1 |
# ChangeLog for sys-kernel/hardened-sources |
2 |
# Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2 |
3 |
# $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.359 2010/11/18 02:27:12 blueness Exp $ |
4 |
|
5 |
28 Nov 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest: |
6 |
Update Manifest for deblob 2.6.36. |
7 |
|
8 |
*hardened-sources-2.6.36-r2 (18 Nov 2010) |
9 |
|
10 |
18 Nov 2010; Anthony G. Basile <blueness@gentoo.org> |
11 |
+hardened-sources-2.6.36-r2.ebuild: |
12 |
hardened-sources-2.6.36-r2 based on 2.6.36 + genpatches + |
13 |
grsecurity-2.2.0-2.6.36-201011151726 |
14 |
|
15 |
*hardened-sources-2.6.32-r27 (18 Nov 2010) |
16 |
|
17 |
18 Nov 2010; Anthony G. Basile <blueness@gentoo.org> |
18 |
+hardened-sources-2.6.32-r27.ebuild: |
19 |
hardened-sources-2.6.32-r27 based on 2.6.32.25 + genpatches + |
20 |
grsecurity-2.2.0-2.6.32.25-201011151726 |
21 |
|
22 |
*hardened-sources-2.6.36-r1 (14 Nov 2010) |
23 |
|
24 |
14 Nov 2010; Anthony G. Basile <blueness@gentoo.org> |
25 |
+hardened-sources-2.6.36-r1.ebuild: |
26 |
hardened-sources-2.6.36-r1 based on 2.6.36 + genpatches + |
27 |
grsecurity-2.2.0-2.6.36-201011131640 |
28 |
|
29 |
*hardened-sources-2.6.32-r26 (14 Nov 2010) |
30 |
|
31 |
14 Nov 2010; Anthony G. Basile <blueness@gentoo.org> |
32 |
+hardened-sources-2.6.32-r26.ebuild: |
33 |
hardened-sources-2.6.32-r26 based on 2.6.32.25 + genpatches + |
34 |
grsecurity-2.2.0-2.6.32.25-201011131640 |
35 |
|
36 |
*hardened-sources-2.6.36 (07 Nov 2010) |
37 |
|
38 |
07 Nov 2010; Anthony G. Basile <blueness@gentoo.org> |
39 |
+hardened-sources-2.6.36.ebuild: |
40 |
hardened-sources-2.6.36 based on 2.6.36 + genpatches + |
41 |
grsecurity-2.2.0-2.6.36-201011062054 |
42 |
|
43 |
*hardened-sources-2.6.35-r7 (07 Nov 2010) |
44 |
|
45 |
07 Nov 2010; Anthony G. Basile <blueness@gentoo.org> |
46 |
+hardened-sources-2.6.35-r7.ebuild: |
47 |
hardened-sources-2.6.35-r7 based on 2.6.35.8 + genpatches + |
48 |
grsecurity-2.2.0-2.6.35.8-201011062054 |
49 |
|
50 |
*hardened-sources-2.6.32-r25 (07 Nov 2010) |
51 |
|
52 |
07 Nov 2010; Anthony G. Basile <blueness@gentoo.org> |
53 |
+hardened-sources-2.6.32-r25.ebuild: |
54 |
hardened-sources-2.6.32-r25 based on 2.6.32.25 + genpatches + |
55 |
grsecurity-2.2.0-2.6.32.25-201011062054 |
56 |
|
57 |
*hardened-sources-2.6.35-r6 (02 Nov 2010) |
58 |
*hardened-sources-2.6.32-r24 (02 Nov 2010) |
59 |
|
60 |
02 Nov 2010; Anthony G. Basile <blueness@gentoo.org> |
61 |
+hardened-sources-2.6.32-r24.ebuild, +hardened-sources-2.6.35-r6.ebuild: |
62 |
hardened-sources-2.6.32-r24 based on 2.6.32.25 + genpatches + |
63 |
grsecurity-2.2.0-2.6.32.25-201010311944 |
64 |
hardened-sources-2.6.35-r6 based on 2.6.35.8 + genpatches + |
65 |
grsecurity-2.2.0-2.6.35.8-201010311944 |
66 |
|
67 |
02 Nov 2010; Anthony G. Basile <blueness@gentoo.org> |
68 |
hardened-sources-2.6.32-r23.ebuild: |
69 |
ppc64 stable, bug #343535 |
70 |
|
71 |
*hardened-sources-2.6.35-r5 (24 Oct 2010) |
72 |
*hardened-sources-2.6.32-r23 (24 Oct 2010) |
73 |
|
74 |
24 Oct 2010; Anthony G. Basile <blueness@gentoo.org> |
75 |
+hardened-sources-2.6.32-r23.ebuild, +hardened-sources-2.6.35-r5.ebuild: |
76 |
hardened-sources-2.6.32-r23 based on 2.6.32.24 + genpatches + |
77 |
grsec-2.2.0-2.6.32.24-201010232009 |
78 |
hardened-sources-2.6.35-r5 based on 2.6.35.7 + genpatches + |
79 |
grsec-2.2.0-2.6.35.7-201010232009 |
80 |
|
81 |
24 Oct 2010; Anthony G. Basile <blueness@gentoo.org> |
82 |
hardened-sources-2.6.32-r22.ebuild: |
83 |
Broken on ppc/ppc64, bug #341915#c6 |
84 |
|
85 |
24 Oct 2010; Anthony G. Basile <blueness@gentoo.org> |
86 |
-hardened-sources-2.6.32-r16.ebuild, -hardened-sources-2.6.32-r17.ebuild, |
87 |
-hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.32-r19.ebuild, |
88 |
-hardened-sources-2.6.32-r20.ebuild, -hardened-sources-2.6.32-r21.ebuild, |
89 |
-hardened-sources-2.6.34-r4.ebuild, -hardened-sources-2.6.34-r5.ebuild, |
90 |
-hardened-sources-2.6.35.ebuild, -hardened-sources-2.6.35-r1.ebuild, |
91 |
-hardened-sources-2.6.35-r2.ebuild, -hardened-sources-2.6.35-r3.ebuild: |
92 |
Removing vulnerable kernels where possible, bug #341801 |
93 |
|
94 |
21 Oct 2010; Anthony G. Basile <blueness@gentoo.org> |
95 |
hardened-sources-2.6.32-r22.ebuild: |
96 |
x86 stable, bug #341915 |
97 |
|
98 |
20 Oct 2010; Anthony G. Basile <blueness@gentoo.org> |
99 |
hardened-sources-2.6.32-r22.ebuild: |
100 |
amd64 stable, bug #341915 |
101 |
|
102 |
*hardened-sources-2.6.35-r4 (20 Oct 2010) |
103 |
*hardened-sources-2.6.32-r22 (20 Oct 2010) |
104 |
|
105 |
20 Oct 2010; Anthony G. Basile <blueness@gentoo.org> |
106 |
+hardened-sources-2.6.32-r22.ebuild, +hardened-sources-2.6.35-r4.ebuild: |
107 |
hardened-sources-2.6.32-r22 based on 2.6.32.24 + genpatches + |
108 |
grsec-2.2.0-2.6.32.24-201010191911 |
109 |
hardened-sources-2.6.35-r4 based on 2.6.35.7 + genpatches + |
110 |
grsec-2.2.0-2.6.35.7-201010191911 |
111 |
Addresses security bug #341801 |
112 |
|
113 |
*hardened-sources-2.6.35-r3 (16 Oct 2010) |
114 |
*hardened-sources-2.6.32-r21 (16 Oct 2010) |
115 |
|
116 |
16 Oct 2010; Anthony G. Basile <blueness@gentoo.org> |
117 |
+hardened-sources-2.6.32-r21.ebuild, +hardened-sources-2.6.35-r3.ebuild: |
118 |
hardened-sources-2.6.32-r21 based on 2.6.32.24 + genpatches + |
119 |
grsec-2.2.0-2.6.32.24-201010121028 |
120 |
hardened-sources-2.6.35-r3 based on 2.6.35.7 + genpatches + |
121 |
grsec-2.2.0-2.6.35.7-201010121028 |
122 |
|
123 |
*hardened-sources-2.6.35-r2 (07 Oct 2010) |
124 |
|
125 |
07 Oct 2010; Anthony G. Basile <blueness@gentoo.org> |
126 |
+hardened-sources-2.6.35-r2.ebuild: |
127 |
hardened-sources-2.6.35-r2 based on 2.6.35.7 + genpatches + |
128 |
grsec-2.2.0-2.6.35.7-201010021153 |
129 |
|
130 |
*hardened-sources-2.6.32-r20 (06 Oct 2010) |
131 |
|
132 |
06 Oct 2010; Anthony G. Basile <blueness@gentoo.org> |
133 |
+hardened-sources-2.6.32-r20.ebuild: |
134 |
hardened-sources-2.6.32-r20 based on 2.6.32.24 + genpatches + |
135 |
grsec-2.2.0-2.6.32.24-201010021153 |
136 |
|
137 |
*hardened-sources-2.6.35-r1 (30 Sep 2010) |
138 |
*hardened-sources-2.6.32-r19 (30 Sep 2010) |
139 |
|
140 |
30 Sep 2010; Anthony G. Basile <blueness@gentoo.org> |
141 |
+hardened-sources-2.6.32-r19.ebuild, +hardened-sources-2.6.35-r1.ebuild: |
142 |
hardened-sources-2.6.32-r19 based on 2.6.32.23 + genpatches + |
143 |
grsec-2.2.0-2.6.32.23-201009272133 |
144 |
hardened-sources-2.6.35-r1 based on 2.6.35.6 + genpatches + |
145 |
grsec-2.2.0-2.6.35.6-201009281623 |
146 |
|
147 |
*hardened-sources-2.6.35 (28 Sep 2010) |
148 |
|
149 |
28 Sep 2010; Anthony G. Basile <blueness@gentoo.org> |
150 |
+hardened-sources-2.6.35.ebuild: |
151 |
hardened-sources-2.6.35 based on grsec-2.2.0-2.6.35.6-201009262116 |
152 |
|
153 |
21 Sep 2010; Anthony G. Basile <blueness@gentoo.org> |
154 |
-hardened-sources-2.6.32-r14.ebuild, -hardened-sources-2.6.32-r15.ebuild, |
155 |
hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.34-r2.ebuild, |
156 |
-hardened-sources-2.6.34-r3.ebuild, hardened-sources-2.6.34-r6.ebuild: |
157 |
Fast track stabilization. See bug #338273. Removed older versions. |
158 |
|
159 |
*hardened-sources-2.6.34-r6 (17 Sep 2010) |
160 |
*hardened-sources-2.6.32-r18 (17 Sep 2010) |
161 |
|
162 |
17 Sep 2010; Anthony G. Basile <blueness@gentoo.org> |
163 |
+hardened-sources-2.6.32-r18.ebuild, +hardened-sources-2.6.34-r6.ebuild: |
164 |
hardened-sources-2.6.32-r18 based on 2.6.32.21 + genpatches + |
165 |
grsec-2.2.0-2.6.32.21-201009162222 |
166 |
hardened-sources-2.6.34-r6 based on 2.6.34.7 + genpatches + |
167 |
grsec-2.2.0-2.6.34.7-201009162222 |
168 |
Addresses IA32 syscall exploit. |
169 |
|
170 |
*hardened-sources-2.6.34-r5 (15 Sep 2010) |
171 |
*hardened-sources-2.6.32-r17 (15 Sep 2010) |
172 |
|
173 |
15 Sep 2010; Anthony G. Basile <blueness@gentoo.org> |
174 |
+hardened-sources-2.6.32-r17.ebuild, +hardened-sources-2.6.34-r5.ebuild: |
175 |
hardened-sources-2.6.32-r17 based on 2.6.32.21 + genpatches + |
176 |
grsec-2.2.0-2.6.32.21-201009130811 |
177 |
hardened-sources-2.6.34-r5 based on 2.6.34.6 + genpatches + |
178 |
grsec-2.2.0-2.6.34.6-201009130754 |
179 |
|
180 |
*hardened-sources-2.6.34-r4 (07 Sep 2010) |
181 |
*hardened-sources-2.6.32-r16 (07 Sep 2010) |
182 |
|
183 |
07 Sep 2010; Anthony G. Basile <blueness@gentoo.org> |
184 |
+hardened-sources-2.6.32-r16.ebuild, +hardened-sources-2.6.34-r4.ebuild: |
185 |
hardened-sources-2.6.32-r16 based on 2.6.32.21 + |
186 |
grsec-2.2.0-2.6.32.21-201009032133 |
187 |
hardened-sources-2.6.34-r4 based on 2.6.34.6 + |
188 |
grsec-2.2.0-2.6.34.6-201009041352 |
189 |
|
190 |
02 Sep 2010; Anthony G. Basile <blueness@gentoo.org> ChangeLog: |
191 |
hardened-sources-2.6.32-r15 based on 2.6.32.21 + |
192 |
grsec-2.2.0-2.6.32.21-201008292122 |
193 |
hardened-sources-2.6.34-r3 based on 2.6.34.6 + |
194 |
grsec-2.2.0-2.6.34.6-201008292122 |
195 |
|
196 |
*hardened-sources-2.6.34-r3 (02 Sep 2010) |
197 |
*hardened-sources-2.6.32-r15 (02 Sep 2010) |
198 |
|
199 |
02 Sep 2010; Anthony G. Basile <blueness@gentoo.org> |
200 |
-hardened-sources-2.6.32-r10.ebuild, -hardened-sources-2.6.32-r11.ebuild, |
201 |
-hardened-sources-2.6.32-r12.ebuild, -hardened-sources-2.6.32-r13.ebuild, |
202 |
+hardened-sources-2.6.32-r15.ebuild, -hardened-sources-2.6.34-r1.ebuild, |
203 |
+hardened-sources-2.6.34-r3.ebuild: |
204 |
Bumps and remove deprecated versions |
205 |
|
206 |
*hardened-sources-2.6.34-r2 (21 Aug 2010) |
207 |
|
208 |
21 Aug 2010; Anthony G. Basile <blueness@gentoo.org> |
209 |
+hardened-sources-2.6.34-r2.ebuild: |
210 |
Based on vanilla 2.6.34.4 + genpatches + grsec-2.2.0-2.6.34.4-201008131840 |
211 |
|
212 |
*hardened-sources-2.6.32-r14 (21 Aug 2010) |
213 |
|
214 |
21 Aug 2010; Anthony G. Basile <blueness@gentoo.org> |
215 |
+hardened-sources-2.6.32-r14.ebuild: |
216 |
Based on vanilla 2.6.32.19 + genpatches + |
217 |
grsec-2.2.0-2.6.32.19-201008131840 |
218 |
|
219 |
*hardened-sources-2.6.32-r13 (14 Aug 2010) |
220 |
|
221 |
14 Aug 2010; Anthony G. Basile <blueness@gentoo.org> |
222 |
+hardened-sources-2.6.32-r13.ebuild: |
223 |
Based on vanilla 2.6.32.18 + genpatches + |
224 |
grsecurity-2.2.0-2.6.32.18-201008112233 |
225 |
|
226 |
03 Aug 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest: |
227 |
kernel-2 deblob support for 2.6.35; bug #324505: deblob-check usage. |
228 |
|
229 |
01 Aug 2010; Anthony G. Basile <blueness@gentoo.org> |
230 |
hardened-sources-2.6.32-r9.ebuild: |
231 |
Stable ppc64. Bug #326885 |
232 |
|
233 |
*hardened-sources-2.6.32-r12 (24 Jul 2010) |
234 |
|
235 |
24 Jul 2010; Anthony G. Basile <blueness@gentoo.org> |
236 |
+hardened-sources-2.6.32-r12.ebuild: |
237 |
Parallels fix incorporated into hardened-sources-2.6.34-r1 |
238 |
|
239 |
*hardened-sources-2.6.34-r1 (24 Jul 2010) |
240 |
|
241 |
24 Jul 2010; Anthony G. Basile <blueness@gentoo.org> |
242 |
-hardened-sources-2.6.34.ebuild, +hardened-sources-2.6.34-r1.ebuild: |
243 |
Fixes bug #328275 |
244 |
|
245 |
21 Jul 2010; <chainsaw@gentoo.org> metadata.xml: |
246 |
Address metadata concerns by Jeroen "rej" Roovers <rej@gentoo.org> raised |
247 |
on gentoo-dev. |
248 |
|
249 |
21 Jul 2010; Jeroen Roovers <jer@gentoo.org> metadata.xml: |
250 |
Correct mail address. |
251 |
|
252 |
18 Jul 2010; Anthony G. Basile <blueness@gentoo.org> |
253 |
-hardened-sources-2.6.25-r13.ebuild, -hardened-sources-2.6.26-r9.ebuild, |
254 |
-hardened-sources-2.6.28-r7.ebuild, -hardened-sources-2.6.29.ebuild, |
255 |
-hardened-sources-2.6.32-r8.ebuild: |
256 |
Removing outdated releases |
257 |
|
258 |
17 Jul 2010; Christian Faulhammer <fauli@gentoo.org> |
259 |
hardened-sources-2.6.32-r9.ebuild: |
260 |
stable x86, bug 326885 |
261 |
|
262 |
13 Jul 2010; Anthony G. Basile <blueness@gentoo.org> |
263 |
-hardened-sources-2.6.32-r7.ebuild: |
264 |
Removed for security. Bug #325573 |
265 |
|
266 |
*hardened-sources-2.6.34 (13 Jul 2010) |
267 |
|
268 |
13 Jul 2010; Anthony G. Basile <blueness@gentoo.org> |
269 |
+hardened-sources-2.6.34.ebuild: |
270 |
Initial commit based on mainline 2.6.34.1 and grsec-2.2.0. |
271 |
|
272 |
*hardened-sources-2.6.32-r11 (13 Jul 2010) |
273 |
|
274 |
13 Jul 2010; Anthony G. Basile <blueness@gentoo.org> |
275 |
+hardened-sources-2.6.32-r11.ebuild: |
276 |
New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263 |
277 |
|
278 |
06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild: |
279 |
Marked stable on AMD64 as requested by Anthony G. Basile |
280 |
<blueness@gentoo.org> in bug #326885. Operational testing done for 1 week |
281 |
on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems. |
282 |
|
283 |
*hardened-sources-2.6.32-r10 (30 Jun 2010) |
284 |
|
285 |
30 Jun 2010; Anthony G. Basile <blueness@gentoo.org> |
286 |
+hardened-sources-2.6.32-r10.ebuild: |
287 |
New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227. |
288 |
|
289 |
29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml: |
290 |
Added myself to the metadata.xml |
291 |
|
292 |
*hardened-sources-2.6.32-r9 (11 Jun 2010) |
293 |
|
294 |
11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild: |
295 |
New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources. |
296 |
|
297 |
*hardened-sources-2.6.32-r8 (01 Jun 2010) |
298 |
|
299 |
01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild: |
300 |
New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources. |
301 |
|
302 |
27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild: |
303 |
Update SRC_URI to point to mirror network now that the distfile has |
304 |
propagated. |
305 |
|
306 |
*hardened-sources-2.6.32-r7 (26 May 2010) |
307 |
|
308 |
26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild, |
309 |
metadata.xml: |
310 |
New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew |
311 |
Summers. |
312 |
|
313 |
26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml: |
314 |
Update Manifest for deblob support in kernel-2 eclass. |
315 |
|
316 |
31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild: |
317 |
ppc stable |
318 |
|
319 |
29 May 2009; Gordon Malm <gengor@gentoo.org> |
320 |
-hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild: |
321 |
Stable amd64/x86 and remove old. |
322 |
|
323 |
*hardened-sources-2.6.29 (25 May 2009) |
324 |
|
325 |
25 May 2009; Gordon Malm <gengor@gentoo.org> |
326 |
+hardened-sources-2.6.29.ebuild: |
327 |
Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing |
328 |
release candidates. |
329 |
|
330 |
*hardened-sources-2.6.28-r9 (25 May 2009) |
331 |
|
332 |
25 May 2009; Gordon Malm <gengor@gentoo.org> |
333 |
-hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild: |
334 |
Fix x86-32 boot failure (regression vs. 2.6.28-r7). |
335 |
|
336 |
*hardened-sources-2.6.28-r8 (18 May 2009) |
337 |
|
338 |
18 May 2009; Gordon Malm <gengor@gentoo.org> |
339 |
+hardened-sources-2.6.28-r8.ebuild: |
340 |
Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067 |
341 |
and #262862 among others. |
342 |
|
343 |
01 May 2009; Gordon Malm <gengor@gentoo.org> |
344 |
hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild, |
345 |
hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild: |
346 |
Remove unnecessary mirror://gentoo from SRC_URI. |
347 |
|
348 |
05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild: |
349 |
ppc stable |
350 |
|
351 |
30 Mar 2009; Gordon Malm <gengor@gentoo.org> |
352 |
-hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild: |
353 |
Stable amd64/x86 and remove old. |
354 |
|
355 |
*hardened-sources-2.6.28-r7 (27 Mar 2009) |
356 |
|
357 |
27 Mar 2009; Gordon Malm <gengor@gentoo.org> |
358 |
+hardened-sources-2.6.28-r7.ebuild: |
359 |
Add Linux 2.6.28.9. Fix bugs 263424, 263870. |
360 |
|
361 |
22 Mar 2009; Gordon Malm <gengor@gentoo.org> |
362 |
-hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild, |
363 |
-hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild, |
364 |
-hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild: |
365 |
Stable amd64/x86 and remove old versions. |
366 |
|
367 |
22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild: |
368 |
ppc stable |
369 |
|
370 |
*hardened-sources-2.6.28-r6 (21 Mar 2009) |
371 |
|
372 |
21 Mar 2009; Gordon Malm <gengor@gentoo.org> |
373 |
-hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild: |
374 |
Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled. |
375 |
|
376 |
*hardened-sources-2.6.28-r5 (20 Mar 2009) |
377 |
|
378 |
20 Mar 2009; Gordon Malm <gengor@gentoo.org> |
379 |
+hardened-sources-2.6.28-r5.ebuild: |
380 |
Bump genpatches. Grsecurity patch bump, fixes bug #262752. |
381 |
|
382 |
20 Mar 2009; Gordon Malm <gengor@gentoo.org> |
383 |
hardened-sources-2.6.28-r4.ebuild: |
384 |
Stable amd64/x86. |
385 |
|
386 |
*hardened-sources-2.6.28-r4 (18 Mar 2009) |
387 |
|
388 |
18 Mar 2009; Gordon Malm <gengor@gentoo.org> |
389 |
+hardened-sources-2.6.28-r4.ebuild: |
390 |
Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature, |
391 |
compilation with CPA_DEBUG and more. |
392 |
|
393 |
17 Mar 2009; Gordon Malm <gengor@gentoo.org> |
394 |
hardened-sources-2.6.28-r3.ebuild: |
395 |
Quick stable amd64/x86. |
396 |
|
397 |
*hardened-sources-2.6.28-r3 (15 Mar 2009) |
398 |
|
399 |
15 Mar 2009; Gordon Malm <gengor@gentoo.org> |
400 |
+hardened-sources-2.6.28-r3.ebuild: |
401 |
Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507. |
402 |
|
403 |
14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild: |
404 |
ppc stable |
405 |
|
406 |
13 Mar 2009; Gordon Malm <gengor@gentoo.org> |
407 |
hardened-sources-2.6.28-r2.ebuild: |
408 |
Stable amd64/x86. |
409 |
|
410 |
*hardened-sources-2.6.28-r2 (11 Mar 2009) |
411 |
|
412 |
11 Mar 2009; Gordon Malm <gengor@gentoo.org> |
413 |
+hardened-sources-2.6.28-r2.ebuild: |
414 |
Version bump bringing in latest grsecurity patch. |
415 |
|
416 |
*hardened-sources-2.6.28-r1 (09 Mar 2009) |
417 |
|
418 |
09 Mar 2009; Gordon Malm <gengor@gentoo.org> |
419 |
-hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild: |
420 |
Version bump and remove old. |
421 |
|
422 |
07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild: |
423 |
ppc stable |
424 |
|
425 |
01 Mar 2009; Gordon Malm <gengor@gentoo.org> |
426 |
hardened-sources-2.6.27-r8.ebuild: |
427 |
Remove amd64 testing keyword, bug 256226. |
428 |
|
429 |
01 Mar 2009; Gordon Malm <gengor@gentoo.org> |
430 |
hardened-sources-2.6.27-r8.ebuild: |
431 |
Revert amd64 stable, bug #256226. |
432 |
|
433 |
01 Mar 2009; Gordon Malm <gengor@gentoo.org> |
434 |
hardened-sources-2.6.27-r8.ebuild: |
435 |
Stable on amd64/x86. |
436 |
|
437 |
24 Feb 2009; Gordon Malm <gengor@gentoo.org> |
438 |
-hardened-sources-2.6.27-r6.ebuild: |
439 |
Remove old 2.6.27 release. |
440 |
|
441 |
*hardened-sources-2.6.27-r8 (24 Feb 2009) |
442 |
|
443 |
24 Feb 2009; Gordon Malm <gengor@gentoo.org> |
444 |
+hardened-sources-2.6.27-r8.ebuild: |
445 |
Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067 |
446 |
and probably more. |
447 |
|
448 |
04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild: |
449 |
ppc stable |
450 |
|
451 |
*hardened-sources-2.6.28 (25 Jan 2009) |
452 |
|
453 |
25 Jan 2009; Gordon Malm <gengor@gentoo.org> |
454 |
+hardened-sources-2.6.28.ebuild: |
455 |
Initial 2.6.28 release. |
456 |
|
457 |
*hardened-sources-2.6.27-r7 (25 Jan 2009) |
458 |
|
459 |
25 Jan 2009; Gordon Malm <gengor@gentoo.org> |
460 |
+hardened-sources-2.6.27-r7.ebuild: |
461 |
Bump to Linux 2.6.27.13. |
462 |
|
463 |
25 Jan 2009; Gordon Malm <gengor@gentoo.org> |
464 |
hardened-sources-2.6.26-r9.ebuild: |
465 |
Stable amd64/x86. |
466 |
|
467 |
24 Jan 2009; Gordon Malm <gengor@gentoo.org> |
468 |
-hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild, |
469 |
-hardened-sources-2.6.27-r5.ebuild: |
470 |
Remove problem versions. |
471 |
|
472 |
*hardened-sources-2.6.27-r6 (24 Jan 2009) |
473 |
|
474 |
24 Jan 2009; Gordon Malm <gengor@gentoo.org> |
475 |
+hardened-sources-2.6.27-r6.ebuild: |
476 |
Revert PaX test29 to test30 changes. Fixes bug 256226. |
477 |
|
478 |
*hardened-sources-2.6.27-r5 (24 Jan 2009) |
479 |
|
480 |
24 Jan 2009; Gordon Malm <gengor@gentoo.org> |
481 |
+hardened-sources-2.6.27-r5.ebuild: |
482 |
Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733, |
483 |
254843. |
484 |
|
485 |
23 Jan 2009; Gordon Malm <gengor@gentoo.org> |
486 |
-hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild, |
487 |
-hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild: |
488 |
Remove problem versions. |
489 |
|
490 |
23 Jan 2009; nixnut <nixnut@gentoo.org> |
491 |
hardened-sources-2.6.25-r13.ebuild: |
492 |
ppc stable |
493 |
|
494 |
21 Jan 2009; Gordon Malm <gengor@gentoo.org> |
495 |
hardened-sources-2.6.25-r13.ebuild: |
496 |
Fasttrack stable amd64/x86. |
497 |
|
498 |
*hardened-sources-2.6.26-r9 (21 Jan 2009) |
499 |
|
500 |
21 Jan 2009; Gordon Malm <gengor@gentoo.org> |
501 |
+hardened-sources-2.6.26-r9.ebuild: |
502 |
Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843 |
503 |
|
504 |
*hardened-sources-2.6.25-r13 (20 Jan 2009) |
505 |
|
506 |
20 Jan 2009; Gordon Malm <gengor@gentoo.org> |
507 |
+hardened-sources-2.6.25-r13.ebuild: |
508 |
Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843 |
509 |
|
510 |
20 Jan 2009; nixnut <nixnut@gentoo.org> |
511 |
hardened-sources-2.6.25-r12.ebuild: |
512 |
ppc stable |
513 |
|
514 |
17 Jan 2009; Gordon Malm <gengor@gentoo.org> |
515 |
hardened-sources-2.6.25-r12.ebuild: |
516 |
Stable amd64/x86. |
517 |
|
518 |
14 Jan 2009; Gordon Malm <gengor@gentoo.org> |
519 |
-hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild, |
520 |
-hardened-sources-2.6.27-r2.ebuild: |
521 |
Clean out old versions. |
522 |
|
523 |
*hardened-sources-2.6.27-r4 (14 Jan 2009) |
524 |
*hardened-sources-2.6.26-r8 (14 Jan 2009) |
525 |
*hardened-sources-2.6.25-r12 (14 Jan 2009) |
526 |
|
527 |
14 Jan 2009; Gordon Malm <gengor@gentoo.org> |
528 |
+hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild, |
529 |
+hardened-sources-2.6.27-r4.ebuild: |
530 |
2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907 |
531 |
2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907 |
532 |
2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and |
533 |
grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907 |
534 |
|
535 |
15 Dec 2008; nixnut <nixnut@gentoo.org> |
536 |
hardened-sources-2.6.25-r11.ebuild: |
537 |
Stable on ppc |
538 |
|
539 |
09 Dec 2008; Gordon Malm <gengor@gentoo.org> |
540 |
hardened-sources-2.6.25-r11.ebuild: |
541 |
Stable amd64/x86. |
542 |
|
543 |
*hardened-sources-2.6.27-r3 (07 Dec 2008) |
544 |
|
545 |
07 Dec 2008; Gordon Malm <gengor@gentoo.org> |
546 |
+hardened-sources-2.6.27-r3.ebuild: |
547 |
Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches. |
548 |
Fixes bug #248754, #249729 and #246607. |
549 |
|
550 |
03 Dec 2008; Gordon Malm <gengor@gentoo.org> |
551 |
-hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild: |
552 |
Remove old versions. |
553 |
|
554 |
*hardened-sources-2.6.26-r7 (03 Dec 2008) |
555 |
*hardened-sources-2.6.25-r11 (03 Dec 2008) |
556 |
|
557 |
03 Dec 2008; Gordon Malm <gengor@gentoo.org> |
558 |
+hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild: |
559 |
2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754. |
560 |
2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754. |
561 |
Both include many backports from 2.6.27.{6,7} -stable releases. |
562 |
|
563 |
24 Nov 2008; Gordon Malm <gengor@gentoo.org> |
564 |
-hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild: |
565 |
Remove versions broken on ARCHes != x86/amd64. |
566 |
|
567 |
*hardened-sources-2.6.27-r2 (24 Nov 2008) |
568 |
|
569 |
24 Nov 2008; Gordon Malm <gengor@gentoo.org> |
570 |
+hardened-sources-2.6.27-r2.ebuild: |
571 |
Bump to Linux 2.6.27.7 and latest grsecurity patch. |
572 |
|
573 |
19 Nov 2008; Gordon Malm <gengor@gentoo.org> |
574 |
-hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild: |
575 |
Remove old versions. |
576 |
|
577 |
19 Nov 2008; Gordon Malm <gengor@gentoo.org> |
578 |
hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild: |
579 |
Remove all but ~amd64 & ~x86 keywords (broken elsewhere). |
580 |
|
581 |
16 Nov 2008; nixnut <nixnut@gentoo.org> |
582 |
hardened-sources-2.6.25-r10.ebuild: |
583 |
Stable on ppc |
584 |
|
585 |
15 Nov 2008; Gordon Malm <gengor@gentoo.org> |
586 |
hardened-sources-2.6.25-r10.ebuild: |
587 |
Stable amd64/x86. |
588 |
|
589 |
*hardened-sources-2.6.26-r6 (12 Nov 2008) |
590 |
|
591 |
12 Nov 2008; Gordon Malm <gengor@gentoo.org> |
592 |
+hardened-sources-2.6.26-r6.ebuild: |
593 |
Bump to Linux 2.6.26.8 and fix security bug #245650. |
594 |
|
595 |
*hardened-sources-2.6.25-r10 (12 Nov 2008) |
596 |
|
597 |
12 Nov 2008; Gordon Malm <gengor@gentoo.org> |
598 |
+hardened-sources-2.6.25-r10.ebuild: |
599 |
Update to Linux 2.6.25.20 and fix bugs #245427, #245650. |
600 |
|
601 |
*hardened-sources-2.6.27-r1 (09 Nov 2008) |
602 |
|
603 |
09 Nov 2008; Gordon Malm <gengor@gentoo.org> |
604 |
+hardened-sources-2.6.27-r1.ebuild: |
605 |
Bump to stable kernel 2.6.27.5 and latest grsecurity patch. |
606 |
|
607 |
*hardened-sources-2.6.27 (04 Nov 2008) |
608 |
|
609 |
04 Nov 2008; Gordon Malm <gengor@gentoo.org> |
610 |
+hardened-sources-2.6.27.ebuild: |
611 |
Initial 2.6.27 release. |
612 |
|
613 |
*hardened-sources-2.6.26-r5 (03 Nov 2008) |
614 |
|
615 |
03 Nov 2008; Gordon Malm <gengor@gentoo.org> |
616 |
-hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild, |
617 |
+hardened-sources-2.6.26-r5.ebuild: |
618 |
2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates. |
619 |
Clean out some old versions. |
620 |
|
621 |
02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild: |
622 |
Stable on ppc |
623 |
|
624 |
30 Oct 2008; Gordon Malm <gengor@gentoo.org> |
625 |
hardened-sources-2.6.25-r9.ebuild: |
626 |
Stable on amd64/x86. |
627 |
|
628 |
*hardened-sources-2.6.25-r9 (26 Oct 2008) |
629 |
|
630 |
26 Oct 2008; Gordon Malm <gengor@gentoo.org> |
631 |
+hardened-sources-2.6.25-r9.ebuild: |
632 |
Update to Linux 2.6.25.19 |
633 |
|
634 |
15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild: |
635 |
Stable on ppc |
636 |
|
637 |
*hardened-sources-2.6.26-r4 (14 Oct 2008) |
638 |
|
639 |
14 Oct 2008; Gordon Malm <gengor@gentoo.org> |
640 |
-hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild: |
641 |
Update to latest grsecurity patch, fixing building of non-modular kernels. |
642 |
|
643 |
*hardened-sources-2.6.26-r3 (12 Oct 2008) |
644 |
|
645 |
12 Oct 2008; Gordon Malm <gengor@gentoo.org> |
646 |
hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild, |
647 |
+hardened-sources-2.6.26-r3.ebuild: |
648 |
2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch. |
649 |
2.6.26-r1: Removed. |
650 |
2.6.25-r8: Stable amd64/x86. |
651 |
|
652 |
*hardened-sources-2.6.25-r8 (09 Oct 2008) |
653 |
|
654 |
09 Oct 2008; Gordon Malm <gengor@gentoo.org> |
655 |
-hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild, |
656 |
-hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild: |
657 |
Update to genpatches-11 and Linux 2.6.25.18. Remove old versions. |
658 |
|
659 |
20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild: |
660 |
Stable on ppc |
661 |
|
662 |
17 Sep 2008; Gordon Malm <gengor@gentoo.org> |
663 |
hardened-sources-2.6.25-r7.ebuild: |
664 |
Stable amd64/x86. |
665 |
|
666 |
*hardened-sources-2.6.26-r2 (13 Sep 2008) |
667 |
|
668 |
13 Sep 2008; Gordon Malm <gengor@gentoo.org> |
669 |
-hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild: |
670 |
2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding |
671 |
PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed. |
672 |
|
673 |
*hardened-sources-2.6.25-r7 (13 Sep 2008) |
674 |
|
675 |
13 Sep 2008; Gordon Malm <gengor@gentoo.org> |
676 |
+hardened-sources-2.6.25-r7.ebuild: |
677 |
Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug. |
678 |
|
679 |
10 Sep 2008; Gordon Malm <gengor@gentoo.org> |
680 |
hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild, |
681 |
hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild, |
682 |
hardened-sources-2.6.26-r1.ebuild: |
683 |
Update DESCRIPTION and HGPV_URI. |
684 |
|
685 |
*hardened-sources-2.6.25-r6 (09 Sep 2008) |
686 |
|
687 |
09 Sep 2008; Gordon Malm <gengor@gentoo.org> |
688 |
-hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild: |
689 |
2.6.25-r6: Update to Linux 2.6.25.17. |
690 |
2.6.24-r3: Removed. |
691 |
|
692 |
08 Sep 2008; Gordon Malm <gengor@gentoo.org> |
693 |
hardened-sources-2.6.25-r5.ebuild: |
694 |
Stable on amd64/x86 |
695 |
|
696 |
07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml: |
697 |
Update my email address. |
698 |
|
699 |
31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild: |
700 |
stable on ppc |
701 |
|
702 |
*hardened-sources-2.6.26-r1 (23 Aug 2008) |
703 |
*hardened-sources-2.6.25-r5 (23 Aug 2008) |
704 |
|
705 |
23 Aug 2008; Bryan D. Stine <battousai@gentoo.org> |
706 |
-hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild, |
707 |
hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild, |
708 |
+hardened-sources-2.6.26-r1.ebuild: |
709 |
Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing |
710 |
security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also |
711 |
fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86. |
712 |
Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm |
713 |
(gengor). |
714 |
|
715 |
*hardened-sources-2.6.26 (18 Aug 2008) |
716 |
*hardened-sources-2.6.25-r4 (18 Aug 2008) |
717 |
|
718 |
18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild, |
719 |
+hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild: |
720 |
- proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update |
721 |
to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812. |
722 |
2.6.25-r2: Removed. |
723 |
|
724 |
16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml: |
725 |
Remove phreak from metadata.xml (#96398) |
726 |
|
727 |
*hardened-sources-2.6.25-r3 (31 Jul 2008) |
728 |
|
729 |
31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild, |
730 |
-hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild, |
731 |
+hardened-sources-2.6.25-r3.ebuild: |
732 |
- 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple |
733 |
fixes, including security bug #231750. |
734 |
|
735 |
28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild: |
736 |
Stable on ppc |
737 |
|
738 |
*hardened-sources-2.6.25-r2 (05 Jul 2008) |
739 |
|
740 |
05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild, |
741 |
-hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild, |
742 |
+hardened-sources-2.6.25-r2.ebuild: |
743 |
2.6.23-r4: Stable x86/amd64 |
744 |
2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release. |
745 |
2.6.23-r{11,12}: Removed due to multiple vulns. |
746 |
(gengor & kerframil) |
747 |
|
748 |
04 Jul 2008; nixnut <nixnut@gentoo.org> |
749 |
hardened-sources-2.6.23-r13.ebuild: |
750 |
Stable on ppc |
751 |
|
752 |
*hardened-sources-2.6.25-r1 (30 Jun 2008) |
753 |
|
754 |
30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild, |
755 |
+hardened-sources-2.6.25-r1.ebuild: |
756 |
2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer |
757 |
grsecurity release. 2.6.23-r13: x86/amd64 stable |
758 |
|
759 |
*hardened-sources-2.6.25 (17 Jun 2008) |
760 |
*hardened-sources-2.6.24-r3 (17 Jun 2008) |
761 |
*hardened-sources-2.6.23-r13 (17 Jun 2008) |
762 |
|
763 |
17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild, |
764 |
+hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild: |
765 |
* 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635, |
766 |
#224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136, |
767 |
#222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. * |
768 |
2.6.25: Initial 2.6.25 release. |
769 |
|
770 |
15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild: |
771 |
- fasttrack to stable x86/amd64 |
772 |
|
773 |
11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest: |
774 |
Fix broken digest for linux-2.6.24.tar.bz2. |
775 |
|
776 |
*hardened-sources-2.6.24-r2 (11 May 2008) |
777 |
*hardened-sources-2.6.23-r12 (11 May 2008) |
778 |
|
779 |
11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild, |
780 |
-hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild, |
781 |
+hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild, |
782 |
-hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild: |
783 |
proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691, |
784 |
220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442, |
785 |
security bugs 219901, 220691, 220975, 220979, 221123. New |
786 |
genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10 |
787 |
should be removed as far as I'm concerned, everything else remove due to |
788 |
vulnerable to numerous security bugs or brokeness. |
789 |
|
790 |
10 May 2008; nixnut <nixnut@gentoo.org> |
791 |
hardened-sources-2.6.23-r11.ebuild: |
792 |
Stable on ppc |
793 |
|
794 |
05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild: |
795 |
- -r11 stable on x86/amd64 |
796 |
|
797 |
*hardened-sources-2.6.23-r11 (01 May 2008) |
798 |
|
799 |
01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild: |
800 |
- version bump to fix ulgy linux bugs |
801 |
|
802 |
*hardened-sources-2.6.24-r1 (30 Apr 2008) |
803 |
|
804 |
30 Apr 2008; Christian Heim <phreak@gentoo.org> |
805 |
+hardened-sources-2.6.24-r1.ebuild: |
806 |
Revision bump (thanks to Kerin and Gordon, again), pulling |
807 |
genpatches-2.6.24-7, solving #219089. Additionally contains further security |
808 |
fixes plus some minor updates. |
809 |
|
810 |
*hardened-sources-2.6.23-r10 (30 Apr 2008) |
811 |
|
812 |
30 Apr 2008; Christian Heim <phreak@gentoo.org> |
813 |
+hardened-sources-2.6.23-r10.ebuild: |
814 |
Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089. |
815 |
Additional contains "various other fixes". |
816 |
|
817 |
09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml: |
818 |
Update the longdescription in metadata, thanks to Gordon Malm. |
819 |
|
820 |
08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild: |
821 |
Stable on ppc wrt bug #213255 |
822 |
|
823 |
07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild, |
824 |
-hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild: |
825 |
- stable on x86/amd64 per request. Removed obsolete ebuilds |
826 |
|
827 |
*hardened-sources-2.6.24 (07 Apr 2008) |
828 |
|
829 |
07 Apr 2008; Christian Heim <phreak@gentoo.org> |
830 |
+hardened-sources-2.6.24.ebuild: |
831 |
Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar |
832 |
<kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org> |
833 |
for the many contributions and their continued effort in #216612) based on |
834 |
2.6.24 and genpatches-2.6.24-5. |
835 |
|
836 |
The current ebuild/patchset contains these things: |
837 |
* Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch |
838 |
* Introduces bespoke server and workstation oriented security levels |
839 |
* VDSO_COMPAT cannot be enabled during runtime if PaX is enabled |
840 |
|
841 |
30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml: |
842 |
Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are |
843 |
maintaining it). |
844 |
|
845 |
24 Mar 2008; Christian Heim <phreak@gentoo.org> |
846 |
hardened-sources-2.4.35-r2.ebuild: |
847 |
Fixing SRC_URI for 2.4.35-r2. |
848 |
|
849 |
*hardened-sources-2.6.23-r9 (22 Mar 2008) |
850 |
|
851 |
22 Mar 2008; Christian Heim <phreak@gentoo.org> |
852 |
+hardened-sources-2.6.23-r9.ebuild: |
853 |
* Revision bump, rebasing the patchset against genpatches-2.6.23-10. |
854 |
* Change the default GIDs for some grsecurity options |
855 |
* Revamp the Hardened [Gentoo] security level and make it the default level |
856 |
* Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support) |
857 |
* Fix a recursive lock -- call to capable() within ptrace_attach() |
858 |
* Fix bug that allows audit and iscsi operations to be controlled via netlink |
859 |
|
860 |
*hardened-sources-2.6.23-r8 (27 Feb 2008) |
861 |
|
862 |
27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild: |
863 |
- version bump from Kerin Millar bug 210026 |
864 |
|
865 |
17 Feb 2008; <solar@gentoo.org> metadata.xml, |
866 |
-hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild, |
867 |
-hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild, |
868 |
-hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild: |
869 |
- stable on x86 and remove old ebuilds |
870 |
|
871 |
15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild: |
872 |
- stable on amd64 per request of amd64 lead |
873 |
|
874 |
*hardened-sources-2.6.23-r7 (11 Feb 2008) |
875 |
|
876 |
11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild: |
877 |
- version bump from kerin.millar |
878 |
Changes: |
879 |
|
880 |
* Bump to genpatches-base-2.6.23-9 |
881 |
* Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15 |
882 |
* Disables COMPAT_VDSO in x86/defconfig |
883 |
* Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig |
884 |
|
885 |
25 Jan 2008; Christian Heim <phreak@gentoo.org> |
886 |
-hardened-sources-2.6.22-r8.ebuild: |
887 |
Cleaning up old versions. |
888 |
|
889 |
*hardened-sources-2.6.23-r6 (25 Jan 2008) |
890 |
|
891 |
25 Jan 2008; Christian Heim <phreak@gentoo.org> |
892 |
-hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild: |
893 |
Revision bump, pulling in the latest genpatches. |
894 |
|
895 |
*hardened-sources-2.6.23-r5 (24 Dec 2007) |
896 |
|
897 |
24 Dec 2007; Christian Heim <phreak@gentoo.org> |
898 |
hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild, |
899 |
hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild, |
900 |
hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild: |
901 |
Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI. |
902 |
|
903 |
24 Dec 2007; Christian Heim <phreak@gentoo.org> |
904 |
-hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild, |
905 |
-hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild, |
906 |
-hardened-sources-2.6.23-r3.ebuild: |
907 |
Cleaning out some unused, old versions. |
908 |
|
909 |
24 Dec 2007; Christian Heim <phreak@gentoo.org> |
910 |
hardened-sources-2.6.23-r4.ebuild: |
911 |
Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't |
912 |
in the tree for long, but there isn't much of a difference between this and |
913 |
-r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches. |
914 |
|
915 |
*hardened-sources-2.6.23-r4 (23 Dec 2007) |
916 |
|
917 |
23 Dec 2007; Christian Heim <phreak@gentoo.org> |
918 |
+hardened-sources-2.6.23-r4.ebuild: |
919 |
Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is). |
920 |
|
921 |
*hardened-sources-2.6.23-r3 (04 Dec 2007) |
922 |
|
923 |
04 Dec 2007; Christian Heim <phreak@gentoo.org> |
924 |
+hardened-sources-2.6.23-r3.ebuild: |
925 |
Revision bump, pulling in 2.6.23.9. |
926 |
|
927 |
*hardened-sources-2.6.23-r2 (25 Nov 2007) |
928 |
|
929 |
25 Nov 2007; Christian Heim <phreak@gentoo.org> |
930 |
+hardened-sources-2.6.23-r2.ebuild: |
931 |
Updated patchset, thanks to solar. |
932 |
|
933 |
*hardened-sources-2.6.23-r1 (31 Oct 2007) |
934 |
|
935 |
31 Oct 2007; Christian Heim <phreak@gentoo.org> |
936 |
+hardened-sources-2.6.23-r1.ebuild: |
937 |
Revision bump, pulling in the snapshot from 30. October 2007 (18:50). |
938 |
|
939 |
29 Oct 2007; <solar@gentoo.org> metadata.xml: |
940 |
- update metadata.xml |
941 |
|
942 |
25 Oct 2007; Christian Heim <phreak@gentoo.org> |
943 |
hardened-sources-2.6.22-r8.ebuild: |
944 |
Marking 2.6.22-r8 stable on amd64 and x86. |
945 |
|
946 |
21 Oct 2007; Christian Heim <phreak@gentoo.org> |
947 |
-hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild, |
948 |
-hardened-sources-2.6.21-r4.ebuild: |
949 |
Removing old ebuilds. |
950 |
|
951 |
*hardened-sources-2.4.35-r2 (21 Oct 2007) |
952 |
|
953 |
21 Oct 2007; Christian Heim <phreak@gentoo.org> |
954 |
+hardened-sources-2.4.35-r2.ebuild: |
955 |
Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable |
956 |
patches. |
957 |
|
958 |
*hardened-sources-2.6.22-r8 (21 Oct 2007) |
959 |
|
960 |
21 Oct 2007; Christian Heim <phreak@gentoo.org> |
961 |
+hardened-sources-2.6.22-r8.ebuild: |
962 |
Yet another new patch, hopefully fixing the remaining issues we had w/ |
963 |
2.6.22. Candidate for stabling. |
964 |
|
965 |
*hardened-sources-2.6.23 (13 Oct 2007) |
966 |
|
967 |
13 Oct 2007; Christian Heim <phreak@gentoo.org> |
968 |
+hardened-sources-2.6.23.ebuild: |
969 |
Initial hardened-sources-2.6.23. If people still have problems w/ bug |
970 |
194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY. |
971 |
|
972 |
11 Oct 2007; Christian Heim <phreak@gentoo.org> |
973 |
hardened-sources-2.6.20-r10.ebuild: |
974 |
Pulling in yet another new genpatches version, fixing the PWC bug for real. |
975 |
|
976 |
04 Oct 2007; Christian Heim <phreak@gentoo.org> |
977 |
-hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild: |
978 |
Removing old versions. |
979 |
|
980 |
*hardened-sources-2.6.22-r7 (01 Oct 2007) |
981 |
|
982 |
01 Oct 2007; Christian Heim <phreak@gentoo.org> |
983 |
+hardened-sources-2.6.22-r7.ebuild: |
984 |
Revision bump, pulling in a newer patch. Should fix #194276. |
985 |
|
986 |
30 Sep 2007; Christian Heim <phreak@gentoo.org> |
987 |
hardened-sources-2.6.20-r10.ebuild: |
988 |
Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of |
989 |
Mike Doty). |
990 |
|
991 |
*hardened-sources-2.6.22-r6 (26 Sep 2007) |
992 |
|
993 |
26 Sep 2007; Christian Heim <phreak@gentoo.org> |
994 |
+hardened-sources-2.6.22-r6.ebuild: |
995 |
Revision bump, grabbing up till Linux 2.6.22.9. |
996 |
|
997 |
24 Sep 2007; Christian Heim <phreak@gentoo.org> |
998 |
-hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild: |
999 |
Cleaning up further. |
1000 |
|
1001 |
*hardened-sources-2.6.20-r10 (24 Sep 2007) |
1002 |
|
1003 |
24 Sep 2007; Christian Heim <phreak@gentoo.org> |
1004 |
-hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild, |
1005 |
+hardened-sources-2.6.20-r10.ebuild: |
1006 |
Revision bump, pulling in Linux 2.6.20.20. Removing some of the older |
1007 |
revisions. |
1008 |
|
1009 |
*hardened-sources-2.6.22-r5 (22 Sep 2007) |
1010 |
|
1011 |
22 Sep 2007; Christian Heim <phreak@gentoo.org> |
1012 |
+hardened-sources-2.6.22-r5.ebuild: |
1013 |
Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573. |
1014 |
|
1015 |
17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml: |
1016 |
Removing johnm from metadata.xml (see #186467 for reference). |
1017 |
|
1018 |
*hardened-sources-2.6.22-r4 (17 Sep 2007) |
1019 |
|
1020 |
17 Sep 2007; Christian Heim <phreak@gentoo.org> |
1021 |
+hardened-sources-2.6.22-r4.ebuild: |
1022 |
Revision bump, hopefully fixing all those weird PAX failures. |
1023 |
|
1024 |
01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml: |
1025 |
Updating the metadata.xml. |
1026 |
|
1027 |
01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml: |
1028 |
Removing tocharian from metadata due to his retirement (see #71718 for |
1029 |
reference). |
1030 |
|
1031 |
*hardened-sources-2.6.20-r9 (30 Aug 2007) |
1032 |
|
1033 |
30 Aug 2007; Christian Heim <phreak@gentoo.org> |
1034 |
+hardened-sources-2.6.20-r9.ebuild: |
1035 |
Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened). |
1036 |
|
1037 |
29 Aug 2007; Christian Heim <phreak@gentoo.org> |
1038 |
-hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild, |
1039 |
-hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild, |
1040 |
-hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild, |
1041 |
-hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild, |
1042 |
-hardened-sources-2.6.22-r2.ebuild: |
1043 |
Removing some redundant versions. |
1044 |
|
1045 |
*hardened-sources-2.4.35-r1 (29 Aug 2007) |
1046 |
|
1047 |
29 Aug 2007; Christian Heim <phreak@gentoo.org> |
1048 |
+hardened-sources-2.4.35-r1.ebuild: |
1049 |
Revision bump, new grsecurity patch. |
1050 |
|
1051 |
*hardened-sources-2.6.20-r8 (26 Aug 2007) |
1052 |
|
1053 |
26 Aug 2007; Christian Heim <phreak@gentoo.org> |
1054 |
+hardened-sources-2.6.20-r8.ebuild: |
1055 |
Revision bump for Linux 2.6.20.17. |
1056 |
|
1057 |
*hardened-sources-2.6.22-r3 (22 Aug 2007) |
1058 |
|
1059 |
22 Aug 2007; Christian Heim <phreak@gentoo.org> |
1060 |
+hardened-sources-2.6.22-r3.ebuild: |
1061 |
Revision bump for Linux 2.6.22.4. |
1062 |
|
1063 |
16 Aug 2007; Christian Heim <phreak@gentoo.org> |
1064 |
hardened-sources-2.6.22-r2.ebuild: |
1065 |
Updated patchset, to fix the alignment against 2.6.22.3. |
1066 |
|
1067 |
*hardened-sources-2.6.22-r2 (16 Aug 2007) |
1068 |
|
1069 |
16 Aug 2007; Christian Heim <phreak@gentoo.org> |
1070 |
+hardened-sources-2.6.22-r2.ebuild: |
1071 |
Revision bump for Linux 2.6.22.3. |
1072 |
|
1073 |
*hardened-sources-2.4.35 (16 Aug 2007) |
1074 |
|
1075 |
16 Aug 2007; Christian Heim <phreak@gentoo.org> |
1076 |
+hardened-sources-2.4.35.ebuild: |
1077 |
Version bump, initial version for Linux 2.4.35. |
1078 |
|
1079 |
*hardened-sources-2.6.21-r4 (16 Aug 2007) |
1080 |
|
1081 |
16 Aug 2007; Christian Heim <phreak@gentoo.org> |
1082 |
+hardened-sources-2.6.21-r4.ebuild: |
1083 |
Revision bump for Linux 2.6.21.6. |
1084 |
|
1085 |
*hardened-sources-2.6.20-r7 (16 Aug 2007) |
1086 |
|
1087 |
16 Aug 2007; Christian Heim <phreak@gentoo.org> |
1088 |
+hardened-sources-2.6.20-r7.ebuild: |
1089 |
Revision bump for Linux 2.6.20.16. |
1090 |
|
1091 |
*hardened-sources-2.6.22-r1 (13 Aug 2007) |
1092 |
|
1093 |
13 Aug 2007; Christian Heim <phreak@gentoo.org> |
1094 |
+hardened-sources-2.6.22-r1.ebuild: |
1095 |
Yet another revision bump. |
1096 |
|
1097 |
*hardened-sources-2.6.22 (10 Aug 2007) |
1098 |
|
1099 |
10 Aug 2007; Christian Heim <phreak@gentoo.org> |
1100 |
+hardened-sources-2.6.22.ebuild: |
1101 |
Initial release for 2.6.22. If you are using hardened-sources on a desktop |
1102 |
machine (P4 or newer), be aware you might need to disable |
1103 |
CONFIG_PAX_PAGEEXEC. |
1104 |
|
1105 |
04 Aug 2007; Christian Heim <phreak@gentoo.org> |
1106 |
hardened-sources-2.6.20-r6.ebuild: |
1107 |
Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux |
1108 |
2.6.20.15. |
1109 |
|
1110 |
10 Jul 2007; Christian Heim <phreak@gentoo.org> |
1111 |
hardened-sources-2.6.20-r5.ebuild: |
1112 |
Marking hardened-sources-2.6.20-r5 stable on ppc. |
1113 |
|
1114 |
10 Jul 2007; Christian Heim <phreak@gentoo.org> |
1115 |
-hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild: |
1116 |
Cleanup. |
1117 |
|
1118 |
*hardened-sources-2.6.20-r6 (08 Jul 2007) |
1119 |
|
1120 |
08 Jul 2007; Christian Heim <phreak@gentoo.org> |
1121 |
+hardened-sources-2.6.20-r6.ebuild: |
1122 |
Revision bump, grabbing yet another stable release. |
1123 |
|
1124 |
17 Jun 2007; Christian Heim <phreak@gentoo.org> |
1125 |
-hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild, |
1126 |
-hardened-sources-2.6.21-r2.ebuild: |
1127 |
Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the |
1128 |
alpha stable KEYWORD by mistake. |
1129 |
|
1130 |
17 Jun 2007; Christian Heim <phreak@gentoo.org> |
1131 |
hardened-sources-2.6.20-r5.ebuild: |
1132 |
Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as |
1133 |
genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86. |
1134 |
|
1135 |
*hardened-sources-2.6.21-r3 (12 Jun 2007) |
1136 |
|
1137 |
12 Jun 2007; Christian Heim <phreak@gentoo.org> |
1138 |
+hardened-sources-2.6.21-r3.ebuild: |
1139 |
Revision bump for hardened-sources-2.6.21, incorporating various CVE (some |
1140 |
of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other |
1141 |
love. |
1142 |
|
1143 |
*hardened-sources-2.6.20-r5 (11 Jun 2007) |
1144 |
|
1145 |
11 Jun 2007; Christian Heim <phreak@gentoo.org> |
1146 |
+hardened-sources-2.6.20-r5.ebuild: |
1147 |
Revision bump for hardened-sources-2.6.20, incorporating various CVE (some |
1148 |
of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other |
1149 |
love. |
1150 |
|
1151 |
*hardened-sources-2.4.34.5 (11 Jun 2007) |
1152 |
|
1153 |
11 Jun 2007; Alexander Gabert <pappy@gentoo.org> |
1154 |
+hardened-sources-2.4.34.5.ebuild: |
1155 |
added new hardened-sources 2.4 version, thx to phreak, solar, pipacs |
1156 |
|
1157 |
30 May 2007; Christian Heim <phreak@gentoo.org> |
1158 |
-hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild: |
1159 |
Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more |
1160 |
stale ebuild(s). |
1161 |
|
1162 |
30 May 2007; Christian Heim <phreak@gentoo.org> |
1163 |
-hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild, |
1164 |
-hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild, |
1165 |
-hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild: |
1166 |
Doing some cleanups, remove stale ebuilds. |
1167 |
|
1168 |
26 May 2007; Christian Heim <phreak@gentoo.org> |
1169 |
hardened-sources-2.6.21-r2.ebuild: |
1170 |
Fixing the grsecurity patch, had one '};' too much. |
1171 |
|
1172 |
*hardened-sources-2.6.21-r2 (26 May 2007) |
1173 |
|
1174 |
26 May 2007; Christian Heim <phreak@gentoo.org> |
1175 |
-hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild, |
1176 |
+hardened-sources-2.6.21-r2.ebuild: |
1177 |
Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the |
1178 |
grsecurity patch to 2.1.10-2.6.21.1-200705221918. |
1179 |
|
1180 |
*hardened-sources-2.6.20-r4 (26 May 2007) |
1181 |
|
1182 |
26 May 2007; Christian Heim <phreak@gentoo.org> |
1183 |
-hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild: |
1184 |
Revision bump, including Linux 2.6.20.12 (which in fact fixed some security |
1185 |
bugs, at the very least CVE-2007-2451). Possible candidate for stable marking. |
1186 |
|
1187 |
15 May 2007; Christian Heim <phreak@gentoo.org> |
1188 |
hardened-sources-2.6.20-r3.ebuild: |
1189 |
Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11 |
1190 |
introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the |
1191 |
grsecurity patch fail in that exact same hunk. |
1192 |
|
1193 |
*hardened-sources-2.6.20-r3 (15 May 2007) |
1194 |
|
1195 |
15 May 2007; Christian Heim <phreak@gentoo.org> |
1196 |
+hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild: |
1197 |
Revision bump, incorporating Linux 2.6.20.11. |
1198 |
|
1199 |
*hardened-sources-2.6.21-r1 (11 May 2007) |
1200 |
|
1201 |
11 May 2007; Christian Heim <phreak@gentoo.org> |
1202 |
+hardened-sources-2.6.21-r1.ebuild: |
1203 |
Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs |
1204 |
mentioned in #177234. |
1205 |
|
1206 |
07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org> |
1207 |
files/digest-hardened-sources-2.6.21, Manifest: |
1208 |
Fix Manifest/digest for linux-2.6.21.tar.bz2 |
1209 |
|
1210 |
06 May 2007; Christian Heim <phreak@gentoo.org> |
1211 |
hardened-sources-2.6.21.ebuild: |
1212 |
Bumping the hardened-patches version, needed for the fix for #177234. |
1213 |
|
1214 |
*hardened-sources-2.6.21 (02 May 2007) |
1215 |
|
1216 |
02 May 2007; Christian Heim <phreak@gentoo.org> |
1217 |
+hardened-sources-2.6.21.ebuild: |
1218 |
Version bump, Linux 2.6.21-hardened. |
1219 |
|
1220 |
29 Apr 2007; Christian Heim <phreak@gentoo.org> |
1221 |
hardened-sources-2.6.20-r2.ebuild: |
1222 |
Adding ~ia64 on Ned's request. |
1223 |
|
1224 |
29 Apr 2007; Christian Heim <phreak@gentoo.org> |
1225 |
hardened-sources-2.6.20-r2.ebuild: |
1226 |
Fixing the included grsecurity patch, wasn't alligning due to the Index: |
1227 |
header line(s). |
1228 |
|
1229 |
29 Apr 2007; Christian Heim <phreak@gentoo.org> |
1230 |
hardened-sources-2.6.20-r2.ebuild: |
1231 |
Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86. |
1232 |
|
1233 |
*hardened-sources-2.6.20-r2 (10 Apr 2007) |
1234 |
|
1235 |
10 Apr 2007; Raúl Porcel <armin76@gentoo.org> |
1236 |
+hardened-sources-2.6.20-r2.ebuild: |
1237 |
Version bump, on behalf of phreak |
1238 |
|
1239 |
*hardened-sources-2.6.20-r1 (04 Apr 2007) |
1240 |
|
1241 |
04 Apr 2007; Christian Heim <phreak@gentoo.org> |
1242 |
+hardened-sources-2.6.20-r1.ebuild: |
1243 |
Revision bump, grabbing a newer grsecurity snapshot. |
1244 |
|
1245 |
*hardened-sources-2.6.20 (25 Mar 2007) |
1246 |
|
1247 |
25 Mar 2007; Christian Heim <phreak@gentoo.org> |
1248 |
+hardened-sources-2.6.20.ebuild: |
1249 |
Finally a hardened-sources version for 2.6.20; many people have been waiting |
1250 |
for this. Thanks to Steve for preliminary testing, thanks to Ned for the |
1251 |
testbox. |
1252 |
|
1253 |
16 Mar 2007; Tony Vroon <chainsaw@gentoo.org> |
1254 |
hardened-sources-2.6.18-r6.ebuild: |
1255 |
Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp. |
1256 |
|
1257 |
*hardened-sources-2.6.18-r6 (16 Mar 2007) |
1258 |
|
1259 |
16 Mar 2007; Christian Heim <phreak@gentoo.org> |
1260 |
-hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild: |
1261 |
Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And |
1262 |
yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's |
1263 |
supposed to be. |
1264 |
|
1265 |
06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog: |
1266 |
Fixing the Manifest, the previous one was broken (as in still had the |
1267 |
deleted ebuild in it). |
1268 |
|
1269 |
06 Mar 2007; Christian Heim <phreak@gentoo.org> |
1270 |
-hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild, |
1271 |
+hardened-sources-2.6.18-r5.ebuild: |
1272 |
Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for |
1273 |
Linux 2.6.18.8. Also cleaning up the older version. |
1274 |
|
1275 |
*hardened-sources-2.6.18-r5 (06 Mar 2007) |
1276 |
|
1277 |
06 Mar 2007; Christian Heim <phreak@gentoo.org> |
1278 |
-hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild, |
1279 |
+hardened-sources-2.6.18-r5.ebuild: |
1280 |
Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for |
1281 |
Linux 2.6.18.8. Also cleaning up the older version. |
1282 |
|
1283 |
24 Feb 2007; Christian Heim <phreak@gentoo.org> |
1284 |
-hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild, |
1285 |
-hardened-sources-2.6.19-r5.ebuild: |
1286 |
Removing some of the old version, that didn't work. |
1287 |
|
1288 |
*hardened-sources-2.6.19-r6 (12 Feb 2007) |
1289 |
|
1290 |
12 Feb 2007; Christian Heim <phreak@gentoo.org> |
1291 |
+hardened-sources-2.6.19-r6.ebuild: |
1292 |
Revision bump, including a new grsec version fixing #166235. |
1293 |
|
1294 |
*hardened-sources-2.4.34 (24 Jan 2007) |
1295 |
|
1296 |
24 Jan 2007; Alexander Gabert <pappy@gentoo.org> |
1297 |
Manifest: |
1298 |
updating Manifest with checksums of new tarball and ebuild |
1299 |
|
1300 |
24 Jan 2007; Alexander Gabert <pappy@gentoo.org> |
1301 |
+hardened-sources-2.4.34.ebuild: |
1302 |
I added new hardened sources 2.4 update, this is a critical path |
1303 |
security bugfix - all users of h-s are strongly advised |
1304 |
to update their existing hardened sources to this version. |
1305 |
It contains a fix for a kernel vulnerability that is pertaining |
1306 |
to the PaX changes to virtual memory management, possibly leading |
1307 |
to a local kernel exploit ... see grsecurity.net forums and homepage |
1308 |
|
1309 |
23 Jan 2007; Christian Heim <phreak@gentoo.org> |
1310 |
files/digest-hardened-sources-2.6.19-r5, Manifest: |
1311 |
Fixing the patch-tarball digest. |
1312 |
|
1313 |
*hardened-sources-2.6.19-r5 (23 Jan 2007) |
1314 |
|
1315 |
23 Jan 2007; Christian Heim <phreak@gentoo.org> |
1316 |
+hardened-sources-2.6.19-r5.ebuild: |
1317 |
Revision bump, closing the recently discovered PaX expand_stack() |
1318 |
vulnerability. |
1319 |
|
1320 |
*hardened-sources-2.6.19-r4 (14 Jan 2007) |
1321 |
|
1322 |
14 Jan 2007; Christian Heim <phreak@gentoo.org> |
1323 |
+hardened-sources-2.6.19-r4.ebuild: |
1324 |
Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus |
1325 |
dropping the randomized PID feature. |
1326 |
|
1327 |
11 Jan 2007; Christian Faulhammer <opfer@gentoo.org> |
1328 |
hardened-sources-2.4.33.4.ebuild: |
1329 |
stable x86, bug #161171 |
1330 |
|
1331 |
*hardened-sources-2.6.19-r3 (27 Dec 2006) |
1332 |
|
1333 |
27 Dec 2006; Christian Heim <phreak@gentoo.org> |
1334 |
-hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild: |
1335 |
Revision bump for bug #157186 and #158786. |
1336 |
|
1337 |
*hardened-sources-2.6.18-r4 (27 Dec 2006) |
1338 |
|
1339 |
27 Dec 2006; Christian Heim <phreak@gentoo.org> |
1340 |
-hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild: |
1341 |
Revision bump for bug #157186. |
1342 |
|
1343 |
*hardened-sources-2.6.19-r2 (23 Dec 2006) |
1344 |
|
1345 |
23 Dec 2006; Christian Heim <phreak@gentoo.org> |
1346 |
-hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild: |
1347 |
Revision bump to pull in genpatches-2.6.19-3 for #157186. |
1348 |
|
1349 |
17 Dec 2006; Christian Heim <phreak@gentoo.org> |
1350 |
hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild, |
1351 |
hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild, |
1352 |
hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild, |
1353 |
hardened-sources-2.6.19-r1.ebuild: |
1354 |
Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE, |
1355 |
adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander). |
1356 |
|
1357 |
*hardened-sources-2.4.33.4 (17 Dec 2006) |
1358 |
|
1359 |
17 Dec 2006; Alexander Gabert <pappy@gentoo.org> |
1360 |
+hardened-sources-2.4.33.4.ebuild: |
1361 |
new 2.4.33.4 version including grsec and fixes, thanks to phreak for help |
1362 |
and quilting |
1363 |
|
1364 |
*hardened-sources-2.6.19-r1 (14 Dec 2006) |
1365 |
|
1366 |
14 Dec 2006; Christian Heim <phreak@gentoo.org> |
1367 |
-hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild: |
1368 |
Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org> |
1369 |
for reporting). |
1370 |
|
1371 |
*hardened-sources-2.6.19 (13 Dec 2006) |
1372 |
|
1373 |
13 Dec 2006; Christian Heim <phreak@gentoo.org> |
1374 |
+hardened-sources-2.6.19.ebuild: |
1375 |
And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and |
1376 |
Brad for providing that prompt update. |
1377 |
|
1378 |
*hardened-sources-2.6.18-r3 (13 Dec 2006) |
1379 |
|
1380 |
13 Dec 2006; Christian Heim <phreak@gentoo.org> |
1381 |
-hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild, |
1382 |
+hardened-sources-2.6.18-r3.ebuild: |
1383 |
Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter |
1384 |
S. Mazinger. Closes #157409 for now. Also removing the previous revisions. |
1385 |
|
1386 |
09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest: |
1387 |
Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened). |
1388 |
|
1389 |
08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild: |
1390 |
Stable on ppc wrt bug 157356 |
1391 |
|
1392 |
07 Dec 2006; Christian Faulhammer <opfer@gentoo.org> |
1393 |
hardened-sources-2.6.18.ebuild: |
1394 |
stable x86, bug #157356 |
1395 |
|
1396 |
*hardened-sources-2.6.18-r2 (06 Dec 2006) |
1397 |
|
1398 |
06 Dec 2006; Christian Heim <phreak@gentoo.org> |
1399 |
+hardened-sources-2.6.18-r2.ebuild: |
1400 |
Revision bump, including 2.6.18.5 (via genpatches) and |
1401 |
4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and |
1402 |
Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the |
1403 |
redesign. |
1404 |
|
1405 |
06 Dec 2006; Christian Heim <phreak@gentoo.org> |
1406 |
hardened-sources-2.6.18.ebuild: |
1407 |
Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf |
1408 |
of Mike Doty). |
1409 |
|
1410 |
*hardened-sources-2.6.18-r1 (23 Nov 2006) |
1411 |
|
1412 |
23 Nov 2006; Christian Heim <phreak@gentoo.org> |
1413 |
+hardened-sources-2.6.18-r1.ebuild: |
1414 |
Revision bump to genpatches-2.6.18-4 (including 2.6.18.3). |
1415 |
|
1416 |
*hardened-sources-2.6.18 (11 Nov 2006) |
1417 |
|
1418 |
11 Nov 2006; Christian Heim <phreak@gentoo.org> |
1419 |
+hardened-sources-2.6.18.ebuild: |
1420 |
Version bump, thanks to Alexander Gabert we're finally at 2.6.18. |
1421 |
|
1422 |
18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild: |
1423 |
- mark amd64 stable also. bug #151877 |
1424 |
|
1425 |
18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild: |
1426 |
- mark 2.6.17-r1 stable |
1427 |
|
1428 |
27 Aug 2006; Christian Heim <phreak@gentoo.org> |
1429 |
-hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild: |
1430 |
Removing old ebuild, removing unipatch from newer ebuild (need to fix it!). |
1431 |
|
1432 |
*hardened-sources-2.6.17-r1 (26 Aug 2006) |
1433 |
|
1434 |
26 Aug 2006; Christian Heim <phreak@gentoo.org> |
1435 |
+hardened-sources-2.6.17-r1.ebuild: |
1436 |
Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the |
1437 |
grsecurity patch. |
1438 |
|
1439 |
*hardened-sources-2.6.17 (17 Aug 2006) |
1440 |
|
1441 |
17 Aug 2006; Christian Heim <phreak@gentoo.org> |
1442 |
+hardened-sources-2.6.17.ebuild: |
1443 |
Bumping the hardened-sources-2.6 series to 2.6.17, using |
1444 |
genpatches-2.6.17-6.base. |
1445 |
|
1446 |
07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild: |
1447 |
- stable on x86 and amd64 |
1448 |
|
1449 |
*hardened-sources-2.6.16-r11 (15 Jul 2006) |
1450 |
|
1451 |
15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild, |
1452 |
-hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild, |
1453 |
-hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild, |
1454 |
-hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild: |
1455 |
- 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old |
1456 |
crusty ebuilds |
1457 |
|
1458 |
14 Jul 2006; John Mylchreest <johnm@gentoo.org> |
1459 |
hardened-sources-2.6.16-r10.ebuild: |
1460 |
marking stable on x86 and amd64 |
1461 |
|
1462 |
13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild: |
1463 |
- 2.4.32-r6 stable on x86. RSBAC state unknown |
1464 |
|
1465 |
*hardened-sources-2.4.32-r7 (10 Jul 2006) |
1466 |
|
1467 |
10 Jul 2006; Guillaume Destuynder <kang@gentoo.org> |
1468 |
+hardened-sources-2.4.32-r7.ebuild: |
1469 |
Bump PaX for RSBAC to test-17 |
1470 |
|
1471 |
*hardened-sources-2.6.16-r9 (03 Jul 2006) |
1472 |
|
1473 |
03 Jul 2006; John Mylchreest <johnm@gentoo.org> |
1474 |
-hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild: |
1475 |
hardened-sources-2.6.16 bump to latest -base. |
1476 |
|
1477 |
*hardened-sources-2.4.32-r6 (30 Jun 2006) |
1478 |
|
1479 |
30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild, |
1480 |
hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild: |
1481 |
- backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity |
1482 |
sysctl controlable resource logging |
1483 |
|
1484 |
*hardened-sources-2.6.16-r7 (05 Jun 2006) |
1485 |
|
1486 |
05 Jun 2006; John Mylchreest <johnm@gentoo.org> |
1487 |
-hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild: |
1488 |
push new 2.6.16 release in preparation for stable |
1489 |
|
1490 |
22 May 2006; <solar@gentoo.org> : |
1491 |
- redigest bug 134002 |
1492 |
|
1493 |
*hardened-sources-2.4.32-r5 (16 May 2006) |
1494 |
|
1495 |
16 May 2006; Guillaume Destuynder <kang@gentoo.org> |
1496 |
+hardened-sources-2.4.32-r5.ebuild: |
1497 |
Fixes rsbac common patching (new patch in new -r5 patchset) |
1498 |
|
1499 |
*hardened-sources-2.4.32-r4 (13 May 2006) |
1500 |
|
1501 |
13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild, |
1502 |
+hardened-sources-2.4.32-r4.ebuild: |
1503 |
- security bumps |
1504 |
|
1505 |
*hardened-sources-2.6.16-r6 (03 May 2006) |
1506 |
|
1507 |
03 May 2006; John Mylchreest <johnm@gentoo.org> |
1508 |
+hardened-sources-2.6.16-r6.ebuild: |
1509 |
bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot |
1510 |
|
1511 |
28 Apr 2006; John Mylchreest <johnm@gentoo.org> |
1512 |
hardened-sources-2.6.14-r8.ebuild: |
1513 |
fix x86_64 build problem, this will delay the digest issue again for a short |
1514 |
while but it will sort itself out |
1515 |
|
1516 |
28 Apr 2006; John Mylchreest <johnm@gentoo.org> |
1517 |
hardened-sources-2.6.14-r8.ebuild: |
1518 |
bump hardened patchset |
1519 |
|
1520 |
27 Apr 2006; Alec Warner <antarus@gentoo.org> |
1521 |
files/digest-hardened-sources-2.4.32-r2, |
1522 |
files/digest-hardened-sources-2.4.32-r3, |
1523 |
files/digest-hardened-sources-2.6.14-r8, Manifest: |
1524 |
Fixing duff SHA256 digests: Bug # 131293 |
1525 |
|
1526 |
*hardened-sources-2.6.16-r5 (27 Apr 2006) |
1527 |
|
1528 |
27 Apr 2006; John Mylchreest <johnm@gentoo.org> |
1529 |
-hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild, |
1530 |
-hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild: |
1531 |
stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 & |
1532 |
cleanup of old uneccessary sources |
1533 |
|
1534 |
20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog: |
1535 |
fix digest |
1536 |
|
1537 |
*hardened-sources-2.6.14-r8 (20 Apr 2006) |
1538 |
|
1539 |
20 Apr 2006; John Mylchreest <johnm@gentoo.org> |
1540 |
+hardened-sources-2.6.14-r8.ebuild: |
1541 |
fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524 |
1542 |
|
1543 |
20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog: |
1544 |
Turning on gpg-signing again, and recomitting |
1545 |
|
1546 |
*hardened-sources-2.6.16-r4 (20 Apr 2006) |
1547 |
|
1548 |
20 Apr 2006; John Mylchreest <johnm@gentoo.org> |
1549 |
-hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild, |
1550 |
+hardened-sources-2.6.16-r4.ebuild: |
1551 |
Fix numerous security vulns |
1552 |
|
1553 |
*hardened-sources-2.4.32-r3 (16 Apr 2006) |
1554 |
|
1555 |
16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild, |
1556 |
-hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild, |
1557 |
+hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild: |
1558 |
- security bump for bug #112791. Removed old ebuilds |
1559 |
|
1560 |
*hardened-sources-2.6.16-r3 (15 Apr 2006) |
1561 |
|
1562 |
15 Apr 2006; John Mylchreest <johnm@gentoo.org> |
1563 |
+hardened-sources-2.6.16-r3.ebuild: |
1564 |
Removing silly localversion which I missed |
1565 |
|
1566 |
*hardened-sources-2.6.14-r7 (14 Apr 2006) |
1567 |
|
1568 |
14 Apr 2006; John Mylchreest <johnm@gentoo.org> |
1569 |
-hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild: |
1570 |
Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242 |
1571 |
|
1572 |
*hardened-sources-2.6.16-r2 (13 Apr 2006) |
1573 |
|
1574 |
13 Apr 2006; John Mylchreest <johnm@gentoo.org> |
1575 |
-hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild, |
1576 |
+hardened-sources-2.6.16-r2.ebuild: |
1577 |
Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec |
1578 |
labels, dropping USERGROUP define fixes, since these were merged mainstream. |
1579 |
|
1580 |
*hardened-sources-2.6.16-r1 (11 Apr 2006) |
1581 |
|
1582 |
11 Apr 2006; John Mylchreest <johnm@gentoo.org> |
1583 |
+hardened-sources-2.6.16-r1.ebuild: |
1584 |
Bumping to include ppc build fix and 2.6.16.3 |
1585 |
|
1586 |
06 Apr 2006; Joshua Jackson <tsunam@gentoo.org> |
1587 |
hardened-sources-2.6.14-r6.ebuild: |
1588 |
Stable on x86; bug #127718 |
1589 |
|
1590 |
*hardened-sources-2.6.16 (31 Mar 2006) |
1591 |
|
1592 |
31 Mar 2006; John Mylchreest <johnm@gentoo.org> |
1593 |
+hardened-sources-2.6.16.ebuild: |
1594 |
Bumping to new version of grsec, and kernel base. New squashfs. Based on |
1595 |
2.6.16.1 |
1596 |
|
1597 |
30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org> |
1598 |
hardened-sources-2.6.14-r6.ebuild: |
1599 |
Stable on amd64, bug 127718. |
1600 |
|
1601 |
28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild: |
1602 |
Stable on ppc. Bug #127718 |
1603 |
|
1604 |
15 Mar 2006; John Mylchreest <johnm@gentoo.org> |
1605 |
-hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild, |
1606 |
-hardened-sources-2.6.14-r4.ebuild: |
1607 |
Cleanup. |
1608 |
|
1609 |
*hardened-sources-2.6.14-r6 (15 Mar 2006) |
1610 |
|
1611 |
15 Mar 2006; John Mylchreest <johnm@gentoo.org> |
1612 |
+hardened-sources-2.6.14-r6.ebuild: |
1613 |
Fixes grsec policy recreation bug and adds a |
1614 |
>=sys-apps/gradm-2.1.8.200601212342-r1 depend. |
1615 |
|
1616 |
02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild: |
1617 |
- stable on x86 |
1618 |
|
1619 |
19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org> |
1620 |
hardened-sources-2.6.14-r5.ebuild: |
1621 |
Stable on ppc. |
1622 |
|
1623 |
*hardened-sources-2.6.14-r5 (01 Feb 2006) |
1624 |
|
1625 |
01 Feb 2006; John Mylchreest <johnm@gentoo.org> |
1626 |
+hardened-sources-2.6.14-r5.ebuild: |
1627 |
fixing every known exploit |
1628 |
|
1629 |
*hardened-sources-2.4.32-r2 (26 Jan 2006) |
1630 |
|
1631 |
26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild, |
1632 |
+hardened-sources-2.4.32-r2.ebuild: |
1633 |
- mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch |
1634 |
|
1635 |
*hardened-sources-2.6.14-r4 (12 Jan 2006) |
1636 |
|
1637 |
12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild: |
1638 |
- version bump for new genpatches which fix up a few sec holes |
1639 |
|
1640 |
*hardened-sources-2.4.32-r1 (05 Jan 2006) |
1641 |
|
1642 |
05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild: |
1643 |
- revision bump to add misc vital linux kernel security patches. |
1644 |
|
1645 |
*hardened-sources-2.6.14-r3 (30 Dec 2005) |
1646 |
|
1647 |
30 Dec 2005; John Mylchreest <johnm@gentoo.org> |
1648 |
-hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild: |
1649 |
Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040 |
1650 |
|
1651 |
28 Dec 2005; John Mylchreest <johnm@gentoo.org> |
1652 |
hardened-sources-2.6.14-r2.ebuild: |
1653 |
making x86 & amd64 stable following testing. |
1654 |
|
1655 |
*hardened-sources-2.6.14-r2 (27 Dec 2005) |
1656 |
|
1657 |
27 Dec 2005; John Mylchreest <johnm@gentoo.org> |
1658 |
-hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild: |
1659 |
Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax |
1660 |
network hooks. |
1661 |
|
1662 |
06 Dec 2005; John Mylchreest <johnm@gentoo.org> |
1663 |
hardened-sources-2.6.14-r1.ebuild: |
1664 |
bumping to stable early for sec fix on x86 & amd64 |
1665 |
|
1666 |
*hardened-sources-2.6.14-r1 (05 Dec 2005) |
1667 |
|
1668 |
05 Dec 2005; John Mylchreest <johnm@gentoo.org> |
1669 |
-hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild: |
1670 |
bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset. |
1671 |
|
1672 |
04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild: |
1673 |
- stable on x86 security bug #114227 CAN-2005-3257 |
1674 |
|
1675 |
*hardened-sources-2.4.32 (19 Nov 2005) |
1676 |
|
1677 |
19 Nov 2005; Guillaume Destuynder <kang@gentoo.org> |
1678 |
+hardened-sources-2.4.32.ebuild: |
1679 |
Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword. |
1680 |
Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to |
1681 |
have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources |
1682 |
rsbac >> /etc/portage/package.use) |
1683 |
|
1684 |
*hardened-sources-2.6.14 (14 Nov 2005) |
1685 |
|
1686 |
14 Nov 2005; John Mylchreest <johnm@gentoo.org> |
1687 |
-hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild: |
1688 |
Bumping 2.6 series to 2.6.14.2 |
1689 |
|
1690 |
*hardened-sources-2.6.13-r2 (20 Oct 2005) |
1691 |
|
1692 |
20 Oct 2005; John Mylchreest <johnm@gentoo.org> |
1693 |
-hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild, |
1694 |
+hardened-sources-2.6.13-r2.ebuild: |
1695 |
Fixes minor build error in ppc. |
1696 |
|
1697 |
*hardened-sources-2.6.13-r1 (17 Oct 2005) |
1698 |
|
1699 |
17 Oct 2005; John Mylchreest <johnm@gentoo.org> |
1700 |
+hardened-sources-2.6.13-r1.ebuild: |
1701 |
Updating grsec to latest snapshot. Fixes some minor issues. Updating to |
1702 |
2.6.13.4, fixes some major amd64 stability problems. |
1703 |
|
1704 |
*hardened-sources-2.6.13 (16 Sep 2005) |
1705 |
|
1706 |
16 Sep 2005; John Mylchreest <johnm@gentoo.org> |
1707 |
-hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild: |
1708 |
2.6.13.1 with grsec testing patches. Lots of changes, to name a few big |
1709 |
ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC |
1710 |
users should test this thoroughly. |
1711 |
|
1712 |
01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild: |
1713 |
- stable on x86 |
1714 |
|
1715 |
*hardened-sources-2.6.11-r15 (27 Jun 2005) |
1716 |
|
1717 |
27 Jun 2005; John Mylchreest <johnm@gentoo.org> |
1718 |
+hardened-sources-2.6.11-r15.ebuild: |
1719 |
Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with |
1720 |
grsec redefining curr_ip struct. |
1721 |
|
1722 |
*hardened-sources-2.4.31 (20 Jun 2005) |
1723 |
|
1724 |
20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild: |
1725 |
initial import of 2.4.31 tree |
1726 |
|
1727 |
*hardened-sources-2.6.11-r14 (14 Jun 2005) |
1728 |
|
1729 |
14 Jun 2005; John Mylchreest <johnm@gentoo.org> |
1730 |
-hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild: |
1731 |
Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring |
1732 |
naming scheme to abide by genpatches |
1733 |
|
1734 |
*hardened-sources-2.6.11-r13 (18 May 2005) |
1735 |
|
1736 |
18 May 2005; John Mylchreest <johnm@gentoo.org> |
1737 |
-hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild: |
1738 |
Managed to mangle the Makefile patch from grsec, to miss out the grsec |
1739 |
target. sorry about that. Fixes bug #93022 |
1740 |
|
1741 |
*hardened-sources-2.6.11-r12 (17 May 2005) |
1742 |
|
1743 |
17 May 2005; John Mylchreest <johnm@gentoo.org> |
1744 |
-hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild, |
1745 |
+hardened-sources-2.6.11-r12.ebuild: |
1746 |
Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also |
1747 |
merges in genpatches-base |
1748 |
|
1749 |
*hardened-sources-2.6.11-r12 (17 May 2005) |
1750 |
|
1751 |
17 May 2005; John Mylchreest <johnm@gentoo.org> |
1752 |
-hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild, |
1753 |
+hardened-sources-2.6.11-r12.ebuild: |
1754 |
Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also |
1755 |
merges in genpatches-base |
1756 |
|
1757 |
29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch, |
1758 |
-files/2.4.27-cmdline-race.patch, |
1759 |
-files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch, |
1760 |
-files/2.4.28-grsec-binfmt_a.out.patch, |
1761 |
-files/2.4.28-grsec-cmdline-race.patch, |
1762 |
-files/2.4.28-selinux-binfmt_a.out.patch, |
1763 |
-files/2.4.28-selinux-cmdline-race.patch, |
1764 |
-hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild, |
1765 |
hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild: |
1766 |
- mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir |
1767 |
cleanup.. |
1768 |
|
1769 |
*hardened-sources-2.4.30-r1 (21 Apr 2005) |
1770 |
|
1771 |
21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild: |
1772 |
- disable aout by default |
1773 |
|
1774 |
*hardened-sources-2.4.30 (18 Apr 2005) |
1775 |
|
1776 |
18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild: |
1777 |
- 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29 |
1778 |
and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded |
1779 |
use |
1780 |
|
1781 |
*hardened-sources-2.4.29 (30 Mar 2005) |
1782 |
|
1783 |
30 Mar 2005; Andrea Luzzardi <scox@gentoo.org> |
1784 |
+hardened-sources-2.4.29.ebuild: |
1785 |
New hardened-patches-2.4-29.0 patchball. |
1786 |
Removed SELinux support, upgraded GRSecurity to 2.1.4. |
1787 |
|
1788 |
*hardened-sources-2.4.28-r5 (06 Mar 2005) |
1789 |
|
1790 |
06 Mar 2005; Andrea Luzzardi <scox@gentoo.org> |
1791 |
+hardened-sources-2.4.28-r5.ebuild: |
1792 |
Added a fix for a PaX vulnerability. |
1793 |
|
1794 |
26 Jan 2005; Adam Mondl <tocharian@gentoo.org> |
1795 |
hardened-sources-2.4.28-r4.ebuild: |
1796 |
Stable on x86 |
1797 |
|
1798 |
23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild, |
1799 |
hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild, |
1800 |
hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild, |
1801 |
hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild: |
1802 |
- fixed/added RDEPEND= in all kernel-2 ebuilds |
1803 |
|
1804 |
*hardened-sources-2.4.28-r4 (21 Jan 2005) |
1805 |
|
1806 |
21 Jan 2005; Adam Mondl <tocharian@gentoo.org> |
1807 |
+hardened-sources-2.4.28-r4.ebuild: |
1808 |
Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4 |
1809 |
backport of neighbour hash updates. |
1810 |
|
1811 |
21 Jan 2005; Adam Mondl <tocharian@gentoo.org> |
1812 |
hardened-sources-2.4.28-r3.ebuild: |
1813 |
Stable on x86 |
1814 |
|
1815 |
*hardened-sources-2.6.10-r3 (20 Jan 2005) |
1816 |
|
1817 |
20 Jan 2005; Brandon Hale <tseng@gentoo.org> |
1818 |
+hardened-sources-2.6.10-r3.ebuild: |
1819 |
Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge |
1820 |
in 2005.0 |
1821 |
|
1822 |
17 Jan 2005; Adam Mondl <tocharian@gentoo.org> |
1823 |
-hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild, |
1824 |
hardened-sources-2.4.28-r2.ebuild: |
1825 |
Mark stable on x86 |
1826 |
|
1827 |
*hardened-sources-2.4.28-r3 (17 Jan 2005) |
1828 |
|
1829 |
17 Jan 2005; Adam Mondl <tocharian@gentoo.org> |
1830 |
+hardened-sources-2.4.28-r3.ebuild: |
1831 |
Fix SMP page fault handler vuln, and update device-mapper and evms patches. |
1832 |
|
1833 |
14 Jan 2005; Adam Mondl <tocharian@gentoo.org> |
1834 |
hardened-sources-2.4.28.ebuild: |
1835 |
Mark stable on x86. |
1836 |
|
1837 |
*hardened-sources-2.4.28-r2 (13 Jan 2005) |
1838 |
|
1839 |
13 Jan 2005; Adam Mondl <tocharian@gentoo.org> |
1840 |
+hardened-sources-2.4.28-r2.ebuild: |
1841 |
Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S. |
1842 |
Mazinger for grsecurity patches as well. |
1843 |
|
1844 |
*hardened-sources-2.4.28-r1 (23 Dec 2004) |
1845 |
|
1846 |
23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild: |
1847 |
Security bump. Thank tocharian for rolling a new patchset... |
1848 |
|
1849 |
28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch, |
1850 |
+files/2.4.28-grsec-cmdline-race.patch, |
1851 |
+files/2.4.28-selinux-binfmt_a.out.patch, |
1852 |
+files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild: |
1853 |
- Round up remaining security patches that appear to be missing in 2.4.28. - |
1854 |
PaX standalone updated to current. hgpv=28.1 |
1855 |
|
1856 |
*hardened-sources-2.4.28 (28 Nov 2004) |
1857 |
|
1858 |
28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild: |
1859 |
security bump. Thank tocharian for rolling a new patchset |
1860 |
|
1861 |
*hardened-sources-2.4.27-r3 (08 Sep 2004) |
1862 |
|
1863 |
08 Sep 2004; Andrea Luzzardi <scox@gentoo.org> |
1864 |
+hardened-sources-2.4.27-r3.ebuild: |
1865 |
Applies the new 2.4-27.2 patchball which updates |
1866 |
GRSecurity to the 2.0.1 version. |
1867 |
|
1868 |
*hardened-sources-2.4.27-r2 (31 Aug 2004) |
1869 |
|
1870 |
31 Aug 2004; Andrea Luzzardi <scox@gentoo.org> |
1871 |
+hardened-sources-2.4.27-r2.ebuild: |
1872 |
Version bump. |
1873 |
This version uses the new 2.4-27.1 patchball which updates |
1874 |
both the SELinux PaX hooks patch and the SELinux headers. |
1875 |
|
1876 |
*hardened-sources-2.4.27-r1 (09 Aug 2004) |
1877 |
|
1878 |
09 Aug 2004; Andrea Luzzardi <scox@gentoo.org> |
1879 |
+hardened-sources-2.4.27-r1.ebuild, |
1880 |
-hardened-sources-2.4.27.ebuild, |
1881 |
+files/2.4.27-cmdline-race.patch: |
1882 |
Version bump, fix for cmdline race. See bug #59905. |
1883 |
|
1884 |
*hardened-sources-2.4.26-r6 (09 Aug 2004) |
1885 |
|
1886 |
09 Aug 2004; Andrea Luzzardi <scox@gentoo.org> |
1887 |
+hardened-sources-2.4.26-r6.ebuild, |
1888 |
-hardened-sources-2.4.26-r5.ebuild, |
1889 |
-hardened-sources-2.4.26-r4.ebuild, |
1890 |
+files/2.4.26-cmdline-race.patch: |
1891 |
Version bump, fix for cmdline race. See bug #59905. |
1892 |
|
1893 |
*hardened-sources-2.4.27 (08 Aug 2004) |
1894 |
|
1895 |
08 Aug 2004; Andrea Luzzardi <scox@gentoo.org> |
1896 |
+hardened-sources-2.4.27.ebuild, |
1897 |
+files/2.4.27-CAN-2004-0394.patch: |
1898 |
Ported the patchball to the 2.4.27 kernel version. |
1899 |
|
1900 |
*hardened-sources-2.4.26-r5 (07 Aug 2004) |
1901 |
|
1902 |
07 Aug 2004; Andrea Luzzardi <scox@gentoo.org> |
1903 |
+hardened-sources-2.4.26-r5.ebuild: |
1904 |
Updated to use the new hardened-patches-2.4-26.1 patchball. |
1905 |
It adds the following features: |
1906 |
- Squashfs |
1907 |
- Ebtables |
1908 |
- Netdev random (core+drivers) |
1909 |
- Watchdog Timer (WDT) fix. |
1910 |
|
1911 |
*hardened-sources-2.4.26-r4 (04 Aug 2004) |
1912 |
|
1913 |
04 Aug 2004; Andrea Luzzardi <scox@gentoo.org> |
1914 |
+hardened-sources-2.4.26-r4.ebuild, |
1915 |
+files/2.4.26-CAN-2004-0415.patch, |
1916 |
-hardened-sources-2.4.26-3: |
1917 |
Version bump, fix for CAN 0415, see bug #59378. |
1918 |
|
1919 |
*hardened-sources-2.4.26-r3 (22 Jul 2004) |
1920 |
|
1921 |
22 Jul 2004; Andrea Luzzardi <scox@gentoo.org> |
1922 |
+hardened-sources-2.4.26-r3.ebuild, |
1923 |
+files/2.4.26-CAN-2004-0497.patch, |
1924 |
-hardened-sources-2.4.26-r2.ebuild: |
1925 |
Version bump, fixed CAN 0497, see bug #56171. |
1926 |
|
1927 |
*hardened-sources-2.4.26-r2 (29 Jun 2004) |
1928 |
|
1929 |
29 Jun 2004; Andrea Luzzardi <scox@gentoo.org> |
1930 |
+hardened-sources-2.4.26-r2.ebuild, |
1931 |
+files/2.4.26-CAN-2004-0495.patch, |
1932 |
+files/2.4.26-CAN-2004-0535.patch, |
1933 |
-hardened-sources-2.4.26-r1.ebuild: |
1934 |
Fixes for both CAN 0495 and 0535, see bug #54976 |
1935 |
|
1936 |
23 Jun 2004; Aron Griffis <agriffis@gentoo.org> |
1937 |
hardened-sources-2.4.26-r1.ebuild: |
1938 |
QA - fix use invocation |
1939 |
|
1940 |
*hardened-sources-2.4.26-r1 (22 June 2004) |
1941 |
|
1942 |
22 June 2004; Andrea Luzzardi <scox@gentoo.org> |
1943 |
+hardened-sources-2.4.26-r1.ebuild, |
1944 |
+files/2.4.26-CAN-2004-0394.patch, |
1945 |
+files/2.4.26-signal-race.patch, |
1946 |
-hardened-sources-2.4.26.ebuild, |
1947 |
-hardened-sources-2.4.24-r3.ebuild: |
1948 |
Version bump for the CAN-2004-0394 issue and bug #53804 |
1949 |
Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3 |
1950 |
|
1951 |
|
1952 |
31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org> |
1953 |
hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild: |
1954 |
Masked hardened-sources-2.4.26.ebuild broken for ppc |
1955 |
|
1956 |
31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org> |
1957 |
hardened-sources-2.4.24-r3.ebuild: |
1958 |
Masked hardened-sources-2.4.24-r3.ebuild broken for ppc |
1959 |
|
1960 |
*hardened-sources-2.4.26 (29 May 2004) |
1961 |
|
1962 |
29 May 2004; Andrea Luzzardi <scox@gentoo.org> |
1963 |
+hardened-sources-2.4.26.ebuild: |
1964 |
Updated hardened-sources for the 2.4.26 kernel |
1965 |
Removed broken components, updated almost everything. |
1966 |
|
1967 |
*hardened-sources-2.4.24-r3 (17 Apr 2004) |
1968 |
|
1969 |
17 Apr 2004; <plasmaroo@gentoo.org> |
1970 |
+files/hardened-sources-2.4.24.CAN-2004-0010.patch, |
1971 |
+files/hardened-sources-2.4.24.CAN-2004-0177.patch, |
1972 |
+files/hardened-sources-2.4.24.CAN-2004-0178.patch, |
1973 |
+hardened-sources-2.4.24-r3.ebuild: |
1974 |
Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178 |
1975 |
vulnerabilities. Old revisions removed. |
1976 |
|
1977 |
*hardened-sources-2.4.24-r2 (15 Apr 2004) |
1978 |
|
1979 |
15 Apr 2004; <plasmaroo@gentoo.org> |
1980 |
+files/hardened-sources-2.4.24.CAN-2004-0109.patch, |
1981 |
-hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild: |
1982 |
Version bump for the CAN-2004-0109 issue; bug #47881. |
1983 |
|
1984 |
12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org> |
1985 |
hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild: |
1986 |
Add eutils to inherit. |
1987 |
|
1988 |
*hardened-sources-2.4.24-r1 (19 Feb 2004) |
1989 |
|
1990 |
19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild, |
1991 |
files/hardened-sources-2.4.24.munmap.patch: |
1992 |
Added the patch for the mremap/munmap vulnerability. Bug #42024. |
1993 |
|
1994 |
*hardened-sources-2.4.24 (06 Feb 2004) |
1995 |
|
1996 |
06 Feb 2004; Andrea Luzzardi <scox@gentoo.org> |
1997 |
hardened-sources-2.4.24.ebuild: |
1998 |
Version bump, updated most of the components. |
1999 |
This release includes the following: |
2000 |
|
2001 |
- Hardened security |
2002 |
- Netfilter patch-o-matic 20031219 |
2003 |
- FreeSWAN 2.04 & x509 1.4.8 |
2004 |
- EVMS 2.2.2 |
2005 |
- XFS 1.3.1 |
2006 |
- cryptoloop jari |
2007 |
- grsecurity 2.0-rc4 |
2008 |
- SELinux |
2009 |
- PaX 200402060000 |
2010 |
- PaX Obscurity 200308302223 |
2011 |
- Others... |
2012 |
|
2013 |
Neither -ck nor systrace are included anymore. |
2014 |
|
2015 |
*hardened-sources-2.4.22-r2 (05 Jan 2004) |
2016 |
|
2017 |
05 Jan 2004; Andrea Luzzardi <scox@gentoo.org> |
2018 |
hardened-sources-2.4.22-r2.ebuild: |
2019 |
Version bump for the 'mremap' and the 'rtc' vulnerabilities. |
2020 |
|
2021 |
*hardened-sources-2.4.22-r1 (02 Dec 2003) |
2022 |
|
2023 |
02 Dec 2003; Brian Jackson <iggy@gentoo.org> |
2024 |
hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier. |
2025 |
|
2026 |
02 Dec 2003; Brian Jackson <iggy@gentoo.org> |
2027 |
hardened-sources-2.4.22-r1.ebuild: |
2028 |
Version bump for the 'do_brk' vulnerability. |
2029 |
|
2030 |
01 Dec 2003; Brian Jackson <iggy@gentoo.org> |
2031 |
hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild, |
2032 |
hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild, |
2033 |
hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch: |
2034 |
Fix the 'do_brk' vulnerability. |
2035 |
|
2036 |
03 Nov 2003; Matthew Rickard <frogger@gentoo.org> |
2037 |
hardened-sources-2.4.22.ebuild: |
2038 |
- Removed the src_install() portion for SELinux flask |
2039 |
components. These are no longer handled in the kernel |
2040 |
so this code was not necessary. |
2041 |
|
2042 |
29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild: |
2043 |
New 2.4.22 based hardened-sources thanks to |
2044 |
Phil West <p.west@computer.org>. |
2045 |
|
2046 |
These sources include: |
2047 |
- New SELinux API |
2048 |
- Updated CK-base |
2049 |
- Updated GRSec |
2050 |
- Systrace |
2051 |
- SuperFreeS/WAN 1.99.8 |
2052 |
- Propolice kernel build support |
2053 |
- EVMS |
2054 |
- Other various security related patches |
2055 |
|
2056 |
*hardened-sources-2.4.21 (14 Sep 2003) |
2057 |
|
2058 |
14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild: |
2059 |
Updated hardened-sources based on the 2.4.21 Linux kernel. |
2060 |
This includes updates to most major components such as: |
2061 |
- ck-base-0306300059 |
2062 |
- selinux-2.4-2003071106 |
2063 |
- grsecurity-2.0-rc1 |
2064 |
- Updated IPTables patch-o-matic |
2065 |
- Updated SuperFreeS/WAN |
2066 |
|
2067 |
Thanks to Phil West <pwest@computer.org> for his work in getting this |
2068 |
updated patch set ready for the 2.4.21 based kernel. |
2069 |
|
2070 |
16 Jun 2003; Matthew Rickard <frogger@gentoo.org> : |
2071 |
Initial import of hardened-sources-2.4.20-r4. This revision |
2072 |
includes only a few changes, but one of these is an important |
2073 |
security fix. It is recommended all users of hardened-sources |
2074 |
upgrade to this release. |
2075 |
|
2076 |
- ioperm bug fix |
2077 |
- fixed compilation failure when building without GRSec |
2078 |
|
2079 |
SAL (Secure Auditing for Linux) is NOT included in this revision |
2080 |
due to time constraints, but is planned for inclusion in the near |
2081 |
future. |
2082 |
|
2083 |
*hardened-sources-2.4.20-r2 (12 Jun 2003) |
2084 |
|
2085 |
12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild, |
2086 |
hardened-sources-2.4.20-r3.ebuild: |
2087 |
Add Header... |
2088 |
|
2089 |
08 Jun 2003; Matthew Rickard <frogger@gentoo.org> |
2090 |
hardened-sources-2.4.20-r3.ebuild: |
2091 |
Removed warnings from ebuild. This kernel should be safe to |
2092 |
use at this point. |
2093 |
|
2094 |
*hardened-sources-2.4.20-r3 (08 Jun 2003) |
2095 |
|
2096 |
08 Jun 2003; Matthew Rickard <frogger@gentoo.org> |
2097 |
hardened-sources-2.4.20-r3.ebuild: |
2098 |
New revision. Includes the following changes over -r2: |
2099 |
|
2100 |
- ck7-base (O(1), preempt, low latency) |
2101 |
- Super FreeS/WAN 1.99.7rc2 |
2102 |
- PaX for the LSM/SELinux branch |
2103 |
- GRSecurity 2.0-pre4 (role based access control) |
2104 |
- Systrace 1.3 |
2105 |
- EXT3 fixes |
2106 |
- EVMS 2.0.1 |
2107 |
- GCC 3.1+ compile optimizations |
2108 |
- ProPolice kernel build support |
2109 |
- Hashing table security fixes |
2110 |
|
2111 |
*hardened-sources-2.4.20-r1 (09 Apr 2003) |
2112 |
|
2113 |
23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest: |
2114 |
Initial import of hardened-sources-r2. This new |
2115 |
ebuild includes many new performance and security |
2116 |
related patches. As in -r1, it will patch in |
2117 |
LSM/SELinux if "selinux" is in USE, otherwise it |
2118 |
will patch in GRSecurity. The following patches |
2119 |
are included in this revision: |
2120 |
|
2121 |
- O(1) Scheduler, Low Latency, and Preempt |
2122 |
(pulled from the base CK patch) |
2123 |
- ptrace exploit patch for the LSM kernel |
2124 |
(the GRSec patch already fixes this) |
2125 |
- LSM 2.4-2003040709 |
2126 |
- SELinux 2.4-2003040709 |
2127 |
- Systrace v1.2 |
2128 |
- IPTables patch-o-matic base patches - 20030107 |
2129 |
- CryptoAPI 2.4.20.1 w/ loop-jari patch |
2130 |
- Super FreeS/WAN 1.99.6.1 |
2131 |
- GRSecurity 1.9.9g |
2132 |
- MPPE |
2133 |
- EXT3 data journal fix |
2134 |
- CIPE 1.5.4 |
2135 |
|
2136 |
12 Apr 2003; Matthew Rickard <frogger@gentoo.org> |
2137 |
hardened-sources-2.4.20-r1.ebuild, manifest: |
2138 |
Updated to install flask components correctly for selinux. |
2139 |
|
2140 |
12 Apr 2003; Matthew Rickard <frogger@gentoo.org> |
2141 |
hardened-sources-2.4.20-r1.ebuild: |
2142 |
LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity |
2143 |
is patched in instead. Ptrace patches for selinux have also been added. In |
2144 |
either case, systrace support will be patched in as well. |
2145 |
|
2146 |
09 Apr 2003; Matthew Rickard <frogger@gentoo.org> |
2147 |
hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest: |
2148 |
Revision bump for new sources. |
2149 |
|
2150 |
09 Apr 2003; Matthew Rickard <frogger@gentoo.org> |
2151 |
hardened-sources-2.4.20-r1.ebuild: |
2152 |
Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2. |
2153 |
|
2154 |
*hardened-sources-2.4.20 (30 Mar 2003) |
2155 |
|
2156 |
30 Mar 2003; Joshua Brindle <method@gentoo.org> |
2157 |
hardened-sources-2.4.20.ebuild: |
2158 |
Initial import, only has systrace support. |