/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.194 - (hide annotations) (download)
Sun Oct 21 16:18:53 2007 UTC (6 years, 10 months ago) by phreak
Branch: MAIN
Changes since 1.193: +6 -1 lines
Removing old ebuilds.
(Portage version: 2.1.3.9)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 opfer 1.130 # Copyright 2000-2007 Gentoo Foundation; Distributed under the GPL v2
3 phreak 1.194 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.193 2007/10/21 15:58:24 phreak Exp $
4    
5     21 Oct 2007; Christian Heim <phreak@gentoo.org>
6     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
7     -hardened-sources-2.6.21-r4.ebuild:
8     Removing old ebuilds.
9 phreak 1.193
10     *hardened-sources-2.4.35-r2 (21 Oct 2007)
11    
12     21 Oct 2007; Christian Heim <phreak@gentoo.org>
13     +hardened-sources-2.4.35-r2.ebuild:
14     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
15     patches.
16 phreak 1.192
17     *hardened-sources-2.6.22-r8 (21 Oct 2007)
18    
19     21 Oct 2007; Christian Heim <phreak@gentoo.org>
20     +hardened-sources-2.6.22-r8.ebuild:
21     Yet another new patch, hopefully fixing the remaining issues we had w/
22     2.6.22. Candidate for stabling.
23 phreak 1.191
24     *hardened-sources-2.6.23 (13 Oct 2007)
25    
26     13 Oct 2007; Christian Heim <phreak@gentoo.org>
27     +hardened-sources-2.6.23.ebuild:
28     Initial hardened-sources-2.6.23. If people still have problems w/ bug
29     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
30 phreak 1.190
31     11 Oct 2007; Christian Heim <phreak@gentoo.org>
32     hardened-sources-2.6.20-r10.ebuild:
33     Pulling in yet another new genpatches version, fixing the PWC bug for real.
34 phreak 1.189
35     04 Oct 2007; Christian Heim <phreak@gentoo.org>
36     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
37     Removing old versions.
38 phreak 1.188
39     *hardened-sources-2.6.22-r7 (01 Oct 2007)
40    
41     01 Oct 2007; Christian Heim <phreak@gentoo.org>
42     +hardened-sources-2.6.22-r7.ebuild:
43     Revision bump, pulling in a newer patch. Should fix #194276.
44 phreak 1.187
45     30 Sep 2007; Christian Heim <phreak@gentoo.org>
46     hardened-sources-2.6.20-r10.ebuild:
47     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
48     Mike Doty).
49 phreak 1.186
50     *hardened-sources-2.6.22-r6 (26 Sep 2007)
51    
52     26 Sep 2007; Christian Heim <phreak@gentoo.org>
53     +hardened-sources-2.6.22-r6.ebuild:
54     Revision bump, grabbing up till Linux 2.6.22.9.
55 phreak 1.185
56     24 Sep 2007; Christian Heim <phreak@gentoo.org>
57     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
58     Cleaning up further.
59 phreak 1.184
60     *hardened-sources-2.6.20-r10 (24 Sep 2007)
61    
62     24 Sep 2007; Christian Heim <phreak@gentoo.org>
63     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
64     +hardened-sources-2.6.20-r10.ebuild:
65     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
66     revisions.
67 phreak 1.183
68     *hardened-sources-2.6.22-r5 (22 Sep 2007)
69    
70     22 Sep 2007; Christian Heim <phreak@gentoo.org>
71     +hardened-sources-2.6.22-r5.ebuild:
72     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
73 phreak 1.182
74     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
75     Removing johnm from metadata.xml (see #186467 for reference).
76 phreak 1.181
77     *hardened-sources-2.6.22-r4 (17 Sep 2007)
78    
79     17 Sep 2007; Christian Heim <phreak@gentoo.org>
80     +hardened-sources-2.6.22-r4.ebuild:
81     Revision bump, hopefully fixing all those weird PAX failures.
82 phreak 1.180
83     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
84     Updating the metadata.xml.
85 phreak 1.179
86     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
87     Removing tocharian from metadata due to his retirement (see #71718 for
88     reference).
89 phreak 1.178
90     *hardened-sources-2.6.20-r9 (30 Aug 2007)
91    
92     30 Aug 2007; Christian Heim <phreak@gentoo.org>
93     +hardened-sources-2.6.20-r9.ebuild:
94     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
95 phreak 1.177
96     29 Aug 2007; Christian Heim <phreak@gentoo.org>
97     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
98     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
99     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
100     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
101     -hardened-sources-2.6.22-r2.ebuild:
102     Removing some redundant versions.
103 phreak 1.176
104     *hardened-sources-2.4.35-r1 (29 Aug 2007)
105    
106     29 Aug 2007; Christian Heim <phreak@gentoo.org>
107     +hardened-sources-2.4.35-r1.ebuild:
108     Revision bump, new grsecurity patch.
109 phreak 1.175
110     *hardened-sources-2.6.20-r8 (26 Aug 2007)
111    
112     26 Aug 2007; Christian Heim <phreak@gentoo.org>
113     +hardened-sources-2.6.20-r8.ebuild:
114     Revision bump for Linux 2.6.20.17.
115 phreak 1.174
116     *hardened-sources-2.6.22-r3 (22 Aug 2007)
117    
118     22 Aug 2007; Christian Heim <phreak@gentoo.org>
119     +hardened-sources-2.6.22-r3.ebuild:
120     Revision bump for Linux 2.6.22.4.
121 phreak 1.173
122     16 Aug 2007; Christian Heim <phreak@gentoo.org>
123     hardened-sources-2.6.22-r2.ebuild:
124     Updated patchset, to fix the alignment against 2.6.22.3.
125 phreak 1.172
126     *hardened-sources-2.6.22-r2 (16 Aug 2007)
127    
128     16 Aug 2007; Christian Heim <phreak@gentoo.org>
129     +hardened-sources-2.6.22-r2.ebuild:
130     Revision bump for Linux 2.6.22.3.
131 phreak 1.171
132     *hardened-sources-2.4.35 (16 Aug 2007)
133    
134     16 Aug 2007; Christian Heim <phreak@gentoo.org>
135     +hardened-sources-2.4.35.ebuild:
136     Version bump, initial version for Linux 2.4.35.
137 phreak 1.170
138     *hardened-sources-2.6.21-r4 (16 Aug 2007)
139    
140     16 Aug 2007; Christian Heim <phreak@gentoo.org>
141     +hardened-sources-2.6.21-r4.ebuild:
142     Revision bump for Linux 2.6.21.6.
143 phreak 1.169
144     *hardened-sources-2.6.20-r7 (16 Aug 2007)
145    
146     16 Aug 2007; Christian Heim <phreak@gentoo.org>
147     +hardened-sources-2.6.20-r7.ebuild:
148     Revision bump for Linux 2.6.20.16.
149 phreak 1.168
150     *hardened-sources-2.6.22-r1 (13 Aug 2007)
151    
152     13 Aug 2007; Christian Heim <phreak@gentoo.org>
153     +hardened-sources-2.6.22-r1.ebuild:
154     Yet another revision bump.
155 phreak 1.167
156     *hardened-sources-2.6.22 (10 Aug 2007)
157    
158     10 Aug 2007; Christian Heim <phreak@gentoo.org>
159     +hardened-sources-2.6.22.ebuild:
160     Initial release for 2.6.22. If you are using hardened-sources on a desktop
161     machine (P4 or newer), be aware you might need to disable
162     CONFIG_PAX_PAGEEXEC.
163 phreak 1.166
164     04 Aug 2007; Christian Heim <phreak@gentoo.org>
165     hardened-sources-2.6.20-r6.ebuild:
166     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
167     2.6.20.15.
168 phreak 1.165
169     10 Jul 2007; Christian Heim <phreak@gentoo.org>
170     hardened-sources-2.6.20-r5.ebuild:
171     Marking hardened-sources-2.6.20-r5 stable on ppc.
172 phreak 1.164
173     10 Jul 2007; Christian Heim <phreak@gentoo.org>
174     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
175     Cleanup.
176 phreak 1.163
177     *hardened-sources-2.6.20-r6 (08 Jul 2007)
178    
179     08 Jul 2007; Christian Heim <phreak@gentoo.org>
180     +hardened-sources-2.6.20-r6.ebuild:
181     Revision bump, grabbing yet another stable release.
182 phreak 1.162
183     17 Jun 2007; Christian Heim <phreak@gentoo.org>
184     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
185     -hardened-sources-2.6.21-r2.ebuild:
186     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
187     alpha stable KEYWORD by mistake.
188 phreak 1.161
189     17 Jun 2007; Christian Heim <phreak@gentoo.org>
190     hardened-sources-2.6.20-r5.ebuild:
191     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
192     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
193 phreak 1.160
194     *hardened-sources-2.6.21-r3 (12 Jun 2007)
195    
196     12 Jun 2007; Christian Heim <phreak@gentoo.org>
197     +hardened-sources-2.6.21-r3.ebuild:
198     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
199     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
200     love.
201 phreak 1.159
202     *hardened-sources-2.6.20-r5 (11 Jun 2007)
203    
204     11 Jun 2007; Christian Heim <phreak@gentoo.org>
205     +hardened-sources-2.6.20-r5.ebuild:
206     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
207     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
208     love.
209 pappy 1.158
210     *hardened-sources-2.4.34.5 (11 Jun 2007)
211    
212     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
213     +hardened-sources-2.4.34.5.ebuild:
214     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
215 phreak 1.157
216     30 May 2007; Christian Heim <phreak@gentoo.org>
217     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
218     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
219     stale ebuild(s).
220 phreak 1.156
221     30 May 2007; Christian Heim <phreak@gentoo.org>
222     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
223     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
224     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
225     Doing some cleanups, remove stale ebuilds.
226 phreak 1.155
227     26 May 2007; Christian Heim <phreak@gentoo.org>
228     hardened-sources-2.6.21-r2.ebuild:
229     Fixing the grsecurity patch, had one '};' too much.
230 phreak 1.154
231     *hardened-sources-2.6.21-r2 (26 May 2007)
232    
233     26 May 2007; Christian Heim <phreak@gentoo.org>
234     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
235     +hardened-sources-2.6.21-r2.ebuild:
236     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
237     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
238 phreak 1.153
239     *hardened-sources-2.6.20-r4 (26 May 2007)
240    
241     26 May 2007; Christian Heim <phreak@gentoo.org>
242     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
243     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
244 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
245 phreak 1.152
246     15 May 2007; Christian Heim <phreak@gentoo.org>
247     hardened-sources-2.6.20-r3.ebuild:
248     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
249     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
250     grsecurity patch fail in that exact same hunk.
251 phreak 1.151
252     *hardened-sources-2.6.20-r3 (15 May 2007)
253    
254     15 May 2007; Christian Heim <phreak@gentoo.org>
255     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
256     Revision bump, incorporating Linux 2.6.20.11.
257    
258     *hardened-sources-2.6.21-r1 (11 May 2007)
259    
260     11 May 2007; Christian Heim <phreak@gentoo.org>
261     +hardened-sources-2.6.21-r1.ebuild:
262     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
263     mentioned in #177234.
264 kevquinn 1.150
265     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
266     files/digest-hardened-sources-2.6.21, Manifest:
267     Fix Manifest/digest for linux-2.6.21.tar.bz2
268 phreak 1.149
269     06 May 2007; Christian Heim <phreak@gentoo.org>
270     hardened-sources-2.6.21.ebuild:
271     Bumping the hardened-patches version, needed for the fix for #177234.
272 phreak 1.148
273     *hardened-sources-2.6.21 (02 May 2007)
274    
275     02 May 2007; Christian Heim <phreak@gentoo.org>
276     +hardened-sources-2.6.21.ebuild:
277     Version bump, Linux 2.6.21-hardened.
278 phreak 1.147
279     29 Apr 2007; Christian Heim <phreak@gentoo.org>
280     hardened-sources-2.6.20-r2.ebuild:
281     Adding ~ia64 on Ned's request.
282 phreak 1.146
283     29 Apr 2007; Christian Heim <phreak@gentoo.org>
284     hardened-sources-2.6.20-r2.ebuild:
285     Fixing the included grsecurity patch, wasn't alligning due to the Index:
286     header line(s).
287 phreak 1.145
288     29 Apr 2007; Christian Heim <phreak@gentoo.org>
289     hardened-sources-2.6.20-r2.ebuild:
290     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
291 armin76 1.144
292     *hardened-sources-2.6.20-r2 (10 Apr 2007)
293    
294     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
295     +hardened-sources-2.6.20-r2.ebuild:
296     Version bump, on behalf of phreak
297 phreak 1.143
298     *hardened-sources-2.6.20-r1 (04 Apr 2007)
299    
300     04 Apr 2007; Christian Heim <phreak@gentoo.org>
301     +hardened-sources-2.6.20-r1.ebuild:
302     Revision bump, grabbing a newer grsecurity snapshot.
303 phreak 1.142
304     *hardened-sources-2.6.20 (25 Mar 2007)
305    
306     25 Mar 2007; Christian Heim <phreak@gentoo.org>
307     +hardened-sources-2.6.20.ebuild:
308     Finally a hardened-sources version for 2.6.20; many people have been waiting
309     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
310     testbox.
311 chainsaw 1.141
312     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
313     hardened-sources-2.6.18-r6.ebuild:
314     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
315 phreak 1.140
316     *hardened-sources-2.6.18-r6 (16 Mar 2007)
317    
318     16 Mar 2007; Christian Heim <phreak@gentoo.org>
319     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
320     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
321     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
322     supposed to be.
323 phreak 1.139
324     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
325     Fixing the Manifest, the previous one was broken (as in still had the
326     deleted ebuild in it).
327 phreak 1.138
328     06 Mar 2007; Christian Heim <phreak@gentoo.org>
329     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
330     +hardened-sources-2.6.18-r5.ebuild:
331     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
332     Linux 2.6.18.8. Also cleaning up the older version.
333    
334     *hardened-sources-2.6.18-r5 (06 Mar 2007)
335    
336     06 Mar 2007; Christian Heim <phreak@gentoo.org>
337     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
338     +hardened-sources-2.6.18-r5.ebuild:
339     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
340     Linux 2.6.18.8. Also cleaning up the older version.
341 phreak 1.137
342     24 Feb 2007; Christian Heim <phreak@gentoo.org>
343     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
344     -hardened-sources-2.6.19-r5.ebuild:
345     Removing some of the old version, that didn't work.
346 phreak 1.136
347     *hardened-sources-2.6.19-r6 (12 Feb 2007)
348    
349     12 Feb 2007; Christian Heim <phreak@gentoo.org>
350     +hardened-sources-2.6.19-r6.ebuild:
351     Revision bump, including a new grsec version fixing #166235.
352 pappy 1.134
353     *hardened-sources-2.4.34 (24 Jan 2007)
354    
355     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
356 pappy 1.135 Manifest:
357     updating Manifest with checksums of new tarball and ebuild
358    
359     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
360 pappy 1.134 +hardened-sources-2.4.34.ebuild:
361     I added new hardened sources 2.4 update, this is a critical path
362     security bugfix - all users of h-s are strongly advised
363     to update their existing hardened sources to this version.
364     It contains a fix for a kernel vulnerability that is pertaining
365     to the PaX changes to virtual memory management, possibly leading
366     to a local kernel exploit ... see grsecurity.net forums and homepage
367 phreak 1.133
368     23 Jan 2007; Christian Heim <phreak@gentoo.org>
369     files/digest-hardened-sources-2.6.19-r5, Manifest:
370     Fixing the patch-tarball digest.
371 phreak 1.132
372     *hardened-sources-2.6.19-r5 (23 Jan 2007)
373    
374     23 Jan 2007; Christian Heim <phreak@gentoo.org>
375     +hardened-sources-2.6.19-r5.ebuild:
376     Revision bump, closing the recently discovered PaX expand_stack()
377     vulnerability.
378 phreak 1.131
379     *hardened-sources-2.6.19-r4 (14 Jan 2007)
380    
381     14 Jan 2007; Christian Heim <phreak@gentoo.org>
382     +hardened-sources-2.6.19-r4.ebuild:
383     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
384     dropping the randomized PID feature.
385 opfer 1.130
386     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
387     hardened-sources-2.4.33.4.ebuild:
388     stable x86, bug #161171
389 phreak 1.129
390     *hardened-sources-2.6.19-r3 (27 Dec 2006)
391    
392     27 Dec 2006; Christian Heim <phreak@gentoo.org>
393     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
394     Revision bump for bug #157186 and #158786.
395 phreak 1.128
396     *hardened-sources-2.6.18-r4 (27 Dec 2006)
397    
398     27 Dec 2006; Christian Heim <phreak@gentoo.org>
399     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
400     Revision bump for bug #157186.
401 phreak 1.127
402     *hardened-sources-2.6.19-r2 (23 Dec 2006)
403    
404     23 Dec 2006; Christian Heim <phreak@gentoo.org>
405     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
406     Revision bump to pull in genpatches-2.6.19-3 for #157186.
407 phreak 1.126
408     17 Dec 2006; Christian Heim <phreak@gentoo.org>
409     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
410     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
411     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
412     hardened-sources-2.6.19-r1.ebuild:
413     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
414     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
415 pappy 1.125
416     *hardened-sources-2.4.33.4 (17 Dec 2006)
417    
418     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
419     +hardened-sources-2.4.33.4.ebuild:
420     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
421     and quilting
422 phreak 1.124
423     *hardened-sources-2.6.19-r1 (14 Dec 2006)
424    
425     14 Dec 2006; Christian Heim <phreak@gentoo.org>
426     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
427     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
428     for reporting).
429 phreak 1.123
430     *hardened-sources-2.6.19 (13 Dec 2006)
431    
432     13 Dec 2006; Christian Heim <phreak@gentoo.org>
433     +hardened-sources-2.6.19.ebuild:
434     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
435     Brad for providing that prompt update.
436 phreak 1.122
437     *hardened-sources-2.6.18-r3 (13 Dec 2006)
438    
439     13 Dec 2006; Christian Heim <phreak@gentoo.org>
440     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
441     +hardened-sources-2.6.18-r3.ebuild:
442     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
443     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
444 phreak 1.121
445     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
446     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
447 nixnut 1.120
448     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
449     Stable on ppc wrt bug 157356
450 opfer 1.119
451     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
452     hardened-sources-2.6.18.ebuild:
453     stable x86, bug #157356
454 phreak 1.118
455     *hardened-sources-2.6.18-r2 (06 Dec 2006)
456    
457     06 Dec 2006; Christian Heim <phreak@gentoo.org>
458     +hardened-sources-2.6.18-r2.ebuild:
459     Revision bump, including 2.6.18.5 (via genpatches) and
460     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
461     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
462     redesign.
463 phreak 1.117
464     06 Dec 2006; Christian Heim <phreak@gentoo.org>
465     hardened-sources-2.6.18.ebuild:
466     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
467     of Mike Doty).
468 phreak 1.116
469     *hardened-sources-2.6.18-r1 (23 Nov 2006)
470    
471     23 Nov 2006; Christian Heim <phreak@gentoo.org>
472     +hardened-sources-2.6.18-r1.ebuild:
473     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
474 phreak 1.115
475     *hardened-sources-2.6.18 (11 Nov 2006)
476    
477     11 Nov 2006; Christian Heim <phreak@gentoo.org>
478     +hardened-sources-2.6.18.ebuild:
479     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
480 solar 1.114
481     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
482     - mark amd64 stable also. bug #151877
483 solar 1.113
484     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
485     - mark 2.6.17-r1 stable
486 phreak 1.112
487     27 Aug 2006; Christian Heim <phreak@gentoo.org>
488     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
489     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
490 phreak 1.111
491     *hardened-sources-2.6.17-r1 (26 Aug 2006)
492    
493     26 Aug 2006; Christian Heim <phreak@gentoo.org>
494     +hardened-sources-2.6.17-r1.ebuild:
495     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
496     grsecurity patch.
497 phreak 1.110
498     *hardened-sources-2.6.17 (17 Aug 2006)
499    
500     17 Aug 2006; Christian Heim <phreak@gentoo.org>
501     +hardened-sources-2.6.17.ebuild:
502     Bumping the hardened-sources-2.6 series to 2.6.17, using
503     genpatches-2.6.17-6.base.
504 solar 1.109
505     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
506     - stable on x86 and amd64
507 solar 1.108
508     *hardened-sources-2.6.16-r11 (15 Jul 2006)
509    
510     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
511     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
512     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
513     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
514     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
515     crusty ebuilds
516 johnm 1.107
517     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
518     hardened-sources-2.6.16-r10.ebuild:
519     marking stable on x86 and amd64
520 solar 1.106
521     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
522     - 2.4.32-r6 stable on x86. RSBAC state unknown
523 kang 1.105
524     *hardened-sources-2.4.32-r7 (10 Jul 2006)
525    
526     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
527     +hardened-sources-2.4.32-r7.ebuild:
528     Bump PaX for RSBAC to test-17
529 johnm 1.104
530     *hardened-sources-2.6.16-r9 (03 Jul 2006)
531    
532     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
533     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
534     hardened-sources-2.6.16 bump to latest -base.
535 solar 1.103
536     *hardened-sources-2.4.32-r6 (30 Jun 2006)
537    
538     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
539     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
540     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
541     sysctl controlable resource logging
542 johnm 1.102
543     *hardened-sources-2.6.16-r7 (05 Jun 2006)
544    
545     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
546     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
547     push new 2.6.16 release in preparation for stable
548 solar 1.101
549     22 May 2006; <solar@gentoo.org> :
550     - redigest bug 134002
551 kang 1.100
552     *hardened-sources-2.4.32-r5 (16 May 2006)
553    
554     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
555     +hardened-sources-2.4.32-r5.ebuild:
556     Fixes rsbac common patching (new patch in new -r5 patchset)
557 solar 1.99
558     *hardened-sources-2.4.32-r4 (13 May 2006)
559    
560     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
561     +hardened-sources-2.4.32-r4.ebuild:
562     - security bumps
563 johnm 1.98
564     *hardened-sources-2.6.16-r6 (03 May 2006)
565    
566     03 May 2006; John Mylchreest <johnm@gentoo.org>
567     +hardened-sources-2.6.16-r6.ebuild:
568     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
569 johnm 1.97
570     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
571     hardened-sources-2.6.14-r8.ebuild:
572     fix x86_64 build problem, this will delay the digest issue again for a short
573     while but it will sort itself out
574 johnm 1.96
575     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
576     hardened-sources-2.6.14-r8.ebuild:
577     bump hardened patchset
578 antarus 1.94
579     27 Apr 2006; Alec Warner <antarus@gentoo.org>
580     files/digest-hardened-sources-2.4.32-r2,
581     files/digest-hardened-sources-2.4.32-r3,
582     files/digest-hardened-sources-2.6.14-r8, Manifest:
583     Fixing duff SHA256 digests: Bug # 131293
584 johnm 1.93
585 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
586    
587     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
588     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
589     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
590     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
591     cleanup of old uneccessary sources
592    
593 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
594     fix digest
595 johnm 1.92
596     *hardened-sources-2.6.14-r8 (20 Apr 2006)
597    
598     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
599     +hardened-sources-2.6.14-r8.ebuild:
600     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
601 johnm 1.91
602     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
603     Turning on gpg-signing again, and recomitting
604 johnm 1.90
605     *hardened-sources-2.6.16-r4 (20 Apr 2006)
606    
607     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
608     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
609     +hardened-sources-2.6.16-r4.ebuild:
610     Fix numerous security vulns
611 solar 1.89
612     *hardened-sources-2.4.32-r3 (16 Apr 2006)
613    
614     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
615     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
616     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
617     - security bump for bug #112791. Removed old ebuilds
618 johnm 1.88
619     *hardened-sources-2.6.16-r3 (15 Apr 2006)
620    
621     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
622     +hardened-sources-2.6.16-r3.ebuild:
623     Removing silly localversion which I missed
624 johnm 1.87
625     *hardened-sources-2.6.14-r7 (14 Apr 2006)
626    
627     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
628     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
629     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
630 johnm 1.86
631     *hardened-sources-2.6.16-r2 (13 Apr 2006)
632    
633     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
634     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
635     +hardened-sources-2.6.16-r2.ebuild:
636     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
637     labels, dropping USERGROUP define fixes, since these were merged mainstream.
638 johnm 1.85
639     *hardened-sources-2.6.16-r1 (11 Apr 2006)
640    
641     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
642     +hardened-sources-2.6.16-r1.ebuild:
643     Bumping to include ppc build fix and 2.6.16.3
644 tsunam 1.84
645     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
646     hardened-sources-2.6.14-r6.ebuild:
647     Stable on x86; bug #127718
648 johnm 1.83
649     *hardened-sources-2.6.16 (31 Mar 2006)
650    
651     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
652     +hardened-sources-2.6.16.ebuild:
653     Bumping to new version of grsec, and kernel base. New squashfs. Based on
654     2.6.16.1
655 cryos 1.82
656     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
657     hardened-sources-2.6.14-r6.ebuild:
658     Stable on amd64, bug 127718.
659 nixnut 1.81
660     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
661     Stable on ppc. Bug #127718
662 johnm 1.80
663     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
664     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
665     -hardened-sources-2.6.14-r4.ebuild:
666     Cleanup.
667 johnm 1.79
668     *hardened-sources-2.6.14-r6 (15 Mar 2006)
669    
670     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
671     +hardened-sources-2.6.14-r6.ebuild:
672     Fixes grsec policy recreation bug and adds a
673     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
674 solar 1.78
675     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
676     - stable on x86
677 hansmi 1.77
678     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
679     hardened-sources-2.6.14-r5.ebuild:
680     Stable on ppc.
681 johnm 1.76
682     *hardened-sources-2.6.14-r5 (01 Feb 2006)
683    
684     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
685     +hardened-sources-2.6.14-r5.ebuild:
686     fixing every known exploit
687 solar 1.75
688     *hardened-sources-2.4.32-r2 (26 Jan 2006)
689    
690     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
691     +hardened-sources-2.4.32-r2.ebuild:
692     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
693 solar 1.74
694     *hardened-sources-2.6.14-r4 (12 Jan 2006)
695    
696     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
697     - version bump for new genpatches which fix up a few sec holes
698 solar 1.73
699     *hardened-sources-2.4.32-r1 (05 Jan 2006)
700    
701     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
702     - revision bump to add misc vital linux kernel security patches.
703 johnm 1.72
704     *hardened-sources-2.6.14-r3 (30 Dec 2005)
705    
706     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
707     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
708     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
709 johnm 1.71
710     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
711     hardened-sources-2.6.14-r2.ebuild:
712     making x86 & amd64 stable following testing.
713 johnm 1.70
714     *hardened-sources-2.6.14-r2 (27 Dec 2005)
715    
716     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
717     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
718     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
719     network hooks.
720 johnm 1.69
721     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
722     hardened-sources-2.6.14-r1.ebuild:
723     bumping to stable early for sec fix on x86 & amd64
724 johnm 1.68
725     *hardened-sources-2.6.14-r1 (05 Dec 2005)
726    
727     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
728     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
729     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
730 solar 1.67
731     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
732     - stable on x86 security bug #114227 CAN-2005-3257
733 kang 1.66
734     *hardened-sources-2.4.32 (19 Nov 2005)
735    
736     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
737     +hardened-sources-2.4.32.ebuild:
738     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
739     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
740     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
741     rsbac >> /etc/portage/package.use)
742 johnm 1.65
743     *hardened-sources-2.6.14 (14 Nov 2005)
744    
745     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
746     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
747     Bumping 2.6 series to 2.6.14.2
748 johnm 1.64
749     *hardened-sources-2.6.13-r2 (20 Oct 2005)
750    
751     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
752     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
753     +hardened-sources-2.6.13-r2.ebuild:
754     Fixes minor build error in ppc.
755 johnm 1.63
756     *hardened-sources-2.6.13-r1 (17 Oct 2005)
757    
758     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
759     +hardened-sources-2.6.13-r1.ebuild:
760     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
761     2.6.13.4, fixes some major amd64 stability problems.
762 johnm 1.62
763     *hardened-sources-2.6.13 (16 Sep 2005)
764    
765     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
766     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
767     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
768     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
769     users should test this thoroughly.
770 solar 1.61
771     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
772     - stable on x86
773 johnm 1.60
774     *hardened-sources-2.6.11-r15 (27 Jun 2005)
775    
776     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
777     +hardened-sources-2.6.11-r15.ebuild:
778     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
779     grsec redefining curr_ip struct.
780 solar 1.59
781     *hardened-sources-2.4.31 (20 Jun 2005)
782    
783     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
784     initial import of 2.4.31 tree
785 johnm 1.58
786     *hardened-sources-2.6.11-r14 (14 Jun 2005)
787    
788     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
789     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
790     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
791     naming scheme to abide by genpatches
792 johnm 1.57
793     *hardened-sources-2.6.11-r13 (18 May 2005)
794    
795     18 May 2005; John Mylchreest <johnm@gentoo.org>
796     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
797     Managed to mangle the Makefile patch from grsec, to miss out the grsec
798     target. sorry about that. Fixes bug #93022
799 johnm 1.56
800     *hardened-sources-2.6.11-r12 (17 May 2005)
801    
802     17 May 2005; John Mylchreest <johnm@gentoo.org>
803     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
804     +hardened-sources-2.6.11-r12.ebuild:
805     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
806     merges in genpatches-base
807 johnm 1.55
808     *hardened-sources-2.6.11-r12 (17 May 2005)
809    
810     17 May 2005; John Mylchreest <johnm@gentoo.org>
811     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
812     +hardened-sources-2.6.11-r12.ebuild:
813     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
814     merges in genpatches-base
815 solar 1.54
816     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
817     -files/2.4.27-cmdline-race.patch,
818     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
819     -files/2.4.28-grsec-binfmt_a.out.patch,
820     -files/2.4.28-grsec-cmdline-race.patch,
821     -files/2.4.28-selinux-binfmt_a.out.patch,
822     -files/2.4.28-selinux-cmdline-race.patch,
823     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
824     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
825     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
826     cleanup..
827 solar 1.53
828     *hardened-sources-2.4.30-r1 (21 Apr 2005)
829    
830     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
831     - disable aout by default
832 solar 1.52
833     *hardened-sources-2.4.30 (18 Apr 2005)
834    
835     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
836     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
837     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
838     use
839 tocharian 1.50
840 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
841    
842     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
843     +hardened-sources-2.4.29.ebuild:
844     New hardened-patches-2.4-29.0 patchball.
845     Removed SELinux support, upgraded GRSecurity to 2.1.4.
846    
847     *hardened-sources-2.4.28-r5 (06 Mar 2005)
848    
849     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
850     +hardened-sources-2.4.28-r5.ebuild:
851     Added a fix for a PaX vulnerability.
852    
853     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
854 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
855     Stable on x86
856 solar 1.49
857     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
858     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
859     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
860     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
861     - fixed/added RDEPEND= in all kernel-2 ebuilds
862 tocharian 1.48
863     *hardened-sources-2.4.28-r4 (21 Jan 2005)
864    
865     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
866     +hardened-sources-2.4.28-r4.ebuild:
867     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
868     backport of neighbour hash updates.
869 tocharian 1.47
870     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
871     hardened-sources-2.4.28-r3.ebuild:
872     Stable on x86
873 tseng 1.46
874     *hardened-sources-2.6.10-r3 (20 Jan 2005)
875    
876     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
877     +hardened-sources-2.6.10-r3.ebuild:
878     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
879     in 2005.0
880 tocharian 1.45
881     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
882     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
883     hardened-sources-2.4.28-r2.ebuild:
884     Mark stable on x86
885 tocharian 1.44
886     *hardened-sources-2.4.28-r3 (17 Jan 2005)
887    
888     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
889     +hardened-sources-2.4.28-r3.ebuild:
890     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
891 tocharian 1.43
892     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
893     hardened-sources-2.4.28.ebuild:
894     Mark stable on x86.
895 tocharian 1.42
896     *hardened-sources-2.4.28-r2 (13 Jan 2005)
897    
898     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
899     +hardened-sources-2.4.28-r2.ebuild:
900     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
901     Mazinger for grsecurity patches as well.
902 plasmaroo 1.41
903     *hardened-sources-2.4.28-r1 (23 Dec 2004)
904    
905     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
906     Security bump. Thank tocharian for rolling a new patchset...
907 solar 1.40
908     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
909     +files/2.4.28-grsec-cmdline-race.patch,
910     +files/2.4.28-selinux-binfmt_a.out.patch,
911     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
912     - Round up remaining security patches that appear to be missing in 2.4.28. -
913     PaX standalone updated to current. hgpv=28.1
914 solar 1.39
915     *hardened-sources-2.4.28 (28 Nov 2004)
916    
917     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
918     security bump. Thank tocharian for rolling a new patchset
919 scox 1.31
920 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
921    
922     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
923     +hardened-sources-2.4.27-r3.ebuild:
924     Applies the new 2.4-27.2 patchball which updates
925     GRSecurity to the 2.0.1 version.
926    
927 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
928    
929     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
930     +hardened-sources-2.4.27-r2.ebuild:
931     Version bump.
932     This version uses the new 2.4-27.1 patchball which updates
933     both the SELinux PaX hooks patch and the SELinux headers.
934    
935 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
936    
937     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
938     +hardened-sources-2.4.27-r1.ebuild,
939     -hardened-sources-2.4.27.ebuild,
940     +files/2.4.27-cmdline-race.patch:
941     Version bump, fix for cmdline race. See bug #59905.
942    
943     *hardened-sources-2.4.26-r6 (09 Aug 2004)
944    
945     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
946     +hardened-sources-2.4.26-r6.ebuild,
947     -hardened-sources-2.4.26-r5.ebuild,
948     -hardened-sources-2.4.26-r4.ebuild,
949     +files/2.4.26-cmdline-race.patch:
950     Version bump, fix for cmdline race. See bug #59905.
951    
952 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
953    
954     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
955     +hardened-sources-2.4.27.ebuild,
956     +files/2.4.27-CAN-2004-0394.patch:
957     Ported the patchball to the 2.4.27 kernel version.
958    
959 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
960    
961     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
962     +hardened-sources-2.4.26-r5.ebuild:
963 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
964 scox 1.34 It adds the following features:
965     - Squashfs
966     - Ebtables
967     - Netdev random (core+drivers)
968     - Watchdog Timer (WDT) fix.
969    
970 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
971    
972     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
973     +hardened-sources-2.4.26-r4.ebuild,
974     +files/2.4.26-CAN-2004-0415.patch,
975     -hardened-sources-2.4.26-3:
976     Version bump, fix for CAN 0415, see bug #59378.
977    
978 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
979    
980     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
981     +hardened-sources-2.4.26-r3.ebuild,
982     +files/2.4.26-CAN-2004-0497.patch,
983     -hardened-sources-2.4.26-r2.ebuild:
984     Version bump, fixed CAN 0497, see bug #56171.
985    
986 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
987    
988     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
989 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
990 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
991     +files/2.4.26-CAN-2004-0535.patch,
992     -hardened-sources-2.4.26-r1.ebuild:
993     Fixes for both CAN 0495 and 0535, see bug #54976
994 pvdabeel 1.27
995 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
996     hardened-sources-2.4.26-r1.ebuild:
997     QA - fix use invocation
998 scox 1.28
999     *hardened-sources-2.4.26-r1 (22 June 2004)
1000    
1001     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1002     +hardened-sources-2.4.26-r1.ebuild,
1003     +files/2.4.26-CAN-2004-0394.patch,
1004     +files/2.4.26-signal-race.patch,
1005     -hardened-sources-2.4.26.ebuild,
1006     -hardened-sources-2.4.24-r3.ebuild:
1007     Version bump for the CAN-2004-0394 issue and bug #53804
1008     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1009    
1010    
1011 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1012     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1013     Masked hardened-sources-2.4.26.ebuild broken for ppc
1014    
1015     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1016     hardened-sources-2.4.24-r3.ebuild:
1017     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1018 plasmaroo 1.25
1019 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1020    
1021     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1022     +hardened-sources-2.4.26.ebuild:
1023     Updated hardened-sources for the 2.4.26 kernel
1024     Removed broken components, updated almost everything.
1025    
1026 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1027    
1028     17 Apr 2004; <plasmaroo@gentoo.org>
1029     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1030     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1031     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1032     +hardened-sources-2.4.24-r3.ebuild:
1033     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1034     vulnerabilities. Old revisions removed.
1035 plasmaroo 1.24
1036     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1037    
1038     15 Apr 2004; <plasmaroo@gentoo.org>
1039     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1040     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1041     Version bump for the CAN-2004-0109 issue; bug #47881.
1042 aliz 1.23
1043     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1044     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1045     Add eutils to inherit.
1046 plasmaroo 1.22
1047     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1048    
1049     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1050     files/hardened-sources-2.4.24.munmap.patch:
1051     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1052 scox 1.19
1053 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1054 scox 1.26
1055 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1056     hardened-sources-2.4.24.ebuild:
1057     Version bump, updated most of the components.
1058     This release includes the following:
1059    
1060     - Hardened security
1061     - Netfilter patch-o-matic 20031219
1062     - FreeSWAN 2.04 & x509 1.4.8
1063     - EVMS 2.2.2
1064     - XFS 1.3.1
1065     - cryptoloop jari
1066     - grsecurity 2.0-rc4
1067     - SELinux
1068     - PaX 200402060000
1069     - PaX Obscurity 200308302223
1070     - Others...
1071    
1072     Neither -ck nor systrace are included anymore.
1073    
1074 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1075    
1076     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1077     hardened-sources-2.4.22-r2.ebuild:
1078 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1079 scox 1.19
1080     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1081 iggy 1.17
1082     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1083 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1084 iggy 1.16
1085     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1086 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1087     Version bump for the 'do_brk' vulnerability.
1088 iggy 1.15
1089     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1090     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1091     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1092     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1093 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1094 frogger 1.14
1095     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1096     hardened-sources-2.4.22.ebuild:
1097 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1098     components. These are no longer handled in the kernel
1099     so this code was not necessary.
1100 frogger 1.13
1101     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1102     New 2.4.22 based hardened-sources thanks to
1103     Phil West <p.west@computer.org>.
1104    
1105     These sources include:
1106 plasmaroo 1.18 - New SELinux API
1107     - Updated CK-base
1108     - Updated GRSec
1109     - Systrace
1110     - SuperFreeS/WAN 1.99.8
1111     - Propolice kernel build support
1112     - EVMS
1113     - Other various security related patches
1114 frogger 1.11
1115 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1116    
1117     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1118     Updated hardened-sources based on the 2.4.21 Linux kernel.
1119     This includes updates to most major components such as:
1120 plasmaroo 1.18 - ck-base-0306300059
1121     - selinux-2.4-2003071106
1122     - grsecurity-2.0-rc1
1123     - Updated IPTables patch-o-matic
1124     - Updated SuperFreeS/WAN
1125    
1126 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1127     updated patch set ready for the 2.4.21 based kernel.
1128    
1129 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1130     Initial import of hardened-sources-2.4.20-r4. This revision
1131     includes only a few changes, but one of these is an important
1132     security fix. It is recommended all users of hardened-sources
1133     upgrade to this release.
1134 plasmaroo 1.18
1135 frogger 1.11 - ioperm bug fix
1136     - fixed compilation failure when building without GRSec
1137 plasmaroo 1.18
1138 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1139     due to time constraints, but is planned for inclusion in the near
1140     future.
1141 msterret 1.10
1142     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1143    
1144     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1145     hardened-sources-2.4.20-r3.ebuild:
1146 plasmaroo 1.18 Add Header...
1147 frogger 1.9
1148     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1149     hardened-sources-2.4.20-r3.ebuild:
1150     Removed warnings from ebuild. This kernel should be safe to
1151     use at this point.
1152 frogger 1.8
1153     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1154    
1155     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1156     hardened-sources-2.4.20-r3.ebuild:
1157     New revision. Includes the following changes over -r2:
1158 plasmaroo 1.18
1159 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1160     - Super FreeS/WAN 1.99.7rc2
1161     - PaX for the LSM/SELinux branch
1162     - GRSecurity 2.0-pre4 (role based access control)
1163     - Systrace 1.3
1164     - EXT3 fixes
1165     - EVMS 2.0.1
1166     - GCC 3.1+ compile optimizations
1167     - ProPolice kernel build support
1168     - Hashing table security fixes
1169 frogger 1.3
1170     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1171 frogger 1.7
1172     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1173     Initial import of hardened-sources-r2. This new
1174     ebuild includes many new performance and security
1175     related patches. As in -r1, it will patch in
1176     LSM/SELinux if "selinux" is in USE, otherwise it
1177     will patch in GRSecurity. The following patches
1178     are included in this revision:
1179 plasmaroo 1.18
1180 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1181     (pulled from the base CK patch)
1182     - ptrace exploit patch for the LSM kernel
1183     (the GRSec patch already fixes this)
1184     - LSM 2.4-2003040709
1185     - SELinux 2.4-2003040709
1186     - Systrace v1.2
1187     - IPTables patch-o-matic base patches - 20030107
1188     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1189     - Super FreeS/WAN 1.99.6.1
1190     - GRSecurity 1.9.9g
1191     - MPPE
1192     - EXT3 data journal fix
1193     - CIPE 1.5.4
1194 frogger 1.6
1195     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1196     hardened-sources-2.4.20-r1.ebuild, manifest:
1197 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1198 frogger 1.5
1199     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1200     hardened-sources-2.4.20-r1.ebuild:
1201     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1202     is patched in instead. Ptrace patches for selinux have also been added. In
1203     either case, systrace support will be patched in as well.
1204 frogger 1.3
1205     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1206     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1207 plasmaroo 1.18 Revision bump for new sources.
1208 frogger 1.4
1209 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1210 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1211 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1212 method 1.1
1213 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1214    
1215 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1216     hardened-sources-2.4.20.ebuild:
1217 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20