixes bug #93022
1231
1232 *hardened-sources-2.6.11-r12 (17 May 2005)
1233
1234 17 May 2005; John Mylchreest <johnm@gentoo.org>
1235 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1236 +hardened-sources-2.6.11-r12.ebuild:
1237 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1238 merges in genpatches-base
1239
1240 *hardened-sources-2.6.11-r12 (17 May 2005)
1241
1242 17 May 2005; John Mylchreest <johnm@gentoo.org>
1243 -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1244 +hardened-sources-2.6.11-r12.ebuild:
1245 Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1246 merges in genpatches-base
1247
1248 29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1249 -files/2.4.27-cmdline-race.patch,
1250 -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1251 -files/2.4.28-grsec-binfmt_a.out.patch,
1252 -files/2.4.28-grsec-cmdline-race.patch,
1253 -files/2.4.28-selinux-binfmt_a.out.patch,
1254 -files/2.4.28-selinux-cmdline-race.patch,
1255 -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1256 hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1257 - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1258 cleanup..
1259
1260 *hardened-sources-2.4.30-r1 (21 Apr 2005)
1261
1262 21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1263 - disable aout by default
1264
1265 *hardened-sources-2.4.30 (18 Apr 2005)
1266
1267 18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1268 - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1269 and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1270 use
1271
1272 *hardened-sources-2.4.29 (30 Mar 2005)
1273
1274 30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1275 +hardened-sources-2.4.29.ebuild:
1276 New hardened-patches-2.4-29.0 patchball.
1277 Removed SELinux support, upgraded GRSecurity to 2.1.4.
1278
1279 *hardened-sources-2.4.28-r5 (06 Mar 2005)
1280
1281 06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1282 +hardened-sources-2.4.28-r5.ebuild:
1283 Added a fix for a PaX vulnerability.
1284
1285 26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1286 hardened-sources-2.4.28-r4.ebuild:
1287 Stable on x86
1288
1289 23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1290 hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1291 hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1292 hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1293 - fixed/added RDEPEND= in all kernel-2 ebuilds
1294
1295 *hardened-sources-2.4.28-r4 (21 Jan 2005)
1296
1297 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1298 +hardened-sources-2.4.28-r4.ebuild:
1299 Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1300 backport of neighbour hash updates.
1301
1302 21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1303 hardened-sources-2.4.28-r3.ebuild:
1304 Stable on x86
1305
1306 *hardened-sources-2.6.10-r3 (20 Jan 2005)
1307
1308 20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1309 +hardened-sources-2.6.10-r3.ebuild:
1310 Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1311 in 2005.0
1312
1313 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1314 -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1315 hardened-sources-2.4.28-r2.ebuild:
1316 Mark stable on x86
1317
1318 *hardened-sources-2.4.28-r3 (17 Jan 2005)
1319
1320 17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1321 +hardened-sources-2.4.28-r3.ebuild:
1322 Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1323
1324 14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1325 hardened-sources-2.4.28.ebuild:
1326 Mark stable on x86.
1327
1328 *hardened-sources-2.4.28-r2 (13 Jan 2005)
1329
1330 13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1331 +hardened-sources-2.4.28-r2.ebuild:
1332 Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1333 Mazinger for grsecurity patches as well.
1334
1335 *hardened-sources-2.4.28-r1 (23 Dec 2004)
1336
1337 23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1338 Security bump. Thank tocharian for rolling a new patchset...
1339
1340 28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1341 +files/2.4.28-grsec-cmdline-race.patch,
1342 +files/2.4.28-selinux-binfmt_a.out.patch,
1343 +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1344 - Round up remaining security patches that appear to be missing in 2.4.28. -
1345 PaX standalone updated to current. hgpv=28.1
1346
1347 *hardened-sources-2.4.28 (28 Nov 2004)
1348
1349 28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1350 security bump. Thank tocharian for rolling a new patchset
1351
1352 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1353
1354 08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1355 +hardened-sources-2.4.27-r3.ebuild:
1356 Applies the new 2.4-27.2 patchball which updates
1357 GRSecurity to the 2.0.1 version.
1358
1359 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1360
1361 31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1362 +hardened-sources-2.4.27-r2.ebuild:
1363 Version bump.
1364 This version uses the new 2.4-27.1 patchball which updates
1365 both the SELinux PaX hooks patch and the SELinux headers.
1366
1367 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1368
1369 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1370 +hardened-sources-2.4.27-r1.ebuild,
1371 -hardened-sources-2.4.27.ebuild,
1372 +files/2.4.27-cmdline-race.patch:
1373 Version bump, fix for cmdline race. See bug #59905.
1374
1375 *hardened-sources-2.4.26-r6 (09 Aug 2004)
1376
1377 09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1378 +hardened-sources-2.4.26-r6.ebuild,
1379 -hardened-sources-2.4.26-r5.ebuild,
1380 -hardened-sources-2.4.26-r4.ebuild,
1381 +files/2.4.26-cmdline-race.patch:
1382 Version bump, fix for cmdline race. See bug #59905.
1383
1384 *hardened-sources-2.4.27 (08 Aug 2004)
1385
1386 08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1387 +hardened-sources-2.4.27.ebuild,
1388 +files/2.4.27-CAN-2004-0394.patch:
1389 Ported the patchball to the 2.4.27 kernel version.
1390
1391 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1392
1393 07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1394 +hardened-sources-2.4.26-r5.ebuild:
1395 Updated to use the new hardened-patches-2.4-26.1 patchball.
1396 It adds the following features:
1397 - Squashfs
1398 - Ebtables
1399 - Netdev random (core+drivers)
1400 - Watchdog Timer (WDT) fix.
1401
1402 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1403
1404 04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1405 +hardened-sources-2.4.26-r4.ebuild,
1406 +files/2.4.26-CAN-2004-0415.patch,
1407 -hardened-sources-2.4.26-3:
1408 Version bump, fix for CAN 0415, see bug #59378.
1409
1410 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1411
1412 22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1413 +hardened-sources-2.4.26-r3.ebuild,
1414 +files/2.4.26-CAN-2004-0497.patch,
1415 -hardened-sources-2.4.26-r2.ebuild:
1416 Version bump, fixed CAN 0497, see bug #56171.
1417
1418 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1419
1420 29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1421 +hardened-sources-2.4.26-r2.ebuild,
1422 +files/2.4.26-CAN-2004-0495.patch,
1423 +files/2.4.26-CAN-2004-0535.patch,
1424 -hardened-sources-2.4.26-r1.ebuild:
1425 Fixes for both CAN 0495 and 0535, see bug #54976
1426
1427 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1428 hardened-sources-2.4.26-r1.ebuild:
1429 QA - fix use invocation
1430
1431 *hardened-sources-2.4.26-r1 (22 June 2004)
1432
1433 22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1434 +hardened-sources-2.4.26-r1.ebuild,
1435 +files/2.4.26-CAN-2004-0394.patch,
1436 +files/2.4.26-signal-race.patch,
1437 -hardened-sources-2.4.26.ebuild,
1438 -hardened-sources-2.4.24-r3.ebuild:
1439 Version bump for the CAN-2004-0394 issue and bug #53804
1440 Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1441
1442
1443 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1444 hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1445 Masked hardened-sources-2.4.26.ebuild broken for ppc
1446
1447 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1448 hardened-sources-2.4.24-r3.ebuild:
1449 Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1450
1451 *hardened-sources-2.4.26 (29 May 2004)
1452
1453 29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1454 +hardened-sources-2.4.26.ebuild:
1455 Updated hardened-sources for the 2.4.26 kernel
1456 Removed broken components, updated almost everything.
1457
1458 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1459
1460 17 Apr 2004; <plasmaroo@gentoo.org>
1461 +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1462 +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1463 +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1464 +hardened-sources-2.4.24-r3.ebuild:
1465 Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1466 vulnerabilities. Old revisions removed.
1467
1468 *hardened-sources-2.4.24-r2 (15 Apr 2004)
1469
1470 15 Apr 2004; <plasmaroo@gentoo.org>
1471 +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1472 -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1473 Version bump for the CAN-2004-0109 issue; bug #47881.
1474
1475 12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1476 hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1477 Add eutils to inherit.
1478
1479 *hardened-sources-2.4.24-r1 (19 Feb 2004)
1480
1481 19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1482 files/hardened-sources-2.4.24.munmap.patch:
1483 Added the patch for the mremap/munmap vulnerability. Bug #42024.
1484
1485 *hardened-sources-2.4.24 (06 Feb 2004)
1486
1487 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1488 hardened-sources-2.4.24.ebuild:
1489 Version bump, updated most of the components.
1490 This release includes the following:
1491
1492 - Hardened security
1493 - Netfilter patch-o-matic 20031219
1494 - FreeSWAN 2.04 & x509 1.4.8
1495 - EVMS 2.2.2
1496 - XFS 1.3.1
1497 - cryptoloop jari
1498 - grsecurity 2.0-rc4
1499 - SELinux
1500 - PaX 200402060000
1501 - PaX Obscurity 200308302223
1502 - Others...
1503
1504 Neither -ck nor systrace are included anymore.
1505
1506 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1507
1508 05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1509 hardened-sources-2.4.22-r2.ebuild:
1510 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1511
1512 *hardened-sources-2.4.22-r1 (02 Dec 2003)
1513
1514 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1515 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1516
1517 02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1518 hardened-sources-2.4.22-r1.ebuild:
1519 Version bump for the 'do_brk' vulnerability.
1520
1521 01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1522 hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1523 hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1524 hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1525 Fix the 'do_brk' vulnerability.
1526
1527 03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1528 hardened-sources-2.4.22.ebuild:
1529 - Removed the src_install() portion for SELinux flask
1530 components. These are no longer handled in the kernel
1531 so this code was not necessary.
1532
1533 29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1534 New 2.4.22 based hardened-sources thanks to
1535 Phil West <p.west@computer.org>.
1536
1537 These sources include:
1538 - New SELinux API
1539 - Updated CK-base
1540 - Updated GRSec
1541 - Systrace
1542 - SuperFreeS/WAN 1.99.8
1543 - Propolice kernel build support
1544 - EVMS
1545 - Other various security related patches
1546
1547 *hardened-sources-2.4.21 (14 Sep 2003)
1548
1549 14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1550 Updated hardened-sources based on the 2.4.21 Linux kernel.
1551 This includes updates to most major components such as:
1552 - ck-base-0306300059
1553 - selinux-2.4-2003071106
1554 - grsecurity-2.0-rc1
1555 - Updated IPTables patch-o-matic
1556 - Updated SuperFreeS/WAN
1557
1558 Thanks to Phil West <pwest@computer.org> for his work in getting this
1559 updated patch set ready for the 2.4.21 based kernel.
1560
1561 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1562 Initial import of hardened-sources-2.4.20-r4. This revision
1563 includes only a few changes, but one of these is an important
1564 security fix. It is recommended all users of hardened-sources
1565 upgrade to this release.
1566
1567 - ioperm bug fix
1568 - fixed compilation failure when building without GRSec
1569
1570 SAL (Secure Auditing for Linux) is NOT included in this revision
1571 due to time constraints, but is planned for inclusion in the near
1572 future.
1573
1574 *hardened-sources-2.4.20-r2 (12 Jun 2003)
1575
1576 12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1577 hardened-sources-2.4.20-r3.ebuild:
1578 Add Header...
1579
1580 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1581 hardened-sources-2.4.20-r3.ebuild:
1582 Removed warnings from ebuild. This kernel should be safe to
1583 use at this point.
1584
1585 *hardened-sources-2.4.20-r3 (08 Jun 2003)
1586
1587 08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1588 hardened-sources-2.4.20-r3.ebuild:
1589 New revision. Includes the following changes over -r2:
1590
1591 - ck7-base (O(1), preempt, low latency)
1592 - Super FreeS/WAN 1.99.7rc2
1593 - PaX for the LSM/SELinux branch
1594 - GRSecurity 2.0-pre4 (role based access control)
1595 - Systrace 1.3
1596 - EXT3 fixes
1597 - EVMS 2.0.1
1598 - GCC 3.1+ compile optimizations
1599 - ProPolice kernel build support
1600 - Hashing table security fixes
1601
1602 *hardened-sources-2.4.20-r1 (09 Apr 2003)
1603
1604 23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1605 Initial import of hardened-sources-r2. This new
1606 ebuild includes many new performance and security
1607 related patches. As in -r1, it will patch in
1608 LSM/SELinux if "selinux" is in USE, otherwise it
1609 will patch in GRSecurity. The following patches
1610 are included in this revision:
1611
1612 - O(1) Scheduler, Low Latency, and Preempt
1613 (pulled from the base CK patch)
1614 - ptrace exploit patch for the LSM kernel
1615 (the GRSec patch already fixes this)
1616 - LSM 2.4-2003040709
1617 - SELinux 2.4-2003040709
1618 - Systrace v1.2
1619 - IPTables patch-o-matic base patches - 20030107
1620 - CryptoAPI 2.4.20.1 w/ loop-jari patch
1621 - Super FreeS/WAN 1.99.6.1
1622 - GRSecurity 1.9.9g
1623 - MPPE
1624 - EXT3 data journal fix
1625 - CIPE 1.5.4
1626
1627 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1628 hardened-sources-2.4.20-r1.ebuild, manifest:
1629 Updated to install flask components correctly for selinux.
1630
1631 12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1632 hardened-sources-2.4.20-r1.ebuild:
1633 LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1634 is patched in instead. Ptrace patches for selinux have also been added. In
1635 either case, systrace support will be patched in as well.
1636
1637 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1638 hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1639 Revision bump for new sources.
1640
1641 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1642 hardened-sources-2.4.20-r1.ebuild:
1643 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1644
1645 *hardened-sources-2.4.20 (30 Mar 2003)
1646
1647 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1648 hardened-sources-2.4.20.ebuild:
1649 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20