/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.202 - (hide annotations) (download)
Mon Dec 24 13:09:01 2007 UTC (6 years, 7 months ago) by phreak
Branch: MAIN
Changes since 1.201: +7 -1 lines
Cleaning out some unused, old versions.
(Portage version: 2.1.3.19)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 opfer 1.130 # Copyright 2000-2007 Gentoo Foundation; Distributed under the GPL v2
3 phreak 1.202 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.201 2007/12/24 11:52:00 phreak Exp $
4    
5     24 Dec 2007; Christian Heim <phreak@gentoo.org>
6     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
7     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
8     -hardened-sources-2.6.23-r3.ebuild:
9     Cleaning out some unused, old versions.
10 phreak 1.201
11     24 Dec 2007; Christian Heim <phreak@gentoo.org>
12     hardened-sources-2.6.23-r4.ebuild:
13     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
14     in the tree for long, but there isn't much of a difference between this and
15     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
16 phreak 1.200
17     *hardened-sources-2.6.23-r4 (23 Dec 2007)
18    
19     23 Dec 2007; Christian Heim <phreak@gentoo.org>
20     +hardened-sources-2.6.23-r4.ebuild:
21     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
22 phreak 1.199
23     *hardened-sources-2.6.23-r3 (04 Dec 2007)
24    
25     04 Dec 2007; Christian Heim <phreak@gentoo.org>
26     +hardened-sources-2.6.23-r3.ebuild:
27     Revision bump, pulling in 2.6.23.9.
28 phreak 1.198
29     *hardened-sources-2.6.23-r2 (25 Nov 2007)
30    
31     25 Nov 2007; Christian Heim <phreak@gentoo.org>
32     +hardened-sources-2.6.23-r2.ebuild:
33     Updated patchset, thanks to solar.
34 phreak 1.197
35     *hardened-sources-2.6.23-r1 (31 Oct 2007)
36    
37     31 Oct 2007; Christian Heim <phreak@gentoo.org>
38     +hardened-sources-2.6.23-r1.ebuild:
39     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
40 solar 1.196
41     29 Oct 2007; <solar@gentoo.org> metadata.xml:
42     - update metadata.xml
43 phreak 1.195
44     25 Oct 2007; Christian Heim <phreak@gentoo.org>
45     hardened-sources-2.6.22-r8.ebuild:
46     Marking 2.6.22-r8 stable on amd64 and x86.
47 phreak 1.194
48     21 Oct 2007; Christian Heim <phreak@gentoo.org>
49     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
50     -hardened-sources-2.6.21-r4.ebuild:
51     Removing old ebuilds.
52 phreak 1.193
53     *hardened-sources-2.4.35-r2 (21 Oct 2007)
54    
55     21 Oct 2007; Christian Heim <phreak@gentoo.org>
56     +hardened-sources-2.4.35-r2.ebuild:
57     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
58     patches.
59 phreak 1.192
60     *hardened-sources-2.6.22-r8 (21 Oct 2007)
61    
62     21 Oct 2007; Christian Heim <phreak@gentoo.org>
63     +hardened-sources-2.6.22-r8.ebuild:
64     Yet another new patch, hopefully fixing the remaining issues we had w/
65     2.6.22. Candidate for stabling.
66 phreak 1.191
67     *hardened-sources-2.6.23 (13 Oct 2007)
68    
69     13 Oct 2007; Christian Heim <phreak@gentoo.org>
70     +hardened-sources-2.6.23.ebuild:
71     Initial hardened-sources-2.6.23. If people still have problems w/ bug
72     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
73 phreak 1.190
74     11 Oct 2007; Christian Heim <phreak@gentoo.org>
75     hardened-sources-2.6.20-r10.ebuild:
76     Pulling in yet another new genpatches version, fixing the PWC bug for real.
77 phreak 1.189
78     04 Oct 2007; Christian Heim <phreak@gentoo.org>
79     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
80     Removing old versions.
81 phreak 1.188
82     *hardened-sources-2.6.22-r7 (01 Oct 2007)
83    
84     01 Oct 2007; Christian Heim <phreak@gentoo.org>
85     +hardened-sources-2.6.22-r7.ebuild:
86     Revision bump, pulling in a newer patch. Should fix #194276.
87 phreak 1.187
88     30 Sep 2007; Christian Heim <phreak@gentoo.org>
89     hardened-sources-2.6.20-r10.ebuild:
90     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
91     Mike Doty).
92 phreak 1.186
93     *hardened-sources-2.6.22-r6 (26 Sep 2007)
94    
95     26 Sep 2007; Christian Heim <phreak@gentoo.org>
96     +hardened-sources-2.6.22-r6.ebuild:
97     Revision bump, grabbing up till Linux 2.6.22.9.
98 phreak 1.185
99     24 Sep 2007; Christian Heim <phreak@gentoo.org>
100     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
101     Cleaning up further.
102 phreak 1.184
103     *hardened-sources-2.6.20-r10 (24 Sep 2007)
104    
105     24 Sep 2007; Christian Heim <phreak@gentoo.org>
106     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
107     +hardened-sources-2.6.20-r10.ebuild:
108     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
109     revisions.
110 phreak 1.183
111     *hardened-sources-2.6.22-r5 (22 Sep 2007)
112    
113     22 Sep 2007; Christian Heim <phreak@gentoo.org>
114     +hardened-sources-2.6.22-r5.ebuild:
115     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
116 phreak 1.182
117     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
118     Removing johnm from metadata.xml (see #186467 for reference).
119 phreak 1.181
120     *hardened-sources-2.6.22-r4 (17 Sep 2007)
121    
122     17 Sep 2007; Christian Heim <phreak@gentoo.org>
123     +hardened-sources-2.6.22-r4.ebuild:
124     Revision bump, hopefully fixing all those weird PAX failures.
125 phreak 1.180
126     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
127     Updating the metadata.xml.
128 phreak 1.179
129     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
130     Removing tocharian from metadata due to his retirement (see #71718 for
131     reference).
132 phreak 1.178
133     *hardened-sources-2.6.20-r9 (30 Aug 2007)
134    
135     30 Aug 2007; Christian Heim <phreak@gentoo.org>
136     +hardened-sources-2.6.20-r9.ebuild:
137     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
138 phreak 1.177
139     29 Aug 2007; Christian Heim <phreak@gentoo.org>
140     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
141     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
142     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
143     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
144     -hardened-sources-2.6.22-r2.ebuild:
145     Removing some redundant versions.
146 phreak 1.176
147     *hardened-sources-2.4.35-r1 (29 Aug 2007)
148    
149     29 Aug 2007; Christian Heim <phreak@gentoo.org>
150     +hardened-sources-2.4.35-r1.ebuild:
151     Revision bump, new grsecurity patch.
152 phreak 1.175
153     *hardened-sources-2.6.20-r8 (26 Aug 2007)
154    
155     26 Aug 2007; Christian Heim <phreak@gentoo.org>
156     +hardened-sources-2.6.20-r8.ebuild:
157     Revision bump for Linux 2.6.20.17.
158 phreak 1.174
159     *hardened-sources-2.6.22-r3 (22 Aug 2007)
160    
161     22 Aug 2007; Christian Heim <phreak@gentoo.org>
162     +hardened-sources-2.6.22-r3.ebuild:
163     Revision bump for Linux 2.6.22.4.
164 phreak 1.173
165     16 Aug 2007; Christian Heim <phreak@gentoo.org>
166     hardened-sources-2.6.22-r2.ebuild:
167     Updated patchset, to fix the alignment against 2.6.22.3.
168 phreak 1.172
169     *hardened-sources-2.6.22-r2 (16 Aug 2007)
170    
171     16 Aug 2007; Christian Heim <phreak@gentoo.org>
172     +hardened-sources-2.6.22-r2.ebuild:
173     Revision bump for Linux 2.6.22.3.
174 phreak 1.171
175     *hardened-sources-2.4.35 (16 Aug 2007)
176    
177     16 Aug 2007; Christian Heim <phreak@gentoo.org>
178     +hardened-sources-2.4.35.ebuild:
179     Version bump, initial version for Linux 2.4.35.
180 phreak 1.170
181     *hardened-sources-2.6.21-r4 (16 Aug 2007)
182    
183     16 Aug 2007; Christian Heim <phreak@gentoo.org>
184     +hardened-sources-2.6.21-r4.ebuild:
185     Revision bump for Linux 2.6.21.6.
186 phreak 1.169
187     *hardened-sources-2.6.20-r7 (16 Aug 2007)
188    
189     16 Aug 2007; Christian Heim <phreak@gentoo.org>
190     +hardened-sources-2.6.20-r7.ebuild:
191     Revision bump for Linux 2.6.20.16.
192 phreak 1.168
193     *hardened-sources-2.6.22-r1 (13 Aug 2007)
194    
195     13 Aug 2007; Christian Heim <phreak@gentoo.org>
196     +hardened-sources-2.6.22-r1.ebuild:
197     Yet another revision bump.
198 phreak 1.167
199     *hardened-sources-2.6.22 (10 Aug 2007)
200    
201     10 Aug 2007; Christian Heim <phreak@gentoo.org>
202     +hardened-sources-2.6.22.ebuild:
203     Initial release for 2.6.22. If you are using hardened-sources on a desktop
204     machine (P4 or newer), be aware you might need to disable
205     CONFIG_PAX_PAGEEXEC.
206 phreak 1.166
207     04 Aug 2007; Christian Heim <phreak@gentoo.org>
208     hardened-sources-2.6.20-r6.ebuild:
209     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
210     2.6.20.15.
211 phreak 1.165
212     10 Jul 2007; Christian Heim <phreak@gentoo.org>
213     hardened-sources-2.6.20-r5.ebuild:
214     Marking hardened-sources-2.6.20-r5 stable on ppc.
215 phreak 1.164
216     10 Jul 2007; Christian Heim <phreak@gentoo.org>
217     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
218     Cleanup.
219 phreak 1.163
220     *hardened-sources-2.6.20-r6 (08 Jul 2007)
221    
222     08 Jul 2007; Christian Heim <phreak@gentoo.org>
223     +hardened-sources-2.6.20-r6.ebuild:
224     Revision bump, grabbing yet another stable release.
225 phreak 1.162
226     17 Jun 2007; Christian Heim <phreak@gentoo.org>
227     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
228     -hardened-sources-2.6.21-r2.ebuild:
229     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
230     alpha stable KEYWORD by mistake.
231 phreak 1.161
232     17 Jun 2007; Christian Heim <phreak@gentoo.org>
233     hardened-sources-2.6.20-r5.ebuild:
234     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
235     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
236 phreak 1.160
237     *hardened-sources-2.6.21-r3 (12 Jun 2007)
238    
239     12 Jun 2007; Christian Heim <phreak@gentoo.org>
240     +hardened-sources-2.6.21-r3.ebuild:
241     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
242     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
243     love.
244 phreak 1.159
245     *hardened-sources-2.6.20-r5 (11 Jun 2007)
246    
247     11 Jun 2007; Christian Heim <phreak@gentoo.org>
248     +hardened-sources-2.6.20-r5.ebuild:
249     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
250     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
251     love.
252 pappy 1.158
253     *hardened-sources-2.4.34.5 (11 Jun 2007)
254    
255     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
256     +hardened-sources-2.4.34.5.ebuild:
257     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
258 phreak 1.157
259     30 May 2007; Christian Heim <phreak@gentoo.org>
260     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
261     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
262     stale ebuild(s).
263 phreak 1.156
264     30 May 2007; Christian Heim <phreak@gentoo.org>
265     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
266     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
267     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
268     Doing some cleanups, remove stale ebuilds.
269 phreak 1.155
270     26 May 2007; Christian Heim <phreak@gentoo.org>
271     hardened-sources-2.6.21-r2.ebuild:
272     Fixing the grsecurity patch, had one '};' too much.
273 phreak 1.154
274     *hardened-sources-2.6.21-r2 (26 May 2007)
275    
276     26 May 2007; Christian Heim <phreak@gentoo.org>
277     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
278     +hardened-sources-2.6.21-r2.ebuild:
279     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
280     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
281 phreak 1.153
282     *hardened-sources-2.6.20-r4 (26 May 2007)
283    
284     26 May 2007; Christian Heim <phreak@gentoo.org>
285     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
286     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
287 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
288 phreak 1.152
289     15 May 2007; Christian Heim <phreak@gentoo.org>
290     hardened-sources-2.6.20-r3.ebuild:
291     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
292     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
293     grsecurity patch fail in that exact same hunk.
294 phreak 1.151
295     *hardened-sources-2.6.20-r3 (15 May 2007)
296    
297     15 May 2007; Christian Heim <phreak@gentoo.org>
298     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
299     Revision bump, incorporating Linux 2.6.20.11.
300    
301     *hardened-sources-2.6.21-r1 (11 May 2007)
302    
303     11 May 2007; Christian Heim <phreak@gentoo.org>
304     +hardened-sources-2.6.21-r1.ebuild:
305     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
306     mentioned in #177234.
307 kevquinn 1.150
308     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
309     files/digest-hardened-sources-2.6.21, Manifest:
310     Fix Manifest/digest for linux-2.6.21.tar.bz2
311 phreak 1.149
312     06 May 2007; Christian Heim <phreak@gentoo.org>
313     hardened-sources-2.6.21.ebuild:
314     Bumping the hardened-patches version, needed for the fix for #177234.
315 phreak 1.148
316     *hardened-sources-2.6.21 (02 May 2007)
317    
318     02 May 2007; Christian Heim <phreak@gentoo.org>
319     +hardened-sources-2.6.21.ebuild:
320     Version bump, Linux 2.6.21-hardened.
321 phreak 1.147
322     29 Apr 2007; Christian Heim <phreak@gentoo.org>
323     hardened-sources-2.6.20-r2.ebuild:
324     Adding ~ia64 on Ned's request.
325 phreak 1.146
326     29 Apr 2007; Christian Heim <phreak@gentoo.org>
327     hardened-sources-2.6.20-r2.ebuild:
328     Fixing the included grsecurity patch, wasn't alligning due to the Index:
329     header line(s).
330 phreak 1.145
331     29 Apr 2007; Christian Heim <phreak@gentoo.org>
332     hardened-sources-2.6.20-r2.ebuild:
333     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
334 armin76 1.144
335     *hardened-sources-2.6.20-r2 (10 Apr 2007)
336    
337     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
338     +hardened-sources-2.6.20-r2.ebuild:
339     Version bump, on behalf of phreak
340 phreak 1.143
341     *hardened-sources-2.6.20-r1 (04 Apr 2007)
342    
343     04 Apr 2007; Christian Heim <phreak@gentoo.org>
344     +hardened-sources-2.6.20-r1.ebuild:
345     Revision bump, grabbing a newer grsecurity snapshot.
346 phreak 1.142
347     *hardened-sources-2.6.20 (25 Mar 2007)
348    
349     25 Mar 2007; Christian Heim <phreak@gentoo.org>
350     +hardened-sources-2.6.20.ebuild:
351     Finally a hardened-sources version for 2.6.20; many people have been waiting
352     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
353     testbox.
354 chainsaw 1.141
355     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
356     hardened-sources-2.6.18-r6.ebuild:
357     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
358 phreak 1.140
359     *hardened-sources-2.6.18-r6 (16 Mar 2007)
360    
361     16 Mar 2007; Christian Heim <phreak@gentoo.org>
362     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
363     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
364     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
365     supposed to be.
366 phreak 1.139
367     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
368     Fixing the Manifest, the previous one was broken (as in still had the
369     deleted ebuild in it).
370 phreak 1.138
371     06 Mar 2007; Christian Heim <phreak@gentoo.org>
372     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
373     +hardened-sources-2.6.18-r5.ebuild:
374     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
375     Linux 2.6.18.8. Also cleaning up the older version.
376    
377     *hardened-sources-2.6.18-r5 (06 Mar 2007)
378    
379     06 Mar 2007; Christian Heim <phreak@gentoo.org>
380     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
381     +hardened-sources-2.6.18-r5.ebuild:
382     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
383     Linux 2.6.18.8. Also cleaning up the older version.
384 phreak 1.137
385     24 Feb 2007; Christian Heim <phreak@gentoo.org>
386     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
387     -hardened-sources-2.6.19-r5.ebuild:
388     Removing some of the old version, that didn't work.
389 phreak 1.136
390     *hardened-sources-2.6.19-r6 (12 Feb 2007)
391    
392     12 Feb 2007; Christian Heim <phreak@gentoo.org>
393     +hardened-sources-2.6.19-r6.ebuild:
394     Revision bump, including a new grsec version fixing #166235.
395 pappy 1.134
396     *hardened-sources-2.4.34 (24 Jan 2007)
397    
398     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
399 pappy 1.135 Manifest:
400     updating Manifest with checksums of new tarball and ebuild
401    
402     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
403 pappy 1.134 +hardened-sources-2.4.34.ebuild:
404     I added new hardened sources 2.4 update, this is a critical path
405     security bugfix - all users of h-s are strongly advised
406     to update their existing hardened sources to this version.
407     It contains a fix for a kernel vulnerability that is pertaining
408     to the PaX changes to virtual memory management, possibly leading
409     to a local kernel exploit ... see grsecurity.net forums and homepage
410 phreak 1.133
411     23 Jan 2007; Christian Heim <phreak@gentoo.org>
412     files/digest-hardened-sources-2.6.19-r5, Manifest:
413     Fixing the patch-tarball digest.
414 phreak 1.132
415     *hardened-sources-2.6.19-r5 (23 Jan 2007)
416    
417     23 Jan 2007; Christian Heim <phreak@gentoo.org>
418     +hardened-sources-2.6.19-r5.ebuild:
419     Revision bump, closing the recently discovered PaX expand_stack()
420     vulnerability.
421 phreak 1.131
422     *hardened-sources-2.6.19-r4 (14 Jan 2007)
423    
424     14 Jan 2007; Christian Heim <phreak@gentoo.org>
425     +hardened-sources-2.6.19-r4.ebuild:
426     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
427     dropping the randomized PID feature.
428 opfer 1.130
429     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
430     hardened-sources-2.4.33.4.ebuild:
431     stable x86, bug #161171
432 phreak 1.129
433     *hardened-sources-2.6.19-r3 (27 Dec 2006)
434    
435     27 Dec 2006; Christian Heim <phreak@gentoo.org>
436     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
437     Revision bump for bug #157186 and #158786.
438 phreak 1.128
439     *hardened-sources-2.6.18-r4 (27 Dec 2006)
440    
441     27 Dec 2006; Christian Heim <phreak@gentoo.org>
442     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
443     Revision bump for bug #157186.
444 phreak 1.127
445     *hardened-sources-2.6.19-r2 (23 Dec 2006)
446    
447     23 Dec 2006; Christian Heim <phreak@gentoo.org>
448     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
449     Revision bump to pull in genpatches-2.6.19-3 for #157186.
450 phreak 1.126
451     17 Dec 2006; Christian Heim <phreak@gentoo.org>
452     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
453     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
454     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
455     hardened-sources-2.6.19-r1.ebuild:
456     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
457     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
458 pappy 1.125
459     *hardened-sources-2.4.33.4 (17 Dec 2006)
460    
461     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
462     +hardened-sources-2.4.33.4.ebuild:
463     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
464     and quilting
465 phreak 1.124
466     *hardened-sources-2.6.19-r1 (14 Dec 2006)
467    
468     14 Dec 2006; Christian Heim <phreak@gentoo.org>
469     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
470     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
471     for reporting).
472 phreak 1.123
473     *hardened-sources-2.6.19 (13 Dec 2006)
474    
475     13 Dec 2006; Christian Heim <phreak@gentoo.org>
476     +hardened-sources-2.6.19.ebuild:
477     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
478     Brad for providing that prompt update.
479 phreak 1.122
480     *hardened-sources-2.6.18-r3 (13 Dec 2006)
481    
482     13 Dec 2006; Christian Heim <phreak@gentoo.org>
483     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
484     +hardened-sources-2.6.18-r3.ebuild:
485     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
486     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
487 phreak 1.121
488     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
489     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
490 nixnut 1.120
491     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
492     Stable on ppc wrt bug 157356
493 opfer 1.119
494     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
495     hardened-sources-2.6.18.ebuild:
496     stable x86, bug #157356
497 phreak 1.118
498     *hardened-sources-2.6.18-r2 (06 Dec 2006)
499    
500     06 Dec 2006; Christian Heim <phreak@gentoo.org>
501     +hardened-sources-2.6.18-r2.ebuild:
502     Revision bump, including 2.6.18.5 (via genpatches) and
503     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
504     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
505     redesign.
506 phreak 1.117
507     06 Dec 2006; Christian Heim <phreak@gentoo.org>
508     hardened-sources-2.6.18.ebuild:
509     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
510     of Mike Doty).
511 phreak 1.116
512     *hardened-sources-2.6.18-r1 (23 Nov 2006)
513    
514     23 Nov 2006; Christian Heim <phreak@gentoo.org>
515     +hardened-sources-2.6.18-r1.ebuild:
516     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
517 phreak 1.115
518     *hardened-sources-2.6.18 (11 Nov 2006)
519    
520     11 Nov 2006; Christian Heim <phreak@gentoo.org>
521     +hardened-sources-2.6.18.ebuild:
522     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
523 solar 1.114
524     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
525     - mark amd64 stable also. bug #151877
526 solar 1.113
527     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
528     - mark 2.6.17-r1 stable
529 phreak 1.112
530     27 Aug 2006; Christian Heim <phreak@gentoo.org>
531     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
532     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
533 phreak 1.111
534     *hardened-sources-2.6.17-r1 (26 Aug 2006)
535    
536     26 Aug 2006; Christian Heim <phreak@gentoo.org>
537     +hardened-sources-2.6.17-r1.ebuild:
538     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
539     grsecurity patch.
540 phreak 1.110
541     *hardened-sources-2.6.17 (17 Aug 2006)
542    
543     17 Aug 2006; Christian Heim <phreak@gentoo.org>
544     +hardened-sources-2.6.17.ebuild:
545     Bumping the hardened-sources-2.6 series to 2.6.17, using
546     genpatches-2.6.17-6.base.
547 solar 1.109
548     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
549     - stable on x86 and amd64
550 solar 1.108
551     *hardened-sources-2.6.16-r11 (15 Jul 2006)
552    
553     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
554     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
555     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
556     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
557     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
558     crusty ebuilds
559 johnm 1.107
560     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
561     hardened-sources-2.6.16-r10.ebuild:
562     marking stable on x86 and amd64
563 solar 1.106
564     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
565     - 2.4.32-r6 stable on x86. RSBAC state unknown
566 kang 1.105
567     *hardened-sources-2.4.32-r7 (10 Jul 2006)
568    
569     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
570     +hardened-sources-2.4.32-r7.ebuild:
571     Bump PaX for RSBAC to test-17
572 johnm 1.104
573     *hardened-sources-2.6.16-r9 (03 Jul 2006)
574    
575     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
576     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
577     hardened-sources-2.6.16 bump to latest -base.
578 solar 1.103
579     *hardened-sources-2.4.32-r6 (30 Jun 2006)
580    
581     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
582     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
583     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
584     sysctl controlable resource logging
585 johnm 1.102
586     *hardened-sources-2.6.16-r7 (05 Jun 2006)
587    
588     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
589     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
590     push new 2.6.16 release in preparation for stable
591 solar 1.101
592     22 May 2006; <solar@gentoo.org> :
593     - redigest bug 134002
594 kang 1.100
595     *hardened-sources-2.4.32-r5 (16 May 2006)
596    
597     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
598     +hardened-sources-2.4.32-r5.ebuild:
599     Fixes rsbac common patching (new patch in new -r5 patchset)
600 solar 1.99
601     *hardened-sources-2.4.32-r4 (13 May 2006)
602    
603     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
604     +hardened-sources-2.4.32-r4.ebuild:
605     - security bumps
606 johnm 1.98
607     *hardened-sources-2.6.16-r6 (03 May 2006)
608    
609     03 May 2006; John Mylchreest <johnm@gentoo.org>
610     +hardened-sources-2.6.16-r6.ebuild:
611     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
612 johnm 1.97
613     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
614     hardened-sources-2.6.14-r8.ebuild:
615     fix x86_64 build problem, this will delay the digest issue again for a short
616     while but it will sort itself out
617 johnm 1.96
618     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
619     hardened-sources-2.6.14-r8.ebuild:
620     bump hardened patchset
621 antarus 1.94
622     27 Apr 2006; Alec Warner <antarus@gentoo.org>
623     files/digest-hardened-sources-2.4.32-r2,
624     files/digest-hardened-sources-2.4.32-r3,
625     files/digest-hardened-sources-2.6.14-r8, Manifest:
626     Fixing duff SHA256 digests: Bug # 131293
627 johnm 1.93
628 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
629    
630     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
631     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
632     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
633     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
634     cleanup of old uneccessary sources
635    
636 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
637     fix digest
638 johnm 1.92
639     *hardened-sources-2.6.14-r8 (20 Apr 2006)
640    
641     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
642     +hardened-sources-2.6.14-r8.ebuild:
643     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
644 johnm 1.91
645     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
646     Turning on gpg-signing again, and recomitting
647 johnm 1.90
648     *hardened-sources-2.6.16-r4 (20 Apr 2006)
649    
650     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
651     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
652     +hardened-sources-2.6.16-r4.ebuild:
653     Fix numerous security vulns
654 solar 1.89
655     *hardened-sources-2.4.32-r3 (16 Apr 2006)
656    
657     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
658     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
659     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
660     - security bump for bug #112791. Removed old ebuilds
661 johnm 1.88
662     *hardened-sources-2.6.16-r3 (15 Apr 2006)
663    
664     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
665     +hardened-sources-2.6.16-r3.ebuild:
666     Removing silly localversion which I missed
667 johnm 1.87
668     *hardened-sources-2.6.14-r7 (14 Apr 2006)
669    
670     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
671     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
672     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
673 johnm 1.86
674     *hardened-sources-2.6.16-r2 (13 Apr 2006)
675    
676     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
677     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
678     +hardened-sources-2.6.16-r2.ebuild:
679     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
680     labels, dropping USERGROUP define fixes, since these were merged mainstream.
681 johnm 1.85
682     *hardened-sources-2.6.16-r1 (11 Apr 2006)
683    
684     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
685     +hardened-sources-2.6.16-r1.ebuild:
686     Bumping to include ppc build fix and 2.6.16.3
687 tsunam 1.84
688     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
689     hardened-sources-2.6.14-r6.ebuild:
690     Stable on x86; bug #127718
691 johnm 1.83
692     *hardened-sources-2.6.16 (31 Mar 2006)
693    
694     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
695     +hardened-sources-2.6.16.ebuild:
696     Bumping to new version of grsec, and kernel base. New squashfs. Based on
697     2.6.16.1
698 cryos 1.82
699     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
700     hardened-sources-2.6.14-r6.ebuild:
701     Stable on amd64, bug 127718.
702 nixnut 1.81
703     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
704     Stable on ppc. Bug #127718
705 johnm 1.80
706     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
707     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
708     -hardened-sources-2.6.14-r4.ebuild:
709     Cleanup.
710 johnm 1.79
711     *hardened-sources-2.6.14-r6 (15 Mar 2006)
712    
713     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
714     +hardened-sources-2.6.14-r6.ebuild:
715     Fixes grsec policy recreation bug and adds a
716     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
717 solar 1.78
718     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
719     - stable on x86
720 hansmi 1.77
721     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
722     hardened-sources-2.6.14-r5.ebuild:
723     Stable on ppc.
724 johnm 1.76
725     *hardened-sources-2.6.14-r5 (01 Feb 2006)
726    
727     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
728     +hardened-sources-2.6.14-r5.ebuild:
729     fixing every known exploit
730 solar 1.75
731     *hardened-sources-2.4.32-r2 (26 Jan 2006)
732    
733     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
734     +hardened-sources-2.4.32-r2.ebuild:
735     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
736 solar 1.74
737     *hardened-sources-2.6.14-r4 (12 Jan 2006)
738    
739     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
740     - version bump for new genpatches which fix up a few sec holes
741 solar 1.73
742     *hardened-sources-2.4.32-r1 (05 Jan 2006)
743    
744     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
745     - revision bump to add misc vital linux kernel security patches.
746 johnm 1.72
747     *hardened-sources-2.6.14-r3 (30 Dec 2005)
748    
749     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
750     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
751     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
752 johnm 1.71
753     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
754     hardened-sources-2.6.14-r2.ebuild:
755     making x86 & amd64 stable following testing.
756 johnm 1.70
757     *hardened-sources-2.6.14-r2 (27 Dec 2005)
758    
759     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
760     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
761     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
762     network hooks.
763 johnm 1.69
764     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
765     hardened-sources-2.6.14-r1.ebuild:
766     bumping to stable early for sec fix on x86 & amd64
767 johnm 1.68
768     *hardened-sources-2.6.14-r1 (05 Dec 2005)
769    
770     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
771     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
772     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
773 solar 1.67
774     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
775     - stable on x86 security bug #114227 CAN-2005-3257
776 kang 1.66
777     *hardened-sources-2.4.32 (19 Nov 2005)
778    
779     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
780     +hardened-sources-2.4.32.ebuild:
781     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
782     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
783     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
784     rsbac >> /etc/portage/package.use)
785 johnm 1.65
786     *hardened-sources-2.6.14 (14 Nov 2005)
787    
788     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
789     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
790     Bumping 2.6 series to 2.6.14.2
791 johnm 1.64
792     *hardened-sources-2.6.13-r2 (20 Oct 2005)
793    
794     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
795     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
796     +hardened-sources-2.6.13-r2.ebuild:
797     Fixes minor build error in ppc.
798 johnm 1.63
799     *hardened-sources-2.6.13-r1 (17 Oct 2005)
800    
801     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
802     +hardened-sources-2.6.13-r1.ebuild:
803     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
804     2.6.13.4, fixes some major amd64 stability problems.
805 johnm 1.62
806     *hardened-sources-2.6.13 (16 Sep 2005)
807    
808     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
809     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
810     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
811     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
812     users should test this thoroughly.
813 solar 1.61
814     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
815     - stable on x86
816 johnm 1.60
817     *hardened-sources-2.6.11-r15 (27 Jun 2005)
818    
819     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
820     +hardened-sources-2.6.11-r15.ebuild:
821     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
822     grsec redefining curr_ip struct.
823 solar 1.59
824     *hardened-sources-2.4.31 (20 Jun 2005)
825    
826     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
827     initial import of 2.4.31 tree
828 johnm 1.58
829     *hardened-sources-2.6.11-r14 (14 Jun 2005)
830    
831     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
832     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
833     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
834     naming scheme to abide by genpatches
835 johnm 1.57
836     *hardened-sources-2.6.11-r13 (18 May 2005)
837    
838     18 May 2005; John Mylchreest <johnm@gentoo.org>
839     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
840     Managed to mangle the Makefile patch from grsec, to miss out the grsec
841     target. sorry about that. Fixes bug #93022
842 johnm 1.56
843     *hardened-sources-2.6.11-r12 (17 May 2005)
844    
845     17 May 2005; John Mylchreest <johnm@gentoo.org>
846     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
847     +hardened-sources-2.6.11-r12.ebuild:
848     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
849     merges in genpatches-base
850 johnm 1.55
851     *hardened-sources-2.6.11-r12 (17 May 2005)
852    
853     17 May 2005; John Mylchreest <johnm@gentoo.org>
854     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
855     +hardened-sources-2.6.11-r12.ebuild:
856     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
857     merges in genpatches-base
858 solar 1.54
859     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
860     -files/2.4.27-cmdline-race.patch,
861     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
862     -files/2.4.28-grsec-binfmt_a.out.patch,
863     -files/2.4.28-grsec-cmdline-race.patch,
864     -files/2.4.28-selinux-binfmt_a.out.patch,
865     -files/2.4.28-selinux-cmdline-race.patch,
866     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
867     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
868     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
869     cleanup..
870 solar 1.53
871     *hardened-sources-2.4.30-r1 (21 Apr 2005)
872    
873     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
874     - disable aout by default
875 solar 1.52
876     *hardened-sources-2.4.30 (18 Apr 2005)
877    
878     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
879     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
880     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
881     use
882 tocharian 1.50
883 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
884    
885     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
886     +hardened-sources-2.4.29.ebuild:
887     New hardened-patches-2.4-29.0 patchball.
888     Removed SELinux support, upgraded GRSecurity to 2.1.4.
889    
890     *hardened-sources-2.4.28-r5 (06 Mar 2005)
891    
892     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
893     +hardened-sources-2.4.28-r5.ebuild:
894     Added a fix for a PaX vulnerability.
895    
896     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
897 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
898     Stable on x86
899 solar 1.49
900     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
901     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
902     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
903     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
904     - fixed/added RDEPEND= in all kernel-2 ebuilds
905 tocharian 1.48
906     *hardened-sources-2.4.28-r4 (21 Jan 2005)
907    
908     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
909     +hardened-sources-2.4.28-r4.ebuild:
910     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
911     backport of neighbour hash updates.
912 tocharian 1.47
913     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
914     hardened-sources-2.4.28-r3.ebuild:
915     Stable on x86
916 tseng 1.46
917     *hardened-sources-2.6.10-r3 (20 Jan 2005)
918    
919     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
920     +hardened-sources-2.6.10-r3.ebuild:
921     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
922     in 2005.0
923 tocharian 1.45
924     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
925     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
926     hardened-sources-2.4.28-r2.ebuild:
927     Mark stable on x86
928 tocharian 1.44
929     *hardened-sources-2.4.28-r3 (17 Jan 2005)
930    
931     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
932     +hardened-sources-2.4.28-r3.ebuild:
933     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
934 tocharian 1.43
935     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
936     hardened-sources-2.4.28.ebuild:
937     Mark stable on x86.
938 tocharian 1.42
939     *hardened-sources-2.4.28-r2 (13 Jan 2005)
940    
941     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
942     +hardened-sources-2.4.28-r2.ebuild:
943     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
944     Mazinger for grsecurity patches as well.
945 plasmaroo 1.41
946     *hardened-sources-2.4.28-r1 (23 Dec 2004)
947    
948     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
949     Security bump. Thank tocharian for rolling a new patchset...
950 solar 1.40
951     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
952     +files/2.4.28-grsec-cmdline-race.patch,
953     +files/2.4.28-selinux-binfmt_a.out.patch,
954     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
955     - Round up remaining security patches that appear to be missing in 2.4.28. -
956     PaX standalone updated to current. hgpv=28.1
957 solar 1.39
958     *hardened-sources-2.4.28 (28 Nov 2004)
959    
960     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
961     security bump. Thank tocharian for rolling a new patchset
962 scox 1.31
963 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
964    
965     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
966     +hardened-sources-2.4.27-r3.ebuild:
967     Applies the new 2.4-27.2 patchball which updates
968     GRSecurity to the 2.0.1 version.
969    
970 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
971    
972     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
973     +hardened-sources-2.4.27-r2.ebuild:
974     Version bump.
975     This version uses the new 2.4-27.1 patchball which updates
976     both the SELinux PaX hooks patch and the SELinux headers.
977    
978 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
979    
980     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
981     +hardened-sources-2.4.27-r1.ebuild,
982     -hardened-sources-2.4.27.ebuild,
983     +files/2.4.27-cmdline-race.patch:
984     Version bump, fix for cmdline race. See bug #59905.
985    
986     *hardened-sources-2.4.26-r6 (09 Aug 2004)
987    
988     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
989     +hardened-sources-2.4.26-r6.ebuild,
990     -hardened-sources-2.4.26-r5.ebuild,
991     -hardened-sources-2.4.26-r4.ebuild,
992     +files/2.4.26-cmdline-race.patch:
993     Version bump, fix for cmdline race. See bug #59905.
994    
995 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
996    
997     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
998     +hardened-sources-2.4.27.ebuild,
999     +files/2.4.27-CAN-2004-0394.patch:
1000     Ported the patchball to the 2.4.27 kernel version.
1001    
1002 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1003    
1004     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1005     +hardened-sources-2.4.26-r5.ebuild:
1006 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1007 scox 1.34 It adds the following features:
1008     - Squashfs
1009     - Ebtables
1010     - Netdev random (core+drivers)
1011     - Watchdog Timer (WDT) fix.
1012    
1013 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1014    
1015     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1016     +hardened-sources-2.4.26-r4.ebuild,
1017     +files/2.4.26-CAN-2004-0415.patch,
1018     -hardened-sources-2.4.26-3:
1019     Version bump, fix for CAN 0415, see bug #59378.
1020    
1021 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1022    
1023     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1024     +hardened-sources-2.4.26-r3.ebuild,
1025     +files/2.4.26-CAN-2004-0497.patch,
1026     -hardened-sources-2.4.26-r2.ebuild:
1027     Version bump, fixed CAN 0497, see bug #56171.
1028    
1029 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1030    
1031     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1032 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1033 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1034     +files/2.4.26-CAN-2004-0535.patch,
1035     -hardened-sources-2.4.26-r1.ebuild:
1036     Fixes for both CAN 0495 and 0535, see bug #54976
1037 pvdabeel 1.27
1038 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1039     hardened-sources-2.4.26-r1.ebuild:
1040     QA - fix use invocation
1041 scox 1.28
1042     *hardened-sources-2.4.26-r1 (22 June 2004)
1043    
1044     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1045     +hardened-sources-2.4.26-r1.ebuild,
1046     +files/2.4.26-CAN-2004-0394.patch,
1047     +files/2.4.26-signal-race.patch,
1048     -hardened-sources-2.4.26.ebuild,
1049     -hardened-sources-2.4.24-r3.ebuild:
1050     Version bump for the CAN-2004-0394 issue and bug #53804
1051     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1052    
1053    
1054 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1055     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1056     Masked hardened-sources-2.4.26.ebuild broken for ppc
1057    
1058     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1059     hardened-sources-2.4.24-r3.ebuild:
1060     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1061 plasmaroo 1.25
1062 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1063    
1064     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1065     +hardened-sources-2.4.26.ebuild:
1066     Updated hardened-sources for the 2.4.26 kernel
1067     Removed broken components, updated almost everything.
1068    
1069 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1070    
1071     17 Apr 2004; <plasmaroo@gentoo.org>
1072     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1073     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1074     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1075     +hardened-sources-2.4.24-r3.ebuild:
1076     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1077     vulnerabilities. Old revisions removed.
1078 plasmaroo 1.24
1079     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1080    
1081     15 Apr 2004; <plasmaroo@gentoo.org>
1082     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1083     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1084     Version bump for the CAN-2004-0109 issue; bug #47881.
1085 aliz 1.23
1086     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1087     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1088     Add eutils to inherit.
1089 plasmaroo 1.22
1090     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1091    
1092     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1093     files/hardened-sources-2.4.24.munmap.patch:
1094     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1095 scox 1.19
1096 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1097 scox 1.26
1098 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1099     hardened-sources-2.4.24.ebuild:
1100     Version bump, updated most of the components.
1101     This release includes the following:
1102    
1103     - Hardened security
1104     - Netfilter patch-o-matic 20031219
1105     - FreeSWAN 2.04 & x509 1.4.8
1106     - EVMS 2.2.2
1107     - XFS 1.3.1
1108     - cryptoloop jari
1109     - grsecurity 2.0-rc4
1110     - SELinux
1111     - PaX 200402060000
1112     - PaX Obscurity 200308302223
1113     - Others...
1114    
1115     Neither -ck nor systrace are included anymore.
1116    
1117 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1118    
1119     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1120     hardened-sources-2.4.22-r2.ebuild:
1121 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1122 scox 1.19
1123     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1124 iggy 1.17
1125     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1126 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1127 iggy 1.16
1128     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1129 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1130     Version bump for the 'do_brk' vulnerability.
1131 iggy 1.15
1132     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1133     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1134     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1135     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1136 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1137 frogger 1.14
1138     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1139     hardened-sources-2.4.22.ebuild:
1140 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1141     components. These are no longer handled in the kernel
1142     so this code was not necessary.
1143 frogger 1.13
1144     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1145     New 2.4.22 based hardened-sources thanks to
1146     Phil West <p.west@computer.org>.
1147    
1148     These sources include:
1149 plasmaroo 1.18 - New SELinux API
1150     - Updated CK-base
1151     - Updated GRSec
1152     - Systrace
1153     - SuperFreeS/WAN 1.99.8
1154     - Propolice kernel build support
1155     - EVMS
1156     - Other various security related patches
1157 frogger 1.11
1158 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1159    
1160     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1161     Updated hardened-sources based on the 2.4.21 Linux kernel.
1162     This includes updates to most major components such as:
1163 plasmaroo 1.18 - ck-base-0306300059
1164     - selinux-2.4-2003071106
1165     - grsecurity-2.0-rc1
1166     - Updated IPTables patch-o-matic
1167     - Updated SuperFreeS/WAN
1168    
1169 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1170     updated patch set ready for the 2.4.21 based kernel.
1171    
1172 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1173     Initial import of hardened-sources-2.4.20-r4. This revision
1174     includes only a few changes, but one of these is an important
1175     security fix. It is recommended all users of hardened-sources
1176     upgrade to this release.
1177 plasmaroo 1.18
1178 frogger 1.11 - ioperm bug fix
1179     - fixed compilation failure when building without GRSec
1180 plasmaroo 1.18
1181 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1182     due to time constraints, but is planned for inclusion in the near
1183     future.
1184 msterret 1.10
1185     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1186    
1187     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1188     hardened-sources-2.4.20-r3.ebuild:
1189 plasmaroo 1.18 Add Header...
1190 frogger 1.9
1191     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1192     hardened-sources-2.4.20-r3.ebuild:
1193     Removed warnings from ebuild. This kernel should be safe to
1194     use at this point.
1195 frogger 1.8
1196     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1197    
1198     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1199     hardened-sources-2.4.20-r3.ebuild:
1200     New revision. Includes the following changes over -r2:
1201 plasmaroo 1.18
1202 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1203     - Super FreeS/WAN 1.99.7rc2
1204     - PaX for the LSM/SELinux branch
1205     - GRSecurity 2.0-pre4 (role based access control)
1206     - Systrace 1.3
1207     - EXT3 fixes
1208     - EVMS 2.0.1
1209     - GCC 3.1+ compile optimizations
1210     - ProPolice kernel build support
1211     - Hashing table security fixes
1212 frogger 1.3
1213     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1214 frogger 1.7
1215     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1216     Initial import of hardened-sources-r2. This new
1217     ebuild includes many new performance and security
1218     related patches. As in -r1, it will patch in
1219     LSM/SELinux if "selinux" is in USE, otherwise it
1220     will patch in GRSecurity. The following patches
1221     are included in this revision:
1222 plasmaroo 1.18
1223 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1224     (pulled from the base CK patch)
1225     - ptrace exploit patch for the LSM kernel
1226     (the GRSec patch already fixes this)
1227     - LSM 2.4-2003040709
1228     - SELinux 2.4-2003040709
1229     - Systrace v1.2
1230     - IPTables patch-o-matic base patches - 20030107
1231     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1232     - Super FreeS/WAN 1.99.6.1
1233     - GRSecurity 1.9.9g
1234     - MPPE
1235     - EXT3 data journal fix
1236     - CIPE 1.5.4
1237 frogger 1.6
1238     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1239     hardened-sources-2.4.20-r1.ebuild, manifest:
1240 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1241 frogger 1.5
1242     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1243     hardened-sources-2.4.20-r1.ebuild:
1244     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1245     is patched in instead. Ptrace patches for selinux have also been added. In
1246     either case, systrace support will be patched in as well.
1247 frogger 1.3
1248     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1249     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1250 plasmaroo 1.18 Revision bump for new sources.
1251 frogger 1.4
1252 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1253 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1254 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1255 method 1.1
1256 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1257    
1258 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1259     hardened-sources-2.4.20.ebuild:
1260 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20