/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.254 - (hide annotations) (download)
Wed Nov 12 07:05:45 2008 UTC (6 years, 1 month ago) by gengor
Branch: MAIN
Changes since 1.253: +7 -1 lines
Add 2.6.25-r10.
(Portage version: 2.1.4.5)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 phreak 1.204 # Copyright 2000-2008 Gentoo Foundation; Distributed under the GPL v2
3 gengor 1.254 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.253 2008/11/09 23:41:37 gengor Exp $
4    
5     *hardened-sources-2.6.25-r10 (12 Nov 2008)
6    
7     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
8     +hardened-sources-2.6.25-r10.ebuild:
9     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
10 gengor 1.253
11     *hardened-sources-2.6.27-r1 (09 Nov 2008)
12    
13     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
14     +hardened-sources-2.6.27-r1.ebuild:
15     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
16 gengor 1.252
17     *hardened-sources-2.6.27 (04 Nov 2008)
18    
19     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
20     +hardened-sources-2.6.27.ebuild:
21     Initial 2.6.27 release.
22 gengor 1.251
23     *hardened-sources-2.6.26-r5 (03 Nov 2008)
24    
25     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
26     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
27     +hardened-sources-2.6.26-r5.ebuild:
28     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
29     Clean out some old versions.
30 nixnut 1.250
31     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
32     Stable on ppc
33 gengor 1.249
34     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
35     hardened-sources-2.6.25-r9.ebuild:
36     Stable on amd64/x86.
37 gengor 1.248
38     *hardened-sources-2.6.25-r9 (26 Oct 2008)
39    
40     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
41     +hardened-sources-2.6.25-r9.ebuild:
42     Update to Linux 2.6.25.19
43 nixnut 1.247
44     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
45     Stable on ppc
46 gengor 1.246
47     *hardened-sources-2.6.26-r4 (14 Oct 2008)
48    
49     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
50     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
51     Update to latest grsecurity patch, fixing building of non-modular kernels.
52 gengor 1.245
53     *hardened-sources-2.6.26-r3 (12 Oct 2008)
54    
55     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
56     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
57     +hardened-sources-2.6.26-r3.ebuild:
58     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
59     2.6.26-r1: Removed.
60     2.6.25-r8: Stable amd64/x86.
61 gengor 1.244
62     *hardened-sources-2.6.25-r8 (09 Oct 2008)
63    
64     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
65     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
66     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
67     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
68 nixnut 1.243
69     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
70     Stable on ppc
71 gengor 1.242
72     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
73     hardened-sources-2.6.25-r7.ebuild:
74     Stable amd64/x86.
75 gengor 1.241
76     *hardened-sources-2.6.26-r2 (13 Sep 2008)
77    
78     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
79     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
80     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
81     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
82 gengor 1.240
83     *hardened-sources-2.6.25-r7 (13 Sep 2008)
84    
85     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
86     +hardened-sources-2.6.25-r7.ebuild:
87     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
88 gengor 1.239
89     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
90     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
91     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
92     hardened-sources-2.6.26-r1.ebuild:
93     Update DESCRIPTION and HGPV_URI.
94 gengor 1.238
95     *hardened-sources-2.6.25-r6 (09 Sep 2008)
96    
97     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
98     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
99     2.6.25-r6: Update to Linux 2.6.25.17.
100     2.6.24-r3: Removed.
101 gengor 1.237
102     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
103     hardened-sources-2.6.25-r5.ebuild:
104     Stable on amd64/x86
105 gengor 1.236
106     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
107     Update my email address.
108 nixnut 1.235
109     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
110     stable on ppc
111 battousai 1.234
112     *hardened-sources-2.6.26-r1 (23 Aug 2008)
113     *hardened-sources-2.6.25-r5 (23 Aug 2008)
114    
115     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
116     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
117     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
118     +hardened-sources-2.6.26-r1.ebuild:
119     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
120     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
121     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
122     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
123     (gengor).
124 solar 1.233
125     *hardened-sources-2.6.26 (18 Aug 2008)
126     *hardened-sources-2.6.25-r4 (18 Aug 2008)
127    
128     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
129     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
130     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
131     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
132     2.6.25-r2: Removed.
133 tove 1.232
134     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
135     Remove phreak from metadata.xml (#96398)
136 solar 1.231
137     *hardened-sources-2.6.25-r3 (31 Jul 2008)
138    
139     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
140     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
141     +hardened-sources-2.6.25-r3.ebuild:
142     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
143     fixes, including security bug #231750.
144 nixnut 1.230
145     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
146     Stable on ppc
147 solar 1.229
148     *hardened-sources-2.6.25-r2 (05 Jul 2008)
149    
150     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
151     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
152     +hardened-sources-2.6.25-r2.ebuild:
153     2.6.23-r4: Stable x86/amd64
154     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
155     2.6.23-r{11,12}: Removed due to multiple vulns.
156     (gengor & kerframil)
157 nixnut 1.228
158     04 Jul 2008; nixnut <nixnut@gentoo.org>
159     hardened-sources-2.6.23-r13.ebuild:
160     Stable on ppc
161 solar 1.227
162     *hardened-sources-2.6.25-r1 (30 Jun 2008)
163    
164     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
165     +hardened-sources-2.6.25-r1.ebuild:
166     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
167     grsecurity release. 2.6.23-r13: x86/amd64 stable
168 solar 1.226
169     *hardened-sources-2.6.25 (17 Jun 2008)
170     *hardened-sources-2.6.24-r3 (17 Jun 2008)
171     *hardened-sources-2.6.23-r13 (17 Jun 2008)
172    
173     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
174     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
175     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
176     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
177     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
178     2.6.25: Initial 2.6.25 release.
179 solar 1.225
180     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
181     - fasttrack to stable x86/amd64
182 swegener 1.224
183     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
184     Fix broken digest for linux-2.6.24.tar.bz2.
185 solar 1.223
186     *hardened-sources-2.6.24-r2 (11 May 2008)
187     *hardened-sources-2.6.23-r12 (11 May 2008)
188    
189     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
190     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
191     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
192     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
193     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
194     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
195     security bugs 219901, 220691, 220975, 220979, 221123. New
196     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
197     should be removed as far as I'm concerned, everything else remove due to
198     vulnerable to numerous security bugs or brokeness.
199 nixnut 1.222
200     10 May 2008; nixnut <nixnut@gentoo.org>
201     hardened-sources-2.6.23-r11.ebuild:
202     Stable on ppc
203 solar 1.221
204     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
205     - -r11 stable on x86/amd64
206 solar 1.220
207     *hardened-sources-2.6.23-r11 (01 May 2008)
208    
209     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
210     - version bump to fix ulgy linux bugs
211 phreak 1.219
212     *hardened-sources-2.6.24-r1 (30 Apr 2008)
213    
214     30 Apr 2008; Christian Heim <phreak@gentoo.org>
215     +hardened-sources-2.6.24-r1.ebuild:
216     Revision bump (thanks to Kerin and Gordon, again), pulling
217     genpatches-2.6.24-7, solving #219089. Additionally contains further security
218     fixes plus some minor updates.
219 phreak 1.218
220     *hardened-sources-2.6.23-r10 (30 Apr 2008)
221    
222     30 Apr 2008; Christian Heim <phreak@gentoo.org>
223     +hardened-sources-2.6.23-r10.ebuild:
224     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
225     Additional contains "various other fixes".
226 phreak 1.217
227     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
228     Update the longdescription in metadata, thanks to Gordon Malm.
229 nixnut 1.216
230     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
231     Stable on ppc wrt bug #213255
232 solar 1.215
233     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
234     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
235     - stable on x86/amd64 per request. Removed obsolete ebuilds
236 phreak 1.214
237     *hardened-sources-2.6.24 (07 Apr 2008)
238    
239     07 Apr 2008; Christian Heim <phreak@gentoo.org>
240     +hardened-sources-2.6.24.ebuild:
241     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
242     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
243     for the many contributions and their continued effort in #216612) based on
244     2.6.24 and genpatches-2.6.24-5.
245    
246     The current ebuild/patchset contains these things:
247     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
248     * Introduces bespoke server and workstation oriented security levels
249     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
250 phreak 1.213
251     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
252     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
253     maintaining it).
254 phreak 1.212
255     24 Mar 2008; Christian Heim <phreak@gentoo.org>
256     hardened-sources-2.4.35-r2.ebuild:
257     Fixing SRC_URI for 2.4.35-r2.
258 phreak 1.211
259     *hardened-sources-2.6.23-r9 (22 Mar 2008)
260    
261     22 Mar 2008; Christian Heim <phreak@gentoo.org>
262     +hardened-sources-2.6.23-r9.ebuild:
263     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
264     * Change the default GIDs for some grsecurity options
265     * Revamp the Hardened [Gentoo] security level and make it the default level
266     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
267     * Fix a recursive lock -- call to capable() within ptrace_attach()
268     * Fix bug that allows audit and iscsi operations to be controlled via netlink
269 solar 1.210
270     *hardened-sources-2.6.23-r8 (27 Feb 2008)
271    
272     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
273     - version bump from Kerin Millar bug 210026
274 solar 1.209
275     17 Feb 2008; <solar@gentoo.org> metadata.xml,
276     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
277     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
278     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
279     - stable on x86 and remove old ebuilds
280 solar 1.207
281     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
282 solar 1.208 - stable on amd64 per request of amd64 lead
283 solar 1.206
284     *hardened-sources-2.6.23-r7 (11 Feb 2008)
285    
286     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
287     - version bump from kerin.millar
288     Changes:
289    
290     * Bump to genpatches-base-2.6.23-9
291     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
292     * Disables COMPAT_VDSO in x86/defconfig
293     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
294 phreak 1.205
295     25 Jan 2008; Christian Heim <phreak@gentoo.org>
296     -hardened-sources-2.6.22-r8.ebuild:
297     Cleaning up old versions.
298 phreak 1.204
299     *hardened-sources-2.6.23-r6 (25 Jan 2008)
300    
301     25 Jan 2008; Christian Heim <phreak@gentoo.org>
302     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
303     Revision bump, pulling in the latest genpatches.
304 phreak 1.203
305     *hardened-sources-2.6.23-r5 (24 Dec 2007)
306    
307     24 Dec 2007; Christian Heim <phreak@gentoo.org>
308     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
309     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
310     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
311     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
312 phreak 1.202
313     24 Dec 2007; Christian Heim <phreak@gentoo.org>
314     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
315     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
316     -hardened-sources-2.6.23-r3.ebuild:
317     Cleaning out some unused, old versions.
318 phreak 1.201
319     24 Dec 2007; Christian Heim <phreak@gentoo.org>
320     hardened-sources-2.6.23-r4.ebuild:
321     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
322     in the tree for long, but there isn't much of a difference between this and
323     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
324 phreak 1.200
325     *hardened-sources-2.6.23-r4 (23 Dec 2007)
326    
327     23 Dec 2007; Christian Heim <phreak@gentoo.org>
328     +hardened-sources-2.6.23-r4.ebuild:
329     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
330 phreak 1.199
331     *hardened-sources-2.6.23-r3 (04 Dec 2007)
332    
333     04 Dec 2007; Christian Heim <phreak@gentoo.org>
334     +hardened-sources-2.6.23-r3.ebuild:
335     Revision bump, pulling in 2.6.23.9.
336 phreak 1.198
337     *hardened-sources-2.6.23-r2 (25 Nov 2007)
338    
339     25 Nov 2007; Christian Heim <phreak@gentoo.org>
340     +hardened-sources-2.6.23-r2.ebuild:
341     Updated patchset, thanks to solar.
342 phreak 1.197
343     *hardened-sources-2.6.23-r1 (31 Oct 2007)
344    
345     31 Oct 2007; Christian Heim <phreak@gentoo.org>
346     +hardened-sources-2.6.23-r1.ebuild:
347     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
348 solar 1.196
349     29 Oct 2007; <solar@gentoo.org> metadata.xml:
350     - update metadata.xml
351 phreak 1.195
352     25 Oct 2007; Christian Heim <phreak@gentoo.org>
353     hardened-sources-2.6.22-r8.ebuild:
354     Marking 2.6.22-r8 stable on amd64 and x86.
355 phreak 1.194
356     21 Oct 2007; Christian Heim <phreak@gentoo.org>
357     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
358     -hardened-sources-2.6.21-r4.ebuild:
359     Removing old ebuilds.
360 phreak 1.193
361     *hardened-sources-2.4.35-r2 (21 Oct 2007)
362    
363     21 Oct 2007; Christian Heim <phreak@gentoo.org>
364     +hardened-sources-2.4.35-r2.ebuild:
365     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
366     patches.
367 phreak 1.192
368     *hardened-sources-2.6.22-r8 (21 Oct 2007)
369    
370     21 Oct 2007; Christian Heim <phreak@gentoo.org>
371     +hardened-sources-2.6.22-r8.ebuild:
372     Yet another new patch, hopefully fixing the remaining issues we had w/
373     2.6.22. Candidate for stabling.
374 phreak 1.191
375     *hardened-sources-2.6.23 (13 Oct 2007)
376    
377     13 Oct 2007; Christian Heim <phreak@gentoo.org>
378     +hardened-sources-2.6.23.ebuild:
379     Initial hardened-sources-2.6.23. If people still have problems w/ bug
380     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
381 phreak 1.190
382     11 Oct 2007; Christian Heim <phreak@gentoo.org>
383     hardened-sources-2.6.20-r10.ebuild:
384     Pulling in yet another new genpatches version, fixing the PWC bug for real.
385 phreak 1.189
386     04 Oct 2007; Christian Heim <phreak@gentoo.org>
387     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
388     Removing old versions.
389 phreak 1.188
390     *hardened-sources-2.6.22-r7 (01 Oct 2007)
391    
392     01 Oct 2007; Christian Heim <phreak@gentoo.org>
393     +hardened-sources-2.6.22-r7.ebuild:
394     Revision bump, pulling in a newer patch. Should fix #194276.
395 phreak 1.187
396     30 Sep 2007; Christian Heim <phreak@gentoo.org>
397     hardened-sources-2.6.20-r10.ebuild:
398     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
399     Mike Doty).
400 phreak 1.186
401     *hardened-sources-2.6.22-r6 (26 Sep 2007)
402    
403     26 Sep 2007; Christian Heim <phreak@gentoo.org>
404     +hardened-sources-2.6.22-r6.ebuild:
405     Revision bump, grabbing up till Linux 2.6.22.9.
406 phreak 1.185
407     24 Sep 2007; Christian Heim <phreak@gentoo.org>
408     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
409     Cleaning up further.
410 phreak 1.184
411     *hardened-sources-2.6.20-r10 (24 Sep 2007)
412    
413     24 Sep 2007; Christian Heim <phreak@gentoo.org>
414     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
415     +hardened-sources-2.6.20-r10.ebuild:
416     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
417     revisions.
418 phreak 1.183
419     *hardened-sources-2.6.22-r5 (22 Sep 2007)
420    
421     22 Sep 2007; Christian Heim <phreak@gentoo.org>
422     +hardened-sources-2.6.22-r5.ebuild:
423     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
424 phreak 1.182
425     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
426     Removing johnm from metadata.xml (see #186467 for reference).
427 phreak 1.181
428     *hardened-sources-2.6.22-r4 (17 Sep 2007)
429    
430     17 Sep 2007; Christian Heim <phreak@gentoo.org>
431     +hardened-sources-2.6.22-r4.ebuild:
432     Revision bump, hopefully fixing all those weird PAX failures.
433 phreak 1.180
434     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
435     Updating the metadata.xml.
436 phreak 1.179
437     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
438     Removing tocharian from metadata due to his retirement (see #71718 for
439     reference).
440 phreak 1.178
441     *hardened-sources-2.6.20-r9 (30 Aug 2007)
442    
443     30 Aug 2007; Christian Heim <phreak@gentoo.org>
444     +hardened-sources-2.6.20-r9.ebuild:
445     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
446 phreak 1.177
447     29 Aug 2007; Christian Heim <phreak@gentoo.org>
448     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
449     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
450     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
451     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
452     -hardened-sources-2.6.22-r2.ebuild:
453     Removing some redundant versions.
454 phreak 1.176
455     *hardened-sources-2.4.35-r1 (29 Aug 2007)
456    
457     29 Aug 2007; Christian Heim <phreak@gentoo.org>
458     +hardened-sources-2.4.35-r1.ebuild:
459     Revision bump, new grsecurity patch.
460 phreak 1.175
461     *hardened-sources-2.6.20-r8 (26 Aug 2007)
462    
463     26 Aug 2007; Christian Heim <phreak@gentoo.org>
464     +hardened-sources-2.6.20-r8.ebuild:
465     Revision bump for Linux 2.6.20.17.
466 phreak 1.174
467     *hardened-sources-2.6.22-r3 (22 Aug 2007)
468    
469     22 Aug 2007; Christian Heim <phreak@gentoo.org>
470     +hardened-sources-2.6.22-r3.ebuild:
471     Revision bump for Linux 2.6.22.4.
472 phreak 1.173
473     16 Aug 2007; Christian Heim <phreak@gentoo.org>
474     hardened-sources-2.6.22-r2.ebuild:
475     Updated patchset, to fix the alignment against 2.6.22.3.
476 phreak 1.172
477     *hardened-sources-2.6.22-r2 (16 Aug 2007)
478    
479     16 Aug 2007; Christian Heim <phreak@gentoo.org>
480     +hardened-sources-2.6.22-r2.ebuild:
481     Revision bump for Linux 2.6.22.3.
482 phreak 1.171
483     *hardened-sources-2.4.35 (16 Aug 2007)
484    
485     16 Aug 2007; Christian Heim <phreak@gentoo.org>
486     +hardened-sources-2.4.35.ebuild:
487     Version bump, initial version for Linux 2.4.35.
488 phreak 1.170
489     *hardened-sources-2.6.21-r4 (16 Aug 2007)
490    
491     16 Aug 2007; Christian Heim <phreak@gentoo.org>
492     +hardened-sources-2.6.21-r4.ebuild:
493     Revision bump for Linux 2.6.21.6.
494 phreak 1.169
495     *hardened-sources-2.6.20-r7 (16 Aug 2007)
496    
497     16 Aug 2007; Christian Heim <phreak@gentoo.org>
498     +hardened-sources-2.6.20-r7.ebuild:
499     Revision bump for Linux 2.6.20.16.
500 phreak 1.168
501     *hardened-sources-2.6.22-r1 (13 Aug 2007)
502    
503     13 Aug 2007; Christian Heim <phreak@gentoo.org>
504     +hardened-sources-2.6.22-r1.ebuild:
505     Yet another revision bump.
506 phreak 1.167
507     *hardened-sources-2.6.22 (10 Aug 2007)
508    
509     10 Aug 2007; Christian Heim <phreak@gentoo.org>
510     +hardened-sources-2.6.22.ebuild:
511     Initial release for 2.6.22. If you are using hardened-sources on a desktop
512     machine (P4 or newer), be aware you might need to disable
513     CONFIG_PAX_PAGEEXEC.
514 phreak 1.166
515     04 Aug 2007; Christian Heim <phreak@gentoo.org>
516     hardened-sources-2.6.20-r6.ebuild:
517     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
518     2.6.20.15.
519 phreak 1.165
520     10 Jul 2007; Christian Heim <phreak@gentoo.org>
521     hardened-sources-2.6.20-r5.ebuild:
522     Marking hardened-sources-2.6.20-r5 stable on ppc.
523 phreak 1.164
524     10 Jul 2007; Christian Heim <phreak@gentoo.org>
525     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
526     Cleanup.
527 phreak 1.163
528     *hardened-sources-2.6.20-r6 (08 Jul 2007)
529    
530     08 Jul 2007; Christian Heim <phreak@gentoo.org>
531     +hardened-sources-2.6.20-r6.ebuild:
532     Revision bump, grabbing yet another stable release.
533 phreak 1.162
534     17 Jun 2007; Christian Heim <phreak@gentoo.org>
535     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
536     -hardened-sources-2.6.21-r2.ebuild:
537     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
538     alpha stable KEYWORD by mistake.
539 phreak 1.161
540     17 Jun 2007; Christian Heim <phreak@gentoo.org>
541     hardened-sources-2.6.20-r5.ebuild:
542     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
543     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
544 phreak 1.160
545     *hardened-sources-2.6.21-r3 (12 Jun 2007)
546    
547     12 Jun 2007; Christian Heim <phreak@gentoo.org>
548     +hardened-sources-2.6.21-r3.ebuild:
549     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
550     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
551     love.
552 phreak 1.159
553     *hardened-sources-2.6.20-r5 (11 Jun 2007)
554    
555     11 Jun 2007; Christian Heim <phreak@gentoo.org>
556     +hardened-sources-2.6.20-r5.ebuild:
557     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
558     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
559     love.
560 pappy 1.158
561     *hardened-sources-2.4.34.5 (11 Jun 2007)
562    
563     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
564     +hardened-sources-2.4.34.5.ebuild:
565     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
566 phreak 1.157
567     30 May 2007; Christian Heim <phreak@gentoo.org>
568     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
569     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
570     stale ebuild(s).
571 phreak 1.156
572     30 May 2007; Christian Heim <phreak@gentoo.org>
573     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
574     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
575     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
576     Doing some cleanups, remove stale ebuilds.
577 phreak 1.155
578     26 May 2007; Christian Heim <phreak@gentoo.org>
579     hardened-sources-2.6.21-r2.ebuild:
580     Fixing the grsecurity patch, had one '};' too much.
581 phreak 1.154
582     *hardened-sources-2.6.21-r2 (26 May 2007)
583    
584     26 May 2007; Christian Heim <phreak@gentoo.org>
585     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
586     +hardened-sources-2.6.21-r2.ebuild:
587     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
588     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
589 phreak 1.153
590     *hardened-sources-2.6.20-r4 (26 May 2007)
591    
592     26 May 2007; Christian Heim <phreak@gentoo.org>
593     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
594     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
595 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
596 phreak 1.152
597     15 May 2007; Christian Heim <phreak@gentoo.org>
598     hardened-sources-2.6.20-r3.ebuild:
599     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
600     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
601     grsecurity patch fail in that exact same hunk.
602 phreak 1.151
603     *hardened-sources-2.6.20-r3 (15 May 2007)
604    
605     15 May 2007; Christian Heim <phreak@gentoo.org>
606     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
607     Revision bump, incorporating Linux 2.6.20.11.
608    
609     *hardened-sources-2.6.21-r1 (11 May 2007)
610    
611     11 May 2007; Christian Heim <phreak@gentoo.org>
612     +hardened-sources-2.6.21-r1.ebuild:
613     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
614     mentioned in #177234.
615 kevquinn 1.150
616     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
617     files/digest-hardened-sources-2.6.21, Manifest:
618     Fix Manifest/digest for linux-2.6.21.tar.bz2
619 phreak 1.149
620     06 May 2007; Christian Heim <phreak@gentoo.org>
621     hardened-sources-2.6.21.ebuild:
622     Bumping the hardened-patches version, needed for the fix for #177234.
623 phreak 1.148
624     *hardened-sources-2.6.21 (02 May 2007)
625    
626     02 May 2007; Christian Heim <phreak@gentoo.org>
627     +hardened-sources-2.6.21.ebuild:
628     Version bump, Linux 2.6.21-hardened.
629 phreak 1.147
630     29 Apr 2007; Christian Heim <phreak@gentoo.org>
631     hardened-sources-2.6.20-r2.ebuild:
632     Adding ~ia64 on Ned's request.
633 phreak 1.146
634     29 Apr 2007; Christian Heim <phreak@gentoo.org>
635     hardened-sources-2.6.20-r2.ebuild:
636     Fixing the included grsecurity patch, wasn't alligning due to the Index:
637     header line(s).
638 phreak 1.145
639     29 Apr 2007; Christian Heim <phreak@gentoo.org>
640     hardened-sources-2.6.20-r2.ebuild:
641     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
642 armin76 1.144
643     *hardened-sources-2.6.20-r2 (10 Apr 2007)
644    
645     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
646     +hardened-sources-2.6.20-r2.ebuild:
647     Version bump, on behalf of phreak
648 phreak 1.143
649     *hardened-sources-2.6.20-r1 (04 Apr 2007)
650    
651     04 Apr 2007; Christian Heim <phreak@gentoo.org>
652     +hardened-sources-2.6.20-r1.ebuild:
653     Revision bump, grabbing a newer grsecurity snapshot.
654 phreak 1.142
655     *hardened-sources-2.6.20 (25 Mar 2007)
656    
657     25 Mar 2007; Christian Heim <phreak@gentoo.org>
658     +hardened-sources-2.6.20.ebuild:
659     Finally a hardened-sources version for 2.6.20; many people have been waiting
660     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
661     testbox.
662 chainsaw 1.141
663     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
664     hardened-sources-2.6.18-r6.ebuild:
665     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
666 phreak 1.140
667     *hardened-sources-2.6.18-r6 (16 Mar 2007)
668    
669     16 Mar 2007; Christian Heim <phreak@gentoo.org>
670     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
671     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
672     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
673     supposed to be.
674 phreak 1.139
675     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
676     Fixing the Manifest, the previous one was broken (as in still had the
677     deleted ebuild in it).
678 phreak 1.138
679     06 Mar 2007; Christian Heim <phreak@gentoo.org>
680     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
681     +hardened-sources-2.6.18-r5.ebuild:
682     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
683     Linux 2.6.18.8. Also cleaning up the older version.
684    
685     *hardened-sources-2.6.18-r5 (06 Mar 2007)
686    
687     06 Mar 2007; Christian Heim <phreak@gentoo.org>
688     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
689     +hardened-sources-2.6.18-r5.ebuild:
690     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
691     Linux 2.6.18.8. Also cleaning up the older version.
692 phreak 1.137
693     24 Feb 2007; Christian Heim <phreak@gentoo.org>
694     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
695     -hardened-sources-2.6.19-r5.ebuild:
696     Removing some of the old version, that didn't work.
697 phreak 1.136
698     *hardened-sources-2.6.19-r6 (12 Feb 2007)
699    
700     12 Feb 2007; Christian Heim <phreak@gentoo.org>
701     +hardened-sources-2.6.19-r6.ebuild:
702     Revision bump, including a new grsec version fixing #166235.
703 pappy 1.134
704     *hardened-sources-2.4.34 (24 Jan 2007)
705    
706     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
707 pappy 1.135 Manifest:
708     updating Manifest with checksums of new tarball and ebuild
709    
710     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
711 pappy 1.134 +hardened-sources-2.4.34.ebuild:
712     I added new hardened sources 2.4 update, this is a critical path
713     security bugfix - all users of h-s are strongly advised
714     to update their existing hardened sources to this version.
715     It contains a fix for a kernel vulnerability that is pertaining
716     to the PaX changes to virtual memory management, possibly leading
717     to a local kernel exploit ... see grsecurity.net forums and homepage
718 phreak 1.133
719     23 Jan 2007; Christian Heim <phreak@gentoo.org>
720     files/digest-hardened-sources-2.6.19-r5, Manifest:
721     Fixing the patch-tarball digest.
722 phreak 1.132
723     *hardened-sources-2.6.19-r5 (23 Jan 2007)
724    
725     23 Jan 2007; Christian Heim <phreak@gentoo.org>
726     +hardened-sources-2.6.19-r5.ebuild:
727     Revision bump, closing the recently discovered PaX expand_stack()
728     vulnerability.
729 phreak 1.131
730     *hardened-sources-2.6.19-r4 (14 Jan 2007)
731    
732     14 Jan 2007; Christian Heim <phreak@gentoo.org>
733     +hardened-sources-2.6.19-r4.ebuild:
734     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
735     dropping the randomized PID feature.
736 opfer 1.130
737     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
738     hardened-sources-2.4.33.4.ebuild:
739     stable x86, bug #161171
740 phreak 1.129
741     *hardened-sources-2.6.19-r3 (27 Dec 2006)
742    
743     27 Dec 2006; Christian Heim <phreak@gentoo.org>
744     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
745     Revision bump for bug #157186 and #158786.
746 phreak 1.128
747     *hardened-sources-2.6.18-r4 (27 Dec 2006)
748    
749     27 Dec 2006; Christian Heim <phreak@gentoo.org>
750     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
751     Revision bump for bug #157186.
752 phreak 1.127
753     *hardened-sources-2.6.19-r2 (23 Dec 2006)
754    
755     23 Dec 2006; Christian Heim <phreak@gentoo.org>
756     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
757     Revision bump to pull in genpatches-2.6.19-3 for #157186.
758 phreak 1.126
759     17 Dec 2006; Christian Heim <phreak@gentoo.org>
760     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
761     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
762     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
763     hardened-sources-2.6.19-r1.ebuild:
764     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
765     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
766 pappy 1.125
767     *hardened-sources-2.4.33.4 (17 Dec 2006)
768    
769     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
770     +hardened-sources-2.4.33.4.ebuild:
771     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
772     and quilting
773 phreak 1.124
774     *hardened-sources-2.6.19-r1 (14 Dec 2006)
775    
776     14 Dec 2006; Christian Heim <phreak@gentoo.org>
777     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
778     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
779     for reporting).
780 phreak 1.123
781     *hardened-sources-2.6.19 (13 Dec 2006)
782    
783     13 Dec 2006; Christian Heim <phreak@gentoo.org>
784     +hardened-sources-2.6.19.ebuild:
785     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
786     Brad for providing that prompt update.
787 phreak 1.122
788     *hardened-sources-2.6.18-r3 (13 Dec 2006)
789    
790     13 Dec 2006; Christian Heim <phreak@gentoo.org>
791     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
792     +hardened-sources-2.6.18-r3.ebuild:
793     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
794     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
795 phreak 1.121
796     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
797     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
798 nixnut 1.120
799     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
800     Stable on ppc wrt bug 157356
801 opfer 1.119
802     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
803     hardened-sources-2.6.18.ebuild:
804     stable x86, bug #157356
805 phreak 1.118
806     *hardened-sources-2.6.18-r2 (06 Dec 2006)
807    
808     06 Dec 2006; Christian Heim <phreak@gentoo.org>
809     +hardened-sources-2.6.18-r2.ebuild:
810     Revision bump, including 2.6.18.5 (via genpatches) and
811     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
812     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
813     redesign.
814 phreak 1.117
815     06 Dec 2006; Christian Heim <phreak@gentoo.org>
816     hardened-sources-2.6.18.ebuild:
817     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
818     of Mike Doty).
819 phreak 1.116
820     *hardened-sources-2.6.18-r1 (23 Nov 2006)
821    
822     23 Nov 2006; Christian Heim <phreak@gentoo.org>
823     +hardened-sources-2.6.18-r1.ebuild:
824     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
825 phreak 1.115
826     *hardened-sources-2.6.18 (11 Nov 2006)
827    
828     11 Nov 2006; Christian Heim <phreak@gentoo.org>
829     +hardened-sources-2.6.18.ebuild:
830     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
831 solar 1.114
832     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
833     - mark amd64 stable also. bug #151877
834 solar 1.113
835     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
836     - mark 2.6.17-r1 stable
837 phreak 1.112
838     27 Aug 2006; Christian Heim <phreak@gentoo.org>
839     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
840     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
841 phreak 1.111
842     *hardened-sources-2.6.17-r1 (26 Aug 2006)
843    
844     26 Aug 2006; Christian Heim <phreak@gentoo.org>
845     +hardened-sources-2.6.17-r1.ebuild:
846     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
847     grsecurity patch.
848 phreak 1.110
849     *hardened-sources-2.6.17 (17 Aug 2006)
850    
851     17 Aug 2006; Christian Heim <phreak@gentoo.org>
852     +hardened-sources-2.6.17.ebuild:
853     Bumping the hardened-sources-2.6 series to 2.6.17, using
854     genpatches-2.6.17-6.base.
855 solar 1.109
856     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
857     - stable on x86 and amd64
858 solar 1.108
859     *hardened-sources-2.6.16-r11 (15 Jul 2006)
860    
861     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
862     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
863     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
864     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
865     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
866     crusty ebuilds
867 johnm 1.107
868     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
869     hardened-sources-2.6.16-r10.ebuild:
870     marking stable on x86 and amd64
871 solar 1.106
872     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
873     - 2.4.32-r6 stable on x86. RSBAC state unknown
874 kang 1.105
875     *hardened-sources-2.4.32-r7 (10 Jul 2006)
876    
877     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
878     +hardened-sources-2.4.32-r7.ebuild:
879     Bump PaX for RSBAC to test-17
880 johnm 1.104
881     *hardened-sources-2.6.16-r9 (03 Jul 2006)
882    
883     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
884     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
885     hardened-sources-2.6.16 bump to latest -base.
886 solar 1.103
887     *hardened-sources-2.4.32-r6 (30 Jun 2006)
888    
889     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
890     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
891     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
892     sysctl controlable resource logging
893 johnm 1.102
894     *hardened-sources-2.6.16-r7 (05 Jun 2006)
895    
896     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
897     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
898     push new 2.6.16 release in preparation for stable
899 solar 1.101
900     22 May 2006; <solar@gentoo.org> :
901     - redigest bug 134002
902 kang 1.100
903     *hardened-sources-2.4.32-r5 (16 May 2006)
904    
905     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
906     +hardened-sources-2.4.32-r5.ebuild:
907     Fixes rsbac common patching (new patch in new -r5 patchset)
908 solar 1.99
909     *hardened-sources-2.4.32-r4 (13 May 2006)
910    
911     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
912     +hardened-sources-2.4.32-r4.ebuild:
913     - security bumps
914 johnm 1.98
915     *hardened-sources-2.6.16-r6 (03 May 2006)
916    
917     03 May 2006; John Mylchreest <johnm@gentoo.org>
918     +hardened-sources-2.6.16-r6.ebuild:
919     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
920 johnm 1.97
921     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
922     hardened-sources-2.6.14-r8.ebuild:
923     fix x86_64 build problem, this will delay the digest issue again for a short
924     while but it will sort itself out
925 johnm 1.96
926     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
927     hardened-sources-2.6.14-r8.ebuild:
928     bump hardened patchset
929 antarus 1.94
930     27 Apr 2006; Alec Warner <antarus@gentoo.org>
931     files/digest-hardened-sources-2.4.32-r2,
932     files/digest-hardened-sources-2.4.32-r3,
933     files/digest-hardened-sources-2.6.14-r8, Manifest:
934     Fixing duff SHA256 digests: Bug # 131293
935 johnm 1.93
936 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
937    
938     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
939     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
940     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
941     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
942     cleanup of old uneccessary sources
943    
944 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
945     fix digest
946 johnm 1.92
947     *hardened-sources-2.6.14-r8 (20 Apr 2006)
948    
949     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
950     +hardened-sources-2.6.14-r8.ebuild:
951     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
952 johnm 1.91
953     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
954     Turning on gpg-signing again, and recomitting
955 johnm 1.90
956     *hardened-sources-2.6.16-r4 (20 Apr 2006)
957    
958     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
959     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
960     +hardened-sources-2.6.16-r4.ebuild:
961     Fix numerous security vulns
962 solar 1.89
963     *hardened-sources-2.4.32-r3 (16 Apr 2006)
964    
965     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
966     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
967     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
968     - security bump for bug #112791. Removed old ebuilds
969 johnm 1.88
970     *hardened-sources-2.6.16-r3 (15 Apr 2006)
971    
972     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
973     +hardened-sources-2.6.16-r3.ebuild:
974     Removing silly localversion which I missed
975 johnm 1.87
976     *hardened-sources-2.6.14-r7 (14 Apr 2006)
977    
978     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
979     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
980     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
981 johnm 1.86
982     *hardened-sources-2.6.16-r2 (13 Apr 2006)
983    
984     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
985     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
986     +hardened-sources-2.6.16-r2.ebuild:
987     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
988     labels, dropping USERGROUP define fixes, since these were merged mainstream.
989 johnm 1.85
990     *hardened-sources-2.6.16-r1 (11 Apr 2006)
991    
992     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
993     +hardened-sources-2.6.16-r1.ebuild:
994     Bumping to include ppc build fix and 2.6.16.3
995 tsunam 1.84
996     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
997     hardened-sources-2.6.14-r6.ebuild:
998     Stable on x86; bug #127718
999 johnm 1.83
1000     *hardened-sources-2.6.16 (31 Mar 2006)
1001    
1002     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1003     +hardened-sources-2.6.16.ebuild:
1004     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1005     2.6.16.1
1006 cryos 1.82
1007     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1008     hardened-sources-2.6.14-r6.ebuild:
1009     Stable on amd64, bug 127718.
1010 nixnut 1.81
1011     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1012     Stable on ppc. Bug #127718
1013 johnm 1.80
1014     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1015     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1016     -hardened-sources-2.6.14-r4.ebuild:
1017     Cleanup.
1018 johnm 1.79
1019     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1020    
1021     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1022     +hardened-sources-2.6.14-r6.ebuild:
1023     Fixes grsec policy recreation bug and adds a
1024     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1025 solar 1.78
1026     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1027     - stable on x86
1028 hansmi 1.77
1029     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1030     hardened-sources-2.6.14-r5.ebuild:
1031     Stable on ppc.
1032 johnm 1.76
1033     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1034    
1035     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1036     +hardened-sources-2.6.14-r5.ebuild:
1037     fixing every known exploit
1038 solar 1.75
1039     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1040    
1041     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1042     +hardened-sources-2.4.32-r2.ebuild:
1043     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1044 solar 1.74
1045     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1046    
1047     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1048     - version bump for new genpatches which fix up a few sec holes
1049 solar 1.73
1050     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1051    
1052     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1053     - revision bump to add misc vital linux kernel security patches.
1054 johnm 1.72
1055     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1056    
1057     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1058     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1059     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1060 johnm 1.71
1061     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1062     hardened-sources-2.6.14-r2.ebuild:
1063     making x86 & amd64 stable following testing.
1064 johnm 1.70
1065     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1066    
1067     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1068     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1069     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1070     network hooks.
1071 johnm 1.69
1072     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1073     hardened-sources-2.6.14-r1.ebuild:
1074     bumping to stable early for sec fix on x86 & amd64
1075 johnm 1.68
1076     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1077    
1078     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1079     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1080     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1081 solar 1.67
1082     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1083     - stable on x86 security bug #114227 CAN-2005-3257
1084 kang 1.66
1085     *hardened-sources-2.4.32 (19 Nov 2005)
1086    
1087     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1088     +hardened-sources-2.4.32.ebuild:
1089     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1090     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1091     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1092     rsbac >> /etc/portage/package.use)
1093 johnm 1.65
1094     *hardened-sources-2.6.14 (14 Nov 2005)
1095    
1096     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1097     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1098     Bumping 2.6 series to 2.6.14.2
1099 johnm 1.64
1100     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1101    
1102     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1103     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1104     +hardened-sources-2.6.13-r2.ebuild:
1105     Fixes minor build error in ppc.
1106 johnm 1.63
1107     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1108    
1109     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1110     +hardened-sources-2.6.13-r1.ebuild:
1111     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1112     2.6.13.4, fixes some major amd64 stability problems.
1113 johnm 1.62
1114     *hardened-sources-2.6.13 (16 Sep 2005)
1115    
1116     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1117     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1118     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1119     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1120     users should test this thoroughly.
1121 solar 1.61
1122     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1123     - stable on x86
1124 johnm 1.60
1125     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1126    
1127     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1128     +hardened-sources-2.6.11-r15.ebuild:
1129     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1130     grsec redefining curr_ip struct.
1131 solar 1.59
1132     *hardened-sources-2.4.31 (20 Jun 2005)
1133    
1134     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1135     initial import of 2.4.31 tree
1136 johnm 1.58
1137     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1138    
1139     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1140     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1141     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1142     naming scheme to abide by genpatches
1143 johnm 1.57
1144     *hardened-sources-2.6.11-r13 (18 May 2005)
1145    
1146     18 May 2005; John Mylchreest <johnm@gentoo.org>
1147     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1148     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1149     target. sorry about that. Fixes bug #93022
1150 johnm 1.56
1151     *hardened-sources-2.6.11-r12 (17 May 2005)
1152    
1153     17 May 2005; John Mylchreest <johnm@gentoo.org>
1154     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1155     +hardened-sources-2.6.11-r12.ebuild:
1156     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1157     merges in genpatches-base
1158 johnm 1.55
1159     *hardened-sources-2.6.11-r12 (17 May 2005)
1160    
1161     17 May 2005; John Mylchreest <johnm@gentoo.org>
1162     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1163     +hardened-sources-2.6.11-r12.ebuild:
1164     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1165     merges in genpatches-base
1166 solar 1.54
1167     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1168     -files/2.4.27-cmdline-race.patch,
1169     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1170     -files/2.4.28-grsec-binfmt_a.out.patch,
1171     -files/2.4.28-grsec-cmdline-race.patch,
1172     -files/2.4.28-selinux-binfmt_a.out.patch,
1173     -files/2.4.28-selinux-cmdline-race.patch,
1174     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1175     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1176     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1177     cleanup..
1178 solar 1.53
1179     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1180    
1181     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1182     - disable aout by default
1183 solar 1.52
1184     *hardened-sources-2.4.30 (18 Apr 2005)
1185    
1186     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1187     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1188     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1189     use
1190 tocharian 1.50
1191 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1192    
1193     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1194     +hardened-sources-2.4.29.ebuild:
1195     New hardened-patches-2.4-29.0 patchball.
1196     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1197    
1198     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1199    
1200     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1201     +hardened-sources-2.4.28-r5.ebuild:
1202     Added a fix for a PaX vulnerability.
1203    
1204     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1205 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1206     Stable on x86
1207 solar 1.49
1208     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1209     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1210     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1211     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1212     - fixed/added RDEPEND= in all kernel-2 ebuilds
1213 tocharian 1.48
1214     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1215    
1216     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1217     +hardened-sources-2.4.28-r4.ebuild:
1218     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1219     backport of neighbour hash updates.
1220 tocharian 1.47
1221     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1222     hardened-sources-2.4.28-r3.ebuild:
1223     Stable on x86
1224 tseng 1.46
1225     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1226    
1227     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1228     +hardened-sources-2.6.10-r3.ebuild:
1229     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1230     in 2005.0
1231 tocharian 1.45
1232     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1233     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1234     hardened-sources-2.4.28-r2.ebuild:
1235     Mark stable on x86
1236 tocharian 1.44
1237     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1238    
1239     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1240     +hardened-sources-2.4.28-r3.ebuild:
1241     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1242 tocharian 1.43
1243     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1244     hardened-sources-2.4.28.ebuild:
1245     Mark stable on x86.
1246 tocharian 1.42
1247     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1248    
1249     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1250     +hardened-sources-2.4.28-r2.ebuild:
1251     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1252     Mazinger for grsecurity patches as well.
1253 plasmaroo 1.41
1254     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1255    
1256     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1257     Security bump. Thank tocharian for rolling a new patchset...
1258 solar 1.40
1259     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1260     +files/2.4.28-grsec-cmdline-race.patch,
1261     +files/2.4.28-selinux-binfmt_a.out.patch,
1262     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1263     - Round up remaining security patches that appear to be missing in 2.4.28. -
1264     PaX standalone updated to current. hgpv=28.1
1265 solar 1.39
1266     *hardened-sources-2.4.28 (28 Nov 2004)
1267    
1268     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1269     security bump. Thank tocharian for rolling a new patchset
1270 scox 1.31
1271 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1272    
1273     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1274     +hardened-sources-2.4.27-r3.ebuild:
1275     Applies the new 2.4-27.2 patchball which updates
1276     GRSecurity to the 2.0.1 version.
1277    
1278 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1279    
1280     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1281     +hardened-sources-2.4.27-r2.ebuild:
1282     Version bump.
1283     This version uses the new 2.4-27.1 patchball which updates
1284     both the SELinux PaX hooks patch and the SELinux headers.
1285    
1286 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1287    
1288     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1289     +hardened-sources-2.4.27-r1.ebuild,
1290     -hardened-sources-2.4.27.ebuild,
1291     +files/2.4.27-cmdline-race.patch:
1292     Version bump, fix for cmdline race. See bug #59905.
1293    
1294     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1295    
1296     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1297     +hardened-sources-2.4.26-r6.ebuild,
1298     -hardened-sources-2.4.26-r5.ebuild,
1299     -hardened-sources-2.4.26-r4.ebuild,
1300     +files/2.4.26-cmdline-race.patch:
1301     Version bump, fix for cmdline race. See bug #59905.
1302    
1303 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1304    
1305     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1306     +hardened-sources-2.4.27.ebuild,
1307     +files/2.4.27-CAN-2004-0394.patch:
1308     Ported the patchball to the 2.4.27 kernel version.
1309    
1310 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1311    
1312     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1313     +hardened-sources-2.4.26-r5.ebuild:
1314 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1315 scox 1.34 It adds the following features:
1316     - Squashfs
1317     - Ebtables
1318     - Netdev random (core+drivers)
1319     - Watchdog Timer (WDT) fix.
1320    
1321 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1322    
1323     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1324     +hardened-sources-2.4.26-r4.ebuild,
1325     +files/2.4.26-CAN-2004-0415.patch,
1326     -hardened-sources-2.4.26-3:
1327     Version bump, fix for CAN 0415, see bug #59378.
1328    
1329 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1330    
1331     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1332     +hardened-sources-2.4.26-r3.ebuild,
1333     +files/2.4.26-CAN-2004-0497.patch,
1334     -hardened-sources-2.4.26-r2.ebuild:
1335     Version bump, fixed CAN 0497, see bug #56171.
1336    
1337 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1338    
1339     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1340 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1341 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1342     +files/2.4.26-CAN-2004-0535.patch,
1343     -hardened-sources-2.4.26-r1.ebuild:
1344     Fixes for both CAN 0495 and 0535, see bug #54976
1345 pvdabeel 1.27
1346 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1347     hardened-sources-2.4.26-r1.ebuild:
1348     QA - fix use invocation
1349 scox 1.28
1350     *hardened-sources-2.4.26-r1 (22 June 2004)
1351    
1352     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1353     +hardened-sources-2.4.26-r1.ebuild,
1354     +files/2.4.26-CAN-2004-0394.patch,
1355     +files/2.4.26-signal-race.patch,
1356     -hardened-sources-2.4.26.ebuild,
1357     -hardened-sources-2.4.24-r3.ebuild:
1358     Version bump for the CAN-2004-0394 issue and bug #53804
1359     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1360    
1361    
1362 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1363     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1364     Masked hardened-sources-2.4.26.ebuild broken for ppc
1365    
1366     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1367     hardened-sources-2.4.24-r3.ebuild:
1368     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1369 plasmaroo 1.25
1370 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1371    
1372     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1373     +hardened-sources-2.4.26.ebuild:
1374     Updated hardened-sources for the 2.4.26 kernel
1375     Removed broken components, updated almost everything.
1376    
1377 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1378    
1379     17 Apr 2004; <plasmaroo@gentoo.org>
1380     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1381     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1382     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1383     +hardened-sources-2.4.24-r3.ebuild:
1384     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1385     vulnerabilities. Old revisions removed.
1386 plasmaroo 1.24
1387     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1388    
1389     15 Apr 2004; <plasmaroo@gentoo.org>
1390     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1391     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1392     Version bump for the CAN-2004-0109 issue; bug #47881.
1393 aliz 1.23
1394     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1395     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1396     Add eutils to inherit.
1397 plasmaroo 1.22
1398     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1399    
1400     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1401     files/hardened-sources-2.4.24.munmap.patch:
1402     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1403 scox 1.19
1404 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1405 scox 1.26
1406 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1407     hardened-sources-2.4.24.ebuild:
1408     Version bump, updated most of the components.
1409     This release includes the following:
1410    
1411     - Hardened security
1412     - Netfilter patch-o-matic 20031219
1413     - FreeSWAN 2.04 & x509 1.4.8
1414     - EVMS 2.2.2
1415     - XFS 1.3.1
1416     - cryptoloop jari
1417     - grsecurity 2.0-rc4
1418     - SELinux
1419     - PaX 200402060000
1420     - PaX Obscurity 200308302223
1421     - Others...
1422    
1423     Neither -ck nor systrace are included anymore.
1424    
1425 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1426    
1427     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1428     hardened-sources-2.4.22-r2.ebuild:
1429 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1430 scox 1.19
1431     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1432 iggy 1.17
1433     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1434 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1435 iggy 1.16
1436     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1437 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1438     Version bump for the 'do_brk' vulnerability.
1439 iggy 1.15
1440     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1441     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1442     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1443     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1444 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1445 frogger 1.14
1446     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1447     hardened-sources-2.4.22.ebuild:
1448 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1449     components. These are no longer handled in the kernel
1450     so this code was not necessary.
1451 frogger 1.13
1452     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1453     New 2.4.22 based hardened-sources thanks to
1454     Phil West <p.west@computer.org>.
1455    
1456     These sources include:
1457 plasmaroo 1.18 - New SELinux API
1458     - Updated CK-base
1459     - Updated GRSec
1460     - Systrace
1461     - SuperFreeS/WAN 1.99.8
1462     - Propolice kernel build support
1463     - EVMS
1464     - Other various security related patches
1465 frogger 1.11
1466 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1467    
1468     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1469     Updated hardened-sources based on the 2.4.21 Linux kernel.
1470     This includes updates to most major components such as:
1471 plasmaroo 1.18 - ck-base-0306300059
1472     - selinux-2.4-2003071106
1473     - grsecurity-2.0-rc1
1474     - Updated IPTables patch-o-matic
1475     - Updated SuperFreeS/WAN
1476    
1477 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1478     updated patch set ready for the 2.4.21 based kernel.
1479    
1480 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1481     Initial import of hardened-sources-2.4.20-r4. This revision
1482     includes only a few changes, but one of these is an important
1483     security fix. It is recommended all users of hardened-sources
1484     upgrade to this release.
1485 plasmaroo 1.18
1486 frogger 1.11 - ioperm bug fix
1487     - fixed compilation failure when building without GRSec
1488 plasmaroo 1.18
1489 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1490     due to time constraints, but is planned for inclusion in the near
1491     future.
1492 msterret 1.10
1493     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1494    
1495     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1496     hardened-sources-2.4.20-r3.ebuild:
1497 plasmaroo 1.18 Add Header...
1498 frogger 1.9
1499     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1500     hardened-sources-2.4.20-r3.ebuild:
1501     Removed warnings from ebuild. This kernel should be safe to
1502     use at this point.
1503 frogger 1.8
1504     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1505    
1506     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1507     hardened-sources-2.4.20-r3.ebuild:
1508     New revision. Includes the following changes over -r2:
1509 plasmaroo 1.18
1510 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1511     - Super FreeS/WAN 1.99.7rc2
1512     - PaX for the LSM/SELinux branch
1513     - GRSecurity 2.0-pre4 (role based access control)
1514     - Systrace 1.3
1515     - EXT3 fixes
1516     - EVMS 2.0.1
1517     - GCC 3.1+ compile optimizations
1518     - ProPolice kernel build support
1519     - Hashing table security fixes
1520 frogger 1.3
1521     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1522 frogger 1.7
1523     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1524     Initial import of hardened-sources-r2. This new
1525     ebuild includes many new performance and security
1526     related patches. As in -r1, it will patch in
1527     LSM/SELinux if "selinux" is in USE, otherwise it
1528     will patch in GRSecurity. The following patches
1529     are included in this revision:
1530 plasmaroo 1.18
1531 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1532     (pulled from the base CK patch)
1533     - ptrace exploit patch for the LSM kernel
1534     (the GRSec patch already fixes this)
1535     - LSM 2.4-2003040709
1536     - SELinux 2.4-2003040709
1537     - Systrace v1.2
1538     - IPTables patch-o-matic base patches - 20030107
1539     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1540     - Super FreeS/WAN 1.99.6.1
1541     - GRSecurity 1.9.9g
1542     - MPPE
1543     - EXT3 data journal fix
1544     - CIPE 1.5.4
1545 frogger 1.6
1546     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1547     hardened-sources-2.4.20-r1.ebuild, manifest:
1548 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1549 frogger 1.5
1550     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1551     hardened-sources-2.4.20-r1.ebuild:
1552     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1553     is patched in instead. Ptrace patches for selinux have also been added. In
1554     either case, systrace support will be patched in as well.
1555 frogger 1.3
1556     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1557     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1558 plasmaroo 1.18 Revision bump for new sources.
1559 frogger 1.4
1560 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1561 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1562 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1563 method 1.1
1564 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1565    
1566 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1567     hardened-sources-2.4.20.ebuild:
1568 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20