/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.253 - (hide annotations) (download)
Sun Nov 9 23:41:37 2008 UTC (5 years, 10 months ago) by gengor
Branch: MAIN
Changes since 1.252: +7 -1 lines
Version bump, 2.6.27-r1.
(Portage version: 2.1.4.5)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 phreak 1.204 # Copyright 2000-2008 Gentoo Foundation; Distributed under the GPL v2
3 gengor 1.253 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.252 2008/11/04 06:13:28 gengor Exp $
4    
5     *hardened-sources-2.6.27-r1 (09 Nov 2008)
6    
7     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
8     +hardened-sources-2.6.27-r1.ebuild:
9     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
10 gengor 1.252
11     *hardened-sources-2.6.27 (04 Nov 2008)
12    
13     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
14     +hardened-sources-2.6.27.ebuild:
15     Initial 2.6.27 release.
16 gengor 1.251
17     *hardened-sources-2.6.26-r5 (03 Nov 2008)
18    
19     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
20     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
21     +hardened-sources-2.6.26-r5.ebuild:
22     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
23     Clean out some old versions.
24 nixnut 1.250
25     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
26     Stable on ppc
27 gengor 1.249
28     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
29     hardened-sources-2.6.25-r9.ebuild:
30     Stable on amd64/x86.
31 gengor 1.248
32     *hardened-sources-2.6.25-r9 (26 Oct 2008)
33    
34     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
35     +hardened-sources-2.6.25-r9.ebuild:
36     Update to Linux 2.6.25.19
37 nixnut 1.247
38     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
39     Stable on ppc
40 gengor 1.246
41     *hardened-sources-2.6.26-r4 (14 Oct 2008)
42    
43     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
44     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
45     Update to latest grsecurity patch, fixing building of non-modular kernels.
46 gengor 1.245
47     *hardened-sources-2.6.26-r3 (12 Oct 2008)
48    
49     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
50     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
51     +hardened-sources-2.6.26-r3.ebuild:
52     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
53     2.6.26-r1: Removed.
54     2.6.25-r8: Stable amd64/x86.
55 gengor 1.244
56     *hardened-sources-2.6.25-r8 (09 Oct 2008)
57    
58     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
59     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
60     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
61     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
62 nixnut 1.243
63     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
64     Stable on ppc
65 gengor 1.242
66     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
67     hardened-sources-2.6.25-r7.ebuild:
68     Stable amd64/x86.
69 gengor 1.241
70     *hardened-sources-2.6.26-r2 (13 Sep 2008)
71    
72     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
73     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
74     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
75     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
76 gengor 1.240
77     *hardened-sources-2.6.25-r7 (13 Sep 2008)
78    
79     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
80     +hardened-sources-2.6.25-r7.ebuild:
81     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
82 gengor 1.239
83     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
84     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
85     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
86     hardened-sources-2.6.26-r1.ebuild:
87     Update DESCRIPTION and HGPV_URI.
88 gengor 1.238
89     *hardened-sources-2.6.25-r6 (09 Sep 2008)
90    
91     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
92     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
93     2.6.25-r6: Update to Linux 2.6.25.17.
94     2.6.24-r3: Removed.
95 gengor 1.237
96     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
97     hardened-sources-2.6.25-r5.ebuild:
98     Stable on amd64/x86
99 gengor 1.236
100     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
101     Update my email address.
102 nixnut 1.235
103     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
104     stable on ppc
105 battousai 1.234
106     *hardened-sources-2.6.26-r1 (23 Aug 2008)
107     *hardened-sources-2.6.25-r5 (23 Aug 2008)
108    
109     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
110     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
111     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
112     +hardened-sources-2.6.26-r1.ebuild:
113     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
114     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
115     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
116     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
117     (gengor).
118 solar 1.233
119     *hardened-sources-2.6.26 (18 Aug 2008)
120     *hardened-sources-2.6.25-r4 (18 Aug 2008)
121    
122     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
123     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
124     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
125     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
126     2.6.25-r2: Removed.
127 tove 1.232
128     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
129     Remove phreak from metadata.xml (#96398)
130 solar 1.231
131     *hardened-sources-2.6.25-r3 (31 Jul 2008)
132    
133     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
134     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
135     +hardened-sources-2.6.25-r3.ebuild:
136     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
137     fixes, including security bug #231750.
138 nixnut 1.230
139     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
140     Stable on ppc
141 solar 1.229
142     *hardened-sources-2.6.25-r2 (05 Jul 2008)
143    
144     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
145     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
146     +hardened-sources-2.6.25-r2.ebuild:
147     2.6.23-r4: Stable x86/amd64
148     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
149     2.6.23-r{11,12}: Removed due to multiple vulns.
150     (gengor & kerframil)
151 nixnut 1.228
152     04 Jul 2008; nixnut <nixnut@gentoo.org>
153     hardened-sources-2.6.23-r13.ebuild:
154     Stable on ppc
155 solar 1.227
156     *hardened-sources-2.6.25-r1 (30 Jun 2008)
157    
158     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
159     +hardened-sources-2.6.25-r1.ebuild:
160     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
161     grsecurity release. 2.6.23-r13: x86/amd64 stable
162 solar 1.226
163     *hardened-sources-2.6.25 (17 Jun 2008)
164     *hardened-sources-2.6.24-r3 (17 Jun 2008)
165     *hardened-sources-2.6.23-r13 (17 Jun 2008)
166    
167     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
168     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
169     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
170     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
171     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
172     2.6.25: Initial 2.6.25 release.
173 solar 1.225
174     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
175     - fasttrack to stable x86/amd64
176 swegener 1.224
177     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
178     Fix broken digest for linux-2.6.24.tar.bz2.
179 solar 1.223
180     *hardened-sources-2.6.24-r2 (11 May 2008)
181     *hardened-sources-2.6.23-r12 (11 May 2008)
182    
183     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
184     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
185     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
186     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
187     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
188     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
189     security bugs 219901, 220691, 220975, 220979, 221123. New
190     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
191     should be removed as far as I'm concerned, everything else remove due to
192     vulnerable to numerous security bugs or brokeness.
193 nixnut 1.222
194     10 May 2008; nixnut <nixnut@gentoo.org>
195     hardened-sources-2.6.23-r11.ebuild:
196     Stable on ppc
197 solar 1.221
198     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
199     - -r11 stable on x86/amd64
200 solar 1.220
201     *hardened-sources-2.6.23-r11 (01 May 2008)
202    
203     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
204     - version bump to fix ulgy linux bugs
205 phreak 1.219
206     *hardened-sources-2.6.24-r1 (30 Apr 2008)
207    
208     30 Apr 2008; Christian Heim <phreak@gentoo.org>
209     +hardened-sources-2.6.24-r1.ebuild:
210     Revision bump (thanks to Kerin and Gordon, again), pulling
211     genpatches-2.6.24-7, solving #219089. Additionally contains further security
212     fixes plus some minor updates.
213 phreak 1.218
214     *hardened-sources-2.6.23-r10 (30 Apr 2008)
215    
216     30 Apr 2008; Christian Heim <phreak@gentoo.org>
217     +hardened-sources-2.6.23-r10.ebuild:
218     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
219     Additional contains "various other fixes".
220 phreak 1.217
221     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
222     Update the longdescription in metadata, thanks to Gordon Malm.
223 nixnut 1.216
224     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
225     Stable on ppc wrt bug #213255
226 solar 1.215
227     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
228     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
229     - stable on x86/amd64 per request. Removed obsolete ebuilds
230 phreak 1.214
231     *hardened-sources-2.6.24 (07 Apr 2008)
232    
233     07 Apr 2008; Christian Heim <phreak@gentoo.org>
234     +hardened-sources-2.6.24.ebuild:
235     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
236     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
237     for the many contributions and their continued effort in #216612) based on
238     2.6.24 and genpatches-2.6.24-5.
239    
240     The current ebuild/patchset contains these things:
241     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
242     * Introduces bespoke server and workstation oriented security levels
243     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
244 phreak 1.213
245     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
246     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
247     maintaining it).
248 phreak 1.212
249     24 Mar 2008; Christian Heim <phreak@gentoo.org>
250     hardened-sources-2.4.35-r2.ebuild:
251     Fixing SRC_URI for 2.4.35-r2.
252 phreak 1.211
253     *hardened-sources-2.6.23-r9 (22 Mar 2008)
254    
255     22 Mar 2008; Christian Heim <phreak@gentoo.org>
256     +hardened-sources-2.6.23-r9.ebuild:
257     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
258     * Change the default GIDs for some grsecurity options
259     * Revamp the Hardened [Gentoo] security level and make it the default level
260     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
261     * Fix a recursive lock -- call to capable() within ptrace_attach()
262     * Fix bug that allows audit and iscsi operations to be controlled via netlink
263 solar 1.210
264     *hardened-sources-2.6.23-r8 (27 Feb 2008)
265    
266     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
267     - version bump from Kerin Millar bug 210026
268 solar 1.209
269     17 Feb 2008; <solar@gentoo.org> metadata.xml,
270     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
271     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
272     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
273     - stable on x86 and remove old ebuilds
274 solar 1.207
275     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
276 solar 1.208 - stable on amd64 per request of amd64 lead
277 solar 1.206
278     *hardened-sources-2.6.23-r7 (11 Feb 2008)
279    
280     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
281     - version bump from kerin.millar
282     Changes:
283    
284     * Bump to genpatches-base-2.6.23-9
285     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
286     * Disables COMPAT_VDSO in x86/defconfig
287     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
288 phreak 1.205
289     25 Jan 2008; Christian Heim <phreak@gentoo.org>
290     -hardened-sources-2.6.22-r8.ebuild:
291     Cleaning up old versions.
292 phreak 1.204
293     *hardened-sources-2.6.23-r6 (25 Jan 2008)
294    
295     25 Jan 2008; Christian Heim <phreak@gentoo.org>
296     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
297     Revision bump, pulling in the latest genpatches.
298 phreak 1.203
299     *hardened-sources-2.6.23-r5 (24 Dec 2007)
300    
301     24 Dec 2007; Christian Heim <phreak@gentoo.org>
302     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
303     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
304     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
305     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
306 phreak 1.202
307     24 Dec 2007; Christian Heim <phreak@gentoo.org>
308     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
309     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
310     -hardened-sources-2.6.23-r3.ebuild:
311     Cleaning out some unused, old versions.
312 phreak 1.201
313     24 Dec 2007; Christian Heim <phreak@gentoo.org>
314     hardened-sources-2.6.23-r4.ebuild:
315     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
316     in the tree for long, but there isn't much of a difference between this and
317     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
318 phreak 1.200
319     *hardened-sources-2.6.23-r4 (23 Dec 2007)
320    
321     23 Dec 2007; Christian Heim <phreak@gentoo.org>
322     +hardened-sources-2.6.23-r4.ebuild:
323     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
324 phreak 1.199
325     *hardened-sources-2.6.23-r3 (04 Dec 2007)
326    
327     04 Dec 2007; Christian Heim <phreak@gentoo.org>
328     +hardened-sources-2.6.23-r3.ebuild:
329     Revision bump, pulling in 2.6.23.9.
330 phreak 1.198
331     *hardened-sources-2.6.23-r2 (25 Nov 2007)
332    
333     25 Nov 2007; Christian Heim <phreak@gentoo.org>
334     +hardened-sources-2.6.23-r2.ebuild:
335     Updated patchset, thanks to solar.
336 phreak 1.197
337     *hardened-sources-2.6.23-r1 (31 Oct 2007)
338    
339     31 Oct 2007; Christian Heim <phreak@gentoo.org>
340     +hardened-sources-2.6.23-r1.ebuild:
341     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
342 solar 1.196
343     29 Oct 2007; <solar@gentoo.org> metadata.xml:
344     - update metadata.xml
345 phreak 1.195
346     25 Oct 2007; Christian Heim <phreak@gentoo.org>
347     hardened-sources-2.6.22-r8.ebuild:
348     Marking 2.6.22-r8 stable on amd64 and x86.
349 phreak 1.194
350     21 Oct 2007; Christian Heim <phreak@gentoo.org>
351     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
352     -hardened-sources-2.6.21-r4.ebuild:
353     Removing old ebuilds.
354 phreak 1.193
355     *hardened-sources-2.4.35-r2 (21 Oct 2007)
356    
357     21 Oct 2007; Christian Heim <phreak@gentoo.org>
358     +hardened-sources-2.4.35-r2.ebuild:
359     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
360     patches.
361 phreak 1.192
362     *hardened-sources-2.6.22-r8 (21 Oct 2007)
363    
364     21 Oct 2007; Christian Heim <phreak@gentoo.org>
365     +hardened-sources-2.6.22-r8.ebuild:
366     Yet another new patch, hopefully fixing the remaining issues we had w/
367     2.6.22. Candidate for stabling.
368 phreak 1.191
369     *hardened-sources-2.6.23 (13 Oct 2007)
370    
371     13 Oct 2007; Christian Heim <phreak@gentoo.org>
372     +hardened-sources-2.6.23.ebuild:
373     Initial hardened-sources-2.6.23. If people still have problems w/ bug
374     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
375 phreak 1.190
376     11 Oct 2007; Christian Heim <phreak@gentoo.org>
377     hardened-sources-2.6.20-r10.ebuild:
378     Pulling in yet another new genpatches version, fixing the PWC bug for real.
379 phreak 1.189
380     04 Oct 2007; Christian Heim <phreak@gentoo.org>
381     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
382     Removing old versions.
383 phreak 1.188
384     *hardened-sources-2.6.22-r7 (01 Oct 2007)
385    
386     01 Oct 2007; Christian Heim <phreak@gentoo.org>
387     +hardened-sources-2.6.22-r7.ebuild:
388     Revision bump, pulling in a newer patch. Should fix #194276.
389 phreak 1.187
390     30 Sep 2007; Christian Heim <phreak@gentoo.org>
391     hardened-sources-2.6.20-r10.ebuild:
392     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
393     Mike Doty).
394 phreak 1.186
395     *hardened-sources-2.6.22-r6 (26 Sep 2007)
396    
397     26 Sep 2007; Christian Heim <phreak@gentoo.org>
398     +hardened-sources-2.6.22-r6.ebuild:
399     Revision bump, grabbing up till Linux 2.6.22.9.
400 phreak 1.185
401     24 Sep 2007; Christian Heim <phreak@gentoo.org>
402     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
403     Cleaning up further.
404 phreak 1.184
405     *hardened-sources-2.6.20-r10 (24 Sep 2007)
406    
407     24 Sep 2007; Christian Heim <phreak@gentoo.org>
408     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
409     +hardened-sources-2.6.20-r10.ebuild:
410     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
411     revisions.
412 phreak 1.183
413     *hardened-sources-2.6.22-r5 (22 Sep 2007)
414    
415     22 Sep 2007; Christian Heim <phreak@gentoo.org>
416     +hardened-sources-2.6.22-r5.ebuild:
417     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
418 phreak 1.182
419     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
420     Removing johnm from metadata.xml (see #186467 for reference).
421 phreak 1.181
422     *hardened-sources-2.6.22-r4 (17 Sep 2007)
423    
424     17 Sep 2007; Christian Heim <phreak@gentoo.org>
425     +hardened-sources-2.6.22-r4.ebuild:
426     Revision bump, hopefully fixing all those weird PAX failures.
427 phreak 1.180
428     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
429     Updating the metadata.xml.
430 phreak 1.179
431     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
432     Removing tocharian from metadata due to his retirement (see #71718 for
433     reference).
434 phreak 1.178
435     *hardened-sources-2.6.20-r9 (30 Aug 2007)
436    
437     30 Aug 2007; Christian Heim <phreak@gentoo.org>
438     +hardened-sources-2.6.20-r9.ebuild:
439     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
440 phreak 1.177
441     29 Aug 2007; Christian Heim <phreak@gentoo.org>
442     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
443     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
444     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
445     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
446     -hardened-sources-2.6.22-r2.ebuild:
447     Removing some redundant versions.
448 phreak 1.176
449     *hardened-sources-2.4.35-r1 (29 Aug 2007)
450    
451     29 Aug 2007; Christian Heim <phreak@gentoo.org>
452     +hardened-sources-2.4.35-r1.ebuild:
453     Revision bump, new grsecurity patch.
454 phreak 1.175
455     *hardened-sources-2.6.20-r8 (26 Aug 2007)
456    
457     26 Aug 2007; Christian Heim <phreak@gentoo.org>
458     +hardened-sources-2.6.20-r8.ebuild:
459     Revision bump for Linux 2.6.20.17.
460 phreak 1.174
461     *hardened-sources-2.6.22-r3 (22 Aug 2007)
462    
463     22 Aug 2007; Christian Heim <phreak@gentoo.org>
464     +hardened-sources-2.6.22-r3.ebuild:
465     Revision bump for Linux 2.6.22.4.
466 phreak 1.173
467     16 Aug 2007; Christian Heim <phreak@gentoo.org>
468     hardened-sources-2.6.22-r2.ebuild:
469     Updated patchset, to fix the alignment against 2.6.22.3.
470 phreak 1.172
471     *hardened-sources-2.6.22-r2 (16 Aug 2007)
472    
473     16 Aug 2007; Christian Heim <phreak@gentoo.org>
474     +hardened-sources-2.6.22-r2.ebuild:
475     Revision bump for Linux 2.6.22.3.
476 phreak 1.171
477     *hardened-sources-2.4.35 (16 Aug 2007)
478    
479     16 Aug 2007; Christian Heim <phreak@gentoo.org>
480     +hardened-sources-2.4.35.ebuild:
481     Version bump, initial version for Linux 2.4.35.
482 phreak 1.170
483     *hardened-sources-2.6.21-r4 (16 Aug 2007)
484    
485     16 Aug 2007; Christian Heim <phreak@gentoo.org>
486     +hardened-sources-2.6.21-r4.ebuild:
487     Revision bump for Linux 2.6.21.6.
488 phreak 1.169
489     *hardened-sources-2.6.20-r7 (16 Aug 2007)
490    
491     16 Aug 2007; Christian Heim <phreak@gentoo.org>
492     +hardened-sources-2.6.20-r7.ebuild:
493     Revision bump for Linux 2.6.20.16.
494 phreak 1.168
495     *hardened-sources-2.6.22-r1 (13 Aug 2007)
496    
497     13 Aug 2007; Christian Heim <phreak@gentoo.org>
498     +hardened-sources-2.6.22-r1.ebuild:
499     Yet another revision bump.
500 phreak 1.167
501     *hardened-sources-2.6.22 (10 Aug 2007)
502    
503     10 Aug 2007; Christian Heim <phreak@gentoo.org>
504     +hardened-sources-2.6.22.ebuild:
505     Initial release for 2.6.22. If you are using hardened-sources on a desktop
506     machine (P4 or newer), be aware you might need to disable
507     CONFIG_PAX_PAGEEXEC.
508 phreak 1.166
509     04 Aug 2007; Christian Heim <phreak@gentoo.org>
510     hardened-sources-2.6.20-r6.ebuild:
511     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
512     2.6.20.15.
513 phreak 1.165
514     10 Jul 2007; Christian Heim <phreak@gentoo.org>
515     hardened-sources-2.6.20-r5.ebuild:
516     Marking hardened-sources-2.6.20-r5 stable on ppc.
517 phreak 1.164
518     10 Jul 2007; Christian Heim <phreak@gentoo.org>
519     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
520     Cleanup.
521 phreak 1.163
522     *hardened-sources-2.6.20-r6 (08 Jul 2007)
523    
524     08 Jul 2007; Christian Heim <phreak@gentoo.org>
525     +hardened-sources-2.6.20-r6.ebuild:
526     Revision bump, grabbing yet another stable release.
527 phreak 1.162
528     17 Jun 2007; Christian Heim <phreak@gentoo.org>
529     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
530     -hardened-sources-2.6.21-r2.ebuild:
531     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
532     alpha stable KEYWORD by mistake.
533 phreak 1.161
534     17 Jun 2007; Christian Heim <phreak@gentoo.org>
535     hardened-sources-2.6.20-r5.ebuild:
536     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
537     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
538 phreak 1.160
539     *hardened-sources-2.6.21-r3 (12 Jun 2007)
540    
541     12 Jun 2007; Christian Heim <phreak@gentoo.org>
542     +hardened-sources-2.6.21-r3.ebuild:
543     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
544     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
545     love.
546 phreak 1.159
547     *hardened-sources-2.6.20-r5 (11 Jun 2007)
548    
549     11 Jun 2007; Christian Heim <phreak@gentoo.org>
550     +hardened-sources-2.6.20-r5.ebuild:
551     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
552     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
553     love.
554 pappy 1.158
555     *hardened-sources-2.4.34.5 (11 Jun 2007)
556    
557     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
558     +hardened-sources-2.4.34.5.ebuild:
559     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
560 phreak 1.157
561     30 May 2007; Christian Heim <phreak@gentoo.org>
562     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
563     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
564     stale ebuild(s).
565 phreak 1.156
566     30 May 2007; Christian Heim <phreak@gentoo.org>
567     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
568     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
569     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
570     Doing some cleanups, remove stale ebuilds.
571 phreak 1.155
572     26 May 2007; Christian Heim <phreak@gentoo.org>
573     hardened-sources-2.6.21-r2.ebuild:
574     Fixing the grsecurity patch, had one '};' too much.
575 phreak 1.154
576     *hardened-sources-2.6.21-r2 (26 May 2007)
577    
578     26 May 2007; Christian Heim <phreak@gentoo.org>
579     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
580     +hardened-sources-2.6.21-r2.ebuild:
581     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
582     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
583 phreak 1.153
584     *hardened-sources-2.6.20-r4 (26 May 2007)
585    
586     26 May 2007; Christian Heim <phreak@gentoo.org>
587     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
588     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
589 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
590 phreak 1.152
591     15 May 2007; Christian Heim <phreak@gentoo.org>
592     hardened-sources-2.6.20-r3.ebuild:
593     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
594     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
595     grsecurity patch fail in that exact same hunk.
596 phreak 1.151
597     *hardened-sources-2.6.20-r3 (15 May 2007)
598    
599     15 May 2007; Christian Heim <phreak@gentoo.org>
600     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
601     Revision bump, incorporating Linux 2.6.20.11.
602    
603     *hardened-sources-2.6.21-r1 (11 May 2007)
604    
605     11 May 2007; Christian Heim <phreak@gentoo.org>
606     +hardened-sources-2.6.21-r1.ebuild:
607     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
608     mentioned in #177234.
609 kevquinn 1.150
610     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
611     files/digest-hardened-sources-2.6.21, Manifest:
612     Fix Manifest/digest for linux-2.6.21.tar.bz2
613 phreak 1.149
614     06 May 2007; Christian Heim <phreak@gentoo.org>
615     hardened-sources-2.6.21.ebuild:
616     Bumping the hardened-patches version, needed for the fix for #177234.
617 phreak 1.148
618     *hardened-sources-2.6.21 (02 May 2007)
619    
620     02 May 2007; Christian Heim <phreak@gentoo.org>
621     +hardened-sources-2.6.21.ebuild:
622     Version bump, Linux 2.6.21-hardened.
623 phreak 1.147
624     29 Apr 2007; Christian Heim <phreak@gentoo.org>
625     hardened-sources-2.6.20-r2.ebuild:
626     Adding ~ia64 on Ned's request.
627 phreak 1.146
628     29 Apr 2007; Christian Heim <phreak@gentoo.org>
629     hardened-sources-2.6.20-r2.ebuild:
630     Fixing the included grsecurity patch, wasn't alligning due to the Index:
631     header line(s).
632 phreak 1.145
633     29 Apr 2007; Christian Heim <phreak@gentoo.org>
634     hardened-sources-2.6.20-r2.ebuild:
635     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
636 armin76 1.144
637     *hardened-sources-2.6.20-r2 (10 Apr 2007)
638    
639     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
640     +hardened-sources-2.6.20-r2.ebuild:
641     Version bump, on behalf of phreak
642 phreak 1.143
643     *hardened-sources-2.6.20-r1 (04 Apr 2007)
644    
645     04 Apr 2007; Christian Heim <phreak@gentoo.org>
646     +hardened-sources-2.6.20-r1.ebuild:
647     Revision bump, grabbing a newer grsecurity snapshot.
648 phreak 1.142
649     *hardened-sources-2.6.20 (25 Mar 2007)
650    
651     25 Mar 2007; Christian Heim <phreak@gentoo.org>
652     +hardened-sources-2.6.20.ebuild:
653     Finally a hardened-sources version for 2.6.20; many people have been waiting
654     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
655     testbox.
656 chainsaw 1.141
657     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
658     hardened-sources-2.6.18-r6.ebuild:
659     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
660 phreak 1.140
661     *hardened-sources-2.6.18-r6 (16 Mar 2007)
662    
663     16 Mar 2007; Christian Heim <phreak@gentoo.org>
664     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
665     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
666     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
667     supposed to be.
668 phreak 1.139
669     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
670     Fixing the Manifest, the previous one was broken (as in still had the
671     deleted ebuild in it).
672 phreak 1.138
673     06 Mar 2007; Christian Heim <phreak@gentoo.org>
674     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
675     +hardened-sources-2.6.18-r5.ebuild:
676     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
677     Linux 2.6.18.8. Also cleaning up the older version.
678    
679     *hardened-sources-2.6.18-r5 (06 Mar 2007)
680    
681     06 Mar 2007; Christian Heim <phreak@gentoo.org>
682     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
683     +hardened-sources-2.6.18-r5.ebuild:
684     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
685     Linux 2.6.18.8. Also cleaning up the older version.
686 phreak 1.137
687     24 Feb 2007; Christian Heim <phreak@gentoo.org>
688     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
689     -hardened-sources-2.6.19-r5.ebuild:
690     Removing some of the old version, that didn't work.
691 phreak 1.136
692     *hardened-sources-2.6.19-r6 (12 Feb 2007)
693    
694     12 Feb 2007; Christian Heim <phreak@gentoo.org>
695     +hardened-sources-2.6.19-r6.ebuild:
696     Revision bump, including a new grsec version fixing #166235.
697 pappy 1.134
698     *hardened-sources-2.4.34 (24 Jan 2007)
699    
700     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
701 pappy 1.135 Manifest:
702     updating Manifest with checksums of new tarball and ebuild
703    
704     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
705 pappy 1.134 +hardened-sources-2.4.34.ebuild:
706     I added new hardened sources 2.4 update, this is a critical path
707     security bugfix - all users of h-s are strongly advised
708     to update their existing hardened sources to this version.
709     It contains a fix for a kernel vulnerability that is pertaining
710     to the PaX changes to virtual memory management, possibly leading
711     to a local kernel exploit ... see grsecurity.net forums and homepage
712 phreak 1.133
713     23 Jan 2007; Christian Heim <phreak@gentoo.org>
714     files/digest-hardened-sources-2.6.19-r5, Manifest:
715     Fixing the patch-tarball digest.
716 phreak 1.132
717     *hardened-sources-2.6.19-r5 (23 Jan 2007)
718    
719     23 Jan 2007; Christian Heim <phreak@gentoo.org>
720     +hardened-sources-2.6.19-r5.ebuild:
721     Revision bump, closing the recently discovered PaX expand_stack()
722     vulnerability.
723 phreak 1.131
724     *hardened-sources-2.6.19-r4 (14 Jan 2007)
725    
726     14 Jan 2007; Christian Heim <phreak@gentoo.org>
727     +hardened-sources-2.6.19-r4.ebuild:
728     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
729     dropping the randomized PID feature.
730 opfer 1.130
731     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
732     hardened-sources-2.4.33.4.ebuild:
733     stable x86, bug #161171
734 phreak 1.129
735     *hardened-sources-2.6.19-r3 (27 Dec 2006)
736    
737     27 Dec 2006; Christian Heim <phreak@gentoo.org>
738     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
739     Revision bump for bug #157186 and #158786.
740 phreak 1.128
741     *hardened-sources-2.6.18-r4 (27 Dec 2006)
742    
743     27 Dec 2006; Christian Heim <phreak@gentoo.org>
744     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
745     Revision bump for bug #157186.
746 phreak 1.127
747     *hardened-sources-2.6.19-r2 (23 Dec 2006)
748    
749     23 Dec 2006; Christian Heim <phreak@gentoo.org>
750     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
751     Revision bump to pull in genpatches-2.6.19-3 for #157186.
752 phreak 1.126
753     17 Dec 2006; Christian Heim <phreak@gentoo.org>
754     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
755     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
756     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
757     hardened-sources-2.6.19-r1.ebuild:
758     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
759     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
760 pappy 1.125
761     *hardened-sources-2.4.33.4 (17 Dec 2006)
762    
763     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
764     +hardened-sources-2.4.33.4.ebuild:
765     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
766     and quilting
767 phreak 1.124
768     *hardened-sources-2.6.19-r1 (14 Dec 2006)
769    
770     14 Dec 2006; Christian Heim <phreak@gentoo.org>
771     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
772     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
773     for reporting).
774 phreak 1.123
775     *hardened-sources-2.6.19 (13 Dec 2006)
776    
777     13 Dec 2006; Christian Heim <phreak@gentoo.org>
778     +hardened-sources-2.6.19.ebuild:
779     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
780     Brad for providing that prompt update.
781 phreak 1.122
782     *hardened-sources-2.6.18-r3 (13 Dec 2006)
783    
784     13 Dec 2006; Christian Heim <phreak@gentoo.org>
785     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
786     +hardened-sources-2.6.18-r3.ebuild:
787     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
788     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
789 phreak 1.121
790     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
791     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
792 nixnut 1.120
793     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
794     Stable on ppc wrt bug 157356
795 opfer 1.119
796     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
797     hardened-sources-2.6.18.ebuild:
798     stable x86, bug #157356
799 phreak 1.118
800     *hardened-sources-2.6.18-r2 (06 Dec 2006)
801    
802     06 Dec 2006; Christian Heim <phreak@gentoo.org>
803     +hardened-sources-2.6.18-r2.ebuild:
804     Revision bump, including 2.6.18.5 (via genpatches) and
805     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
806     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
807     redesign.
808 phreak 1.117
809     06 Dec 2006; Christian Heim <phreak@gentoo.org>
810     hardened-sources-2.6.18.ebuild:
811     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
812     of Mike Doty).
813 phreak 1.116
814     *hardened-sources-2.6.18-r1 (23 Nov 2006)
815    
816     23 Nov 2006; Christian Heim <phreak@gentoo.org>
817     +hardened-sources-2.6.18-r1.ebuild:
818     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
819 phreak 1.115
820     *hardened-sources-2.6.18 (11 Nov 2006)
821    
822     11 Nov 2006; Christian Heim <phreak@gentoo.org>
823     +hardened-sources-2.6.18.ebuild:
824     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
825 solar 1.114
826     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
827     - mark amd64 stable also. bug #151877
828 solar 1.113
829     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
830     - mark 2.6.17-r1 stable
831 phreak 1.112
832     27 Aug 2006; Christian Heim <phreak@gentoo.org>
833     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
834     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
835 phreak 1.111
836     *hardened-sources-2.6.17-r1 (26 Aug 2006)
837    
838     26 Aug 2006; Christian Heim <phreak@gentoo.org>
839     +hardened-sources-2.6.17-r1.ebuild:
840     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
841     grsecurity patch.
842 phreak 1.110
843     *hardened-sources-2.6.17 (17 Aug 2006)
844    
845     17 Aug 2006; Christian Heim <phreak@gentoo.org>
846     +hardened-sources-2.6.17.ebuild:
847     Bumping the hardened-sources-2.6 series to 2.6.17, using
848     genpatches-2.6.17-6.base.
849 solar 1.109
850     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
851     - stable on x86 and amd64
852 solar 1.108
853     *hardened-sources-2.6.16-r11 (15 Jul 2006)
854    
855     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
856     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
857     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
858     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
859     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
860     crusty ebuilds
861 johnm 1.107
862     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
863     hardened-sources-2.6.16-r10.ebuild:
864     marking stable on x86 and amd64
865 solar 1.106
866     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
867     - 2.4.32-r6 stable on x86. RSBAC state unknown
868 kang 1.105
869     *hardened-sources-2.4.32-r7 (10 Jul 2006)
870    
871     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
872     +hardened-sources-2.4.32-r7.ebuild:
873     Bump PaX for RSBAC to test-17
874 johnm 1.104
875     *hardened-sources-2.6.16-r9 (03 Jul 2006)
876    
877     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
878     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
879     hardened-sources-2.6.16 bump to latest -base.
880 solar 1.103
881     *hardened-sources-2.4.32-r6 (30 Jun 2006)
882    
883     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
884     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
885     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
886     sysctl controlable resource logging
887 johnm 1.102
888     *hardened-sources-2.6.16-r7 (05 Jun 2006)
889    
890     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
891     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
892     push new 2.6.16 release in preparation for stable
893 solar 1.101
894     22 May 2006; <solar@gentoo.org> :
895     - redigest bug 134002
896 kang 1.100
897     *hardened-sources-2.4.32-r5 (16 May 2006)
898    
899     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
900     +hardened-sources-2.4.32-r5.ebuild:
901     Fixes rsbac common patching (new patch in new -r5 patchset)
902 solar 1.99
903     *hardened-sources-2.4.32-r4 (13 May 2006)
904    
905     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
906     +hardened-sources-2.4.32-r4.ebuild:
907     - security bumps
908 johnm 1.98
909     *hardened-sources-2.6.16-r6 (03 May 2006)
910    
911     03 May 2006; John Mylchreest <johnm@gentoo.org>
912     +hardened-sources-2.6.16-r6.ebuild:
913     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
914 johnm 1.97
915     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
916     hardened-sources-2.6.14-r8.ebuild:
917     fix x86_64 build problem, this will delay the digest issue again for a short
918     while but it will sort itself out
919 johnm 1.96
920     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
921     hardened-sources-2.6.14-r8.ebuild:
922     bump hardened patchset
923 antarus 1.94
924     27 Apr 2006; Alec Warner <antarus@gentoo.org>
925     files/digest-hardened-sources-2.4.32-r2,
926     files/digest-hardened-sources-2.4.32-r3,
927     files/digest-hardened-sources-2.6.14-r8, Manifest:
928     Fixing duff SHA256 digests: Bug # 131293
929 johnm 1.93
930 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
931    
932     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
933     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
934     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
935     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
936     cleanup of old uneccessary sources
937    
938 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
939     fix digest
940 johnm 1.92
941     *hardened-sources-2.6.14-r8 (20 Apr 2006)
942    
943     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
944     +hardened-sources-2.6.14-r8.ebuild:
945     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
946 johnm 1.91
947     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
948     Turning on gpg-signing again, and recomitting
949 johnm 1.90
950     *hardened-sources-2.6.16-r4 (20 Apr 2006)
951    
952     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
953     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
954     +hardened-sources-2.6.16-r4.ebuild:
955     Fix numerous security vulns
956 solar 1.89
957     *hardened-sources-2.4.32-r3 (16 Apr 2006)
958    
959     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
960     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
961     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
962     - security bump for bug #112791. Removed old ebuilds
963 johnm 1.88
964     *hardened-sources-2.6.16-r3 (15 Apr 2006)
965    
966     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
967     +hardened-sources-2.6.16-r3.ebuild:
968     Removing silly localversion which I missed
969 johnm 1.87
970     *hardened-sources-2.6.14-r7 (14 Apr 2006)
971    
972     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
973     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
974     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
975 johnm 1.86
976     *hardened-sources-2.6.16-r2 (13 Apr 2006)
977    
978     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
979     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
980     +hardened-sources-2.6.16-r2.ebuild:
981     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
982     labels, dropping USERGROUP define fixes, since these were merged mainstream.
983 johnm 1.85
984     *hardened-sources-2.6.16-r1 (11 Apr 2006)
985    
986     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
987     +hardened-sources-2.6.16-r1.ebuild:
988     Bumping to include ppc build fix and 2.6.16.3
989 tsunam 1.84
990     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
991     hardened-sources-2.6.14-r6.ebuild:
992     Stable on x86; bug #127718
993 johnm 1.83
994     *hardened-sources-2.6.16 (31 Mar 2006)
995    
996     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
997     +hardened-sources-2.6.16.ebuild:
998     Bumping to new version of grsec, and kernel base. New squashfs. Based on
999     2.6.16.1
1000 cryos 1.82
1001     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1002     hardened-sources-2.6.14-r6.ebuild:
1003     Stable on amd64, bug 127718.
1004 nixnut 1.81
1005     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1006     Stable on ppc. Bug #127718
1007 johnm 1.80
1008     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1009     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1010     -hardened-sources-2.6.14-r4.ebuild:
1011     Cleanup.
1012 johnm 1.79
1013     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1014    
1015     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1016     +hardened-sources-2.6.14-r6.ebuild:
1017     Fixes grsec policy recreation bug and adds a
1018     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1019 solar 1.78
1020     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1021     - stable on x86
1022 hansmi 1.77
1023     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1024     hardened-sources-2.6.14-r5.ebuild:
1025     Stable on ppc.
1026 johnm 1.76
1027     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1028    
1029     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1030     +hardened-sources-2.6.14-r5.ebuild:
1031     fixing every known exploit
1032 solar 1.75
1033     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1034    
1035     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1036     +hardened-sources-2.4.32-r2.ebuild:
1037     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1038 solar 1.74
1039     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1040    
1041     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1042     - version bump for new genpatches which fix up a few sec holes
1043 solar 1.73
1044     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1045    
1046     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1047     - revision bump to add misc vital linux kernel security patches.
1048 johnm 1.72
1049     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1050    
1051     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1052     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1053     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1054 johnm 1.71
1055     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1056     hardened-sources-2.6.14-r2.ebuild:
1057     making x86 & amd64 stable following testing.
1058 johnm 1.70
1059     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1060    
1061     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1062     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1063     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1064     network hooks.
1065 johnm 1.69
1066     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1067     hardened-sources-2.6.14-r1.ebuild:
1068     bumping to stable early for sec fix on x86 & amd64
1069 johnm 1.68
1070     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1071    
1072     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1073     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1074     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1075 solar 1.67
1076     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1077     - stable on x86 security bug #114227 CAN-2005-3257
1078 kang 1.66
1079     *hardened-sources-2.4.32 (19 Nov 2005)
1080    
1081     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1082     +hardened-sources-2.4.32.ebuild:
1083     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1084     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1085     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1086     rsbac >> /etc/portage/package.use)
1087 johnm 1.65
1088     *hardened-sources-2.6.14 (14 Nov 2005)
1089    
1090     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1091     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1092     Bumping 2.6 series to 2.6.14.2
1093 johnm 1.64
1094     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1095    
1096     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1097     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1098     +hardened-sources-2.6.13-r2.ebuild:
1099     Fixes minor build error in ppc.
1100 johnm 1.63
1101     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1102    
1103     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1104     +hardened-sources-2.6.13-r1.ebuild:
1105     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1106     2.6.13.4, fixes some major amd64 stability problems.
1107 johnm 1.62
1108     *hardened-sources-2.6.13 (16 Sep 2005)
1109    
1110     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1111     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1112     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1113     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1114     users should test this thoroughly.
1115 solar 1.61
1116     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1117     - stable on x86
1118 johnm 1.60
1119     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1120    
1121     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1122     +hardened-sources-2.6.11-r15.ebuild:
1123     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1124     grsec redefining curr_ip struct.
1125 solar 1.59
1126     *hardened-sources-2.4.31 (20 Jun 2005)
1127    
1128     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1129     initial import of 2.4.31 tree
1130 johnm 1.58
1131     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1132    
1133     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1134     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1135     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1136     naming scheme to abide by genpatches
1137 johnm 1.57
1138     *hardened-sources-2.6.11-r13 (18 May 2005)
1139    
1140     18 May 2005; John Mylchreest <johnm@gentoo.org>
1141     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1142     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1143     target. sorry about that. Fixes bug #93022
1144 johnm 1.56
1145     *hardened-sources-2.6.11-r12 (17 May 2005)
1146    
1147     17 May 2005; John Mylchreest <johnm@gentoo.org>
1148     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1149     +hardened-sources-2.6.11-r12.ebuild:
1150     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1151     merges in genpatches-base
1152 johnm 1.55
1153     *hardened-sources-2.6.11-r12 (17 May 2005)
1154    
1155     17 May 2005; John Mylchreest <johnm@gentoo.org>
1156     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1157     +hardened-sources-2.6.11-r12.ebuild:
1158     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1159     merges in genpatches-base
1160 solar 1.54
1161     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1162     -files/2.4.27-cmdline-race.patch,
1163     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1164     -files/2.4.28-grsec-binfmt_a.out.patch,
1165     -files/2.4.28-grsec-cmdline-race.patch,
1166     -files/2.4.28-selinux-binfmt_a.out.patch,
1167     -files/2.4.28-selinux-cmdline-race.patch,
1168     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1169     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1170     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1171     cleanup..
1172 solar 1.53
1173     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1174    
1175     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1176     - disable aout by default
1177 solar 1.52
1178     *hardened-sources-2.4.30 (18 Apr 2005)
1179    
1180     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1181     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1182     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1183     use
1184 tocharian 1.50
1185 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1186    
1187     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1188     +hardened-sources-2.4.29.ebuild:
1189     New hardened-patches-2.4-29.0 patchball.
1190     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1191    
1192     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1193    
1194     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1195     +hardened-sources-2.4.28-r5.ebuild:
1196     Added a fix for a PaX vulnerability.
1197    
1198     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1199 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1200     Stable on x86
1201 solar 1.49
1202     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1203     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1204     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1205     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1206     - fixed/added RDEPEND= in all kernel-2 ebuilds
1207 tocharian 1.48
1208     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1209    
1210     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1211     +hardened-sources-2.4.28-r4.ebuild:
1212     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1213     backport of neighbour hash updates.
1214 tocharian 1.47
1215     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1216     hardened-sources-2.4.28-r3.ebuild:
1217     Stable on x86
1218 tseng 1.46
1219     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1220    
1221     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1222     +hardened-sources-2.6.10-r3.ebuild:
1223     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1224     in 2005.0
1225 tocharian 1.45
1226     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1227     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1228     hardened-sources-2.4.28-r2.ebuild:
1229     Mark stable on x86
1230 tocharian 1.44
1231     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1232    
1233     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1234     +hardened-sources-2.4.28-r3.ebuild:
1235     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1236 tocharian 1.43
1237     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1238     hardened-sources-2.4.28.ebuild:
1239     Mark stable on x86.
1240 tocharian 1.42
1241     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1242    
1243     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1244     +hardened-sources-2.4.28-r2.ebuild:
1245     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1246     Mazinger for grsecurity patches as well.
1247 plasmaroo 1.41
1248     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1249    
1250     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1251     Security bump. Thank tocharian for rolling a new patchset...
1252 solar 1.40
1253     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1254     +files/2.4.28-grsec-cmdline-race.patch,
1255     +files/2.4.28-selinux-binfmt_a.out.patch,
1256     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1257     - Round up remaining security patches that appear to be missing in 2.4.28. -
1258     PaX standalone updated to current. hgpv=28.1
1259 solar 1.39
1260     *hardened-sources-2.4.28 (28 Nov 2004)
1261    
1262     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1263     security bump. Thank tocharian for rolling a new patchset
1264 scox 1.31
1265 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1266    
1267     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1268     +hardened-sources-2.4.27-r3.ebuild:
1269     Applies the new 2.4-27.2 patchball which updates
1270     GRSecurity to the 2.0.1 version.
1271    
1272 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1273    
1274     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1275     +hardened-sources-2.4.27-r2.ebuild:
1276     Version bump.
1277     This version uses the new 2.4-27.1 patchball which updates
1278     both the SELinux PaX hooks patch and the SELinux headers.
1279    
1280 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1281    
1282     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1283     +hardened-sources-2.4.27-r1.ebuild,
1284     -hardened-sources-2.4.27.ebuild,
1285     +files/2.4.27-cmdline-race.patch:
1286     Version bump, fix for cmdline race. See bug #59905.
1287    
1288     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1289    
1290     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1291     +hardened-sources-2.4.26-r6.ebuild,
1292     -hardened-sources-2.4.26-r5.ebuild,
1293     -hardened-sources-2.4.26-r4.ebuild,
1294     +files/2.4.26-cmdline-race.patch:
1295     Version bump, fix for cmdline race. See bug #59905.
1296    
1297 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1298    
1299     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1300     +hardened-sources-2.4.27.ebuild,
1301     +files/2.4.27-CAN-2004-0394.patch:
1302     Ported the patchball to the 2.4.27 kernel version.
1303    
1304 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1305    
1306     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1307     +hardened-sources-2.4.26-r5.ebuild:
1308 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1309 scox 1.34 It adds the following features:
1310     - Squashfs
1311     - Ebtables
1312     - Netdev random (core+drivers)
1313     - Watchdog Timer (WDT) fix.
1314    
1315 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1316    
1317     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1318     +hardened-sources-2.4.26-r4.ebuild,
1319     +files/2.4.26-CAN-2004-0415.patch,
1320     -hardened-sources-2.4.26-3:
1321     Version bump, fix for CAN 0415, see bug #59378.
1322    
1323 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1324    
1325     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1326     +hardened-sources-2.4.26-r3.ebuild,
1327     +files/2.4.26-CAN-2004-0497.patch,
1328     -hardened-sources-2.4.26-r2.ebuild:
1329     Version bump, fixed CAN 0497, see bug #56171.
1330    
1331 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1332    
1333     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1334 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1335 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1336     +files/2.4.26-CAN-2004-0535.patch,
1337     -hardened-sources-2.4.26-r1.ebuild:
1338     Fixes for both CAN 0495 and 0535, see bug #54976
1339 pvdabeel 1.27
1340 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1341     hardened-sources-2.4.26-r1.ebuild:
1342     QA - fix use invocation
1343 scox 1.28
1344     *hardened-sources-2.4.26-r1 (22 June 2004)
1345    
1346     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1347     +hardened-sources-2.4.26-r1.ebuild,
1348     +files/2.4.26-CAN-2004-0394.patch,
1349     +files/2.4.26-signal-race.patch,
1350     -hardened-sources-2.4.26.ebuild,
1351     -hardened-sources-2.4.24-r3.ebuild:
1352     Version bump for the CAN-2004-0394 issue and bug #53804
1353     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1354    
1355    
1356 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1357     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1358     Masked hardened-sources-2.4.26.ebuild broken for ppc
1359    
1360     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1361     hardened-sources-2.4.24-r3.ebuild:
1362     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1363 plasmaroo 1.25
1364 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1365    
1366     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1367     +hardened-sources-2.4.26.ebuild:
1368     Updated hardened-sources for the 2.4.26 kernel
1369     Removed broken components, updated almost everything.
1370    
1371 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1372    
1373     17 Apr 2004; <plasmaroo@gentoo.org>
1374     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1375     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1376     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1377     +hardened-sources-2.4.24-r3.ebuild:
1378     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1379     vulnerabilities. Old revisions removed.
1380 plasmaroo 1.24
1381     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1382    
1383     15 Apr 2004; <plasmaroo@gentoo.org>
1384     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1385     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1386     Version bump for the CAN-2004-0109 issue; bug #47881.
1387 aliz 1.23
1388     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1389     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1390     Add eutils to inherit.
1391 plasmaroo 1.22
1392     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1393    
1394     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1395     files/hardened-sources-2.4.24.munmap.patch:
1396     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1397 scox 1.19
1398 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1399 scox 1.26
1400 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1401     hardened-sources-2.4.24.ebuild:
1402     Version bump, updated most of the components.
1403     This release includes the following:
1404    
1405     - Hardened security
1406     - Netfilter patch-o-matic 20031219
1407     - FreeSWAN 2.04 & x509 1.4.8
1408     - EVMS 2.2.2
1409     - XFS 1.3.1
1410     - cryptoloop jari
1411     - grsecurity 2.0-rc4
1412     - SELinux
1413     - PaX 200402060000
1414     - PaX Obscurity 200308302223
1415     - Others...
1416    
1417     Neither -ck nor systrace are included anymore.
1418    
1419 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1420    
1421     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1422     hardened-sources-2.4.22-r2.ebuild:
1423 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1424 scox 1.19
1425     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1426 iggy 1.17
1427     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1428 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1429 iggy 1.16
1430     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1431 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1432     Version bump for the 'do_brk' vulnerability.
1433 iggy 1.15
1434     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1435     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1436     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1437     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1438 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1439 frogger 1.14
1440     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1441     hardened-sources-2.4.22.ebuild:
1442 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1443     components. These are no longer handled in the kernel
1444     so this code was not necessary.
1445 frogger 1.13
1446     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1447     New 2.4.22 based hardened-sources thanks to
1448     Phil West <p.west@computer.org>.
1449    
1450     These sources include:
1451 plasmaroo 1.18 - New SELinux API
1452     - Updated CK-base
1453     - Updated GRSec
1454     - Systrace
1455     - SuperFreeS/WAN 1.99.8
1456     - Propolice kernel build support
1457     - EVMS
1458     - Other various security related patches
1459 frogger 1.11
1460 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1461    
1462     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1463     Updated hardened-sources based on the 2.4.21 Linux kernel.
1464     This includes updates to most major components such as:
1465 plasmaroo 1.18 - ck-base-0306300059
1466     - selinux-2.4-2003071106
1467     - grsecurity-2.0-rc1
1468     - Updated IPTables patch-o-matic
1469     - Updated SuperFreeS/WAN
1470    
1471 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1472     updated patch set ready for the 2.4.21 based kernel.
1473    
1474 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1475     Initial import of hardened-sources-2.4.20-r4. This revision
1476     includes only a few changes, but one of these is an important
1477     security fix. It is recommended all users of hardened-sources
1478     upgrade to this release.
1479 plasmaroo 1.18
1480 frogger 1.11 - ioperm bug fix
1481     - fixed compilation failure when building without GRSec
1482 plasmaroo 1.18
1483 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1484     due to time constraints, but is planned for inclusion in the near
1485     future.
1486 msterret 1.10
1487     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1488    
1489     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1490     hardened-sources-2.4.20-r3.ebuild:
1491 plasmaroo 1.18 Add Header...
1492 frogger 1.9
1493     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1494     hardened-sources-2.4.20-r3.ebuild:
1495     Removed warnings from ebuild. This kernel should be safe to
1496     use at this point.
1497 frogger 1.8
1498     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1499    
1500     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1501     hardened-sources-2.4.20-r3.ebuild:
1502     New revision. Includes the following changes over -r2:
1503 plasmaroo 1.18
1504 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1505     - Super FreeS/WAN 1.99.7rc2
1506     - PaX for the LSM/SELinux branch
1507     - GRSecurity 2.0-pre4 (role based access control)
1508     - Systrace 1.3
1509     - EXT3 fixes
1510     - EVMS 2.0.1
1511     - GCC 3.1+ compile optimizations
1512     - ProPolice kernel build support
1513     - Hashing table security fixes
1514 frogger 1.3
1515     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1516 frogger 1.7
1517     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1518     Initial import of hardened-sources-r2. This new
1519     ebuild includes many new performance and security
1520     related patches. As in -r1, it will patch in
1521     LSM/SELinux if "selinux" is in USE, otherwise it
1522     will patch in GRSecurity. The following patches
1523     are included in this revision:
1524 plasmaroo 1.18
1525 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1526     (pulled from the base CK patch)
1527     - ptrace exploit patch for the LSM kernel
1528     (the GRSec patch already fixes this)
1529     - LSM 2.4-2003040709
1530     - SELinux 2.4-2003040709
1531     - Systrace v1.2
1532     - IPTables patch-o-matic base patches - 20030107
1533     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1534     - Super FreeS/WAN 1.99.6.1
1535     - GRSecurity 1.9.9g
1536     - MPPE
1537     - EXT3 data journal fix
1538     - CIPE 1.5.4
1539 frogger 1.6
1540     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1541     hardened-sources-2.4.20-r1.ebuild, manifest:
1542 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1543 frogger 1.5
1544     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1545     hardened-sources-2.4.20-r1.ebuild:
1546     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1547     is patched in instead. Ptrace patches for selinux have also been added. In
1548     either case, systrace support will be patched in as well.
1549 frogger 1.3
1550     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1551     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1552 plasmaroo 1.18 Revision bump for new sources.
1553 frogger 1.4
1554 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1555 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1556 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1557 method 1.1
1558 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1559    
1560 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1561     hardened-sources-2.4.20.ebuild:
1562 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20