-
Notifications
You must be signed in to change notification settings - Fork 24
/
changelog
1052 lines (789 loc) · 37 KB
/
changelog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
linux-image (linux-3.2.71-mempo-0.2.138) UNRELEASED; urgency=high
* kernel version update to 3.2.71
* pax: ? lib/bitmap.c , mm/memory.c
* v0.2.138-001-rc
-- mempo <[email protected]> Wed, 15 Aug 2015 17:18:00 +0200
linux-image (linux-3.2.70-mempo-0.2.137) UNRELEASED; urgency=high
* kernel version update to 3.2.70
* linux: rds_info_getsockopt fix
* backport: virtio-net security fix http://marc.info/?l=linux-netdev&m=143868216724068&w=2
* pax: irq and trace_events_filter
* pax: ? asm/elf, mmap_64, binfmt_elf
* compile fix
* v0.2.137-001-rc
-- mempo <[email protected]> Wed, 12 Aug 2015 00:30:00 +0200
linux-image (linux-3.2.69-mempo-0.2.136) UNRELEASED; urgency=high
* linux: kzalloc md kernel mem infoleak!!
* linux: backport 4.1-rc1: scsi/sg.c vuln fix!
* linux: xen set_aliased_prot OOPS fix
-- mempo <[email protected]> Sun, 02 Aug 2015 01:10:00 +0200
linux-image (linux-3.2.69-mempo-0.2.135) UNRELEASED; urgency=high
* grsec: compile fixes; constify fixes; modify_ldt
* grsec: ambiently read-only sysctl; modules_disabled, kptr_restrict
* linux: 9p fs; minor_idr memory free; AX.25 heartbeet
* linux: net IFLA_VF_PORTS; __printf secure
* (again: yes, version 0.2.134 was skipped apparently from numbering)
* v0.2.135-001-rc
* CONFIG_DEFAULT_MODIFY_LDT_SYSCALL=y
* typos fixed in changelog, and spaces; and cosmetic fix in all.sh
* v0.2.135-002-rc (updated random seed too)
-- mempo <[email protected]> Sun, 26 Jul 2015 14:20:00 +0200
linux-image (linux-3.2.69-mempo-0.2.134) UNRELEASED; urgency=high
* linux: selinux bug fix
* grsec: nicer code, and compile fixes
* (yes, version 0.2.134 was skipped apparently from numbering)
* this change log was previously named as changelog for 0.2.133
-- mempo <[email protected]> Sun, 05 Jul 2015 20:15:00 +0200
linux-image (linux-3.2.69-mempo-0.2.132) UNRELEASED; urgency=high
* grsec: exploit fix! config_item_set_name configfs
* grsec: new socket families logging
-- mempo <[email protected]> Sun, 05 Jul 2015 20:15:00 +0200
linux-image (linux-3.2.69-mempo-0.2.131) UNRELEASED; urgency=high
* kernel: amd64 memory mapping (rare) bug noticed/debugged with [email protected]
* ...this fix was backported from vanilla commit 20167d3421a089a1bf1bd680b150dc69c9506810
* pax: kconfig DEBUG_PAGEALLOC depends on !PAX_MEMORY_SANITIZE
* grsec: non-deprecated cpumask accessors
* kernel: backported ext4 filter_parse() memory fix
* pax: compile fixes; also in scsi_finish_command
* pax: loglevel of panic messages
* pax: unlzma size overflow
* mempo: config: returned constify to desk|servmaxdbg
* mempo: updated configs to be consistent
-- mempo <[email protected]> Wed, 24 Jun 2015 12:50:00 +0200
linux-image (linux-3.2.69-mempo-0.2.130) UNRELEASED; urgency=medium
* grsec compile fix
* grsec warnings in tracing check for balanced ops
* grsec skb_gso_segment ethtool RTNL/atomic fix
* v.0.2.130-001-rc
* changed the build directory real name (readlink) to homesrv from homebig
* v.0.2.130-002-rc
-- mempo <[email protected]> Wed, 24 Jun 2015 12:50:00 +0200
linux-image (linux-3.2.69-mempo-0.2.129) UNRELEASED; urgency=high
* grsec fix CVE-2015-1805 privilage!
* grsec compat_get_bitmap possible bug
* grsec -std=gnu89 for HOSTCFLAGS
-- mempo <[email protected]> Tue, 9 Jun 2015 12:00:00 +0200
linux-image (linux-3.2.69-mempo-0.2.128) UNRELEASED; urgency=high
* grsec linux: lguest memory fix; d_walk() deadlock; UDP flood hang
-- mempo <[email protected]> Tue, 4 Jun 2015 01:25:00 +0200
linux-image (linux-3.2.69-mempo-0.2.127) UNRELEASED; urgency=medium
* grsec: fix structleak plugin that would disable itself under LTO
-- mempo <[email protected]> Tue, 29 May 2015 10:15:00 +0200
linux-image (linux-3.2.69-mempo-0.2.126) UNRELEASED; urgency=medium
* grsec: more gcc (5.1?) fixes, re PARAVIRT / RANDSTRUCT
-- mempo <[email protected]> Tue, 19 May 2015 20:30:00 +0200
linux-image (linux-3.2.69-mempo-0.2.125) UNRELEASED; urgency=low
* grsec: compilation error (ICE) in randstruct - pipacs
* v0.2.125-001-rc
-- mempo <[email protected]> Sat, 18 May 2015 03:30:00 +0200
linux-image (linux-3.2.69-mempo-0.2.124) UNRELEASED; urgency=high
* grsec: size overflow false positive squashfs (by Martin Vath)
* grsec: fixed /proc/kcore regression to not return uninitialized memory !
-- mempo <[email protected]> Sat, 15 May 2015 00:10:00 +0200
linux-image (linux-3.2.69-mempo-0.2.123) UNRELEASED; urgency=medium
* new kernel used: 3.2.69
* grsec: pax update, compile fixes, size_overflow hash table updates
* grsec: usbnet: avoid integer overflow in start_xmit
* grsec: splice: sendfile() at once fails for big files
* v0.2.123-001-rc
-- mempo <[email protected]> Sat, 10 May 2015 22:40:00 +0200
linux-image (linux-3.2.68-mempo-0.2.122) UNRELEASED; urgency=medium
* grsec: bunzip false gcc overflow; F_SETPIPE_SZ pipe_min_size; semtimedop/semop sign
* v0.2.122-001-rc
-- mempo <[email protected]> Sat, 07 May 2015 03:30:00 +0200
linux-image (linux-3.2.68-mempo-0.2.121) UNRELEASED; urgency=medium
* grsec: fixed a bunch of NULL function pointer dereference regressions in the compat drm ioctl code for i915/mga/r128/radeon, reported by minipli
* (git commit message update)
* v0.2.121-001-rc
-- mempo <[email protected]> Sat, 05 May 2015 08:40:30 +0200
linux-image (linux-3.2.68-mempo-0.2.120) UNRELEASED; urgency=medium
* grsec: ipv4: Missing sk_nulls_node_init() in ping_unhash().
* v0.2.120-001-rc
-- mempo <[email protected]> Sat, 03 May 2015 22:26:30 +0200
linux-image (linux-3.2.68-mempo-0.2.119) UNRELEASED; urgency=medium
* grsec: fix own-bug: GRKERNSEC_CHROOT_RENAME / CLONE_FS
* grsec: pax: false-positive raid5
* grsec: pax: signed int fixes zlib, get_user x86, mmc error handler
* grsec: pax: LTO fixes
* grsec: porting to gcc 5 and compile fixes
* v0.2.119-001-rc
-- mempo <[email protected]> Sat, 01 May 2015 10:14:30 +0200
linux-image (linux-3.2.68-mempo-0.2.118) UNRELEASED; urgency=medium
* grsec: Backport GCC 5.1 support
* grsec: sfc: Fix memcpy() with const destination compiler warning.
* grsec: fs: take i_mutex during prepare_binprm for set[ug]id executables
* grsec: fs/exec.c:de_thread: move notify_count write under lock
* v0.2.118-001-rc
-- mempo <[email protected]> Sat, 28 Apr 2015 08:27:00 +0200
linux-image (linux-3.2.68-mempo-0.2.117) UNRELEASED; urgency=high
* grsec: crypto: aesni - fix memory usage in GCM decryption;
* grsec: RDS: make sure not to loop forever inside rds_send_xmit;
* grsec: Backport gcc plugin changes from 3.14; RBAC resource handling modification
* grsec: Allow usermodehelper executions from /usr/bin/
* grsec: af_unix fix escaping of unix domain paths
* v0.2.117-001-rc
-- mempo <[email protected]> Sat, 15 Apr 2015 08:27:00 +0200
linux-image (linux-3.2.68-mempo-0.2.116) UNRELEASED; urgency=medium
* grsec: infiniband NULL; skb_gso_segment; PAGEEXEC+PSE;
* grsec: compile fix; cpu check; size_overflow hash update
* v0.2.116-001-rc
-- mempo <[email protected]> Sat, 04 Apr 2015 15:15:00 +0200
linux-image (linux-3.2.68-mempo-0.2.115) UNRELEASED; urgency=high
* grsec: nla_memcpy, netlink kmemleak; boot option sysfs, abrt-hook-cpp
* v0.2.115-001-rc
-- mempo <[email protected]> Wed, 01 Apr 2015 01:45:00 +0200
linux-image (linux-3.2.68-mempo-0.2.114) UNRELEASED; urgency=high
* grsec: Revert an incorrect fix for a btrfs heap overflow
* v0.2.114-001-rc
-- mempo <[email protected]> Thu, 26 Mar 2015 21:53:00 +0200
linux-image (linux-3.2.68-mempo-0.2.113) UNRELEASED; urgency=high
* grsec: mem corrupt: AF_UNIX, ib_umem_get, rts5139, sysctl_net_core, isdn icn, inet_diag, rds/iw_rdma.c
* grsec: size_overflow hash, gcc 4.6 compilation, USERCOPY false positive
* v0.2.113-001-rc
-- mempo <[email protected]> Tue, 20 Mar 2015 10:50:00 +0200
linux-image (linux-3.2.68-mempo-0.2.112) UNRELEASED; urgency=medium
* grsec: compile and upstream tty fixes
* v0.2.112-001-rc
-- mempo <[email protected]> Tue, 10 Mar 2015 01:00:00 +0200
linux-image (linux-3.2.68-mempo-0.2.111) UNRELEASED; urgency=high
* new kernel used: 3.2.68
* grsec: net dest_net,cb size; ret_from_fork 32/64; ping; SLAB_USERCOPY; powerpc-latent;
* v0.2.111-001-rc
-- mempo <[email protected]> Sun, 8 Mar 2015 01:00:00 +0200
linux-image (linux-3.2.67-mempo-0.2.110) UNRELEASED; urgency=high
* grsec: net/llc memleak! stackoverflow! autofs4 OOM; threads_handled
* v0.2.110-001-rc
-- mempo <[email protected]> Mon, 28 Feb 2015 19:45:00 +0200
linux-image (linux-3.2.67-mempo-0.2.109) UNRELEASED; urgency=medium
* grsec: 3.1 (64bit inodes gradm); fixes
* devel script update for grsec 3.1
* v0.2.109-001-rc
-- mempo <[email protected]> Mon, 23 Feb 2015 03:00:00 +0200
linux-image (linux-3.2.67-mempo-0.2.108) UNRELEASED; urgency=high
* kernel version update to 3.2.67
* grsec: JIT/BPF fixes again; many pax fixes; locking fixes?
* flavour vanilladbg for testing without grsec patch
* v0.2.108-001-rc
* updated configuration: rename in chroot (grsec)
* v0.2.108-002-rc
* vanilladbg config corrected.
* v0.2.108-002-rc-vanilladbg1 (no change in seed)
-- mempo <[email protected]> Sun, 21 Feb 2015 01:10:00 +0200
linux-image (linux-3.2.66-mempo-0.2.107) UNRELEASED; urgency=high
* grsec: wireshark JIT BPF hardening crash!; request_key/put_key infoleak!
* devel script update: we want to reset revisions again: so no warning
* v0.2.107-001-rc
-- mempo <[email protected]> Thu, 19 Feb 2015 03:10:00 +0200
linux-image (linux-3.2.66-mempo-0.2.106) UNRELEASED; urgency=high
* grsec: NET infoleak rds!!! NET sctp race! fs/cifs infoleak! bug() printing; boot crash: #536514,Xen
* v0.2.106-001-rc
-- mempo <[email protected]> Fri, 06 Feb 2015 09:15:00 +0200
linux-image (linux-3.2.66-mempo-0.2.105) UNRELEASED; urgency=high
* grsec: fix rcu lock imbalance upstream bug
* v0.2.105-001-rc
* deskmaxdbg was not building (was asking config), fixed. Not changing revision/seeds, use this one for that
* v0.2.105-001-rc-deskmaxdbg-fix
-- mempo <[email protected]> Thu, 05 Feb 2015 17:55:00 +0200
linux-image (linux-3.2.66-mempo-0.2.104) UNRELEASED; urgency=medium
* grsec: CVE-2015-1420; ppp sec fix; toolchain detail
* CONFIG_SCHED_OMIT_FRAME_POINTER=n to debug some problems
* builders: saving to ~/test/ also the vmlinux (requirest testing)
* developers: the update grsec script increases kernel local subversion
* v0.2-104-rc
* created options: grsoff.ini and deskmaxdbg for debug. Keeping same version/release.
* also back to using proper tag names (for 3 number version)
* v0.2.104-001-more1
* fixed name of the added debug kernel: insecuregrsoff (it would not build before)
* v0.2.104-001-more1fix2
* fixed now actually
* v0.2.104-001-more1fix3
-- mempo <[email protected]> Wed, 28 Jan 2015 09:33:00 +0200
linux-image (linux-3.2.66-mempo-0.2.103) UNRELEASED; urgency=medium
* grsec: ping, net:sctp, kvm x86, x86 tls and ldt fixes
* v0.2-103-rc
* changed back to 3 number x.y.z mempo/kernel version number. Leaving revision at 3 digits.
* updated seed again
* v0.2.103-200-rc
* require library 2.13-38+deb7u7 that Debian now has for CVE-2015-0235
* v0.2.103-201-rc
-- mempo <[email protected]> Wed, 28 Jan 2015 09:33:00 +0200
linux-image (linux-3.2.66-mempo-0.2_102) UNRELEASED; urgency=medium
* grsec: s2io snprintf; ip:memleak,ipv6,MTU,atomic fragments
* updated mempo maintainer scripts to increase revision
* v0.2-102-rc
-- mempo <[email protected]> Thu, 22 Jan 2015 06:03:00 +0200
linux-image (linux-3.2.66-mempo-0.2) UNRELEASED; urgency=medium
* grsec fix dma-on-stack; view /proc/pid/mem,fd,cmdline for d tasks
* increased major version to 0.2
* switching to increase only the release number, retaining same kernel version name 0.2
* 3 digit revision number, starting at 101
* v0.2-101-rc
-- mempo <[email protected]> Fri, 16 Jan 2015 04:10:00 +0200
linux-image (linux-3.2.66-mempo-0.1.100) UNRELEASED; urgency=medium
* grsec fix dma-on-stack; view /proc/pid/mem,fd,cmdline for d tasks
* v0.1.100-01-rc
* not fully released (will be not uploaded to repo)
-- mempo <[email protected]> Fri, 16 Jan 2015 04:10:00 +0200
linux-image (linux-3.2.66-mempo-0.1.99) UNRELEASED; urgency=low
* grsec tiny update (compiler warning) - nothing usable according to changelog
* v0.1.99-01-rc
-- mempo <[email protected]> Tue, 11 Jan 2015 17:25:00 +0200
linux-image (linux-3.2.66-mempo-0.1.98) UNRELEASED; urgency=high
* grsec and pax fixes
* v0.1.98-01-rc
* added cannary (in signed git tag)
* v0.1.98-01-release-doc1 - this is just doc update, same .deb, same seed, revision
* added check for $HOME symlink (see doc/build.txt) [home_readlink]
* the resulting .deb files should be identical to v0.1.98-01-rc if you manualy fixed this problems
* v0.1.98-01-release-verify1 - NOT a separate release (same seed, revision, etc)
* added check for libncursesw5-dev version (see doc/build.txt) [ncurses]
* the resulting .deb files should be identical to v0.1.98-01-rc if you manualy fixed this problems
* v0.1.98-01-release-verify2 - NOT a separate release (same seed, revision etc)
-- mempo <[email protected]> Tue, 06 Jan 2015 11:30:00 +0200
linux-image (linux-3.2.66-mempo-0.1.97) UNRELEASED; urgency=high
* grsec: isofs, udf security fixes
* pax flags script here is signed
* v0.1.97-01-rc
* added missing files from commit; seed update
* v0.1.97-02-rc
-- mempo <[email protected]> Wed, 31 Dec 2014 14:10:00 +0200
linux-image (linux-3.2.65-mempo-0.1.96) UNRELEASED; urgency=medium
* grsec: options related to deployment for some customers
* grsec: resync with PaX (details are not specified)
* v0.1.96-01-rc
-- mempo <[email protected]> Wed, 31 Dec 2014 14:10:00 +0200
linux-image (linux-3.2.65-mempo-0.1.95) UNRELEASED; urgency=high
* grsec: critical fixes (CVE) to kvm, espfix/espfix32, nopcid, isofs, more
* grsec: kvm: CVE-2014-8134 fixed! espfix32
* grsec: kvm: x86 MOV to CR3 can set bit 63
* grsec: x86/tls lm set_thread_area; block bad segments; espfix
* grsec: UDEREF+CONFIG_PARAVIRT -nopcid flush_tlb_single pv_mm_ops invlpg
* grsec: espfix PAX_PER_CPU_PGD fix
* grsec: statically allocated pud page read-only
* grsec: disable X86_16BIT (breaks Windows 3.11 under wine)
* grsec: isofs fix
* v0.1.95-01-rc
-- mempo <[email protected]> Mon, 22 Dec 2014 13:05:00 +0200
linux-image (linux-3.2.65-mempo-0.1.94) UNRELEASED; urgency=low
* grsec misc: force support for user extended attributes for ext2, ext3 and reiserfs
* v0.1.94-01-rc
-- mempo <[email protected]> Fri, 17 Dec 2014 22:03:00 +0200
linux-image (linux-3.2.65-mempo-0.1.93) UNRELEASED; urgency=low
* improving ECC (in serv)
* creating servmax - with extra high (and slow) double-checks (memory clean/poision etc)
* increased seed and version
* enabled ECC in desk and deskmax
* grsec: iommu bug, version increase
* new kernel used: 3.2.65
* v0.1.93-02-rc
-- mempo <[email protected]> Fri, 04 Dec 2014 04:30:00 +0200
linux-image (linux-3.2.64-mempo-0.1.92) UNRELEASED; urgency=low
* grsec misc: Hyper-V,name
* v0.1.92-01-rc
-- mempo <[email protected]> Fri, 04 Dec 2014 04:30:00 +0200
linux-image (linux-3.2.64-mempo-0.1.91) UNRELEASED; urgency=medium
* grsec update, harden network settings
* v0.1.91-01-rc (not tagged in git)
* fixed the bug that wrong (older) grsecurity patch was used!
* fixed the devel devel-update-grsec.sh script to update sources list!
* added sanity checks against related kind of problems
* now really using grsecurity-3.0-3.2.64-201411220952.patch
* removed other older patches from git as cleanup
* v0.1.91-02-rc (not tagged in git)
* v0.1.91-03-rc (not tagged in git)
* v0.1.91-04-rc (not tagged in git)
* support for the LOCAL_SEED, see doc/build-system.txt
* v0.1.91-05-rc
-- mempo <[email protected]> Wed, 26 Nov 2014 16:32:42 +0200
linux-image (linux-3.2.64-mempo-0.1.90) UNRELEASED; urgency=medium
* WARNING (added later): critical bug: this version was in fact using only grsecurity grsecurity-3.0-3.2.64-201411091051.patch
* this time NO update of grsec nor kernel
* config: turn on sysctl options on init, and use latent entropy
* adding new flavour: serv
* adding new flavour: zero (for tests)
* changes to scripting (validate the envdata etc)
* NOT using latent after all, but using sysctl (default turn ON sysctl grsec options)
* v0.1.90-03-rc
-- mempo <[email protected]> Wed, 26 Nov 2014 12:00:00 +0200
linux-image (linux-3.2.64-mempo-0.1.89) UNRELEASED; urgency=medium
* WARNING (added later): critical bug: this version was in fact using only grsecurity grsecurity-3.0-3.2.64-201411091051.patch
* grsec update, fix pptp info leak
* v0.1.89-01-rc
-- mempo <[email protected]> Sun, 23 Nov 2014 10:20:17 +0200
linux-image (linux-3.2.64-mempo-0.1.88) UNRELEASED; urgency=medium
* WARNING (added later): critical bug: this version was in fact using only grsecurity grsecurity-3.0-3.2.64-201411091051.patch
* grsec update
* v0.1.88-01-rc
* fixed build script, using .ini: now use ./run-flavour "deb7/desk"
* v0.1.88-02-rc
-- mempo <[email protected]> Sat, 15 Nov 2014 16:56:17 +0200
linux-image (linux-3.2.64-mempo-0.1.87) UNRELEASED; urgency=medium
* grsec update
* v0.1.87-01-rc
* v0.1.87-02-rc
-- mempo <[email protected]> Sun, 09 Nov 2014 21:47:17 +0200
linux-image (linux-3.2.64-mempo-0.1.86) UNRELEASED; urgency=medium
* new kernel used: 3.2.64
* grsec update: alarm_expires_remaining
* v0.1.86-01-rc
* grsec update NR_syscalls/ftrace for ARM; checks;
* v0.1.86-02-rc
-- mempo <[email protected]> Fri, 07 Nov 2014 08:49:17 +0200
linux-image (linux-3.2.63-mempo-0.1.85) UNRELEASED; urgency=high
* grsec: Apply debian bugfix, bug id: 766195
* v0.1.85-01-rc
-- mempo <[email protected]> Mon, 03 Nov 2014 11:07:00 +0200
linux-image (linux-3.2.63-mempo-0.1.84) UNRELEASED; urgency=high
* PaX fix, updates
* v0.1.84-01-rc
-- mempo <[email protected]> Sat, 01 Nov 2014 16:25:00 +0200
linux-image (linux-3.2.63-mempo-0.1.83) UNRELEASED; urgency=medium
* grsec update
* v0.1.83-01-rc
* require current libc: "libc6" "2.13-38+deb7u6"
* v0.1.83-02-rc
-- mempo <[email protected]> Tue, 25 Oct 2014 18:40:00 +0200
linux-image (linux-3.2.63-mempo-0.1.82) UNRELEASED; urgency=medium
* grsec update
* v0.1.82-01-rc
* grsec: revert previous commit ae21ca789a180a1146d84440d0293f9f8dce5875
* v0.1.82-02-rc
-- mempo <[email protected]> Tue, 21 Oct 2014 11:43:00 +0200
linux-image (linux-3.2.63-mempo-0.1.81) UNRELEASED; urgency=medium
* grsec: GRKERNSEC_BLACKHOLE features improved, Fix RANDSTRUCT compilation with brcm80211 driver
* v0.1.81-01-rc
-- mempo <[email protected]> Tue, 14 Oct 2014 07:35:37 +0200
linux-image (linux-3.2.63-mempo-0.1.80) UNRELEASED; urgency=medium
* grsec: mm:migrate, net/rds, perf, mm:numa, fixes; pax update
* v0.1.80-01-rc
* updated random seed (random server was offline)
* v0.1.80-02-rc
-- mempo <[email protected]> Tue, 07 Oct 2014 11:05:00 +0200
linux-image (linux-3.2.63-mempo-0.1.79) UNRELEASED; urgency=medium
* grsec: pax,ppc:mmap_rnd,refcount;32 __getblk,nlink,libiscsi
* v0.1.79-01-rc
-- mempo <[email protected]> Tue, 19 Sep 2014 10:50:00 +0200
linux-image (linux-3.2.63-mempo-0.1.78) UNRELEASED; urgency=medium
* grsec: KERNEXEC/EFI patch backport
* v0.1.77-02-rc
* changing naming, this version here (with grsecurity from 18th) should be named 0.1.78
* though kocka's version will remain named as 0.1.77-02
* WARNING: previous release(s?) had an less random seed (empty + just date) (low security impact on anyway binary distro)
* build script: check if (from blockchain) seed is not-empty, show and allow to edit
* updating seed
* v0.1.78-01-rc
-- mempo <[email protected]> Tue, 19 Sep 2014 10:50:00 +0200
linux-image (linux-3.2.63-mempo-0.1.77) UNRELEASED; urgency=medium
* grsec: kernel fixes, update to 3.2.63
* depend on libc6 version 2.13-38+deb7u4
* v0.1.77-01-rc
-- mempo <[email protected]> Tue, 16 Sep 2014 14:54:00 +0200
linux-image (linux-3.2.62-mempo-0.1.76) UNRELEASED; urgency=medium
* grsec: TPE, RBAC learn, current->mm, mouse drv
* v0.1.76-01-rc
* [fix] version for deskmax config is now .76 (was .75 resulting in wrong .deb filename!)
* v0.1.76-02-rc
-- mempo <[email protected]> Mon, 01 Sep 2014 14:37:00 +0200
linux-image (linux-3.2.62-mempo-0.1.75) UNRELEASED; urgency=high
* grsec update: vuln: big packets for PACKET_V3 af_packet mem corrupt
* grsec update: GRKERNSEC_RANDNET no longer is used
* grsec update: various HID fixes (vuln?) including logitech
* grsec update: DDoS/hang on invalid cdrom format
* v0.1.75-01-rc
* changelog was fixed later 2014-09-01
-- mempo <[email protected]> Thu, 26 Aug 2014 00:50:00 +0200
linux-image (linux-3.2.61-mempo-0.1.74) UNRELEASED; urgency=medium
* grsec updates: raid mem corruption; and more
* v0.1.74-01-rc
-- mempo <[email protected]> Thu, 21 Aug 2014 21:39:00 +0200
linux-image (linux-3.2.61-mempo-0.1.73) UNRELEASED; urgency=medium
* added new flavour - deskmax with sound enabled
* flavours support. Now will default to flavour desk.
* v0.1.73-02-rc
-- mempo <[email protected]> Thu, 20 Aug 2014 14:40:00 +0200
linux-image (linux-3.2.61-mempo-0.1.72) UNRELEASED; urgency=medium
* new kernel 3.2.62
* updated grsecurity: gcc load race; LXC cfg; STACKLEAK; ESPFIX
* v0.1.72-01-rc
-- mempo <[email protected]> Thu, 28 Jul 2014 14:40:00 +0200
linux-image (linux-3.2.61-mempo-0.1.71) UNRELEASED; urgency=medium
* updated grsecurity: retval, compile, __read_only, sparc64 fixes
* v0.1.71-01-rc
* v0.1.71-02-rc
* v0.1.71-03-rc
-- mempo <[email protected]> Thu, 28 Jul 2014 14:40:00 +0200
linux-image (linux-3.2.61-mempo-0.1.70) UNRELEASED; urgency=high
* updated grsecurity...
* ...scsi flush, AF_ALG, TCP veno,
* ...sysenter CVE-2014-4508 regresion, virtbox, sendmsg null
* v0.1.70-01-rc
-- mempo <[email protected]> Thu, 28 Jul 2014 14:40:00 +0200
linux-image (linux-3.2.61-mempo-0.1.69) UNRELEASED; urgency=low
* updated grsecurity
* v0.1.69-01-rc
-- mempo <[email protected]> Thu, 28 Jul 2014 14:40:00 +0200
linux-image (linux-3.2.61-mempo-0.1.68) UNRELEASED; urgency=low
* updated grsecurity
* v0.1.68-01-rc
* v0.1.68-02-rc
* v0.1.68-03-rc
* depend on libc6 version 2.13-38+deb7u3
* v0.1.68-03-r4
-- mempo <[email protected]> Thu, 24 Jul 2014 23:45:00 +0200
linux-image (linux-3.2.61-mempo-0.1.67) UNRELEASED; urgency=low
* updated grsecurity [vuln] ppp over l2tp
* v0.1.67-01-rc
* v0.1.67-02-rc
-- mempo <[email protected]> Thu, 17 Jul 2014 23:20:00 +0200
linux-image (linux-3.2.61-mempo-0.1.66) UNRELEASED; urgency=low
* updated grsecurity [vuln] dma off stack (more)
* v0.1.66-01-rc
-- mempo <[email protected]> Thu, 17 Jul 2014 00:40:00 +0200
linux-image (linux-3.2.61-mempo-0.1.65) UNRELEASED; urgency=low
* new kernel 3.2.61
* updated grsecurity [vuln] dma off stack
* v0.1.65-01-rc
-- mempo <[email protected]> Mon, 14 Jul 2014 09:30:00 +0200
linux-image (linux-3.2.60-mempo-0.1.64) UNRELEASED; urgency=low
* updated grsecurity [low] unhide net/if_inet6 and compile fix
* v0.1.64-01-rc
-- mempo <[email protected]> Thu, 10 Jul 2014 13:25:00 +0200
linux-image (linux-3.2.60-mempo-0.1.63) UNRELEASED; urgency=low
* updated grsecurity fix [vuln] bond_uninit, mdiobus
* v0.1.63-01-rc
-- mempo <[email protected]> Tue, 08 Jul 2014 03:40:00 +0200
linux-image (linux-3.2.60-mempo-0.1.62) UNRELEASED; urgency=low
* updated grsecurity CVE-2014-4699 limit RIP
* v0.1.62-01-rc
* v0.1.62-02-rc
-- mempo <[email protected]> Tue, 08 Jul 2014 03:40:00 +0200
linux-image (linux-3.2.60-mempo-0.1.61) UNRELEASED; urgency=low
* updated grsecurity - strace fixes
* v0.1.61-01-rc
-- mempo <[email protected]> Sun, 06 Jul 2014 04:38:00 +0200
linux-image (linux-3.2.60-mempo-0.1.60) UNRELEASED; urgency=low
* updated grsecurity - null deref in DRM; fix PCI_ANY_ID
* v0.1.60-01-rc
-- mempo <[email protected]> Mon, 02 Jul 2014 09:07:00 +0200
linux-image (linux-3.2.60-mempo-0.1.59) UNRELEASED; urgency=low
* updated grsecurity - ALSA security fix
* fixed changelog here, versions >= 0.1.55 till now are kernel 3.2.60
* v0.1.59-01-rc
-- mempo <[email protected]> Mon, 23 Jun 2014 12:25:00 +0200
linux-image (linux-3.2.60-mempo-0.1.58) UNRELEASED; urgency=low
* the 3.2 kernel is now "stable" instead "stable2" in grsecurity
* build scripts to work with stable/stable2. also renamed grsec changelog to match
* updated kernel
* updated grsecurity
* v0.1.58-01-rc
-- mempo <[email protected]> Mon, 23 Jun 2014 12:25:00 +0200
linux-image (linux-3.2.60-mempo-0.1.57) UNRELEASED; urgency=low
* updated kernel
* updated grsecurity
* v0.1.57-01-rc
-- mempo <[email protected]> Sun, 22 Jun 2014 12:15:00 +0200
linux-image (linux-3.2.60-mempo-0.1.56) UNRELEASED; urgency=low
* updated kernel
* updated grsecurity
* v0.1.56-01-rc
-- mempo <[email protected]> Thu, 19 Jun 2014 21:00:00 +0200
linux-image (linux-3.2.60-mempo-0.1.55) UNRELEASED; urgency=low
* updated kernel
* updated grsecurity
* v0.1.55-01-rc
-- mempo <[email protected]> Fri, 06 Jun 2014 10:38:48 +0100
linux-image (linux-3.2.59-mempo-0.1.54) UNRELEASED; urgency=low
* updated grsecurity
* v0.1.54-01-rc
-- mempo <[email protected]> Fri, 06 Jun 2014 10:38:48 +0100
linux-image (linux-3.2.59-mempo-0.1.53) UNRELEASED; urgency=low
* updated grsecurity
* v0.1.53-01-rc
-- mempo <[email protected]> Thu, 05 Jun 2014 22:15:00 +0200
linux-image (linux-3.2.59-mempo-0.1.52) UNRELEASED; urgency=low
* updated grsecurity
* v0.1.52-01-rc
-- mempo <[email protected]> Thu, 05 Jun 2014 01:00:00 +0200
linux-image (linux-3.2.59-mempo-0.1.51) UNRELEASED; urgency=low
* updated grsecurity (fixed the boot failure, and more)
* v0.1.51-01-rc
-- mempo <[email protected]> Wed, 04 Jun 2014 01:00:00 +0200
linux-image (linux-3.2.59-mempo-0.1.50) UNRELEASED; urgency=low
* updated grsecurity
* v0.1.50-01-rc
* added option +CONFIG_GRKERNSEC_KSTACKOVERFLOW=y
* v0.1.50-02-rc
-- mempo <[email protected]> Mon, 02 Jun 2014 01:38:00 +0200
linux-image (linux-3.2.59-mempo-0.1.49) UNRELEASED; urgency=low
* updated grsecurity
* v0.1.49-01-rc
-- mempo <[email protected]> Sun, 01 Jun 2014 23:45:00 +0200
linux-image (linux-3.2.59-mempo-0.1.48) UNRELEASED; urgency=low
* updated grsecurity
* verification of grsecurity sig (on download by developer - update script)
* verification of kernel.org sources sig in build process (additionaly to checksum check)
* v0.1.48-01-rc
-- mempo <[email protected]> Sat, 31 May 2014 13:00:00 +0200
linux-image (linux-3.2.59-mempo-0.1.47) UNRELEASED; urgency=low
* updated grsecurity
* v0.1.47-01-rc
-- mempo <[email protected]> Thu, 29 May 2014 02:30:00 +0200
linux-image (linux-3.2.59-mempo-0.1.46) UNRELEASED; urgency=low
* updated grsecurity
* updated linux
* run.sh breaks on error
* v0.1.46-02-rc (not used, older tag deleted)
* doc (changelog, version)
* v0.1.46-03-rc (not used)
* devel script update (separate script to increase revision/time/seed)
* v0.1.46-04-rc
* [doc] (changelog) kernel version
* v0.1.46-05-rc
-- mempo <[email protected]> Tue, 27 May 2014 10:00:00 +0200
linux-image (linux-3.2.58-mempo-0.1.45) UNRELEASED; urgency=low
* updated grsecurity
* v0.1.45-01-rc
-- mempo <[email protected]> Mon, 14 May 2014 02:00:00 +0200
linux-image (linux-3.2.58-mempo-0.1.44) UNRELEASED; urgency=low
* updated to grsecurity-3.0-3.2.58-201405061705.patch , RC+seed
* v0.1.44-01-rc
* doc (changelog fix)
* v0.1.44-02-rc
* seed,rc (forgotten previously)
* v0.1.44-03-rc
-- mempo <[email protected]> Mon, 7 May 2014 01:30:00 +0200
linux-image (linux-3.2.58-mempo-0.1.43) UNRELEASED; urgency=low
* updating to linux linux-3.2.58
* updated grsecurity grsecurity-3.0-3.2.58-201405041242.patch RC, seed
* v0.1.43-01-rc
-- mempo <[email protected]> Mon, 5 May 2014 02:00:00 +0200
linux-image (linux-3.2.57-mempo-0.1.42) UNRELEASED; urgency=low
* update grsecurity, RC, seed
* v0.1.42-01-rc
* decided option CONFIG_SCSI_VIRTIO=m
* v0.1.42-02-rc
-- mempo <[email protected]> Thu, 30 Apr 2014 18:30:00 +0200
linux-image (linux-3.2.57-mempo-0.1.41) UNRELEASED; urgency=low
* update grsecurity, RC, seed
* v0.1.41-01-rc
-- mempo <[email protected]> Fri, 25 Apr 2014 11:30:00 +0200
linux-image (linux-3.2.57-mempo-0.1.40) UNRELEASED; urgency=low
* update grsecurity, RC, seed
* v0.1.40-01-rc
-- mempo <[email protected]> Sat, 19 Apr 2014 13:00:00 +0200
linux-image (linux-3.2.57-mempo-0.1.39) UNRELEASED; urgency=low
* update grsecurity, RC, seed
* v0.1.39-01-rc
-- mempo <[email protected]> Fri, 18 Apr 2014 00:10:00 +0200
linux-image (linux-3.2.57-mempo-0.1.38) UNRELEASED; urgency=low
* update kernel to linux-3.2.57
* update grsecurity to grsecurity-3.0-3.2.57-201404131252.patch
* grsecurity changelog updated
* updated checksums
* new seed
* v0.1.38-01-rc
* doc update (update the todo-list)
* provided correct linux-3.2.57 link/checksum
* fix mempo's patch to fit new source
* v0.1.38-02-rc
* now the good config variant is offically called "desk"
* v0.1.38-03-rc
* typo fixed
* v0.1.38-04-rc
* version, RC, seed updated for version
* v0.1.38-05-rc
-- mempo <[email protected]> Mon, 14 Apr 2014 13:00:00 +0200
linux-image (linux-3.2.56-mempo-0.1.37) UNRELEASED; urgency=low
* update kernel to linux-3.2.56
* update grsecurity to grsecurity-3.0-3.2.56-201404062126
* grsecurity changelog updated
* updated checksums
* new seed
* v0.1.37-01-rc
* Added missing grsecurity patch
* v0.1.37-02-rc
-- mempo <[email protected]> Mon, 07 Apr 2014 11:40:00 +0200
linux-image (linux-3.2.55-mempo-0.1.36) UNRELEASED; urgency=low
* (corrected date on changelog - UTC time)
* disabled XEN support (in order to allow protecition like KERNEXEC and UDEREF)
* enable UDEREF or KERNEXEC (bug#7)
* seed
* v0.1.36-01-rc
* requiring new dpkg 0.1.24.10 that fixed libz, strategy etc
* seed
* v0.1.36-04-rc
* removed debug code of make menuconfig
* v0.1.36-05-rc
* Patch to remove number of threads info in documentation
* v0.1.36-06-rc
-- mempo <[email protected]> Fri, 04 Apr 2014 18:55:00 +0200
linux-image (linux-3.2.55-mempo-0.1.35) UNRELEASED; urgency=low
* updating to kernel-sources/grsecurity/grsecurity-3.0-3.2.56-201404012135.patch
* (updated also grsecurity's changelog, it was not updated last time)
* updated checksums
* new seed
* v0.1.35-01-rc
* grsecurity changelog updated
* new seed
* v0.1.35-02-rc
* (his version is not protected enough due to bug#7, use higher version)
-- mempo <[email protected]> Thu, 03 Apr 2014 13:50:00 +0200
linux-image (linux-3.2.55-mempo-0.1.34) UNRELEASED; urgency=low
* updated to grsecurity-3.0-3.2.55-201403252026.patch
* new seed
* v0.1.34-01-rc
-- mempo <[email protected]> Wed, 26 Mar 2014 11:04:43 +0200
linux-image (linux-3.2.55-mempo-0.1.33) UNRELEASED; urgency=low
* updated to grsecurity-3.0-3.2.55-201403202347.patch
* new seed
* Linking dpkg status and info SameKernel #bug5 fix (by benbrown)
* Increased version of required dpkg to 0.1.24.7 - zlib only compression, same compression strategy
* v0.1.33-rc0
-- mempo <[email protected]> Mon, 24 Mar 2014 13:46:02 +0200
linux-image (linux-3.2.55-mempo-0.1.32) UNRELEASED; urgency=low
* updated to grsecurity-3.0-3.2.55-201403172027.patch
* v0.1.32-rc0
* new seed
-- mempo <[email protected]> Tue, 17 Mar 2014 13:51:04 +0200
linux-image (linux-3.2.55-mempo-0.1.31) UNRELEASED; urgency=low
* dpkg 0.1.24.6 is required for this version.
* Fixed the #bug1 described on https://wiki.debian.org/SameKernel#bug1
* v0.1.31-01-rc
-- mempo <[email protected]> Fri, 07 Mar 2014 15:41:04 +0200
linux-image (linux-3.2.55-mempo-0.1.30) UNRELEASED; urgency=low
* updated to grsecurity-3.0-3.2.55-201403041936.patch
* new seed
* v0.1.30-rc0
* changed numbering of rc/revisions
* v0.1.30-03-rc
-- mempo <[email protected]> Wed, 05 Mar 2014 14:45:00 +0200
linux-image (linux-3.2.55-mempo-0.1.29) UNRELEASED; urgency=low
* updated to grsecurity-3.0-3.2.55-201403022154.patch
* new seed
* v0.1.29-rc0
-- mempo <[email protected]> Tue, 04 Mar 2014 22:30:00 +0200
linux-image (linux-3.2.55-mempo-0.1.28) UNRELEASED; urgency=low
* updated to grsecurity-3.0-3.2.55-201402241936.patch
* new seed
* v0.1.28-rc1
* corrected kernel name in .config
* more debug at end of run.sh and echo nicer report
* v0.1.28-rc2
-- mempo <[email protected]> Tue, 25 Feb 2014 18:30:00 +0200
linux-image (linux-3.2.55-mempo-0.1.27) UNRELEASED; urgency=low
* updated to linux-3.2.55
* updated to grsecurity-3.0-3.2.55-201402152203.patch
* v0.1.27-wip
* print date at end
* cosmetics; changelog
* v0.1.27-rc1
* using mempo seed instead /dev/urandom from RANDSTRUCT in grsecurity
* disabled checking checksum of files temporarly!!!
* back to checking checksums of files
* nice patch on top of grsecurity to allow seed GRSECURITY_RAND_SEED_FILE
* new random seed (used for randstruct)
* v0.1.27-rc2 (warning: is outdated already, new grsecurity)
-- mempo <[email protected]> Thu, 17 Feb 2014 00:30:00 +0200
linux-image (linux-3.2.54-mempo-0.1.26) UNRELEASED; urgency=low
* updated to grsecurity-3.0-3.2.54-201402111745.patch
* v0.1.26-wip
* Removed build-id from all binaries in headers deb package (mempo patch)
* doc (changelog)
* v0.1.26-rc2
* added tools for setfattr
* checking of exact version of libc, gcc, etc
* v0.1.26-rc3
* doc - contact, PGP, trust etc
* v0.1.26-rc4
* copy dpkg status from global to local
* v0.1.26-rc5
* delete deb before, check sha after; mirror [doc]
* allow dpkg status copy failure to be ignored (for testing)
* v0.1.26-rc6
-- mempo <[email protected]> Thu, 13 Feb 2014 17:00:00 +0200
linux-image (linux-3.2.54-mempo-0.1.25) UNRELEASED; urgency=low
* date upgraded now since grsecurity was updated
* v0.1.25-rc1
* requiring dpkg 0.1.24.5 that really fixes crc (fix: one of args=0)
* v0.1.25-rc2
-- mempo <[email protected]> Mon, 03 Feb 2014 12:00:00 +0200
linux-image (linux-3.2.54-mempo-0.1.24) UNRELEASED; urgency=low
* updated to grsecurity-3.0-3.2.54-201401281850.patch
* requiring dpkg 0.1.23.7 that fixes XZ compression level
* v0.1.24-rc1
* missing files added to git
* v0.1.24-rc2
* requiring dpkg 0.1.24.3 (bugfix) with correct XZ compression
* updated to grsecurity-3.0-3.2.54-201402062221.patch
* v0.1.24-rc3
* (info) date, numbering
-- mempo <[email protected]> Mon, 03 Feb 2014 12:00:00 +0200
linux-image (linux-3.2.54-mempo-0.1.23) UNRELEASED; urgency=low
* updated to grsecurity-3.0-3.2.54-201401281850.patch
* doc updates etc
* v0.1.23-rc1
* testing dpkg version, we need 0.1.23
* corrected this change log version entry
* XZ crc options fix
* check if user/pwd are correct. better support/error msg
* v0.1.23-rc2
* corrected user/pwd check... doh.
* v0.1.23-rc3
* corrected user/pwd check again, regarding the path
* v0.1.23-rc4
* build-twice.sh deletes previous builds correctly
* the time of build is and will be set by mempo version now
* v0.1.23-rc5
* requiring dpkg that fixes XZ checksum/crc mode
-- mempo <[email protected]> Mon, 03 Feb 2014 12:00:00 +0200
linux-image (linux-3.2.54-mempo-0.1.22) UNRELEASED; urgency=low
* updated to grsecurity-3.0-3.2.54-201401051649
* fixed --build-id=none
* checking for proper dpkg >= 1.17.5
* fixed the gzip files fix to be applied on each step of overlay
* fixed bug that created part of log in file named "1"
* fixed gzip in more places in Makefile
* LC_ALL="C"
* using tar with --faketime and FAKETIME_TIME