/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.246 - (hide annotations) (download)
Tue Oct 14 16:23:13 2008 UTC (5 years, 10 months ago) by gengor
Branch: MAIN
Changes since 1.245: +7 -1 lines
Add 2.6.26-r4, remove 2.6.26-r3.
(Portage version: 2.1.4.5)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 phreak 1.204 # Copyright 2000-2008 Gentoo Foundation; Distributed under the GPL v2
3 gengor 1.246 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.245 2008/10/12 20:37:25 gengor Exp $
4    
5     *hardened-sources-2.6.26-r4 (14 Oct 2008)
6    
7     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
8     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
9     Update to latest grsecurity patch, fixing building of non-modular kernels.
10 gengor 1.245
11     *hardened-sources-2.6.26-r3 (12 Oct 2008)
12    
13     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
14     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
15     +hardened-sources-2.6.26-r3.ebuild:
16     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
17     2.6.26-r1: Removed.
18     2.6.25-r8: Stable amd64/x86.
19 gengor 1.244
20     *hardened-sources-2.6.25-r8 (09 Oct 2008)
21    
22     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
23     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
24     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
25     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
26 nixnut 1.243
27     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
28     Stable on ppc
29 gengor 1.242
30     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
31     hardened-sources-2.6.25-r7.ebuild:
32     Stable amd64/x86.
33 gengor 1.241
34     *hardened-sources-2.6.26-r2 (13 Sep 2008)
35    
36     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
37     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
38     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
39     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
40 gengor 1.240
41     *hardened-sources-2.6.25-r7 (13 Sep 2008)
42    
43     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
44     +hardened-sources-2.6.25-r7.ebuild:
45     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
46 gengor 1.239
47     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
48     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
49     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
50     hardened-sources-2.6.26-r1.ebuild:
51     Update DESCRIPTION and HGPV_URI.
52 gengor 1.238
53     *hardened-sources-2.6.25-r6 (09 Sep 2008)
54    
55     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
56     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
57     2.6.25-r6: Update to Linux 2.6.25.17.
58     2.6.24-r3: Removed.
59 gengor 1.237
60     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
61     hardened-sources-2.6.25-r5.ebuild:
62     Stable on amd64/x86
63 gengor 1.236
64     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
65     Update my email address.
66 nixnut 1.235
67     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
68     stable on ppc
69 battousai 1.234
70     *hardened-sources-2.6.26-r1 (23 Aug 2008)
71     *hardened-sources-2.6.25-r5 (23 Aug 2008)
72    
73     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
74     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
75     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
76     +hardened-sources-2.6.26-r1.ebuild:
77     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
78     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
79     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
80     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
81     (gengor).
82 solar 1.233
83     *hardened-sources-2.6.26 (18 Aug 2008)
84     *hardened-sources-2.6.25-r4 (18 Aug 2008)
85    
86     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
87     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
88     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
89     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
90     2.6.25-r2: Removed.
91 tove 1.232
92     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
93     Remove phreak from metadata.xml (#96398)
94 solar 1.231
95     *hardened-sources-2.6.25-r3 (31 Jul 2008)
96    
97     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
98     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
99     +hardened-sources-2.6.25-r3.ebuild:
100     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
101     fixes, including security bug #231750.
102 nixnut 1.230
103     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
104     Stable on ppc
105 solar 1.229
106     *hardened-sources-2.6.25-r2 (05 Jul 2008)
107    
108     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
109     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
110     +hardened-sources-2.6.25-r2.ebuild:
111     2.6.23-r4: Stable x86/amd64
112     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
113     2.6.23-r{11,12}: Removed due to multiple vulns.
114     (gengor & kerframil)
115 nixnut 1.228
116     04 Jul 2008; nixnut <nixnut@gentoo.org>
117     hardened-sources-2.6.23-r13.ebuild:
118     Stable on ppc
119 solar 1.227
120     *hardened-sources-2.6.25-r1 (30 Jun 2008)
121    
122     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
123     +hardened-sources-2.6.25-r1.ebuild:
124     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
125     grsecurity release. 2.6.23-r13: x86/amd64 stable
126 solar 1.226
127     *hardened-sources-2.6.25 (17 Jun 2008)
128     *hardened-sources-2.6.24-r3 (17 Jun 2008)
129     *hardened-sources-2.6.23-r13 (17 Jun 2008)
130    
131     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
132     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
133     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
134     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
135     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
136     2.6.25: Initial 2.6.25 release.
137 solar 1.225
138     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
139     - fasttrack to stable x86/amd64
140 swegener 1.224
141     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
142     Fix broken digest for linux-2.6.24.tar.bz2.
143 solar 1.223
144     *hardened-sources-2.6.24-r2 (11 May 2008)
145     *hardened-sources-2.6.23-r12 (11 May 2008)
146    
147     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
148     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
149     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
150     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
151     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
152     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
153     security bugs 219901, 220691, 220975, 220979, 221123. New
154     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
155     should be removed as far as I'm concerned, everything else remove due to
156     vulnerable to numerous security bugs or brokeness.
157 nixnut 1.222
158     10 May 2008; nixnut <nixnut@gentoo.org>
159     hardened-sources-2.6.23-r11.ebuild:
160     Stable on ppc
161 solar 1.221
162     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
163     - -r11 stable on x86/amd64
164 solar 1.220
165     *hardened-sources-2.6.23-r11 (01 May 2008)
166    
167     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
168     - version bump to fix ulgy linux bugs
169 phreak 1.219
170     *hardened-sources-2.6.24-r1 (30 Apr 2008)
171    
172     30 Apr 2008; Christian Heim <phreak@gentoo.org>
173     +hardened-sources-2.6.24-r1.ebuild:
174     Revision bump (thanks to Kerin and Gordon, again), pulling
175     genpatches-2.6.24-7, solving #219089. Additionally contains further security
176     fixes plus some minor updates.
177 phreak 1.218
178     *hardened-sources-2.6.23-r10 (30 Apr 2008)
179    
180     30 Apr 2008; Christian Heim <phreak@gentoo.org>
181     +hardened-sources-2.6.23-r10.ebuild:
182     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
183     Additional contains "various other fixes".
184 phreak 1.217
185     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
186     Update the longdescription in metadata, thanks to Gordon Malm.
187 nixnut 1.216
188     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
189     Stable on ppc wrt bug #213255
190 solar 1.215
191     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
192     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
193     - stable on x86/amd64 per request. Removed obsolete ebuilds
194 phreak 1.214
195     *hardened-sources-2.6.24 (07 Apr 2008)
196    
197     07 Apr 2008; Christian Heim <phreak@gentoo.org>
198     +hardened-sources-2.6.24.ebuild:
199     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
200     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
201     for the many contributions and their continued effort in #216612) based on
202     2.6.24 and genpatches-2.6.24-5.
203    
204     The current ebuild/patchset contains these things:
205     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
206     * Introduces bespoke server and workstation oriented security levels
207     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
208 phreak 1.213
209     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
210     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
211     maintaining it).
212 phreak 1.212
213     24 Mar 2008; Christian Heim <phreak@gentoo.org>
214     hardened-sources-2.4.35-r2.ebuild:
215     Fixing SRC_URI for 2.4.35-r2.
216 phreak 1.211
217     *hardened-sources-2.6.23-r9 (22 Mar 2008)
218    
219     22 Mar 2008; Christian Heim <phreak@gentoo.org>
220     +hardened-sources-2.6.23-r9.ebuild:
221     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
222     * Change the default GIDs for some grsecurity options
223     * Revamp the Hardened [Gentoo] security level and make it the default level
224     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
225     * Fix a recursive lock -- call to capable() within ptrace_attach()
226     * Fix bug that allows audit and iscsi operations to be controlled via netlink
227 solar 1.210
228     *hardened-sources-2.6.23-r8 (27 Feb 2008)
229    
230     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
231     - version bump from Kerin Millar bug 210026
232 solar 1.209
233     17 Feb 2008; <solar@gentoo.org> metadata.xml,
234     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
235     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
236     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
237     - stable on x86 and remove old ebuilds
238 solar 1.207
239     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
240 solar 1.208 - stable on amd64 per request of amd64 lead
241 solar 1.206
242     *hardened-sources-2.6.23-r7 (11 Feb 2008)
243    
244     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
245     - version bump from kerin.millar
246     Changes:
247    
248     * Bump to genpatches-base-2.6.23-9
249     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
250     * Disables COMPAT_VDSO in x86/defconfig
251     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
252 phreak 1.205
253     25 Jan 2008; Christian Heim <phreak@gentoo.org>
254     -hardened-sources-2.6.22-r8.ebuild:
255     Cleaning up old versions.
256 phreak 1.204
257     *hardened-sources-2.6.23-r6 (25 Jan 2008)
258    
259     25 Jan 2008; Christian Heim <phreak@gentoo.org>
260     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
261     Revision bump, pulling in the latest genpatches.
262 phreak 1.203
263     *hardened-sources-2.6.23-r5 (24 Dec 2007)
264    
265     24 Dec 2007; Christian Heim <phreak@gentoo.org>
266     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
267     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
268     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
269     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
270 phreak 1.202
271     24 Dec 2007; Christian Heim <phreak@gentoo.org>
272     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
273     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
274     -hardened-sources-2.6.23-r3.ebuild:
275     Cleaning out some unused, old versions.
276 phreak 1.201
277     24 Dec 2007; Christian Heim <phreak@gentoo.org>
278     hardened-sources-2.6.23-r4.ebuild:
279     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
280     in the tree for long, but there isn't much of a difference between this and
281     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
282 phreak 1.200
283     *hardened-sources-2.6.23-r4 (23 Dec 2007)
284    
285     23 Dec 2007; Christian Heim <phreak@gentoo.org>
286     +hardened-sources-2.6.23-r4.ebuild:
287     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
288 phreak 1.199
289     *hardened-sources-2.6.23-r3 (04 Dec 2007)
290    
291     04 Dec 2007; Christian Heim <phreak@gentoo.org>
292     +hardened-sources-2.6.23-r3.ebuild:
293     Revision bump, pulling in 2.6.23.9.
294 phreak 1.198
295     *hardened-sources-2.6.23-r2 (25 Nov 2007)
296    
297     25 Nov 2007; Christian Heim <phreak@gentoo.org>
298     +hardened-sources-2.6.23-r2.ebuild:
299     Updated patchset, thanks to solar.
300 phreak 1.197
301     *hardened-sources-2.6.23-r1 (31 Oct 2007)
302    
303     31 Oct 2007; Christian Heim <phreak@gentoo.org>
304     +hardened-sources-2.6.23-r1.ebuild:
305     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
306 solar 1.196
307     29 Oct 2007; <solar@gentoo.org> metadata.xml:
308     - update metadata.xml
309 phreak 1.195
310     25 Oct 2007; Christian Heim <phreak@gentoo.org>
311     hardened-sources-2.6.22-r8.ebuild:
312     Marking 2.6.22-r8 stable on amd64 and x86.
313 phreak 1.194
314     21 Oct 2007; Christian Heim <phreak@gentoo.org>
315     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
316     -hardened-sources-2.6.21-r4.ebuild:
317     Removing old ebuilds.
318 phreak 1.193
319     *hardened-sources-2.4.35-r2 (21 Oct 2007)
320    
321     21 Oct 2007; Christian Heim <phreak@gentoo.org>
322     +hardened-sources-2.4.35-r2.ebuild:
323     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
324     patches.
325 phreak 1.192
326     *hardened-sources-2.6.22-r8 (21 Oct 2007)
327    
328     21 Oct 2007; Christian Heim <phreak@gentoo.org>
329     +hardened-sources-2.6.22-r8.ebuild:
330     Yet another new patch, hopefully fixing the remaining issues we had w/
331     2.6.22. Candidate for stabling.
332 phreak 1.191
333     *hardened-sources-2.6.23 (13 Oct 2007)
334    
335     13 Oct 2007; Christian Heim <phreak@gentoo.org>
336     +hardened-sources-2.6.23.ebuild:
337     Initial hardened-sources-2.6.23. If people still have problems w/ bug
338     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
339 phreak 1.190
340     11 Oct 2007; Christian Heim <phreak@gentoo.org>
341     hardened-sources-2.6.20-r10.ebuild:
342     Pulling in yet another new genpatches version, fixing the PWC bug for real.
343 phreak 1.189
344     04 Oct 2007; Christian Heim <phreak@gentoo.org>
345     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
346     Removing old versions.
347 phreak 1.188
348     *hardened-sources-2.6.22-r7 (01 Oct 2007)
349    
350     01 Oct 2007; Christian Heim <phreak@gentoo.org>
351     +hardened-sources-2.6.22-r7.ebuild:
352     Revision bump, pulling in a newer patch. Should fix #194276.
353 phreak 1.187
354     30 Sep 2007; Christian Heim <phreak@gentoo.org>
355     hardened-sources-2.6.20-r10.ebuild:
356     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
357     Mike Doty).
358 phreak 1.186
359     *hardened-sources-2.6.22-r6 (26 Sep 2007)
360    
361     26 Sep 2007; Christian Heim <phreak@gentoo.org>
362     +hardened-sources-2.6.22-r6.ebuild:
363     Revision bump, grabbing up till Linux 2.6.22.9.
364 phreak 1.185
365     24 Sep 2007; Christian Heim <phreak@gentoo.org>
366     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
367     Cleaning up further.
368 phreak 1.184
369     *hardened-sources-2.6.20-r10 (24 Sep 2007)
370    
371     24 Sep 2007; Christian Heim <phreak@gentoo.org>
372     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
373     +hardened-sources-2.6.20-r10.ebuild:
374     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
375     revisions.
376 phreak 1.183
377     *hardened-sources-2.6.22-r5 (22 Sep 2007)
378    
379     22 Sep 2007; Christian Heim <phreak@gentoo.org>
380     +hardened-sources-2.6.22-r5.ebuild:
381     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
382 phreak 1.182
383     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
384     Removing johnm from metadata.xml (see #186467 for reference).
385 phreak 1.181
386     *hardened-sources-2.6.22-r4 (17 Sep 2007)
387    
388     17 Sep 2007; Christian Heim <phreak@gentoo.org>
389     +hardened-sources-2.6.22-r4.ebuild:
390     Revision bump, hopefully fixing all those weird PAX failures.
391 phreak 1.180
392     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
393     Updating the metadata.xml.
394 phreak 1.179
395     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
396     Removing tocharian from metadata due to his retirement (see #71718 for
397     reference).
398 phreak 1.178
399     *hardened-sources-2.6.20-r9 (30 Aug 2007)
400    
401     30 Aug 2007; Christian Heim <phreak@gentoo.org>
402     +hardened-sources-2.6.20-r9.ebuild:
403     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
404 phreak 1.177
405     29 Aug 2007; Christian Heim <phreak@gentoo.org>
406     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
407     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
408     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
409     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
410     -hardened-sources-2.6.22-r2.ebuild:
411     Removing some redundant versions.
412 phreak 1.176
413     *hardened-sources-2.4.35-r1 (29 Aug 2007)
414    
415     29 Aug 2007; Christian Heim <phreak@gentoo.org>
416     +hardened-sources-2.4.35-r1.ebuild:
417     Revision bump, new grsecurity patch.
418 phreak 1.175
419     *hardened-sources-2.6.20-r8 (26 Aug 2007)
420    
421     26 Aug 2007; Christian Heim <phreak@gentoo.org>
422     +hardened-sources-2.6.20-r8.ebuild:
423     Revision bump for Linux 2.6.20.17.
424 phreak 1.174
425     *hardened-sources-2.6.22-r3 (22 Aug 2007)
426    
427     22 Aug 2007; Christian Heim <phreak@gentoo.org>
428     +hardened-sources-2.6.22-r3.ebuild:
429     Revision bump for Linux 2.6.22.4.
430 phreak 1.173
431     16 Aug 2007; Christian Heim <phreak@gentoo.org>
432     hardened-sources-2.6.22-r2.ebuild:
433     Updated patchset, to fix the alignment against 2.6.22.3.
434 phreak 1.172
435     *hardened-sources-2.6.22-r2 (16 Aug 2007)
436    
437     16 Aug 2007; Christian Heim <phreak@gentoo.org>
438     +hardened-sources-2.6.22-r2.ebuild:
439     Revision bump for Linux 2.6.22.3.
440 phreak 1.171
441     *hardened-sources-2.4.35 (16 Aug 2007)
442    
443     16 Aug 2007; Christian Heim <phreak@gentoo.org>
444     +hardened-sources-2.4.35.ebuild:
445     Version bump, initial version for Linux 2.4.35.
446 phreak 1.170
447     *hardened-sources-2.6.21-r4 (16 Aug 2007)
448    
449     16 Aug 2007; Christian Heim <phreak@gentoo.org>
450     +hardened-sources-2.6.21-r4.ebuild:
451     Revision bump for Linux 2.6.21.6.
452 phreak 1.169
453     *hardened-sources-2.6.20-r7 (16 Aug 2007)
454    
455     16 Aug 2007; Christian Heim <phreak@gentoo.org>
456     +hardened-sources-2.6.20-r7.ebuild:
457     Revision bump for Linux 2.6.20.16.
458 phreak 1.168
459     *hardened-sources-2.6.22-r1 (13 Aug 2007)
460    
461     13 Aug 2007; Christian Heim <phreak@gentoo.org>
462     +hardened-sources-2.6.22-r1.ebuild:
463     Yet another revision bump.
464 phreak 1.167
465     *hardened-sources-2.6.22 (10 Aug 2007)
466    
467     10 Aug 2007; Christian Heim <phreak@gentoo.org>
468     +hardened-sources-2.6.22.ebuild:
469     Initial release for 2.6.22. If you are using hardened-sources on a desktop
470     machine (P4 or newer), be aware you might need to disable
471     CONFIG_PAX_PAGEEXEC.
472 phreak 1.166
473     04 Aug 2007; Christian Heim <phreak@gentoo.org>
474     hardened-sources-2.6.20-r6.ebuild:
475     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
476     2.6.20.15.
477 phreak 1.165
478     10 Jul 2007; Christian Heim <phreak@gentoo.org>
479     hardened-sources-2.6.20-r5.ebuild:
480     Marking hardened-sources-2.6.20-r5 stable on ppc.
481 phreak 1.164
482     10 Jul 2007; Christian Heim <phreak@gentoo.org>
483     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
484     Cleanup.
485 phreak 1.163
486     *hardened-sources-2.6.20-r6 (08 Jul 2007)
487    
488     08 Jul 2007; Christian Heim <phreak@gentoo.org>
489     +hardened-sources-2.6.20-r6.ebuild:
490     Revision bump, grabbing yet another stable release.
491 phreak 1.162
492     17 Jun 2007; Christian Heim <phreak@gentoo.org>
493     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
494     -hardened-sources-2.6.21-r2.ebuild:
495     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
496     alpha stable KEYWORD by mistake.
497 phreak 1.161
498     17 Jun 2007; Christian Heim <phreak@gentoo.org>
499     hardened-sources-2.6.20-r5.ebuild:
500     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
501     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
502 phreak 1.160
503     *hardened-sources-2.6.21-r3 (12 Jun 2007)
504    
505     12 Jun 2007; Christian Heim <phreak@gentoo.org>
506     +hardened-sources-2.6.21-r3.ebuild:
507     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
508     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
509     love.
510 phreak 1.159
511     *hardened-sources-2.6.20-r5 (11 Jun 2007)
512    
513     11 Jun 2007; Christian Heim <phreak@gentoo.org>
514     +hardened-sources-2.6.20-r5.ebuild:
515     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
516     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
517     love.
518 pappy 1.158
519     *hardened-sources-2.4.34.5 (11 Jun 2007)
520    
521     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
522     +hardened-sources-2.4.34.5.ebuild:
523     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
524 phreak 1.157
525     30 May 2007; Christian Heim <phreak@gentoo.org>
526     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
527     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
528     stale ebuild(s).
529 phreak 1.156
530     30 May 2007; Christian Heim <phreak@gentoo.org>
531     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
532     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
533     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
534     Doing some cleanups, remove stale ebuilds.
535 phreak 1.155
536     26 May 2007; Christian Heim <phreak@gentoo.org>
537     hardened-sources-2.6.21-r2.ebuild:
538     Fixing the grsecurity patch, had one '};' too much.
539 phreak 1.154
540     *hardened-sources-2.6.21-r2 (26 May 2007)
541    
542     26 May 2007; Christian Heim <phreak@gentoo.org>
543     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
544     +hardened-sources-2.6.21-r2.ebuild:
545     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
546     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
547 phreak 1.153
548     *hardened-sources-2.6.20-r4 (26 May 2007)
549    
550     26 May 2007; Christian Heim <phreak@gentoo.org>
551     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
552     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
553 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
554 phreak 1.152
555     15 May 2007; Christian Heim <phreak@gentoo.org>
556     hardened-sources-2.6.20-r3.ebuild:
557     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
558     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
559     grsecurity patch fail in that exact same hunk.
560 phreak 1.151
561     *hardened-sources-2.6.20-r3 (15 May 2007)
562    
563     15 May 2007; Christian Heim <phreak@gentoo.org>
564     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
565     Revision bump, incorporating Linux 2.6.20.11.
566    
567     *hardened-sources-2.6.21-r1 (11 May 2007)
568    
569     11 May 2007; Christian Heim <phreak@gentoo.org>
570     +hardened-sources-2.6.21-r1.ebuild:
571     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
572     mentioned in #177234.
573 kevquinn 1.150
574     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
575     files/digest-hardened-sources-2.6.21, Manifest:
576     Fix Manifest/digest for linux-2.6.21.tar.bz2
577 phreak 1.149
578     06 May 2007; Christian Heim <phreak@gentoo.org>
579     hardened-sources-2.6.21.ebuild:
580     Bumping the hardened-patches version, needed for the fix for #177234.
581 phreak 1.148
582     *hardened-sources-2.6.21 (02 May 2007)
583    
584     02 May 2007; Christian Heim <phreak@gentoo.org>
585     +hardened-sources-2.6.21.ebuild:
586     Version bump, Linux 2.6.21-hardened.
587 phreak 1.147
588     29 Apr 2007; Christian Heim <phreak@gentoo.org>
589     hardened-sources-2.6.20-r2.ebuild:
590     Adding ~ia64 on Ned's request.
591 phreak 1.146
592     29 Apr 2007; Christian Heim <phreak@gentoo.org>
593     hardened-sources-2.6.20-r2.ebuild:
594     Fixing the included grsecurity patch, wasn't alligning due to the Index:
595     header line(s).
596 phreak 1.145
597     29 Apr 2007; Christian Heim <phreak@gentoo.org>
598     hardened-sources-2.6.20-r2.ebuild:
599     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
600 armin76 1.144
601     *hardened-sources-2.6.20-r2 (10 Apr 2007)
602    
603     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
604     +hardened-sources-2.6.20-r2.ebuild:
605     Version bump, on behalf of phreak
606 phreak 1.143
607     *hardened-sources-2.6.20-r1 (04 Apr 2007)
608    
609     04 Apr 2007; Christian Heim <phreak@gentoo.org>
610     +hardened-sources-2.6.20-r1.ebuild:
611     Revision bump, grabbing a newer grsecurity snapshot.
612 phreak 1.142
613     *hardened-sources-2.6.20 (25 Mar 2007)
614    
615     25 Mar 2007; Christian Heim <phreak@gentoo.org>
616     +hardened-sources-2.6.20.ebuild:
617     Finally a hardened-sources version for 2.6.20; many people have been waiting
618     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
619     testbox.
620 chainsaw 1.141
621     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
622     hardened-sources-2.6.18-r6.ebuild:
623     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
624 phreak 1.140
625     *hardened-sources-2.6.18-r6 (16 Mar 2007)
626    
627     16 Mar 2007; Christian Heim <phreak@gentoo.org>
628     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
629     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
630     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
631     supposed to be.
632 phreak 1.139
633     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
634     Fixing the Manifest, the previous one was broken (as in still had the
635     deleted ebuild in it).
636 phreak 1.138
637     06 Mar 2007; Christian Heim <phreak@gentoo.org>
638     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
639     +hardened-sources-2.6.18-r5.ebuild:
640     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
641     Linux 2.6.18.8. Also cleaning up the older version.
642    
643     *hardened-sources-2.6.18-r5 (06 Mar 2007)
644    
645     06 Mar 2007; Christian Heim <phreak@gentoo.org>
646     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
647     +hardened-sources-2.6.18-r5.ebuild:
648     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
649     Linux 2.6.18.8. Also cleaning up the older version.
650 phreak 1.137
651     24 Feb 2007; Christian Heim <phreak@gentoo.org>
652     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
653     -hardened-sources-2.6.19-r5.ebuild:
654     Removing some of the old version, that didn't work.
655 phreak 1.136
656     *hardened-sources-2.6.19-r6 (12 Feb 2007)
657    
658     12 Feb 2007; Christian Heim <phreak@gentoo.org>
659     +hardened-sources-2.6.19-r6.ebuild:
660     Revision bump, including a new grsec version fixing #166235.
661 pappy 1.134
662     *hardened-sources-2.4.34 (24 Jan 2007)
663    
664     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
665 pappy 1.135 Manifest:
666     updating Manifest with checksums of new tarball and ebuild
667    
668     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
669 pappy 1.134 +hardened-sources-2.4.34.ebuild:
670     I added new hardened sources 2.4 update, this is a critical path
671     security bugfix - all users of h-s are strongly advised
672     to update their existing hardened sources to this version.
673     It contains a fix for a kernel vulnerability that is pertaining
674     to the PaX changes to virtual memory management, possibly leading
675     to a local kernel exploit ... see grsecurity.net forums and homepage
676 phreak 1.133
677     23 Jan 2007; Christian Heim <phreak@gentoo.org>
678     files/digest-hardened-sources-2.6.19-r5, Manifest:
679     Fixing the patch-tarball digest.
680 phreak 1.132
681     *hardened-sources-2.6.19-r5 (23 Jan 2007)
682    
683     23 Jan 2007; Christian Heim <phreak@gentoo.org>
684     +hardened-sources-2.6.19-r5.ebuild:
685     Revision bump, closing the recently discovered PaX expand_stack()
686     vulnerability.
687 phreak 1.131
688     *hardened-sources-2.6.19-r4 (14 Jan 2007)
689    
690     14 Jan 2007; Christian Heim <phreak@gentoo.org>
691     +hardened-sources-2.6.19-r4.ebuild:
692     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
693     dropping the randomized PID feature.
694 opfer 1.130
695     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
696     hardened-sources-2.4.33.4.ebuild:
697     stable x86, bug #161171
698 phreak 1.129
699     *hardened-sources-2.6.19-r3 (27 Dec 2006)
700    
701     27 Dec 2006; Christian Heim <phreak@gentoo.org>
702     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
703     Revision bump for bug #157186 and #158786.
704 phreak 1.128
705     *hardened-sources-2.6.18-r4 (27 Dec 2006)
706    
707     27 Dec 2006; Christian Heim <phreak@gentoo.org>
708     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
709     Revision bump for bug #157186.
710 phreak 1.127
711     *hardened-sources-2.6.19-r2 (23 Dec 2006)
712    
713     23 Dec 2006; Christian Heim <phreak@gentoo.org>
714     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
715     Revision bump to pull in genpatches-2.6.19-3 for #157186.
716 phreak 1.126
717     17 Dec 2006; Christian Heim <phreak@gentoo.org>
718     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
719     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
720     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
721     hardened-sources-2.6.19-r1.ebuild:
722     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
723     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
724 pappy 1.125
725     *hardened-sources-2.4.33.4 (17 Dec 2006)
726    
727     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
728     +hardened-sources-2.4.33.4.ebuild:
729     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
730     and quilting
731 phreak 1.124
732     *hardened-sources-2.6.19-r1 (14 Dec 2006)
733    
734     14 Dec 2006; Christian Heim <phreak@gentoo.org>
735     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
736     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
737     for reporting).
738 phreak 1.123
739     *hardened-sources-2.6.19 (13 Dec 2006)
740    
741     13 Dec 2006; Christian Heim <phreak@gentoo.org>
742     +hardened-sources-2.6.19.ebuild:
743     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
744     Brad for providing that prompt update.
745 phreak 1.122
746     *hardened-sources-2.6.18-r3 (13 Dec 2006)
747    
748     13 Dec 2006; Christian Heim <phreak@gentoo.org>
749     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
750     +hardened-sources-2.6.18-r3.ebuild:
751     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
752     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
753 phreak 1.121
754     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
755     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
756 nixnut 1.120
757     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
758     Stable on ppc wrt bug 157356
759 opfer 1.119
760     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
761     hardened-sources-2.6.18.ebuild:
762     stable x86, bug #157356
763 phreak 1.118
764     *hardened-sources-2.6.18-r2 (06 Dec 2006)
765    
766     06 Dec 2006; Christian Heim <phreak@gentoo.org>
767     +hardened-sources-2.6.18-r2.ebuild:
768     Revision bump, including 2.6.18.5 (via genpatches) and
769     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
770     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
771     redesign.
772 phreak 1.117
773     06 Dec 2006; Christian Heim <phreak@gentoo.org>
774     hardened-sources-2.6.18.ebuild:
775     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
776     of Mike Doty).
777 phreak 1.116
778     *hardened-sources-2.6.18-r1 (23 Nov 2006)
779    
780     23 Nov 2006; Christian Heim <phreak@gentoo.org>
781     +hardened-sources-2.6.18-r1.ebuild:
782     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
783 phreak 1.115
784     *hardened-sources-2.6.18 (11 Nov 2006)
785    
786     11 Nov 2006; Christian Heim <phreak@gentoo.org>
787     +hardened-sources-2.6.18.ebuild:
788     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
789 solar 1.114
790     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
791     - mark amd64 stable also. bug #151877
792 solar 1.113
793     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
794     - mark 2.6.17-r1 stable
795 phreak 1.112
796     27 Aug 2006; Christian Heim <phreak@gentoo.org>
797     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
798     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
799 phreak 1.111
800     *hardened-sources-2.6.17-r1 (26 Aug 2006)
801    
802     26 Aug 2006; Christian Heim <phreak@gentoo.org>
803     +hardened-sources-2.6.17-r1.ebuild:
804     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
805     grsecurity patch.
806 phreak 1.110
807     *hardened-sources-2.6.17 (17 Aug 2006)
808    
809     17 Aug 2006; Christian Heim <phreak@gentoo.org>
810     +hardened-sources-2.6.17.ebuild:
811     Bumping the hardened-sources-2.6 series to 2.6.17, using
812     genpatches-2.6.17-6.base.
813 solar 1.109
814     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
815     - stable on x86 and amd64
816 solar 1.108
817     *hardened-sources-2.6.16-r11 (15 Jul 2006)
818    
819     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
820     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
821     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
822     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
823     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
824     crusty ebuilds
825 johnm 1.107
826     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
827     hardened-sources-2.6.16-r10.ebuild:
828     marking stable on x86 and amd64
829 solar 1.106
830     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
831     - 2.4.32-r6 stable on x86. RSBAC state unknown
832 kang 1.105
833     *hardened-sources-2.4.32-r7 (10 Jul 2006)
834    
835     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
836     +hardened-sources-2.4.32-r7.ebuild:
837     Bump PaX for RSBAC to test-17
838 johnm 1.104
839     *hardened-sources-2.6.16-r9 (03 Jul 2006)
840    
841     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
842     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
843     hardened-sources-2.6.16 bump to latest -base.
844 solar 1.103
845     *hardened-sources-2.4.32-r6 (30 Jun 2006)
846    
847     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
848     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
849     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
850     sysctl controlable resource logging
851 johnm 1.102
852     *hardened-sources-2.6.16-r7 (05 Jun 2006)
853    
854     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
855     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
856     push new 2.6.16 release in preparation for stable
857 solar 1.101
858     22 May 2006; <solar@gentoo.org> :
859     - redigest bug 134002
860 kang 1.100
861     *hardened-sources-2.4.32-r5 (16 May 2006)
862    
863     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
864     +hardened-sources-2.4.32-r5.ebuild:
865     Fixes rsbac common patching (new patch in new -r5 patchset)
866 solar 1.99
867     *hardened-sources-2.4.32-r4 (13 May 2006)
868    
869     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
870     +hardened-sources-2.4.32-r4.ebuild:
871     - security bumps
872 johnm 1.98
873     *hardened-sources-2.6.16-r6 (03 May 2006)
874    
875     03 May 2006; John Mylchreest <johnm@gentoo.org>
876     +hardened-sources-2.6.16-r6.ebuild:
877     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
878 johnm 1.97
879     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
880     hardened-sources-2.6.14-r8.ebuild:
881     fix x86_64 build problem, this will delay the digest issue again for a short
882     while but it will sort itself out
883 johnm 1.96
884     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
885     hardened-sources-2.6.14-r8.ebuild:
886     bump hardened patchset
887 antarus 1.94
888     27 Apr 2006; Alec Warner <antarus@gentoo.org>
889     files/digest-hardened-sources-2.4.32-r2,
890     files/digest-hardened-sources-2.4.32-r3,
891     files/digest-hardened-sources-2.6.14-r8, Manifest:
892     Fixing duff SHA256 digests: Bug # 131293
893 johnm 1.93
894 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
895    
896     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
897     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
898     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
899     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
900     cleanup of old uneccessary sources
901    
902 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
903     fix digest
904 johnm 1.92
905     *hardened-sources-2.6.14-r8 (20 Apr 2006)
906    
907     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
908     +hardened-sources-2.6.14-r8.ebuild:
909     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
910 johnm 1.91
911     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
912     Turning on gpg-signing again, and recomitting
913 johnm 1.90
914     *hardened-sources-2.6.16-r4 (20 Apr 2006)
915    
916     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
917     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
918     +hardened-sources-2.6.16-r4.ebuild:
919     Fix numerous security vulns
920 solar 1.89
921     *hardened-sources-2.4.32-r3 (16 Apr 2006)
922    
923     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
924     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
925     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
926     - security bump for bug #112791. Removed old ebuilds
927 johnm 1.88
928     *hardened-sources-2.6.16-r3 (15 Apr 2006)
929    
930     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
931     +hardened-sources-2.6.16-r3.ebuild:
932     Removing silly localversion which I missed
933 johnm 1.87
934     *hardened-sources-2.6.14-r7 (14 Apr 2006)
935    
936     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
937     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
938     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
939 johnm 1.86
940     *hardened-sources-2.6.16-r2 (13 Apr 2006)
941    
942     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
943     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
944     +hardened-sources-2.6.16-r2.ebuild:
945     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
946     labels, dropping USERGROUP define fixes, since these were merged mainstream.
947 johnm 1.85
948     *hardened-sources-2.6.16-r1 (11 Apr 2006)
949    
950     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
951     +hardened-sources-2.6.16-r1.ebuild:
952     Bumping to include ppc build fix and 2.6.16.3
953 tsunam 1.84
954     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
955     hardened-sources-2.6.14-r6.ebuild:
956     Stable on x86; bug #127718
957 johnm 1.83
958     *hardened-sources-2.6.16 (31 Mar 2006)
959    
960     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
961     +hardened-sources-2.6.16.ebuild:
962     Bumping to new version of grsec, and kernel base. New squashfs. Based on
963     2.6.16.1
964 cryos 1.82
965     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
966     hardened-sources-2.6.14-r6.ebuild:
967     Stable on amd64, bug 127718.
968 nixnut 1.81
969     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
970     Stable on ppc. Bug #127718
971 johnm 1.80
972     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
973     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
974     -hardened-sources-2.6.14-r4.ebuild:
975     Cleanup.
976 johnm 1.79
977     *hardened-sources-2.6.14-r6 (15 Mar 2006)
978    
979     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
980     +hardened-sources-2.6.14-r6.ebuild:
981     Fixes grsec policy recreation bug and adds a
982     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
983 solar 1.78
984     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
985     - stable on x86
986 hansmi 1.77
987     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
988     hardened-sources-2.6.14-r5.ebuild:
989     Stable on ppc.
990 johnm 1.76
991     *hardened-sources-2.6.14-r5 (01 Feb 2006)
992    
993     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
994     +hardened-sources-2.6.14-r5.ebuild:
995     fixing every known exploit
996 solar 1.75
997     *hardened-sources-2.4.32-r2 (26 Jan 2006)
998    
999     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1000     +hardened-sources-2.4.32-r2.ebuild:
1001     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1002 solar 1.74
1003     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1004    
1005     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1006     - version bump for new genpatches which fix up a few sec holes
1007 solar 1.73
1008     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1009    
1010     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1011     - revision bump to add misc vital linux kernel security patches.
1012 johnm 1.72
1013     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1014    
1015     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1016     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1017     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1018 johnm 1.71
1019     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1020     hardened-sources-2.6.14-r2.ebuild:
1021     making x86 & amd64 stable following testing.
1022 johnm 1.70
1023     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1024    
1025     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1026     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1027     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1028     network hooks.
1029 johnm 1.69
1030     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1031     hardened-sources-2.6.14-r1.ebuild:
1032     bumping to stable early for sec fix on x86 & amd64
1033 johnm 1.68
1034     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1035    
1036     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1037     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1038     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1039 solar 1.67
1040     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1041     - stable on x86 security bug #114227 CAN-2005-3257
1042 kang 1.66
1043     *hardened-sources-2.4.32 (19 Nov 2005)
1044    
1045     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1046     +hardened-sources-2.4.32.ebuild:
1047     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1048     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1049     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1050     rsbac >> /etc/portage/package.use)
1051 johnm 1.65
1052     *hardened-sources-2.6.14 (14 Nov 2005)
1053    
1054     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1055     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1056     Bumping 2.6 series to 2.6.14.2
1057 johnm 1.64
1058     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1059    
1060     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1061     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1062     +hardened-sources-2.6.13-r2.ebuild:
1063     Fixes minor build error in ppc.
1064 johnm 1.63
1065     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1066    
1067     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1068     +hardened-sources-2.6.13-r1.ebuild:
1069     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1070     2.6.13.4, fixes some major amd64 stability problems.
1071 johnm 1.62
1072     *hardened-sources-2.6.13 (16 Sep 2005)
1073    
1074     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1075     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1076     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1077     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1078     users should test this thoroughly.
1079 solar 1.61
1080     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1081     - stable on x86
1082 johnm 1.60
1083     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1084    
1085     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1086     +hardened-sources-2.6.11-r15.ebuild:
1087     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1088     grsec redefining curr_ip struct.
1089 solar 1.59
1090     *hardened-sources-2.4.31 (20 Jun 2005)
1091    
1092     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1093     initial import of 2.4.31 tree
1094 johnm 1.58
1095     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1096    
1097     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1098     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1099     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1100     naming scheme to abide by genpatches
1101 johnm 1.57
1102     *hardened-sources-2.6.11-r13 (18 May 2005)
1103    
1104     18 May 2005; John Mylchreest <johnm@gentoo.org>
1105     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1106     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1107     target. sorry about that. Fixes bug #93022
1108 johnm 1.56
1109     *hardened-sources-2.6.11-r12 (17 May 2005)
1110    
1111     17 May 2005; John Mylchreest <johnm@gentoo.org>
1112     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1113     +hardened-sources-2.6.11-r12.ebuild:
1114     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1115     merges in genpatches-base
1116 johnm 1.55
1117     *hardened-sources-2.6.11-r12 (17 May 2005)
1118    
1119     17 May 2005; John Mylchreest <johnm@gentoo.org>
1120     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1121     +hardened-sources-2.6.11-r12.ebuild:
1122     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1123     merges in genpatches-base
1124 solar 1.54
1125     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1126     -files/2.4.27-cmdline-race.patch,
1127     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1128     -files/2.4.28-grsec-binfmt_a.out.patch,
1129     -files/2.4.28-grsec-cmdline-race.patch,
1130     -files/2.4.28-selinux-binfmt_a.out.patch,
1131     -files/2.4.28-selinux-cmdline-race.patch,
1132     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1133     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1134     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1135     cleanup..
1136 solar 1.53
1137     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1138    
1139     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1140     - disable aout by default
1141 solar 1.52
1142     *hardened-sources-2.4.30 (18 Apr 2005)
1143    
1144     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1145     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1146     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1147     use
1148 tocharian 1.50
1149 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1150    
1151     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1152     +hardened-sources-2.4.29.ebuild:
1153     New hardened-patches-2.4-29.0 patchball.
1154     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1155    
1156     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1157    
1158     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1159     +hardened-sources-2.4.28-r5.ebuild:
1160     Added a fix for a PaX vulnerability.
1161    
1162     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1163 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1164     Stable on x86
1165 solar 1.49
1166     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1167     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1168     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1169     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1170     - fixed/added RDEPEND= in all kernel-2 ebuilds
1171 tocharian 1.48
1172     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1173    
1174     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1175     +hardened-sources-2.4.28-r4.ebuild:
1176     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1177     backport of neighbour hash updates.
1178 tocharian 1.47
1179     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1180     hardened-sources-2.4.28-r3.ebuild:
1181     Stable on x86
1182 tseng 1.46
1183     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1184    
1185     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1186     +hardened-sources-2.6.10-r3.ebuild:
1187     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1188     in 2005.0
1189 tocharian 1.45
1190     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1191     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1192     hardened-sources-2.4.28-r2.ebuild:
1193     Mark stable on x86
1194 tocharian 1.44
1195     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1196    
1197     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1198     +hardened-sources-2.4.28-r3.ebuild:
1199     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1200 tocharian 1.43
1201     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1202     hardened-sources-2.4.28.ebuild:
1203     Mark stable on x86.
1204 tocharian 1.42
1205     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1206    
1207     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1208     +hardened-sources-2.4.28-r2.ebuild:
1209     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1210     Mazinger for grsecurity patches as well.
1211 plasmaroo 1.41
1212     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1213    
1214     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1215     Security bump. Thank tocharian for rolling a new patchset...
1216 solar 1.40
1217     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1218     +files/2.4.28-grsec-cmdline-race.patch,
1219     +files/2.4.28-selinux-binfmt_a.out.patch,
1220     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1221     - Round up remaining security patches that appear to be missing in 2.4.28. -
1222     PaX standalone updated to current. hgpv=28.1
1223 solar 1.39
1224     *hardened-sources-2.4.28 (28 Nov 2004)
1225    
1226     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1227     security bump. Thank tocharian for rolling a new patchset
1228 scox 1.31
1229 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1230    
1231     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1232     +hardened-sources-2.4.27-r3.ebuild:
1233     Applies the new 2.4-27.2 patchball which updates
1234     GRSecurity to the 2.0.1 version.
1235    
1236 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1237    
1238     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1239     +hardened-sources-2.4.27-r2.ebuild:
1240     Version bump.
1241     This version uses the new 2.4-27.1 patchball which updates
1242     both the SELinux PaX hooks patch and the SELinux headers.
1243    
1244 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1245    
1246     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1247     +hardened-sources-2.4.27-r1.ebuild,
1248     -hardened-sources-2.4.27.ebuild,
1249     +files/2.4.27-cmdline-race.patch:
1250     Version bump, fix for cmdline race. See bug #59905.
1251    
1252     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1253    
1254     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1255     +hardened-sources-2.4.26-r6.ebuild,
1256     -hardened-sources-2.4.26-r5.ebuild,
1257     -hardened-sources-2.4.26-r4.ebuild,
1258     +files/2.4.26-cmdline-race.patch:
1259     Version bump, fix for cmdline race. See bug #59905.
1260    
1261 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1262    
1263     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1264     +hardened-sources-2.4.27.ebuild,
1265     +files/2.4.27-CAN-2004-0394.patch:
1266     Ported the patchball to the 2.4.27 kernel version.
1267    
1268 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1269    
1270     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1271     +hardened-sources-2.4.26-r5.ebuild:
1272 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1273 scox 1.34 It adds the following features:
1274     - Squashfs
1275     - Ebtables
1276     - Netdev random (core+drivers)
1277     - Watchdog Timer (WDT) fix.
1278    
1279 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1280    
1281     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1282     +hardened-sources-2.4.26-r4.ebuild,
1283     +files/2.4.26-CAN-2004-0415.patch,
1284     -hardened-sources-2.4.26-3:
1285     Version bump, fix for CAN 0415, see bug #59378.
1286    
1287 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1288    
1289     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1290     +hardened-sources-2.4.26-r3.ebuild,
1291     +files/2.4.26-CAN-2004-0497.patch,
1292     -hardened-sources-2.4.26-r2.ebuild:
1293     Version bump, fixed CAN 0497, see bug #56171.
1294    
1295 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1296    
1297     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1298 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1299 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1300     +files/2.4.26-CAN-2004-0535.patch,
1301     -hardened-sources-2.4.26-r1.ebuild:
1302     Fixes for both CAN 0495 and 0535, see bug #54976
1303 pvdabeel 1.27
1304 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1305     hardened-sources-2.4.26-r1.ebuild:
1306     QA - fix use invocation
1307 scox 1.28
1308     *hardened-sources-2.4.26-r1 (22 June 2004)
1309    
1310     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1311     +hardened-sources-2.4.26-r1.ebuild,
1312     +files/2.4.26-CAN-2004-0394.patch,
1313     +files/2.4.26-signal-race.patch,
1314     -hardened-sources-2.4.26.ebuild,
1315     -hardened-sources-2.4.24-r3.ebuild:
1316     Version bump for the CAN-2004-0394 issue and bug #53804
1317     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1318    
1319    
1320 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1321     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1322     Masked hardened-sources-2.4.26.ebuild broken for ppc
1323    
1324     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1325     hardened-sources-2.4.24-r3.ebuild:
1326     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1327 plasmaroo 1.25
1328 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1329    
1330     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1331     +hardened-sources-2.4.26.ebuild:
1332     Updated hardened-sources for the 2.4.26 kernel
1333     Removed broken components, updated almost everything.
1334    
1335 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1336    
1337     17 Apr 2004; <plasmaroo@gentoo.org>
1338     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1339     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1340     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1341     +hardened-sources-2.4.24-r3.ebuild:
1342     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1343     vulnerabilities. Old revisions removed.
1344 plasmaroo 1.24
1345     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1346    
1347     15 Apr 2004; <plasmaroo@gentoo.org>
1348     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1349     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1350     Version bump for the CAN-2004-0109 issue; bug #47881.
1351 aliz 1.23
1352     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1353     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1354     Add eutils to inherit.
1355 plasmaroo 1.22
1356     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1357    
1358     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1359     files/hardened-sources-2.4.24.munmap.patch:
1360     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1361 scox 1.19
1362 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1363 scox 1.26
1364 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1365     hardened-sources-2.4.24.ebuild:
1366     Version bump, updated most of the components.
1367     This release includes the following:
1368    
1369     - Hardened security
1370     - Netfilter patch-o-matic 20031219
1371     - FreeSWAN 2.04 & x509 1.4.8
1372     - EVMS 2.2.2
1373     - XFS 1.3.1
1374     - cryptoloop jari
1375     - grsecurity 2.0-rc4
1376     - SELinux
1377     - PaX 200402060000
1378     - PaX Obscurity 200308302223
1379     - Others...
1380    
1381     Neither -ck nor systrace are included anymore.
1382    
1383 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1384    
1385     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1386     hardened-sources-2.4.22-r2.ebuild:
1387 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1388 scox 1.19
1389     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1390 iggy 1.17
1391     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1392 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1393 iggy 1.16
1394     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1395 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1396     Version bump for the 'do_brk' vulnerability.
1397 iggy 1.15
1398     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1399     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1400     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1401     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1402 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1403 frogger 1.14
1404     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1405     hardened-sources-2.4.22.ebuild:
1406 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1407     components. These are no longer handled in the kernel
1408     so this code was not necessary.
1409 frogger 1.13
1410     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1411     New 2.4.22 based hardened-sources thanks to
1412     Phil West <p.west@computer.org>.
1413    
1414     These sources include:
1415 plasmaroo 1.18 - New SELinux API
1416     - Updated CK-base
1417     - Updated GRSec
1418     - Systrace
1419     - SuperFreeS/WAN 1.99.8
1420     - Propolice kernel build support
1421     - EVMS
1422     - Other various security related patches
1423 frogger 1.11
1424 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1425    
1426     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1427     Updated hardened-sources based on the 2.4.21 Linux kernel.
1428     This includes updates to most major components such as:
1429 plasmaroo 1.18 - ck-base-0306300059
1430     - selinux-2.4-2003071106
1431     - grsecurity-2.0-rc1
1432     - Updated IPTables patch-o-matic
1433     - Updated SuperFreeS/WAN
1434    
1435 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1436     updated patch set ready for the 2.4.21 based kernel.
1437    
1438 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1439     Initial import of hardened-sources-2.4.20-r4. This revision
1440     includes only a few changes, but one of these is an important
1441     security fix. It is recommended all users of hardened-sources
1442     upgrade to this release.
1443 plasmaroo 1.18
1444 frogger 1.11 - ioperm bug fix
1445     - fixed compilation failure when building without GRSec
1446 plasmaroo 1.18
1447 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1448     due to time constraints, but is planned for inclusion in the near
1449     future.
1450 msterret 1.10
1451     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1452    
1453     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1454     hardened-sources-2.4.20-r3.ebuild:
1455 plasmaroo 1.18 Add Header...
1456 frogger 1.9
1457     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1458     hardened-sources-2.4.20-r3.ebuild:
1459     Removed warnings from ebuild. This kernel should be safe to
1460     use at this point.
1461 frogger 1.8
1462     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1463    
1464     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1465     hardened-sources-2.4.20-r3.ebuild:
1466     New revision. Includes the following changes over -r2:
1467 plasmaroo 1.18
1468 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1469     - Super FreeS/WAN 1.99.7rc2
1470     - PaX for the LSM/SELinux branch
1471     - GRSecurity 2.0-pre4 (role based access control)
1472     - Systrace 1.3
1473     - EXT3 fixes
1474     - EVMS 2.0.1
1475     - GCC 3.1+ compile optimizations
1476     - ProPolice kernel build support
1477     - Hashing table security fixes
1478 frogger 1.3
1479     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1480 frogger 1.7
1481     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1482     Initial import of hardened-sources-r2. This new
1483     ebuild includes many new performance and security
1484     related patches. As in -r1, it will patch in
1485     LSM/SELinux if "selinux" is in USE, otherwise it
1486     will patch in GRSecurity. The following patches
1487     are included in this revision:
1488 plasmaroo 1.18
1489 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1490     (pulled from the base CK patch)
1491     - ptrace exploit patch for the LSM kernel
1492     (the GRSec patch already fixes this)
1493     - LSM 2.4-2003040709
1494     - SELinux 2.4-2003040709
1495     - Systrace v1.2
1496     - IPTables patch-o-matic base patches - 20030107
1497     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1498     - Super FreeS/WAN 1.99.6.1
1499     - GRSecurity 1.9.9g
1500     - MPPE
1501     - EXT3 data journal fix
1502     - CIPE 1.5.4
1503 frogger 1.6
1504     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1505     hardened-sources-2.4.20-r1.ebuild, manifest:
1506 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1507 frogger 1.5
1508     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1509     hardened-sources-2.4.20-r1.ebuild:
1510     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1511     is patched in instead. Ptrace patches for selinux have also been added. In
1512     either case, systrace support will be patched in as well.
1513 frogger 1.3
1514     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1515     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1516 plasmaroo 1.18 Revision bump for new sources.
1517 frogger 1.4
1518 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1519 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1520 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1521 method 1.1
1522 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1523    
1524 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1525     hardened-sources-2.4.20.ebuild:
1526 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20