/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.258 - (hide annotations) (download)
Wed Nov 19 09:59:17 2008 UTC (6 years ago) by gengor
Branch: MAIN
Changes since 1.257: +5 -1 lines
Remove all keywords except ~amd64,~x86 on 2.6.27 builds.
(Portage version: 2.1.4.5)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 phreak 1.204 # Copyright 2000-2008 Gentoo Foundation; Distributed under the GPL v2
3 gengor 1.258 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.257 2008/11/16 17:27:53 nixnut Exp $
4    
5     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
6     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
7     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
8 nixnut 1.257
9     16 Nov 2008; nixnut <nixnut@gentoo.org>
10     hardened-sources-2.6.25-r10.ebuild:
11     Stable on ppc
12 gengor 1.256
13     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
14     hardened-sources-2.6.25-r10.ebuild:
15     Stable amd64/x86.
16 gengor 1.255
17     *hardened-sources-2.6.26-r6 (12 Nov 2008)
18    
19     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
20     +hardened-sources-2.6.26-r6.ebuild:
21     Bump to Linux 2.6.26.8 and fix security bug #245650.
22 gengor 1.254
23     *hardened-sources-2.6.25-r10 (12 Nov 2008)
24    
25     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
26     +hardened-sources-2.6.25-r10.ebuild:
27     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
28 gengor 1.253
29     *hardened-sources-2.6.27-r1 (09 Nov 2008)
30    
31     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
32     +hardened-sources-2.6.27-r1.ebuild:
33     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
34 gengor 1.252
35     *hardened-sources-2.6.27 (04 Nov 2008)
36    
37     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
38     +hardened-sources-2.6.27.ebuild:
39     Initial 2.6.27 release.
40 gengor 1.251
41     *hardened-sources-2.6.26-r5 (03 Nov 2008)
42    
43     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
44     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
45     +hardened-sources-2.6.26-r5.ebuild:
46     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
47     Clean out some old versions.
48 nixnut 1.250
49     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
50     Stable on ppc
51 gengor 1.249
52     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
53     hardened-sources-2.6.25-r9.ebuild:
54     Stable on amd64/x86.
55 gengor 1.248
56     *hardened-sources-2.6.25-r9 (26 Oct 2008)
57    
58     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
59     +hardened-sources-2.6.25-r9.ebuild:
60     Update to Linux 2.6.25.19
61 nixnut 1.247
62     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
63     Stable on ppc
64 gengor 1.246
65     *hardened-sources-2.6.26-r4 (14 Oct 2008)
66    
67     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
68     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
69     Update to latest grsecurity patch, fixing building of non-modular kernels.
70 gengor 1.245
71     *hardened-sources-2.6.26-r3 (12 Oct 2008)
72    
73     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
74     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
75     +hardened-sources-2.6.26-r3.ebuild:
76     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
77     2.6.26-r1: Removed.
78     2.6.25-r8: Stable amd64/x86.
79 gengor 1.244
80     *hardened-sources-2.6.25-r8 (09 Oct 2008)
81    
82     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
83     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
84     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
85     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
86 nixnut 1.243
87     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
88     Stable on ppc
89 gengor 1.242
90     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
91     hardened-sources-2.6.25-r7.ebuild:
92     Stable amd64/x86.
93 gengor 1.241
94     *hardened-sources-2.6.26-r2 (13 Sep 2008)
95    
96     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
97     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
98     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
99     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
100 gengor 1.240
101     *hardened-sources-2.6.25-r7 (13 Sep 2008)
102    
103     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
104     +hardened-sources-2.6.25-r7.ebuild:
105     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
106 gengor 1.239
107     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
108     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
109     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
110     hardened-sources-2.6.26-r1.ebuild:
111     Update DESCRIPTION and HGPV_URI.
112 gengor 1.238
113     *hardened-sources-2.6.25-r6 (09 Sep 2008)
114    
115     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
116     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
117     2.6.25-r6: Update to Linux 2.6.25.17.
118     2.6.24-r3: Removed.
119 gengor 1.237
120     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
121     hardened-sources-2.6.25-r5.ebuild:
122     Stable on amd64/x86
123 gengor 1.236
124     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
125     Update my email address.
126 nixnut 1.235
127     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
128     stable on ppc
129 battousai 1.234
130     *hardened-sources-2.6.26-r1 (23 Aug 2008)
131     *hardened-sources-2.6.25-r5 (23 Aug 2008)
132    
133     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
134     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
135     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
136     +hardened-sources-2.6.26-r1.ebuild:
137     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
138     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
139     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
140     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
141     (gengor).
142 solar 1.233
143     *hardened-sources-2.6.26 (18 Aug 2008)
144     *hardened-sources-2.6.25-r4 (18 Aug 2008)
145    
146     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
147     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
148     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
149     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
150     2.6.25-r2: Removed.
151 tove 1.232
152     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
153     Remove phreak from metadata.xml (#96398)
154 solar 1.231
155     *hardened-sources-2.6.25-r3 (31 Jul 2008)
156    
157     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
158     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
159     +hardened-sources-2.6.25-r3.ebuild:
160     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
161     fixes, including security bug #231750.
162 nixnut 1.230
163     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
164     Stable on ppc
165 solar 1.229
166     *hardened-sources-2.6.25-r2 (05 Jul 2008)
167    
168     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
169     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
170     +hardened-sources-2.6.25-r2.ebuild:
171     2.6.23-r4: Stable x86/amd64
172     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
173     2.6.23-r{11,12}: Removed due to multiple vulns.
174     (gengor & kerframil)
175 nixnut 1.228
176     04 Jul 2008; nixnut <nixnut@gentoo.org>
177     hardened-sources-2.6.23-r13.ebuild:
178     Stable on ppc
179 solar 1.227
180     *hardened-sources-2.6.25-r1 (30 Jun 2008)
181    
182     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
183     +hardened-sources-2.6.25-r1.ebuild:
184     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
185     grsecurity release. 2.6.23-r13: x86/amd64 stable
186 solar 1.226
187     *hardened-sources-2.6.25 (17 Jun 2008)
188     *hardened-sources-2.6.24-r3 (17 Jun 2008)
189     *hardened-sources-2.6.23-r13 (17 Jun 2008)
190    
191     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
192     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
193     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
194     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
195     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
196     2.6.25: Initial 2.6.25 release.
197 solar 1.225
198     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
199     - fasttrack to stable x86/amd64
200 swegener 1.224
201     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
202     Fix broken digest for linux-2.6.24.tar.bz2.
203 solar 1.223
204     *hardened-sources-2.6.24-r2 (11 May 2008)
205     *hardened-sources-2.6.23-r12 (11 May 2008)
206    
207     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
208     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
209     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
210     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
211     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
212     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
213     security bugs 219901, 220691, 220975, 220979, 221123. New
214     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
215     should be removed as far as I'm concerned, everything else remove due to
216     vulnerable to numerous security bugs or brokeness.
217 nixnut 1.222
218     10 May 2008; nixnut <nixnut@gentoo.org>
219     hardened-sources-2.6.23-r11.ebuild:
220     Stable on ppc
221 solar 1.221
222     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
223     - -r11 stable on x86/amd64
224 solar 1.220
225     *hardened-sources-2.6.23-r11 (01 May 2008)
226    
227     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
228     - version bump to fix ulgy linux bugs
229 phreak 1.219
230     *hardened-sources-2.6.24-r1 (30 Apr 2008)
231    
232     30 Apr 2008; Christian Heim <phreak@gentoo.org>
233     +hardened-sources-2.6.24-r1.ebuild:
234     Revision bump (thanks to Kerin and Gordon, again), pulling
235     genpatches-2.6.24-7, solving #219089. Additionally contains further security
236     fixes plus some minor updates.
237 phreak 1.218
238     *hardened-sources-2.6.23-r10 (30 Apr 2008)
239    
240     30 Apr 2008; Christian Heim <phreak@gentoo.org>
241     +hardened-sources-2.6.23-r10.ebuild:
242     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
243     Additional contains "various other fixes".
244 phreak 1.217
245     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
246     Update the longdescription in metadata, thanks to Gordon Malm.
247 nixnut 1.216
248     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
249     Stable on ppc wrt bug #213255
250 solar 1.215
251     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
252     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
253     - stable on x86/amd64 per request. Removed obsolete ebuilds
254 phreak 1.214
255     *hardened-sources-2.6.24 (07 Apr 2008)
256    
257     07 Apr 2008; Christian Heim <phreak@gentoo.org>
258     +hardened-sources-2.6.24.ebuild:
259     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
260     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
261     for the many contributions and their continued effort in #216612) based on
262     2.6.24 and genpatches-2.6.24-5.
263    
264     The current ebuild/patchset contains these things:
265     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
266     * Introduces bespoke server and workstation oriented security levels
267     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
268 phreak 1.213
269     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
270     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
271     maintaining it).
272 phreak 1.212
273     24 Mar 2008; Christian Heim <phreak@gentoo.org>
274     hardened-sources-2.4.35-r2.ebuild:
275     Fixing SRC_URI for 2.4.35-r2.
276 phreak 1.211
277     *hardened-sources-2.6.23-r9 (22 Mar 2008)
278    
279     22 Mar 2008; Christian Heim <phreak@gentoo.org>
280     +hardened-sources-2.6.23-r9.ebuild:
281     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
282     * Change the default GIDs for some grsecurity options
283     * Revamp the Hardened [Gentoo] security level and make it the default level
284     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
285     * Fix a recursive lock -- call to capable() within ptrace_attach()
286     * Fix bug that allows audit and iscsi operations to be controlled via netlink
287 solar 1.210
288     *hardened-sources-2.6.23-r8 (27 Feb 2008)
289    
290     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
291     - version bump from Kerin Millar bug 210026
292 solar 1.209
293     17 Feb 2008; <solar@gentoo.org> metadata.xml,
294     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
295     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
296     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
297     - stable on x86 and remove old ebuilds
298 solar 1.207
299     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
300 solar 1.208 - stable on amd64 per request of amd64 lead
301 solar 1.206
302     *hardened-sources-2.6.23-r7 (11 Feb 2008)
303    
304     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
305     - version bump from kerin.millar
306     Changes:
307    
308     * Bump to genpatches-base-2.6.23-9
309     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
310     * Disables COMPAT_VDSO in x86/defconfig
311     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
312 phreak 1.205
313     25 Jan 2008; Christian Heim <phreak@gentoo.org>
314     -hardened-sources-2.6.22-r8.ebuild:
315     Cleaning up old versions.
316 phreak 1.204
317     *hardened-sources-2.6.23-r6 (25 Jan 2008)
318    
319     25 Jan 2008; Christian Heim <phreak@gentoo.org>
320     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
321     Revision bump, pulling in the latest genpatches.
322 phreak 1.203
323     *hardened-sources-2.6.23-r5 (24 Dec 2007)
324    
325     24 Dec 2007; Christian Heim <phreak@gentoo.org>
326     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
327     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
328     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
329     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
330 phreak 1.202
331     24 Dec 2007; Christian Heim <phreak@gentoo.org>
332     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
333     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
334     -hardened-sources-2.6.23-r3.ebuild:
335     Cleaning out some unused, old versions.
336 phreak 1.201
337     24 Dec 2007; Christian Heim <phreak@gentoo.org>
338     hardened-sources-2.6.23-r4.ebuild:
339     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
340     in the tree for long, but there isn't much of a difference between this and
341     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
342 phreak 1.200
343     *hardened-sources-2.6.23-r4 (23 Dec 2007)
344    
345     23 Dec 2007; Christian Heim <phreak@gentoo.org>
346     +hardened-sources-2.6.23-r4.ebuild:
347     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
348 phreak 1.199
349     *hardened-sources-2.6.23-r3 (04 Dec 2007)
350    
351     04 Dec 2007; Christian Heim <phreak@gentoo.org>
352     +hardened-sources-2.6.23-r3.ebuild:
353     Revision bump, pulling in 2.6.23.9.
354 phreak 1.198
355     *hardened-sources-2.6.23-r2 (25 Nov 2007)
356    
357     25 Nov 2007; Christian Heim <phreak@gentoo.org>
358     +hardened-sources-2.6.23-r2.ebuild:
359     Updated patchset, thanks to solar.
360 phreak 1.197
361     *hardened-sources-2.6.23-r1 (31 Oct 2007)
362    
363     31 Oct 2007; Christian Heim <phreak@gentoo.org>
364     +hardened-sources-2.6.23-r1.ebuild:
365     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
366 solar 1.196
367     29 Oct 2007; <solar@gentoo.org> metadata.xml:
368     - update metadata.xml
369 phreak 1.195
370     25 Oct 2007; Christian Heim <phreak@gentoo.org>
371     hardened-sources-2.6.22-r8.ebuild:
372     Marking 2.6.22-r8 stable on amd64 and x86.
373 phreak 1.194
374     21 Oct 2007; Christian Heim <phreak@gentoo.org>
375     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
376     -hardened-sources-2.6.21-r4.ebuild:
377     Removing old ebuilds.
378 phreak 1.193
379     *hardened-sources-2.4.35-r2 (21 Oct 2007)
380    
381     21 Oct 2007; Christian Heim <phreak@gentoo.org>
382     +hardened-sources-2.4.35-r2.ebuild:
383     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
384     patches.
385 phreak 1.192
386     *hardened-sources-2.6.22-r8 (21 Oct 2007)
387    
388     21 Oct 2007; Christian Heim <phreak@gentoo.org>
389     +hardened-sources-2.6.22-r8.ebuild:
390     Yet another new patch, hopefully fixing the remaining issues we had w/
391     2.6.22. Candidate for stabling.
392 phreak 1.191
393     *hardened-sources-2.6.23 (13 Oct 2007)
394    
395     13 Oct 2007; Christian Heim <phreak@gentoo.org>
396     +hardened-sources-2.6.23.ebuild:
397     Initial hardened-sources-2.6.23. If people still have problems w/ bug
398     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
399 phreak 1.190
400     11 Oct 2007; Christian Heim <phreak@gentoo.org>
401     hardened-sources-2.6.20-r10.ebuild:
402     Pulling in yet another new genpatches version, fixing the PWC bug for real.
403 phreak 1.189
404     04 Oct 2007; Christian Heim <phreak@gentoo.org>
405     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
406     Removing old versions.
407 phreak 1.188
408     *hardened-sources-2.6.22-r7 (01 Oct 2007)
409    
410     01 Oct 2007; Christian Heim <phreak@gentoo.org>
411     +hardened-sources-2.6.22-r7.ebuild:
412     Revision bump, pulling in a newer patch. Should fix #194276.
413 phreak 1.187
414     30 Sep 2007; Christian Heim <phreak@gentoo.org>
415     hardened-sources-2.6.20-r10.ebuild:
416     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
417     Mike Doty).
418 phreak 1.186
419     *hardened-sources-2.6.22-r6 (26 Sep 2007)
420    
421     26 Sep 2007; Christian Heim <phreak@gentoo.org>
422     +hardened-sources-2.6.22-r6.ebuild:
423     Revision bump, grabbing up till Linux 2.6.22.9.
424 phreak 1.185
425     24 Sep 2007; Christian Heim <phreak@gentoo.org>
426     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
427     Cleaning up further.
428 phreak 1.184
429     *hardened-sources-2.6.20-r10 (24 Sep 2007)
430    
431     24 Sep 2007; Christian Heim <phreak@gentoo.org>
432     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
433     +hardened-sources-2.6.20-r10.ebuild:
434     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
435     revisions.
436 phreak 1.183
437     *hardened-sources-2.6.22-r5 (22 Sep 2007)
438    
439     22 Sep 2007; Christian Heim <phreak@gentoo.org>
440     +hardened-sources-2.6.22-r5.ebuild:
441     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
442 phreak 1.182
443     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
444     Removing johnm from metadata.xml (see #186467 for reference).
445 phreak 1.181
446     *hardened-sources-2.6.22-r4 (17 Sep 2007)
447    
448     17 Sep 2007; Christian Heim <phreak@gentoo.org>
449     +hardened-sources-2.6.22-r4.ebuild:
450     Revision bump, hopefully fixing all those weird PAX failures.
451 phreak 1.180
452     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
453     Updating the metadata.xml.
454 phreak 1.179
455     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
456     Removing tocharian from metadata due to his retirement (see #71718 for
457     reference).
458 phreak 1.178
459     *hardened-sources-2.6.20-r9 (30 Aug 2007)
460    
461     30 Aug 2007; Christian Heim <phreak@gentoo.org>
462     +hardened-sources-2.6.20-r9.ebuild:
463     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
464 phreak 1.177
465     29 Aug 2007; Christian Heim <phreak@gentoo.org>
466     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
467     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
468     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
469     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
470     -hardened-sources-2.6.22-r2.ebuild:
471     Removing some redundant versions.
472 phreak 1.176
473     *hardened-sources-2.4.35-r1 (29 Aug 2007)
474    
475     29 Aug 2007; Christian Heim <phreak@gentoo.org>
476     +hardened-sources-2.4.35-r1.ebuild:
477     Revision bump, new grsecurity patch.
478 phreak 1.175
479     *hardened-sources-2.6.20-r8 (26 Aug 2007)
480    
481     26 Aug 2007; Christian Heim <phreak@gentoo.org>
482     +hardened-sources-2.6.20-r8.ebuild:
483     Revision bump for Linux 2.6.20.17.
484 phreak 1.174
485     *hardened-sources-2.6.22-r3 (22 Aug 2007)
486    
487     22 Aug 2007; Christian Heim <phreak@gentoo.org>
488     +hardened-sources-2.6.22-r3.ebuild:
489     Revision bump for Linux 2.6.22.4.
490 phreak 1.173
491     16 Aug 2007; Christian Heim <phreak@gentoo.org>
492     hardened-sources-2.6.22-r2.ebuild:
493     Updated patchset, to fix the alignment against 2.6.22.3.
494 phreak 1.172
495     *hardened-sources-2.6.22-r2 (16 Aug 2007)
496    
497     16 Aug 2007; Christian Heim <phreak@gentoo.org>
498     +hardened-sources-2.6.22-r2.ebuild:
499     Revision bump for Linux 2.6.22.3.
500 phreak 1.171
501     *hardened-sources-2.4.35 (16 Aug 2007)
502    
503     16 Aug 2007; Christian Heim <phreak@gentoo.org>
504     +hardened-sources-2.4.35.ebuild:
505     Version bump, initial version for Linux 2.4.35.
506 phreak 1.170
507     *hardened-sources-2.6.21-r4 (16 Aug 2007)
508    
509     16 Aug 2007; Christian Heim <phreak@gentoo.org>
510     +hardened-sources-2.6.21-r4.ebuild:
511     Revision bump for Linux 2.6.21.6.
512 phreak 1.169
513     *hardened-sources-2.6.20-r7 (16 Aug 2007)
514    
515     16 Aug 2007; Christian Heim <phreak@gentoo.org>
516     +hardened-sources-2.6.20-r7.ebuild:
517     Revision bump for Linux 2.6.20.16.
518 phreak 1.168
519     *hardened-sources-2.6.22-r1 (13 Aug 2007)
520    
521     13 Aug 2007; Christian Heim <phreak@gentoo.org>
522     +hardened-sources-2.6.22-r1.ebuild:
523     Yet another revision bump.
524 phreak 1.167
525     *hardened-sources-2.6.22 (10 Aug 2007)
526    
527     10 Aug 2007; Christian Heim <phreak@gentoo.org>
528     +hardened-sources-2.6.22.ebuild:
529     Initial release for 2.6.22. If you are using hardened-sources on a desktop
530     machine (P4 or newer), be aware you might need to disable
531     CONFIG_PAX_PAGEEXEC.
532 phreak 1.166
533     04 Aug 2007; Christian Heim <phreak@gentoo.org>
534     hardened-sources-2.6.20-r6.ebuild:
535     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
536     2.6.20.15.
537 phreak 1.165
538     10 Jul 2007; Christian Heim <phreak@gentoo.org>
539     hardened-sources-2.6.20-r5.ebuild:
540     Marking hardened-sources-2.6.20-r5 stable on ppc.
541 phreak 1.164
542     10 Jul 2007; Christian Heim <phreak@gentoo.org>
543     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
544     Cleanup.
545 phreak 1.163
546     *hardened-sources-2.6.20-r6 (08 Jul 2007)
547    
548     08 Jul 2007; Christian Heim <phreak@gentoo.org>
549     +hardened-sources-2.6.20-r6.ebuild:
550     Revision bump, grabbing yet another stable release.
551 phreak 1.162
552     17 Jun 2007; Christian Heim <phreak@gentoo.org>
553     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
554     -hardened-sources-2.6.21-r2.ebuild:
555     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
556     alpha stable KEYWORD by mistake.
557 phreak 1.161
558     17 Jun 2007; Christian Heim <phreak@gentoo.org>
559     hardened-sources-2.6.20-r5.ebuild:
560     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
561     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
562 phreak 1.160
563     *hardened-sources-2.6.21-r3 (12 Jun 2007)
564    
565     12 Jun 2007; Christian Heim <phreak@gentoo.org>
566     +hardened-sources-2.6.21-r3.ebuild:
567     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
568     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
569     love.
570 phreak 1.159
571     *hardened-sources-2.6.20-r5 (11 Jun 2007)
572    
573     11 Jun 2007; Christian Heim <phreak@gentoo.org>
574     +hardened-sources-2.6.20-r5.ebuild:
575     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
576     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
577     love.
578 pappy 1.158
579     *hardened-sources-2.4.34.5 (11 Jun 2007)
580    
581     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
582     +hardened-sources-2.4.34.5.ebuild:
583     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
584 phreak 1.157
585     30 May 2007; Christian Heim <phreak@gentoo.org>
586     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
587     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
588     stale ebuild(s).
589 phreak 1.156
590     30 May 2007; Christian Heim <phreak@gentoo.org>
591     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
592     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
593     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
594     Doing some cleanups, remove stale ebuilds.
595 phreak 1.155
596     26 May 2007; Christian Heim <phreak@gentoo.org>
597     hardened-sources-2.6.21-r2.ebuild:
598     Fixing the grsecurity patch, had one '};' too much.
599 phreak 1.154
600     *hardened-sources-2.6.21-r2 (26 May 2007)
601    
602     26 May 2007; Christian Heim <phreak@gentoo.org>
603     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
604     +hardened-sources-2.6.21-r2.ebuild:
605     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
606     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
607 phreak 1.153
608     *hardened-sources-2.6.20-r4 (26 May 2007)
609    
610     26 May 2007; Christian Heim <phreak@gentoo.org>
611     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
612     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
613 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
614 phreak 1.152
615     15 May 2007; Christian Heim <phreak@gentoo.org>
616     hardened-sources-2.6.20-r3.ebuild:
617     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
618     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
619     grsecurity patch fail in that exact same hunk.
620 phreak 1.151
621     *hardened-sources-2.6.20-r3 (15 May 2007)
622    
623     15 May 2007; Christian Heim <phreak@gentoo.org>
624     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
625     Revision bump, incorporating Linux 2.6.20.11.
626    
627     *hardened-sources-2.6.21-r1 (11 May 2007)
628    
629     11 May 2007; Christian Heim <phreak@gentoo.org>
630     +hardened-sources-2.6.21-r1.ebuild:
631     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
632     mentioned in #177234.
633 kevquinn 1.150
634     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
635     files/digest-hardened-sources-2.6.21, Manifest:
636     Fix Manifest/digest for linux-2.6.21.tar.bz2
637 phreak 1.149
638     06 May 2007; Christian Heim <phreak@gentoo.org>
639     hardened-sources-2.6.21.ebuild:
640     Bumping the hardened-patches version, needed for the fix for #177234.
641 phreak 1.148
642     *hardened-sources-2.6.21 (02 May 2007)
643    
644     02 May 2007; Christian Heim <phreak@gentoo.org>
645     +hardened-sources-2.6.21.ebuild:
646     Version bump, Linux 2.6.21-hardened.
647 phreak 1.147
648     29 Apr 2007; Christian Heim <phreak@gentoo.org>
649     hardened-sources-2.6.20-r2.ebuild:
650     Adding ~ia64 on Ned's request.
651 phreak 1.146
652     29 Apr 2007; Christian Heim <phreak@gentoo.org>
653     hardened-sources-2.6.20-r2.ebuild:
654     Fixing the included grsecurity patch, wasn't alligning due to the Index:
655     header line(s).
656 phreak 1.145
657     29 Apr 2007; Christian Heim <phreak@gentoo.org>
658     hardened-sources-2.6.20-r2.ebuild:
659     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
660 armin76 1.144
661     *hardened-sources-2.6.20-r2 (10 Apr 2007)
662    
663     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
664     +hardened-sources-2.6.20-r2.ebuild:
665     Version bump, on behalf of phreak
666 phreak 1.143
667     *hardened-sources-2.6.20-r1 (04 Apr 2007)
668    
669     04 Apr 2007; Christian Heim <phreak@gentoo.org>
670     +hardened-sources-2.6.20-r1.ebuild:
671     Revision bump, grabbing a newer grsecurity snapshot.
672 phreak 1.142
673     *hardened-sources-2.6.20 (25 Mar 2007)
674    
675     25 Mar 2007; Christian Heim <phreak@gentoo.org>
676     +hardened-sources-2.6.20.ebuild:
677     Finally a hardened-sources version for 2.6.20; many people have been waiting
678     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
679     testbox.
680 chainsaw 1.141
681     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
682     hardened-sources-2.6.18-r6.ebuild:
683     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
684 phreak 1.140
685     *hardened-sources-2.6.18-r6 (16 Mar 2007)
686    
687     16 Mar 2007; Christian Heim <phreak@gentoo.org>
688     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
689     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
690     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
691     supposed to be.
692 phreak 1.139
693     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
694     Fixing the Manifest, the previous one was broken (as in still had the
695     deleted ebuild in it).
696 phreak 1.138
697     06 Mar 2007; Christian Heim <phreak@gentoo.org>
698     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
699     +hardened-sources-2.6.18-r5.ebuild:
700     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
701     Linux 2.6.18.8. Also cleaning up the older version.
702    
703     *hardened-sources-2.6.18-r5 (06 Mar 2007)
704    
705     06 Mar 2007; Christian Heim <phreak@gentoo.org>
706     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
707     +hardened-sources-2.6.18-r5.ebuild:
708     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
709     Linux 2.6.18.8. Also cleaning up the older version.
710 phreak 1.137
711     24 Feb 2007; Christian Heim <phreak@gentoo.org>
712     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
713     -hardened-sources-2.6.19-r5.ebuild:
714     Removing some of the old version, that didn't work.
715 phreak 1.136
716     *hardened-sources-2.6.19-r6 (12 Feb 2007)
717    
718     12 Feb 2007; Christian Heim <phreak@gentoo.org>
719     +hardened-sources-2.6.19-r6.ebuild:
720     Revision bump, including a new grsec version fixing #166235.
721 pappy 1.134
722     *hardened-sources-2.4.34 (24 Jan 2007)
723    
724     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
725 pappy 1.135 Manifest:
726     updating Manifest with checksums of new tarball and ebuild
727    
728     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
729 pappy 1.134 +hardened-sources-2.4.34.ebuild:
730     I added new hardened sources 2.4 update, this is a critical path
731     security bugfix - all users of h-s are strongly advised
732     to update their existing hardened sources to this version.
733     It contains a fix for a kernel vulnerability that is pertaining
734     to the PaX changes to virtual memory management, possibly leading
735     to a local kernel exploit ... see grsecurity.net forums and homepage
736 phreak 1.133
737     23 Jan 2007; Christian Heim <phreak@gentoo.org>
738     files/digest-hardened-sources-2.6.19-r5, Manifest:
739     Fixing the patch-tarball digest.
740 phreak 1.132
741     *hardened-sources-2.6.19-r5 (23 Jan 2007)
742    
743     23 Jan 2007; Christian Heim <phreak@gentoo.org>
744     +hardened-sources-2.6.19-r5.ebuild:
745     Revision bump, closing the recently discovered PaX expand_stack()
746     vulnerability.
747 phreak 1.131
748     *hardened-sources-2.6.19-r4 (14 Jan 2007)
749    
750     14 Jan 2007; Christian Heim <phreak@gentoo.org>
751     +hardened-sources-2.6.19-r4.ebuild:
752     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
753     dropping the randomized PID feature.
754 opfer 1.130
755     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
756     hardened-sources-2.4.33.4.ebuild:
757     stable x86, bug #161171
758 phreak 1.129
759     *hardened-sources-2.6.19-r3 (27 Dec 2006)
760    
761     27 Dec 2006; Christian Heim <phreak@gentoo.org>
762     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
763     Revision bump for bug #157186 and #158786.
764 phreak 1.128
765     *hardened-sources-2.6.18-r4 (27 Dec 2006)
766    
767     27 Dec 2006; Christian Heim <phreak@gentoo.org>
768     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
769     Revision bump for bug #157186.
770 phreak 1.127
771     *hardened-sources-2.6.19-r2 (23 Dec 2006)
772    
773     23 Dec 2006; Christian Heim <phreak@gentoo.org>
774     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
775     Revision bump to pull in genpatches-2.6.19-3 for #157186.
776 phreak 1.126
777     17 Dec 2006; Christian Heim <phreak@gentoo.org>
778     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
779     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
780     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
781     hardened-sources-2.6.19-r1.ebuild:
782     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
783     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
784 pappy 1.125
785     *hardened-sources-2.4.33.4 (17 Dec 2006)
786    
787     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
788     +hardened-sources-2.4.33.4.ebuild:
789     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
790     and quilting
791 phreak 1.124
792     *hardened-sources-2.6.19-r1 (14 Dec 2006)
793    
794     14 Dec 2006; Christian Heim <phreak@gentoo.org>
795     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
796     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
797     for reporting).
798 phreak 1.123
799     *hardened-sources-2.6.19 (13 Dec 2006)
800    
801     13 Dec 2006; Christian Heim <phreak@gentoo.org>
802     +hardened-sources-2.6.19.ebuild:
803     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
804     Brad for providing that prompt update.
805 phreak 1.122
806     *hardened-sources-2.6.18-r3 (13 Dec 2006)
807    
808     13 Dec 2006; Christian Heim <phreak@gentoo.org>
809     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
810     +hardened-sources-2.6.18-r3.ebuild:
811     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
812     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
813 phreak 1.121
814     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
815     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
816 nixnut 1.120
817     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
818     Stable on ppc wrt bug 157356
819 opfer 1.119
820     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
821     hardened-sources-2.6.18.ebuild:
822     stable x86, bug #157356
823 phreak 1.118
824     *hardened-sources-2.6.18-r2 (06 Dec 2006)
825    
826     06 Dec 2006; Christian Heim <phreak@gentoo.org>
827     +hardened-sources-2.6.18-r2.ebuild:
828     Revision bump, including 2.6.18.5 (via genpatches) and
829     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
830     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
831     redesign.
832 phreak 1.117
833     06 Dec 2006; Christian Heim <phreak@gentoo.org>
834     hardened-sources-2.6.18.ebuild:
835     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
836     of Mike Doty).
837 phreak 1.116
838     *hardened-sources-2.6.18-r1 (23 Nov 2006)
839    
840     23 Nov 2006; Christian Heim <phreak@gentoo.org>
841     +hardened-sources-2.6.18-r1.ebuild:
842     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
843 phreak 1.115
844     *hardened-sources-2.6.18 (11 Nov 2006)
845    
846     11 Nov 2006; Christian Heim <phreak@gentoo.org>
847     +hardened-sources-2.6.18.ebuild:
848     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
849 solar 1.114
850     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
851     - mark amd64 stable also. bug #151877
852 solar 1.113
853     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
854     - mark 2.6.17-r1 stable
855 phreak 1.112
856     27 Aug 2006; Christian Heim <phreak@gentoo.org>
857     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
858     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
859 phreak 1.111
860     *hardened-sources-2.6.17-r1 (26 Aug 2006)
861    
862     26 Aug 2006; Christian Heim <phreak@gentoo.org>
863     +hardened-sources-2.6.17-r1.ebuild:
864     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
865     grsecurity patch.
866 phreak 1.110
867     *hardened-sources-2.6.17 (17 Aug 2006)
868    
869     17 Aug 2006; Christian Heim <phreak@gentoo.org>
870     +hardened-sources-2.6.17.ebuild:
871     Bumping the hardened-sources-2.6 series to 2.6.17, using
872     genpatches-2.6.17-6.base.
873 solar 1.109
874     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
875     - stable on x86 and amd64
876 solar 1.108
877     *hardened-sources-2.6.16-r11 (15 Jul 2006)
878    
879     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
880     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
881     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
882     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
883     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
884     crusty ebuilds
885 johnm 1.107
886     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
887     hardened-sources-2.6.16-r10.ebuild:
888     marking stable on x86 and amd64
889 solar 1.106
890     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
891     - 2.4.32-r6 stable on x86. RSBAC state unknown
892 kang 1.105
893     *hardened-sources-2.4.32-r7 (10 Jul 2006)
894    
895     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
896     +hardened-sources-2.4.32-r7.ebuild:
897     Bump PaX for RSBAC to test-17
898 johnm 1.104
899     *hardened-sources-2.6.16-r9 (03 Jul 2006)
900    
901     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
902     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
903     hardened-sources-2.6.16 bump to latest -base.
904 solar 1.103
905     *hardened-sources-2.4.32-r6 (30 Jun 2006)
906    
907     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
908     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
909     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
910     sysctl controlable resource logging
911 johnm 1.102
912     *hardened-sources-2.6.16-r7 (05 Jun 2006)
913    
914     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
915     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
916     push new 2.6.16 release in preparation for stable
917 solar 1.101
918     22 May 2006; <solar@gentoo.org> :
919     - redigest bug 134002
920 kang 1.100
921     *hardened-sources-2.4.32-r5 (16 May 2006)
922    
923     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
924     +hardened-sources-2.4.32-r5.ebuild:
925     Fixes rsbac common patching (new patch in new -r5 patchset)
926 solar 1.99
927     *hardened-sources-2.4.32-r4 (13 May 2006)
928    
929     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
930     +hardened-sources-2.4.32-r4.ebuild:
931     - security bumps
932 johnm 1.98
933     *hardened-sources-2.6.16-r6 (03 May 2006)
934    
935     03 May 2006; John Mylchreest <johnm@gentoo.org>
936     +hardened-sources-2.6.16-r6.ebuild:
937     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
938 johnm 1.97
939     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
940     hardened-sources-2.6.14-r8.ebuild:
941     fix x86_64 build problem, this will delay the digest issue again for a short
942     while but it will sort itself out
943 johnm 1.96
944     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
945     hardened-sources-2.6.14-r8.ebuild:
946     bump hardened patchset
947 antarus 1.94
948     27 Apr 2006; Alec Warner <antarus@gentoo.org>
949     files/digest-hardened-sources-2.4.32-r2,
950     files/digest-hardened-sources-2.4.32-r3,
951     files/digest-hardened-sources-2.6.14-r8, Manifest:
952     Fixing duff SHA256 digests: Bug # 131293
953 johnm 1.93
954 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
955    
956     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
957     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
958     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
959     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
960     cleanup of old uneccessary sources
961    
962 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
963     fix digest
964 johnm 1.92
965     *hardened-sources-2.6.14-r8 (20 Apr 2006)
966    
967     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
968     +hardened-sources-2.6.14-r8.ebuild:
969     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
970 johnm 1.91
971     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
972     Turning on gpg-signing again, and recomitting
973 johnm 1.90
974     *hardened-sources-2.6.16-r4 (20 Apr 2006)
975    
976     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
977     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
978     +hardened-sources-2.6.16-r4.ebuild:
979     Fix numerous security vulns
980 solar 1.89
981     *hardened-sources-2.4.32-r3 (16 Apr 2006)
982    
983     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
984     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
985     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
986     - security bump for bug #112791. Removed old ebuilds
987 johnm 1.88
988     *hardened-sources-2.6.16-r3 (15 Apr 2006)
989    
990     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
991     +hardened-sources-2.6.16-r3.ebuild:
992     Removing silly localversion which I missed
993 johnm 1.87
994     *hardened-sources-2.6.14-r7 (14 Apr 2006)
995    
996     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
997     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
998     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
999 johnm 1.86
1000     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1001    
1002     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1003     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1004     +hardened-sources-2.6.16-r2.ebuild:
1005     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1006     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1007 johnm 1.85
1008     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1009    
1010     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1011     +hardened-sources-2.6.16-r1.ebuild:
1012     Bumping to include ppc build fix and 2.6.16.3
1013 tsunam 1.84
1014     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1015     hardened-sources-2.6.14-r6.ebuild:
1016     Stable on x86; bug #127718
1017 johnm 1.83
1018     *hardened-sources-2.6.16 (31 Mar 2006)
1019    
1020     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1021     +hardened-sources-2.6.16.ebuild:
1022     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1023     2.6.16.1
1024 cryos 1.82
1025     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1026     hardened-sources-2.6.14-r6.ebuild:
1027     Stable on amd64, bug 127718.
1028 nixnut 1.81
1029     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1030     Stable on ppc. Bug #127718
1031 johnm 1.80
1032     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1033     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1034     -hardened-sources-2.6.14-r4.ebuild:
1035     Cleanup.
1036 johnm 1.79
1037     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1038    
1039     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1040     +hardened-sources-2.6.14-r6.ebuild:
1041     Fixes grsec policy recreation bug and adds a
1042     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1043 solar 1.78
1044     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1045     - stable on x86
1046 hansmi 1.77
1047     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1048     hardened-sources-2.6.14-r5.ebuild:
1049     Stable on ppc.
1050 johnm 1.76
1051     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1052    
1053     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1054     +hardened-sources-2.6.14-r5.ebuild:
1055     fixing every known exploit
1056 solar 1.75
1057     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1058    
1059     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1060     +hardened-sources-2.4.32-r2.ebuild:
1061     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1062 solar 1.74
1063     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1064    
1065     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1066     - version bump for new genpatches which fix up a few sec holes
1067 solar 1.73
1068     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1069    
1070     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1071     - revision bump to add misc vital linux kernel security patches.
1072 johnm 1.72
1073     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1074    
1075     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1076     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1077     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1078 johnm 1.71
1079     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1080     hardened-sources-2.6.14-r2.ebuild:
1081     making x86 & amd64 stable following testing.
1082 johnm 1.70
1083     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1084    
1085     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1086     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1087     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1088     network hooks.
1089 johnm 1.69
1090     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1091     hardened-sources-2.6.14-r1.ebuild:
1092     bumping to stable early for sec fix on x86 & amd64
1093 johnm 1.68
1094     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1095    
1096     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1097     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1098     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1099 solar 1.67
1100     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1101     - stable on x86 security bug #114227 CAN-2005-3257
1102 kang 1.66
1103     *hardened-sources-2.4.32 (19 Nov 2005)
1104    
1105     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1106     +hardened-sources-2.4.32.ebuild:
1107     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1108     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1109     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1110     rsbac >> /etc/portage/package.use)
1111 johnm 1.65
1112     *hardened-sources-2.6.14 (14 Nov 2005)
1113    
1114     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1115     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1116     Bumping 2.6 series to 2.6.14.2
1117 johnm 1.64
1118     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1119    
1120     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1121     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1122     +hardened-sources-2.6.13-r2.ebuild:
1123     Fixes minor build error in ppc.
1124 johnm 1.63
1125     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1126    
1127     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1128     +hardened-sources-2.6.13-r1.ebuild:
1129     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1130     2.6.13.4, fixes some major amd64 stability problems.
1131 johnm 1.62
1132     *hardened-sources-2.6.13 (16 Sep 2005)
1133    
1134     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1135     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1136     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1137     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1138     users should test this thoroughly.
1139 solar 1.61
1140     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1141     - stable on x86
1142 johnm 1.60
1143     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1144    
1145     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1146     +hardened-sources-2.6.11-r15.ebuild:
1147     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1148     grsec redefining curr_ip struct.
1149 solar 1.59
1150     *hardened-sources-2.4.31 (20 Jun 2005)
1151    
1152     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1153     initial import of 2.4.31 tree
1154 johnm 1.58
1155     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1156    
1157     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1158     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1159     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1160     naming scheme to abide by genpatches
1161 johnm 1.57
1162     *hardened-sources-2.6.11-r13 (18 May 2005)
1163    
1164     18 May 2005; John Mylchreest <johnm@gentoo.org>
1165     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1166     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1167     target. sorry about that. Fixes bug #93022
1168 johnm 1.56
1169     *hardened-sources-2.6.11-r12 (17 May 2005)
1170    
1171     17 May 2005; John Mylchreest <johnm@gentoo.org>
1172     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1173     +hardened-sources-2.6.11-r12.ebuild:
1174     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1175     merges in genpatches-base
1176 johnm 1.55
1177     *hardened-sources-2.6.11-r12 (17 May 2005)
1178    
1179     17 May 2005; John Mylchreest <johnm@gentoo.org>
1180     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1181     +hardened-sources-2.6.11-r12.ebuild:
1182     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1183     merges in genpatches-base
1184 solar 1.54
1185     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1186     -files/2.4.27-cmdline-race.patch,
1187     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1188     -files/2.4.28-grsec-binfmt_a.out.patch,
1189     -files/2.4.28-grsec-cmdline-race.patch,
1190     -files/2.4.28-selinux-binfmt_a.out.patch,
1191     -files/2.4.28-selinux-cmdline-race.patch,
1192     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1193     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1194     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1195     cleanup..
1196 solar 1.53
1197     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1198    
1199     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1200     - disable aout by default
1201 solar 1.52
1202     *hardened-sources-2.4.30 (18 Apr 2005)
1203    
1204     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1205     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1206     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1207     use
1208 tocharian 1.50
1209 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1210    
1211     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1212     +hardened-sources-2.4.29.ebuild:
1213     New hardened-patches-2.4-29.0 patchball.
1214     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1215    
1216     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1217    
1218     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1219     +hardened-sources-2.4.28-r5.ebuild:
1220     Added a fix for a PaX vulnerability.
1221    
1222     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1223 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1224     Stable on x86
1225 solar 1.49
1226     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1227     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1228     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1229     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1230     - fixed/added RDEPEND= in all kernel-2 ebuilds
1231 tocharian 1.48
1232     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1233    
1234     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1235     +hardened-sources-2.4.28-r4.ebuild:
1236     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1237     backport of neighbour hash updates.
1238 tocharian 1.47
1239     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1240     hardened-sources-2.4.28-r3.ebuild:
1241     Stable on x86
1242 tseng 1.46
1243     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1244    
1245     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1246     +hardened-sources-2.6.10-r3.ebuild:
1247     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1248     in 2005.0
1249 tocharian 1.45
1250     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1251     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1252     hardened-sources-2.4.28-r2.ebuild:
1253     Mark stable on x86
1254 tocharian 1.44
1255     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1256    
1257     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1258     +hardened-sources-2.4.28-r3.ebuild:
1259     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1260 tocharian 1.43
1261     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1262     hardened-sources-2.4.28.ebuild:
1263     Mark stable on x86.
1264 tocharian 1.42
1265     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1266    
1267     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1268     +hardened-sources-2.4.28-r2.ebuild:
1269     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1270     Mazinger for grsecurity patches as well.
1271 plasmaroo 1.41
1272     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1273    
1274     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1275     Security bump. Thank tocharian for rolling a new patchset...
1276 solar 1.40
1277     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1278     +files/2.4.28-grsec-cmdline-race.patch,
1279     +files/2.4.28-selinux-binfmt_a.out.patch,
1280     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1281     - Round up remaining security patches that appear to be missing in 2.4.28. -
1282     PaX standalone updated to current. hgpv=28.1
1283 solar 1.39
1284     *hardened-sources-2.4.28 (28 Nov 2004)
1285    
1286     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1287     security bump. Thank tocharian for rolling a new patchset
1288 scox 1.31
1289 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1290    
1291     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1292     +hardened-sources-2.4.27-r3.ebuild:
1293     Applies the new 2.4-27.2 patchball which updates
1294     GRSecurity to the 2.0.1 version.
1295    
1296 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1297    
1298     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1299     +hardened-sources-2.4.27-r2.ebuild:
1300     Version bump.
1301     This version uses the new 2.4-27.1 patchball which updates
1302     both the SELinux PaX hooks patch and the SELinux headers.
1303    
1304 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1305    
1306     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1307     +hardened-sources-2.4.27-r1.ebuild,
1308     -hardened-sources-2.4.27.ebuild,
1309     +files/2.4.27-cmdline-race.patch:
1310     Version bump, fix for cmdline race. See bug #59905.
1311    
1312     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1313    
1314     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1315     +hardened-sources-2.4.26-r6.ebuild,
1316     -hardened-sources-2.4.26-r5.ebuild,
1317     -hardened-sources-2.4.26-r4.ebuild,
1318     +files/2.4.26-cmdline-race.patch:
1319     Version bump, fix for cmdline race. See bug #59905.
1320    
1321 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1322    
1323     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1324     +hardened-sources-2.4.27.ebuild,
1325     +files/2.4.27-CAN-2004-0394.patch:
1326     Ported the patchball to the 2.4.27 kernel version.
1327    
1328 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1329    
1330     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1331     +hardened-sources-2.4.26-r5.ebuild:
1332 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1333 scox 1.34 It adds the following features:
1334     - Squashfs
1335     - Ebtables
1336     - Netdev random (core+drivers)
1337     - Watchdog Timer (WDT) fix.
1338    
1339 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1340    
1341     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1342     +hardened-sources-2.4.26-r4.ebuild,
1343     +files/2.4.26-CAN-2004-0415.patch,
1344     -hardened-sources-2.4.26-3:
1345     Version bump, fix for CAN 0415, see bug #59378.
1346    
1347 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1348    
1349     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1350     +hardened-sources-2.4.26-r3.ebuild,
1351     +files/2.4.26-CAN-2004-0497.patch,
1352     -hardened-sources-2.4.26-r2.ebuild:
1353     Version bump, fixed CAN 0497, see bug #56171.
1354    
1355 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1356    
1357     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1358 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1359 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1360     +files/2.4.26-CAN-2004-0535.patch,
1361     -hardened-sources-2.4.26-r1.ebuild:
1362     Fixes for both CAN 0495 and 0535, see bug #54976
1363 pvdabeel 1.27
1364 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1365     hardened-sources-2.4.26-r1.ebuild:
1366     QA - fix use invocation
1367 scox 1.28
1368     *hardened-sources-2.4.26-r1 (22 June 2004)
1369    
1370     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1371     +hardened-sources-2.4.26-r1.ebuild,
1372     +files/2.4.26-CAN-2004-0394.patch,
1373     +files/2.4.26-signal-race.patch,
1374     -hardened-sources-2.4.26.ebuild,
1375     -hardened-sources-2.4.24-r3.ebuild:
1376     Version bump for the CAN-2004-0394 issue and bug #53804
1377     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1378    
1379    
1380 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1381     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1382     Masked hardened-sources-2.4.26.ebuild broken for ppc
1383    
1384     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1385     hardened-sources-2.4.24-r3.ebuild:
1386     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1387 plasmaroo 1.25
1388 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1389    
1390     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1391     +hardened-sources-2.4.26.ebuild:
1392     Updated hardened-sources for the 2.4.26 kernel
1393     Removed broken components, updated almost everything.
1394    
1395 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1396    
1397     17 Apr 2004; <plasmaroo@gentoo.org>
1398     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1399     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1400     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1401     +hardened-sources-2.4.24-r3.ebuild:
1402     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1403     vulnerabilities. Old revisions removed.
1404 plasmaroo 1.24
1405     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1406    
1407     15 Apr 2004; <plasmaroo@gentoo.org>
1408     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1409     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1410     Version bump for the CAN-2004-0109 issue; bug #47881.
1411 aliz 1.23
1412     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1413     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1414     Add eutils to inherit.
1415 plasmaroo 1.22
1416     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1417    
1418     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1419     files/hardened-sources-2.4.24.munmap.patch:
1420     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1421 scox 1.19
1422 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1423 scox 1.26
1424 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1425     hardened-sources-2.4.24.ebuild:
1426     Version bump, updated most of the components.
1427     This release includes the following:
1428    
1429     - Hardened security
1430     - Netfilter patch-o-matic 20031219
1431     - FreeSWAN 2.04 & x509 1.4.8
1432     - EVMS 2.2.2
1433     - XFS 1.3.1
1434     - cryptoloop jari
1435     - grsecurity 2.0-rc4
1436     - SELinux
1437     - PaX 200402060000
1438     - PaX Obscurity 200308302223
1439     - Others...
1440    
1441     Neither -ck nor systrace are included anymore.
1442    
1443 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1444    
1445     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1446     hardened-sources-2.4.22-r2.ebuild:
1447 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1448 scox 1.19
1449     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1450 iggy 1.17
1451     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1452 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1453 iggy 1.16
1454     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1455 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1456     Version bump for the 'do_brk' vulnerability.
1457 iggy 1.15
1458     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1459     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1460     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1461     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1462 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1463 frogger 1.14
1464     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1465     hardened-sources-2.4.22.ebuild:
1466 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1467     components. These are no longer handled in the kernel
1468     so this code was not necessary.
1469 frogger 1.13
1470     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1471     New 2.4.22 based hardened-sources thanks to
1472     Phil West <p.west@computer.org>.
1473    
1474     These sources include:
1475 plasmaroo 1.18 - New SELinux API
1476     - Updated CK-base
1477     - Updated GRSec
1478     - Systrace
1479     - SuperFreeS/WAN 1.99.8
1480     - Propolice kernel build support
1481     - EVMS
1482     - Other various security related patches
1483 frogger 1.11
1484 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1485    
1486     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1487     Updated hardened-sources based on the 2.4.21 Linux kernel.
1488     This includes updates to most major components such as:
1489 plasmaroo 1.18 - ck-base-0306300059
1490     - selinux-2.4-2003071106
1491     - grsecurity-2.0-rc1
1492     - Updated IPTables patch-o-matic
1493     - Updated SuperFreeS/WAN
1494    
1495 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1496     updated patch set ready for the 2.4.21 based kernel.
1497    
1498 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1499     Initial import of hardened-sources-2.4.20-r4. This revision
1500     includes only a few changes, but one of these is an important
1501     security fix. It is recommended all users of hardened-sources
1502     upgrade to this release.
1503 plasmaroo 1.18
1504 frogger 1.11 - ioperm bug fix
1505     - fixed compilation failure when building without GRSec
1506 plasmaroo 1.18
1507 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1508     due to time constraints, but is planned for inclusion in the near
1509     future.
1510 msterret 1.10
1511     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1512    
1513     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1514     hardened-sources-2.4.20-r3.ebuild:
1515 plasmaroo 1.18 Add Header...
1516 frogger 1.9
1517     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1518     hardened-sources-2.4.20-r3.ebuild:
1519     Removed warnings from ebuild. This kernel should be safe to
1520     use at this point.
1521 frogger 1.8
1522     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1523    
1524     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1525     hardened-sources-2.4.20-r3.ebuild:
1526     New revision. Includes the following changes over -r2:
1527 plasmaroo 1.18
1528 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1529     - Super FreeS/WAN 1.99.7rc2
1530     - PaX for the LSM/SELinux branch
1531     - GRSecurity 2.0-pre4 (role based access control)
1532     - Systrace 1.3
1533     - EXT3 fixes
1534     - EVMS 2.0.1
1535     - GCC 3.1+ compile optimizations
1536     - ProPolice kernel build support
1537     - Hashing table security fixes
1538 frogger 1.3
1539     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1540 frogger 1.7
1541     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1542     Initial import of hardened-sources-r2. This new
1543     ebuild includes many new performance and security
1544     related patches. As in -r1, it will patch in
1545     LSM/SELinux if "selinux" is in USE, otherwise it
1546     will patch in GRSecurity. The following patches
1547     are included in this revision:
1548 plasmaroo 1.18
1549 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1550     (pulled from the base CK patch)
1551     - ptrace exploit patch for the LSM kernel
1552     (the GRSec patch already fixes this)
1553     - LSM 2.4-2003040709
1554     - SELinux 2.4-2003040709
1555     - Systrace v1.2
1556     - IPTables patch-o-matic base patches - 20030107
1557     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1558     - Super FreeS/WAN 1.99.6.1
1559     - GRSecurity 1.9.9g
1560     - MPPE
1561     - EXT3 data journal fix
1562     - CIPE 1.5.4
1563 frogger 1.6
1564     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1565     hardened-sources-2.4.20-r1.ebuild, manifest:
1566 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1567 frogger 1.5
1568     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1569     hardened-sources-2.4.20-r1.ebuild:
1570     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1571     is patched in instead. Ptrace patches for selinux have also been added. In
1572     either case, systrace support will be patched in as well.
1573 frogger 1.3
1574     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1575     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1576 plasmaroo 1.18 Revision bump for new sources.
1577 frogger 1.4
1578 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1579 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1580 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1581 method 1.1
1582 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1583    
1584 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1585     hardened-sources-2.4.20.ebuild:
1586 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20