/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.273 - (hide annotations) (download)
Wed Jan 21 00:06:32 2009 UTC (5 years, 2 months ago) by gengor
Branch: MAIN
Changes since 1.272: +7 -1 lines
Add hardened-sources-2.6.26-r9 release
(Portage version: 2.1.6.4/cvs/Linux 2.6.27-hardened-r4-rc1-2009011401 i686)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 gengor 1.268 # Copyright 2000-2009 Gentoo Foundation; Distributed under the GPL v2
3 gengor 1.273 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.272 2009/01/20 23:29:52 gengor Exp $
4    
5     *hardened-sources-2.6.26-r9 (21 Jan 2009)
6    
7     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
8     +hardened-sources-2.6.26-r9.ebuild:
9     Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253773, 254843
10 gengor 1.272
11     *hardened-sources-2.6.25-r13 (20 Jan 2009)
12    
13     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
14     +hardened-sources-2.6.25-r13.ebuild:
15     Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253773, 254843
16 nixnut 1.271
17     20 Jan 2009; nixnut <nixnut@gentoo.org>
18     hardened-sources-2.6.25-r12.ebuild:
19     ppc stable
20 gengor 1.270
21     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
22     hardened-sources-2.6.25-r12.ebuild:
23     Stable amd64/x86.
24 gengor 1.269
25     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
26     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
27     -hardened-sources-2.6.27-r2.ebuild:
28     Clean out old versions.
29 gengor 1.268
30     *hardened-sources-2.6.27-r4 (14 Jan 2009)
31     *hardened-sources-2.6.26-r8 (14 Jan 2009)
32     *hardened-sources-2.6.25-r12 (14 Jan 2009)
33    
34     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
35     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
36     +hardened-sources-2.6.27-r4.ebuild:
37     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
38     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
39     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
40     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
41 nixnut 1.267
42     15 Dec 2008; nixnut <nixnut@gentoo.org>
43     hardened-sources-2.6.25-r11.ebuild:
44     Stable on ppc
45 gengor 1.266
46     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
47     hardened-sources-2.6.25-r11.ebuild:
48     Stable amd64/x86.
49 gengor 1.265
50     *hardened-sources-2.6.27-r3 (07 Dec 2008)
51    
52     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
53     +hardened-sources-2.6.27-r3.ebuild:
54     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
55     Fixes bug #248754, #249729 and #246607.
56 gengor 1.264
57     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
58     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
59     Remove old versions.
60 gengor 1.262
61     *hardened-sources-2.6.26-r7 (03 Dec 2008)
62     *hardened-sources-2.6.25-r11 (03 Dec 2008)
63    
64 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
65     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
66 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
67     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
68     Both include many backports from 2.6.27.{6,7} -stable releases.
69 gengor 1.261
70     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
71     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
72     Remove versions broken on ARCHes != x86/amd64.
73 gengor 1.260
74     *hardened-sources-2.6.27-r2 (24 Nov 2008)
75    
76     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
77     +hardened-sources-2.6.27-r2.ebuild:
78     Bump to Linux 2.6.27.7 and latest grsecurity patch.
79 gengor 1.259
80     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
81     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
82     Remove old versions.
83 gengor 1.258
84     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
85     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
86     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
87 nixnut 1.257
88     16 Nov 2008; nixnut <nixnut@gentoo.org>
89     hardened-sources-2.6.25-r10.ebuild:
90     Stable on ppc
91 gengor 1.256
92     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
93     hardened-sources-2.6.25-r10.ebuild:
94     Stable amd64/x86.
95 gengor 1.255
96     *hardened-sources-2.6.26-r6 (12 Nov 2008)
97    
98     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
99     +hardened-sources-2.6.26-r6.ebuild:
100     Bump to Linux 2.6.26.8 and fix security bug #245650.
101 gengor 1.254
102     *hardened-sources-2.6.25-r10 (12 Nov 2008)
103    
104     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
105     +hardened-sources-2.6.25-r10.ebuild:
106     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
107 gengor 1.253
108     *hardened-sources-2.6.27-r1 (09 Nov 2008)
109    
110     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
111     +hardened-sources-2.6.27-r1.ebuild:
112     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
113 gengor 1.252
114     *hardened-sources-2.6.27 (04 Nov 2008)
115    
116     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
117     +hardened-sources-2.6.27.ebuild:
118     Initial 2.6.27 release.
119 gengor 1.251
120     *hardened-sources-2.6.26-r5 (03 Nov 2008)
121    
122     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
123     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
124     +hardened-sources-2.6.26-r5.ebuild:
125     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
126     Clean out some old versions.
127 nixnut 1.250
128     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
129     Stable on ppc
130 gengor 1.249
131     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
132     hardened-sources-2.6.25-r9.ebuild:
133     Stable on amd64/x86.
134 gengor 1.248
135     *hardened-sources-2.6.25-r9 (26 Oct 2008)
136    
137     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
138     +hardened-sources-2.6.25-r9.ebuild:
139     Update to Linux 2.6.25.19
140 nixnut 1.247
141     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
142     Stable on ppc
143 gengor 1.246
144     *hardened-sources-2.6.26-r4 (14 Oct 2008)
145    
146     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
147     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
148     Update to latest grsecurity patch, fixing building of non-modular kernels.
149 gengor 1.245
150     *hardened-sources-2.6.26-r3 (12 Oct 2008)
151    
152     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
153     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
154     +hardened-sources-2.6.26-r3.ebuild:
155     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
156     2.6.26-r1: Removed.
157     2.6.25-r8: Stable amd64/x86.
158 gengor 1.244
159     *hardened-sources-2.6.25-r8 (09 Oct 2008)
160    
161     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
162     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
163     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
164     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
165 nixnut 1.243
166     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
167     Stable on ppc
168 gengor 1.242
169     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
170     hardened-sources-2.6.25-r7.ebuild:
171     Stable amd64/x86.
172 gengor 1.241
173     *hardened-sources-2.6.26-r2 (13 Sep 2008)
174    
175     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
176     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
177     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
178     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
179 gengor 1.240
180     *hardened-sources-2.6.25-r7 (13 Sep 2008)
181    
182     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
183     +hardened-sources-2.6.25-r7.ebuild:
184     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
185 gengor 1.239
186     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
187     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
188     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
189     hardened-sources-2.6.26-r1.ebuild:
190     Update DESCRIPTION and HGPV_URI.
191 gengor 1.238
192     *hardened-sources-2.6.25-r6 (09 Sep 2008)
193    
194     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
195     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
196     2.6.25-r6: Update to Linux 2.6.25.17.
197     2.6.24-r3: Removed.
198 gengor 1.237
199     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
200     hardened-sources-2.6.25-r5.ebuild:
201     Stable on amd64/x86
202 gengor 1.236
203     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
204     Update my email address.
205 nixnut 1.235
206     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
207     stable on ppc
208 battousai 1.234
209     *hardened-sources-2.6.26-r1 (23 Aug 2008)
210     *hardened-sources-2.6.25-r5 (23 Aug 2008)
211    
212     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
213     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
214     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
215     +hardened-sources-2.6.26-r1.ebuild:
216     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
217     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
218     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
219     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
220     (gengor).
221 solar 1.233
222     *hardened-sources-2.6.26 (18 Aug 2008)
223     *hardened-sources-2.6.25-r4 (18 Aug 2008)
224    
225     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
226     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
227     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
228     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
229     2.6.25-r2: Removed.
230 tove 1.232
231     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
232     Remove phreak from metadata.xml (#96398)
233 solar 1.231
234     *hardened-sources-2.6.25-r3 (31 Jul 2008)
235    
236     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
237     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
238     +hardened-sources-2.6.25-r3.ebuild:
239     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
240     fixes, including security bug #231750.
241 nixnut 1.230
242     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
243     Stable on ppc
244 solar 1.229
245     *hardened-sources-2.6.25-r2 (05 Jul 2008)
246    
247     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
248     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
249     +hardened-sources-2.6.25-r2.ebuild:
250     2.6.23-r4: Stable x86/amd64
251     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
252     2.6.23-r{11,12}: Removed due to multiple vulns.
253     (gengor & kerframil)
254 nixnut 1.228
255     04 Jul 2008; nixnut <nixnut@gentoo.org>
256     hardened-sources-2.6.23-r13.ebuild:
257     Stable on ppc
258 solar 1.227
259     *hardened-sources-2.6.25-r1 (30 Jun 2008)
260    
261     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
262     +hardened-sources-2.6.25-r1.ebuild:
263     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
264     grsecurity release. 2.6.23-r13: x86/amd64 stable
265 solar 1.226
266     *hardened-sources-2.6.25 (17 Jun 2008)
267     *hardened-sources-2.6.24-r3 (17 Jun 2008)
268     *hardened-sources-2.6.23-r13 (17 Jun 2008)
269    
270     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
271     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
272     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
273     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
274     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
275     2.6.25: Initial 2.6.25 release.
276 solar 1.225
277     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
278     - fasttrack to stable x86/amd64
279 swegener 1.224
280     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
281     Fix broken digest for linux-2.6.24.tar.bz2.
282 solar 1.223
283     *hardened-sources-2.6.24-r2 (11 May 2008)
284     *hardened-sources-2.6.23-r12 (11 May 2008)
285    
286     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
287     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
288     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
289     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
290     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
291     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
292     security bugs 219901, 220691, 220975, 220979, 221123. New
293     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
294     should be removed as far as I'm concerned, everything else remove due to
295     vulnerable to numerous security bugs or brokeness.
296 nixnut 1.222
297     10 May 2008; nixnut <nixnut@gentoo.org>
298     hardened-sources-2.6.23-r11.ebuild:
299     Stable on ppc
300 solar 1.221
301     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
302     - -r11 stable on x86/amd64
303 solar 1.220
304     *hardened-sources-2.6.23-r11 (01 May 2008)
305    
306     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
307     - version bump to fix ulgy linux bugs
308 phreak 1.219
309     *hardened-sources-2.6.24-r1 (30 Apr 2008)
310    
311     30 Apr 2008; Christian Heim <phreak@gentoo.org>
312     +hardened-sources-2.6.24-r1.ebuild:
313     Revision bump (thanks to Kerin and Gordon, again), pulling
314     genpatches-2.6.24-7, solving #219089. Additionally contains further security
315     fixes plus some minor updates.
316 phreak 1.218
317     *hardened-sources-2.6.23-r10 (30 Apr 2008)
318    
319     30 Apr 2008; Christian Heim <phreak@gentoo.org>
320     +hardened-sources-2.6.23-r10.ebuild:
321     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
322     Additional contains "various other fixes".
323 phreak 1.217
324     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
325     Update the longdescription in metadata, thanks to Gordon Malm.
326 nixnut 1.216
327     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
328     Stable on ppc wrt bug #213255
329 solar 1.215
330     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
331     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
332     - stable on x86/amd64 per request. Removed obsolete ebuilds
333 phreak 1.214
334     *hardened-sources-2.6.24 (07 Apr 2008)
335    
336     07 Apr 2008; Christian Heim <phreak@gentoo.org>
337     +hardened-sources-2.6.24.ebuild:
338     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
339     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
340     for the many contributions and their continued effort in #216612) based on
341     2.6.24 and genpatches-2.6.24-5.
342    
343     The current ebuild/patchset contains these things:
344     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
345     * Introduces bespoke server and workstation oriented security levels
346     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
347 phreak 1.213
348     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
349     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
350     maintaining it).
351 phreak 1.212
352     24 Mar 2008; Christian Heim <phreak@gentoo.org>
353     hardened-sources-2.4.35-r2.ebuild:
354     Fixing SRC_URI for 2.4.35-r2.
355 phreak 1.211
356     *hardened-sources-2.6.23-r9 (22 Mar 2008)
357    
358     22 Mar 2008; Christian Heim <phreak@gentoo.org>
359     +hardened-sources-2.6.23-r9.ebuild:
360     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
361     * Change the default GIDs for some grsecurity options
362     * Revamp the Hardened [Gentoo] security level and make it the default level
363     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
364     * Fix a recursive lock -- call to capable() within ptrace_attach()
365     * Fix bug that allows audit and iscsi operations to be controlled via netlink
366 solar 1.210
367     *hardened-sources-2.6.23-r8 (27 Feb 2008)
368    
369     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
370     - version bump from Kerin Millar bug 210026
371 solar 1.209
372     17 Feb 2008; <solar@gentoo.org> metadata.xml,
373     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
374     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
375     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
376     - stable on x86 and remove old ebuilds
377 solar 1.207
378     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
379 solar 1.208 - stable on amd64 per request of amd64 lead
380 solar 1.206
381     *hardened-sources-2.6.23-r7 (11 Feb 2008)
382    
383     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
384     - version bump from kerin.millar
385     Changes:
386    
387     * Bump to genpatches-base-2.6.23-9
388     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
389     * Disables COMPAT_VDSO in x86/defconfig
390     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
391 phreak 1.205
392     25 Jan 2008; Christian Heim <phreak@gentoo.org>
393     -hardened-sources-2.6.22-r8.ebuild:
394     Cleaning up old versions.
395 phreak 1.204
396     *hardened-sources-2.6.23-r6 (25 Jan 2008)
397    
398     25 Jan 2008; Christian Heim <phreak@gentoo.org>
399     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
400     Revision bump, pulling in the latest genpatches.
401 phreak 1.203
402     *hardened-sources-2.6.23-r5 (24 Dec 2007)
403    
404     24 Dec 2007; Christian Heim <phreak@gentoo.org>
405     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
406     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
407     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
408     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
409 phreak 1.202
410     24 Dec 2007; Christian Heim <phreak@gentoo.org>
411     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
412     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
413     -hardened-sources-2.6.23-r3.ebuild:
414     Cleaning out some unused, old versions.
415 phreak 1.201
416     24 Dec 2007; Christian Heim <phreak@gentoo.org>
417     hardened-sources-2.6.23-r4.ebuild:
418     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
419     in the tree for long, but there isn't much of a difference between this and
420     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
421 phreak 1.200
422     *hardened-sources-2.6.23-r4 (23 Dec 2007)
423    
424     23 Dec 2007; Christian Heim <phreak@gentoo.org>
425     +hardened-sources-2.6.23-r4.ebuild:
426     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
427 phreak 1.199
428     *hardened-sources-2.6.23-r3 (04 Dec 2007)
429    
430     04 Dec 2007; Christian Heim <phreak@gentoo.org>
431     +hardened-sources-2.6.23-r3.ebuild:
432     Revision bump, pulling in 2.6.23.9.
433 phreak 1.198
434     *hardened-sources-2.6.23-r2 (25 Nov 2007)
435    
436     25 Nov 2007; Christian Heim <phreak@gentoo.org>
437     +hardened-sources-2.6.23-r2.ebuild:
438     Updated patchset, thanks to solar.
439 phreak 1.197
440     *hardened-sources-2.6.23-r1 (31 Oct 2007)
441    
442     31 Oct 2007; Christian Heim <phreak@gentoo.org>
443     +hardened-sources-2.6.23-r1.ebuild:
444     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
445 solar 1.196
446     29 Oct 2007; <solar@gentoo.org> metadata.xml:
447     - update metadata.xml
448 phreak 1.195
449     25 Oct 2007; Christian Heim <phreak@gentoo.org>
450     hardened-sources-2.6.22-r8.ebuild:
451     Marking 2.6.22-r8 stable on amd64 and x86.
452 phreak 1.194
453     21 Oct 2007; Christian Heim <phreak@gentoo.org>
454     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
455     -hardened-sources-2.6.21-r4.ebuild:
456     Removing old ebuilds.
457 phreak 1.193
458     *hardened-sources-2.4.35-r2 (21 Oct 2007)
459    
460     21 Oct 2007; Christian Heim <phreak@gentoo.org>
461     +hardened-sources-2.4.35-r2.ebuild:
462     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
463     patches.
464 phreak 1.192
465     *hardened-sources-2.6.22-r8 (21 Oct 2007)
466    
467     21 Oct 2007; Christian Heim <phreak@gentoo.org>
468     +hardened-sources-2.6.22-r8.ebuild:
469     Yet another new patch, hopefully fixing the remaining issues we had w/
470     2.6.22. Candidate for stabling.
471 phreak 1.191
472     *hardened-sources-2.6.23 (13 Oct 2007)
473    
474     13 Oct 2007; Christian Heim <phreak@gentoo.org>
475     +hardened-sources-2.6.23.ebuild:
476     Initial hardened-sources-2.6.23. If people still have problems w/ bug
477     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
478 phreak 1.190
479     11 Oct 2007; Christian Heim <phreak@gentoo.org>
480     hardened-sources-2.6.20-r10.ebuild:
481     Pulling in yet another new genpatches version, fixing the PWC bug for real.
482 phreak 1.189
483     04 Oct 2007; Christian Heim <phreak@gentoo.org>
484     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
485     Removing old versions.
486 phreak 1.188
487     *hardened-sources-2.6.22-r7 (01 Oct 2007)
488    
489     01 Oct 2007; Christian Heim <phreak@gentoo.org>
490     +hardened-sources-2.6.22-r7.ebuild:
491     Revision bump, pulling in a newer patch. Should fix #194276.
492 phreak 1.187
493     30 Sep 2007; Christian Heim <phreak@gentoo.org>
494     hardened-sources-2.6.20-r10.ebuild:
495     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
496     Mike Doty).
497 phreak 1.186
498     *hardened-sources-2.6.22-r6 (26 Sep 2007)
499    
500     26 Sep 2007; Christian Heim <phreak@gentoo.org>
501     +hardened-sources-2.6.22-r6.ebuild:
502     Revision bump, grabbing up till Linux 2.6.22.9.
503 phreak 1.185
504     24 Sep 2007; Christian Heim <phreak@gentoo.org>
505     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
506     Cleaning up further.
507 phreak 1.184
508     *hardened-sources-2.6.20-r10 (24 Sep 2007)
509    
510     24 Sep 2007; Christian Heim <phreak@gentoo.org>
511     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
512     +hardened-sources-2.6.20-r10.ebuild:
513     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
514     revisions.
515 phreak 1.183
516     *hardened-sources-2.6.22-r5 (22 Sep 2007)
517    
518     22 Sep 2007; Christian Heim <phreak@gentoo.org>
519     +hardened-sources-2.6.22-r5.ebuild:
520     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
521 phreak 1.182
522     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
523     Removing johnm from metadata.xml (see #186467 for reference).
524 phreak 1.181
525     *hardened-sources-2.6.22-r4 (17 Sep 2007)
526    
527     17 Sep 2007; Christian Heim <phreak@gentoo.org>
528     +hardened-sources-2.6.22-r4.ebuild:
529     Revision bump, hopefully fixing all those weird PAX failures.
530 phreak 1.180
531     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
532     Updating the metadata.xml.
533 phreak 1.179
534     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
535     Removing tocharian from metadata due to his retirement (see #71718 for
536     reference).
537 phreak 1.178
538     *hardened-sources-2.6.20-r9 (30 Aug 2007)
539    
540     30 Aug 2007; Christian Heim <phreak@gentoo.org>
541     +hardened-sources-2.6.20-r9.ebuild:
542     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
543 phreak 1.177
544     29 Aug 2007; Christian Heim <phreak@gentoo.org>
545     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
546     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
547     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
548     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
549     -hardened-sources-2.6.22-r2.ebuild:
550     Removing some redundant versions.
551 phreak 1.176
552     *hardened-sources-2.4.35-r1 (29 Aug 2007)
553    
554     29 Aug 2007; Christian Heim <phreak@gentoo.org>
555     +hardened-sources-2.4.35-r1.ebuild:
556     Revision bump, new grsecurity patch.
557 phreak 1.175
558     *hardened-sources-2.6.20-r8 (26 Aug 2007)
559    
560     26 Aug 2007; Christian Heim <phreak@gentoo.org>
561     +hardened-sources-2.6.20-r8.ebuild:
562     Revision bump for Linux 2.6.20.17.
563 phreak 1.174
564     *hardened-sources-2.6.22-r3 (22 Aug 2007)
565    
566     22 Aug 2007; Christian Heim <phreak@gentoo.org>
567     +hardened-sources-2.6.22-r3.ebuild:
568     Revision bump for Linux 2.6.22.4.
569 phreak 1.173
570     16 Aug 2007; Christian Heim <phreak@gentoo.org>
571     hardened-sources-2.6.22-r2.ebuild:
572     Updated patchset, to fix the alignment against 2.6.22.3.
573 phreak 1.172
574     *hardened-sources-2.6.22-r2 (16 Aug 2007)
575    
576     16 Aug 2007; Christian Heim <phreak@gentoo.org>
577     +hardened-sources-2.6.22-r2.ebuild:
578     Revision bump for Linux 2.6.22.3.
579 phreak 1.171
580     *hardened-sources-2.4.35 (16 Aug 2007)
581    
582     16 Aug 2007; Christian Heim <phreak@gentoo.org>
583     +hardened-sources-2.4.35.ebuild:
584     Version bump, initial version for Linux 2.4.35.
585 phreak 1.170
586     *hardened-sources-2.6.21-r4 (16 Aug 2007)
587    
588     16 Aug 2007; Christian Heim <phreak@gentoo.org>
589     +hardened-sources-2.6.21-r4.ebuild:
590     Revision bump for Linux 2.6.21.6.
591 phreak 1.169
592     *hardened-sources-2.6.20-r7 (16 Aug 2007)
593    
594     16 Aug 2007; Christian Heim <phreak@gentoo.org>
595     +hardened-sources-2.6.20-r7.ebuild:
596     Revision bump for Linux 2.6.20.16.
597 phreak 1.168
598     *hardened-sources-2.6.22-r1 (13 Aug 2007)
599    
600     13 Aug 2007; Christian Heim <phreak@gentoo.org>
601     +hardened-sources-2.6.22-r1.ebuild:
602     Yet another revision bump.
603 phreak 1.167
604     *hardened-sources-2.6.22 (10 Aug 2007)
605    
606     10 Aug 2007; Christian Heim <phreak@gentoo.org>
607     +hardened-sources-2.6.22.ebuild:
608     Initial release for 2.6.22. If you are using hardened-sources on a desktop
609     machine (P4 or newer), be aware you might need to disable
610     CONFIG_PAX_PAGEEXEC.
611 phreak 1.166
612     04 Aug 2007; Christian Heim <phreak@gentoo.org>
613     hardened-sources-2.6.20-r6.ebuild:
614     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
615     2.6.20.15.
616 phreak 1.165
617     10 Jul 2007; Christian Heim <phreak@gentoo.org>
618     hardened-sources-2.6.20-r5.ebuild:
619     Marking hardened-sources-2.6.20-r5 stable on ppc.
620 phreak 1.164
621     10 Jul 2007; Christian Heim <phreak@gentoo.org>
622     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
623     Cleanup.
624 phreak 1.163
625     *hardened-sources-2.6.20-r6 (08 Jul 2007)
626    
627     08 Jul 2007; Christian Heim <phreak@gentoo.org>
628     +hardened-sources-2.6.20-r6.ebuild:
629     Revision bump, grabbing yet another stable release.
630 phreak 1.162
631     17 Jun 2007; Christian Heim <phreak@gentoo.org>
632     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
633     -hardened-sources-2.6.21-r2.ebuild:
634     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
635     alpha stable KEYWORD by mistake.
636 phreak 1.161
637     17 Jun 2007; Christian Heim <phreak@gentoo.org>
638     hardened-sources-2.6.20-r5.ebuild:
639     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
640     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
641 phreak 1.160
642     *hardened-sources-2.6.21-r3 (12 Jun 2007)
643    
644     12 Jun 2007; Christian Heim <phreak@gentoo.org>
645     +hardened-sources-2.6.21-r3.ebuild:
646     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
647     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
648     love.
649 phreak 1.159
650     *hardened-sources-2.6.20-r5 (11 Jun 2007)
651    
652     11 Jun 2007; Christian Heim <phreak@gentoo.org>
653     +hardened-sources-2.6.20-r5.ebuild:
654     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
655     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
656     love.
657 pappy 1.158
658     *hardened-sources-2.4.34.5 (11 Jun 2007)
659    
660     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
661     +hardened-sources-2.4.34.5.ebuild:
662     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
663 phreak 1.157
664     30 May 2007; Christian Heim <phreak@gentoo.org>
665     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
666     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
667     stale ebuild(s).
668 phreak 1.156
669     30 May 2007; Christian Heim <phreak@gentoo.org>
670     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
671     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
672     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
673     Doing some cleanups, remove stale ebuilds.
674 phreak 1.155
675     26 May 2007; Christian Heim <phreak@gentoo.org>
676     hardened-sources-2.6.21-r2.ebuild:
677     Fixing the grsecurity patch, had one '};' too much.
678 phreak 1.154
679     *hardened-sources-2.6.21-r2 (26 May 2007)
680    
681     26 May 2007; Christian Heim <phreak@gentoo.org>
682     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
683     +hardened-sources-2.6.21-r2.ebuild:
684     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
685     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
686 phreak 1.153
687     *hardened-sources-2.6.20-r4 (26 May 2007)
688    
689     26 May 2007; Christian Heim <phreak@gentoo.org>
690     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
691     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
692 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
693 phreak 1.152
694     15 May 2007; Christian Heim <phreak@gentoo.org>
695     hardened-sources-2.6.20-r3.ebuild:
696     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
697     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
698     grsecurity patch fail in that exact same hunk.
699 phreak 1.151
700     *hardened-sources-2.6.20-r3 (15 May 2007)
701    
702     15 May 2007; Christian Heim <phreak@gentoo.org>
703     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
704     Revision bump, incorporating Linux 2.6.20.11.
705    
706     *hardened-sources-2.6.21-r1 (11 May 2007)
707    
708     11 May 2007; Christian Heim <phreak@gentoo.org>
709     +hardened-sources-2.6.21-r1.ebuild:
710     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
711     mentioned in #177234.
712 kevquinn 1.150
713     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
714     files/digest-hardened-sources-2.6.21, Manifest:
715     Fix Manifest/digest for linux-2.6.21.tar.bz2
716 phreak 1.149
717     06 May 2007; Christian Heim <phreak@gentoo.org>
718     hardened-sources-2.6.21.ebuild:
719     Bumping the hardened-patches version, needed for the fix for #177234.
720 phreak 1.148
721     *hardened-sources-2.6.21 (02 May 2007)
722    
723     02 May 2007; Christian Heim <phreak@gentoo.org>
724     +hardened-sources-2.6.21.ebuild:
725     Version bump, Linux 2.6.21-hardened.
726 phreak 1.147
727     29 Apr 2007; Christian Heim <phreak@gentoo.org>
728     hardened-sources-2.6.20-r2.ebuild:
729     Adding ~ia64 on Ned's request.
730 phreak 1.146
731     29 Apr 2007; Christian Heim <phreak@gentoo.org>
732     hardened-sources-2.6.20-r2.ebuild:
733     Fixing the included grsecurity patch, wasn't alligning due to the Index:
734     header line(s).
735 phreak 1.145
736     29 Apr 2007; Christian Heim <phreak@gentoo.org>
737     hardened-sources-2.6.20-r2.ebuild:
738     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
739 armin76 1.144
740     *hardened-sources-2.6.20-r2 (10 Apr 2007)
741    
742     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
743     +hardened-sources-2.6.20-r2.ebuild:
744     Version bump, on behalf of phreak
745 phreak 1.143
746     *hardened-sources-2.6.20-r1 (04 Apr 2007)
747    
748     04 Apr 2007; Christian Heim <phreak@gentoo.org>
749     +hardened-sources-2.6.20-r1.ebuild:
750     Revision bump, grabbing a newer grsecurity snapshot.
751 phreak 1.142
752     *hardened-sources-2.6.20 (25 Mar 2007)
753    
754     25 Mar 2007; Christian Heim <phreak@gentoo.org>
755     +hardened-sources-2.6.20.ebuild:
756     Finally a hardened-sources version for 2.6.20; many people have been waiting
757     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
758     testbox.
759 chainsaw 1.141
760     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
761     hardened-sources-2.6.18-r6.ebuild:
762     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
763 phreak 1.140
764     *hardened-sources-2.6.18-r6 (16 Mar 2007)
765    
766     16 Mar 2007; Christian Heim <phreak@gentoo.org>
767     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
768     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
769     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
770     supposed to be.
771 phreak 1.139
772     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
773     Fixing the Manifest, the previous one was broken (as in still had the
774     deleted ebuild in it).
775 phreak 1.138
776     06 Mar 2007; Christian Heim <phreak@gentoo.org>
777     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
778     +hardened-sources-2.6.18-r5.ebuild:
779     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
780     Linux 2.6.18.8. Also cleaning up the older version.
781    
782     *hardened-sources-2.6.18-r5 (06 Mar 2007)
783    
784     06 Mar 2007; Christian Heim <phreak@gentoo.org>
785     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
786     +hardened-sources-2.6.18-r5.ebuild:
787     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
788     Linux 2.6.18.8. Also cleaning up the older version.
789 phreak 1.137
790     24 Feb 2007; Christian Heim <phreak@gentoo.org>
791     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
792     -hardened-sources-2.6.19-r5.ebuild:
793     Removing some of the old version, that didn't work.
794 phreak 1.136
795     *hardened-sources-2.6.19-r6 (12 Feb 2007)
796    
797     12 Feb 2007; Christian Heim <phreak@gentoo.org>
798     +hardened-sources-2.6.19-r6.ebuild:
799     Revision bump, including a new grsec version fixing #166235.
800 pappy 1.134
801     *hardened-sources-2.4.34 (24 Jan 2007)
802    
803     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
804 pappy 1.135 Manifest:
805     updating Manifest with checksums of new tarball and ebuild
806    
807     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
808 pappy 1.134 +hardened-sources-2.4.34.ebuild:
809     I added new hardened sources 2.4 update, this is a critical path
810     security bugfix - all users of h-s are strongly advised
811     to update their existing hardened sources to this version.
812     It contains a fix for a kernel vulnerability that is pertaining
813     to the PaX changes to virtual memory management, possibly leading
814     to a local kernel exploit ... see grsecurity.net forums and homepage
815 phreak 1.133
816     23 Jan 2007; Christian Heim <phreak@gentoo.org>
817     files/digest-hardened-sources-2.6.19-r5, Manifest:
818     Fixing the patch-tarball digest.
819 phreak 1.132
820     *hardened-sources-2.6.19-r5 (23 Jan 2007)
821    
822     23 Jan 2007; Christian Heim <phreak@gentoo.org>
823     +hardened-sources-2.6.19-r5.ebuild:
824     Revision bump, closing the recently discovered PaX expand_stack()
825     vulnerability.
826 phreak 1.131
827     *hardened-sources-2.6.19-r4 (14 Jan 2007)
828    
829     14 Jan 2007; Christian Heim <phreak@gentoo.org>
830     +hardened-sources-2.6.19-r4.ebuild:
831     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
832     dropping the randomized PID feature.
833 opfer 1.130
834     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
835     hardened-sources-2.4.33.4.ebuild:
836     stable x86, bug #161171
837 phreak 1.129
838     *hardened-sources-2.6.19-r3 (27 Dec 2006)
839    
840     27 Dec 2006; Christian Heim <phreak@gentoo.org>
841     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
842     Revision bump for bug #157186 and #158786.
843 phreak 1.128
844     *hardened-sources-2.6.18-r4 (27 Dec 2006)
845    
846     27 Dec 2006; Christian Heim <phreak@gentoo.org>
847     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
848     Revision bump for bug #157186.
849 phreak 1.127
850     *hardened-sources-2.6.19-r2 (23 Dec 2006)
851    
852     23 Dec 2006; Christian Heim <phreak@gentoo.org>
853     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
854     Revision bump to pull in genpatches-2.6.19-3 for #157186.
855 phreak 1.126
856     17 Dec 2006; Christian Heim <phreak@gentoo.org>
857     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
858     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
859     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
860     hardened-sources-2.6.19-r1.ebuild:
861     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
862     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
863 pappy 1.125
864     *hardened-sources-2.4.33.4 (17 Dec 2006)
865    
866     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
867     +hardened-sources-2.4.33.4.ebuild:
868     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
869     and quilting
870 phreak 1.124
871     *hardened-sources-2.6.19-r1 (14 Dec 2006)
872    
873     14 Dec 2006; Christian Heim <phreak@gentoo.org>
874     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
875     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
876     for reporting).
877 phreak 1.123
878     *hardened-sources-2.6.19 (13 Dec 2006)
879    
880     13 Dec 2006; Christian Heim <phreak@gentoo.org>
881     +hardened-sources-2.6.19.ebuild:
882     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
883     Brad for providing that prompt update.
884 phreak 1.122
885     *hardened-sources-2.6.18-r3 (13 Dec 2006)
886    
887     13 Dec 2006; Christian Heim <phreak@gentoo.org>
888     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
889     +hardened-sources-2.6.18-r3.ebuild:
890     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
891     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
892 phreak 1.121
893     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
894     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
895 nixnut 1.120
896     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
897     Stable on ppc wrt bug 157356
898 opfer 1.119
899     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
900     hardened-sources-2.6.18.ebuild:
901     stable x86, bug #157356
902 phreak 1.118
903     *hardened-sources-2.6.18-r2 (06 Dec 2006)
904    
905     06 Dec 2006; Christian Heim <phreak@gentoo.org>
906     +hardened-sources-2.6.18-r2.ebuild:
907     Revision bump, including 2.6.18.5 (via genpatches) and
908     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
909     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
910     redesign.
911 phreak 1.117
912     06 Dec 2006; Christian Heim <phreak@gentoo.org>
913     hardened-sources-2.6.18.ebuild:
914     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
915     of Mike Doty).
916 phreak 1.116
917     *hardened-sources-2.6.18-r1 (23 Nov 2006)
918    
919     23 Nov 2006; Christian Heim <phreak@gentoo.org>
920     +hardened-sources-2.6.18-r1.ebuild:
921     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
922 phreak 1.115
923     *hardened-sources-2.6.18 (11 Nov 2006)
924    
925     11 Nov 2006; Christian Heim <phreak@gentoo.org>
926     +hardened-sources-2.6.18.ebuild:
927     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
928 solar 1.114
929     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
930     - mark amd64 stable also. bug #151877
931 solar 1.113
932     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
933     - mark 2.6.17-r1 stable
934 phreak 1.112
935     27 Aug 2006; Christian Heim <phreak@gentoo.org>
936     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
937     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
938 phreak 1.111
939     *hardened-sources-2.6.17-r1 (26 Aug 2006)
940    
941     26 Aug 2006; Christian Heim <phreak@gentoo.org>
942     +hardened-sources-2.6.17-r1.ebuild:
943     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
944     grsecurity patch.
945 phreak 1.110
946     *hardened-sources-2.6.17 (17 Aug 2006)
947    
948     17 Aug 2006; Christian Heim <phreak@gentoo.org>
949     +hardened-sources-2.6.17.ebuild:
950     Bumping the hardened-sources-2.6 series to 2.6.17, using
951     genpatches-2.6.17-6.base.
952 solar 1.109
953     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
954     - stable on x86 and amd64
955 solar 1.108
956     *hardened-sources-2.6.16-r11 (15 Jul 2006)
957    
958     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
959     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
960     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
961     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
962     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
963     crusty ebuilds
964 johnm 1.107
965     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
966     hardened-sources-2.6.16-r10.ebuild:
967     marking stable on x86 and amd64
968 solar 1.106
969     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
970     - 2.4.32-r6 stable on x86. RSBAC state unknown
971 kang 1.105
972     *hardened-sources-2.4.32-r7 (10 Jul 2006)
973    
974     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
975     +hardened-sources-2.4.32-r7.ebuild:
976     Bump PaX for RSBAC to test-17
977 johnm 1.104
978     *hardened-sources-2.6.16-r9 (03 Jul 2006)
979    
980     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
981     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
982     hardened-sources-2.6.16 bump to latest -base.
983 solar 1.103
984     *hardened-sources-2.4.32-r6 (30 Jun 2006)
985    
986     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
987     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
988     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
989     sysctl controlable resource logging
990 johnm 1.102
991     *hardened-sources-2.6.16-r7 (05 Jun 2006)
992    
993     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
994     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
995     push new 2.6.16 release in preparation for stable
996 solar 1.101
997     22 May 2006; <solar@gentoo.org> :
998     - redigest bug 134002
999 kang 1.100
1000     *hardened-sources-2.4.32-r5 (16 May 2006)
1001    
1002     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1003     +hardened-sources-2.4.32-r5.ebuild:
1004     Fixes rsbac common patching (new patch in new -r5 patchset)
1005 solar 1.99
1006     *hardened-sources-2.4.32-r4 (13 May 2006)
1007    
1008     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1009     +hardened-sources-2.4.32-r4.ebuild:
1010     - security bumps
1011 johnm 1.98
1012     *hardened-sources-2.6.16-r6 (03 May 2006)
1013    
1014     03 May 2006; John Mylchreest <johnm@gentoo.org>
1015     +hardened-sources-2.6.16-r6.ebuild:
1016     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1017 johnm 1.97
1018     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1019     hardened-sources-2.6.14-r8.ebuild:
1020     fix x86_64 build problem, this will delay the digest issue again for a short
1021     while but it will sort itself out
1022 johnm 1.96
1023     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1024     hardened-sources-2.6.14-r8.ebuild:
1025     bump hardened patchset
1026 antarus 1.94
1027     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1028     files/digest-hardened-sources-2.4.32-r2,
1029     files/digest-hardened-sources-2.4.32-r3,
1030     files/digest-hardened-sources-2.6.14-r8, Manifest:
1031     Fixing duff SHA256 digests: Bug # 131293
1032 johnm 1.93
1033 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1034    
1035     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1036     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1037     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1038     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1039     cleanup of old uneccessary sources
1040    
1041 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1042     fix digest
1043 johnm 1.92
1044     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1045    
1046     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1047     +hardened-sources-2.6.14-r8.ebuild:
1048     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1049 johnm 1.91
1050     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1051     Turning on gpg-signing again, and recomitting
1052 johnm 1.90
1053     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1054    
1055     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1056     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1057     +hardened-sources-2.6.16-r4.ebuild:
1058     Fix numerous security vulns
1059 solar 1.89
1060     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1061    
1062     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1063     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1064     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1065     - security bump for bug #112791. Removed old ebuilds
1066 johnm 1.88
1067     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1068    
1069     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1070     +hardened-sources-2.6.16-r3.ebuild:
1071     Removing silly localversion which I missed
1072 johnm 1.87
1073     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1074    
1075     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1076     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1077     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1078 johnm 1.86
1079     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1080    
1081     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1082     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1083     +hardened-sources-2.6.16-r2.ebuild:
1084     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1085     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1086 johnm 1.85
1087     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1088    
1089     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1090     +hardened-sources-2.6.16-r1.ebuild:
1091     Bumping to include ppc build fix and 2.6.16.3
1092 tsunam 1.84
1093     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1094     hardened-sources-2.6.14-r6.ebuild:
1095     Stable on x86; bug #127718
1096 johnm 1.83
1097     *hardened-sources-2.6.16 (31 Mar 2006)
1098    
1099     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1100     +hardened-sources-2.6.16.ebuild:
1101     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1102     2.6.16.1
1103 cryos 1.82
1104     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1105     hardened-sources-2.6.14-r6.ebuild:
1106     Stable on amd64, bug 127718.
1107 nixnut 1.81
1108     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1109     Stable on ppc. Bug #127718
1110 johnm 1.80
1111     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1112     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1113     -hardened-sources-2.6.14-r4.ebuild:
1114     Cleanup.
1115 johnm 1.79
1116     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1117    
1118     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1119     +hardened-sources-2.6.14-r6.ebuild:
1120     Fixes grsec policy recreation bug and adds a
1121     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1122 solar 1.78
1123     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1124     - stable on x86
1125 hansmi 1.77
1126     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1127     hardened-sources-2.6.14-r5.ebuild:
1128     Stable on ppc.
1129 johnm 1.76
1130     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1131    
1132     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1133     +hardened-sources-2.6.14-r5.ebuild:
1134     fixing every known exploit
1135 solar 1.75
1136     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1137    
1138     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1139     +hardened-sources-2.4.32-r2.ebuild:
1140     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1141 solar 1.74
1142     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1143    
1144     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1145     - version bump for new genpatches which fix up a few sec holes
1146 solar 1.73
1147     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1148    
1149     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1150     - revision bump to add misc vital linux kernel security patches.
1151 johnm 1.72
1152     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1153    
1154     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1155     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1156     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1157 johnm 1.71
1158     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1159     hardened-sources-2.6.14-r2.ebuild:
1160     making x86 & amd64 stable following testing.
1161 johnm 1.70
1162     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1163    
1164     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1165     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1166     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1167     network hooks.
1168 johnm 1.69
1169     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1170     hardened-sources-2.6.14-r1.ebuild:
1171     bumping to stable early for sec fix on x86 & amd64
1172 johnm 1.68
1173     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1174    
1175     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1176     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1177     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1178 solar 1.67
1179     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1180     - stable on x86 security bug #114227 CAN-2005-3257
1181 kang 1.66
1182     *hardened-sources-2.4.32 (19 Nov 2005)
1183    
1184     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1185     +hardened-sources-2.4.32.ebuild:
1186     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1187     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1188     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1189     rsbac >> /etc/portage/package.use)
1190 johnm 1.65
1191     *hardened-sources-2.6.14 (14 Nov 2005)
1192    
1193     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1194     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1195     Bumping 2.6 series to 2.6.14.2
1196 johnm 1.64
1197     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1198    
1199     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1200     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1201     +hardened-sources-2.6.13-r2.ebuild:
1202     Fixes minor build error in ppc.
1203 johnm 1.63
1204     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1205    
1206     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1207     +hardened-sources-2.6.13-r1.ebuild:
1208     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1209     2.6.13.4, fixes some major amd64 stability problems.
1210 johnm 1.62
1211     *hardened-sources-2.6.13 (16 Sep 2005)
1212    
1213     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1214     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1215     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1216     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1217     users should test this thoroughly.
1218 solar 1.61
1219     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1220     - stable on x86
1221 johnm 1.60
1222     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1223    
1224     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1225     +hardened-sources-2.6.11-r15.ebuild:
1226     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1227     grsec redefining curr_ip struct.
1228 solar 1.59
1229     *hardened-sources-2.4.31 (20 Jun 2005)
1230    
1231     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1232     initial import of 2.4.31 tree
1233 johnm 1.58
1234     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1235    
1236     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1237     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1238     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1239     naming scheme to abide by genpatches
1240 johnm 1.57
1241     *hardened-sources-2.6.11-r13 (18 May 2005)
1242    
1243     18 May 2005; John Mylchreest <johnm@gentoo.org>
1244     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1245     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1246     target. sorry about that. Fixes bug #93022
1247 johnm 1.56
1248     *hardened-sources-2.6.11-r12 (17 May 2005)
1249    
1250     17 May 2005; John Mylchreest <johnm@gentoo.org>
1251     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1252     +hardened-sources-2.6.11-r12.ebuild:
1253     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1254     merges in genpatches-base
1255 johnm 1.55
1256     *hardened-sources-2.6.11-r12 (17 May 2005)
1257    
1258     17 May 2005; John Mylchreest <johnm@gentoo.org>
1259     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1260     +hardened-sources-2.6.11-r12.ebuild:
1261     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1262     merges in genpatches-base
1263 solar 1.54
1264     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1265     -files/2.4.27-cmdline-race.patch,
1266     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1267     -files/2.4.28-grsec-binfmt_a.out.patch,
1268     -files/2.4.28-grsec-cmdline-race.patch,
1269     -files/2.4.28-selinux-binfmt_a.out.patch,
1270     -files/2.4.28-selinux-cmdline-race.patch,
1271     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1272     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1273     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1274     cleanup..
1275 solar 1.53
1276     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1277    
1278     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1279     - disable aout by default
1280 solar 1.52
1281     *hardened-sources-2.4.30 (18 Apr 2005)
1282    
1283     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1284     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1285     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1286     use
1287 tocharian 1.50
1288 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1289    
1290     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1291     +hardened-sources-2.4.29.ebuild:
1292     New hardened-patches-2.4-29.0 patchball.
1293     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1294    
1295     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1296    
1297     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1298     +hardened-sources-2.4.28-r5.ebuild:
1299     Added a fix for a PaX vulnerability.
1300    
1301     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1302 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1303     Stable on x86
1304 solar 1.49
1305     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1306     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1307     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1308     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1309     - fixed/added RDEPEND= in all kernel-2 ebuilds
1310 tocharian 1.48
1311     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1312    
1313     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1314     +hardened-sources-2.4.28-r4.ebuild:
1315     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1316     backport of neighbour hash updates.
1317 tocharian 1.47
1318     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1319     hardened-sources-2.4.28-r3.ebuild:
1320     Stable on x86
1321 tseng 1.46
1322     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1323    
1324     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1325     +hardened-sources-2.6.10-r3.ebuild:
1326     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1327     in 2005.0
1328 tocharian 1.45
1329     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1330     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1331     hardened-sources-2.4.28-r2.ebuild:
1332     Mark stable on x86
1333 tocharian 1.44
1334     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1335    
1336     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1337     +hardened-sources-2.4.28-r3.ebuild:
1338     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1339 tocharian 1.43
1340     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1341     hardened-sources-2.4.28.ebuild:
1342     Mark stable on x86.
1343 tocharian 1.42
1344     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1345    
1346     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1347     +hardened-sources-2.4.28-r2.ebuild:
1348     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1349     Mazinger for grsecurity patches as well.
1350 plasmaroo 1.41
1351     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1352    
1353     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1354     Security bump. Thank tocharian for rolling a new patchset...
1355 solar 1.40
1356     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1357     +files/2.4.28-grsec-cmdline-race.patch,
1358     +files/2.4.28-selinux-binfmt_a.out.patch,
1359     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1360     - Round up remaining security patches that appear to be missing in 2.4.28. -
1361     PaX standalone updated to current. hgpv=28.1
1362 solar 1.39
1363     *hardened-sources-2.4.28 (28 Nov 2004)
1364    
1365     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1366     security bump. Thank tocharian for rolling a new patchset
1367 scox 1.31
1368 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1369    
1370     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1371     +hardened-sources-2.4.27-r3.ebuild:
1372     Applies the new 2.4-27.2 patchball which updates
1373     GRSecurity to the 2.0.1 version.
1374    
1375 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1376    
1377     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1378     +hardened-sources-2.4.27-r2.ebuild:
1379     Version bump.
1380     This version uses the new 2.4-27.1 patchball which updates
1381     both the SELinux PaX hooks patch and the SELinux headers.
1382    
1383 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1384    
1385     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1386     +hardened-sources-2.4.27-r1.ebuild,
1387     -hardened-sources-2.4.27.ebuild,
1388     +files/2.4.27-cmdline-race.patch:
1389     Version bump, fix for cmdline race. See bug #59905.
1390    
1391     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1392    
1393     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1394     +hardened-sources-2.4.26-r6.ebuild,
1395     -hardened-sources-2.4.26-r5.ebuild,
1396     -hardened-sources-2.4.26-r4.ebuild,
1397     +files/2.4.26-cmdline-race.patch:
1398     Version bump, fix for cmdline race. See bug #59905.
1399    
1400 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1401    
1402     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1403     +hardened-sources-2.4.27.ebuild,
1404     +files/2.4.27-CAN-2004-0394.patch:
1405     Ported the patchball to the 2.4.27 kernel version.
1406    
1407 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1408    
1409     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1410     +hardened-sources-2.4.26-r5.ebuild:
1411 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1412 scox 1.34 It adds the following features:
1413     - Squashfs
1414     - Ebtables
1415     - Netdev random (core+drivers)
1416     - Watchdog Timer (WDT) fix.
1417    
1418 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1419    
1420     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1421     +hardened-sources-2.4.26-r4.ebuild,
1422     +files/2.4.26-CAN-2004-0415.patch,
1423     -hardened-sources-2.4.26-3:
1424     Version bump, fix for CAN 0415, see bug #59378.
1425    
1426 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1427    
1428     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1429     +hardened-sources-2.4.26-r3.ebuild,
1430     +files/2.4.26-CAN-2004-0497.patch,
1431     -hardened-sources-2.4.26-r2.ebuild:
1432     Version bump, fixed CAN 0497, see bug #56171.
1433    
1434 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1435    
1436     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1437 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1438 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1439     +files/2.4.26-CAN-2004-0535.patch,
1440     -hardened-sources-2.4.26-r1.ebuild:
1441     Fixes for both CAN 0495 and 0535, see bug #54976
1442 pvdabeel 1.27
1443 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1444     hardened-sources-2.4.26-r1.ebuild:
1445     QA - fix use invocation
1446 scox 1.28
1447     *hardened-sources-2.4.26-r1 (22 June 2004)
1448    
1449     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1450     +hardened-sources-2.4.26-r1.ebuild,
1451     +files/2.4.26-CAN-2004-0394.patch,
1452     +files/2.4.26-signal-race.patch,
1453     -hardened-sources-2.4.26.ebuild,
1454     -hardened-sources-2.4.24-r3.ebuild:
1455     Version bump for the CAN-2004-0394 issue and bug #53804
1456     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1457    
1458    
1459 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1460     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1461     Masked hardened-sources-2.4.26.ebuild broken for ppc
1462    
1463     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1464     hardened-sources-2.4.24-r3.ebuild:
1465     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1466 plasmaroo 1.25
1467 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1468    
1469     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1470     +hardened-sources-2.4.26.ebuild:
1471     Updated hardened-sources for the 2.4.26 kernel
1472     Removed broken components, updated almost everything.
1473    
1474 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1475    
1476     17 Apr 2004; <plasmaroo@gentoo.org>
1477     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1478     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1479     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1480     +hardened-sources-2.4.24-r3.ebuild:
1481     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1482     vulnerabilities. Old revisions removed.
1483 plasmaroo 1.24
1484     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1485    
1486     15 Apr 2004; <plasmaroo@gentoo.org>
1487     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1488     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1489     Version bump for the CAN-2004-0109 issue; bug #47881.
1490 aliz 1.23
1491     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1492     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1493     Add eutils to inherit.
1494 plasmaroo 1.22
1495     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1496    
1497     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1498     files/hardened-sources-2.4.24.munmap.patch:
1499     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1500 scox 1.19
1501 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1502 scox 1.26
1503 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1504     hardened-sources-2.4.24.ebuild:
1505     Version bump, updated most of the components.
1506     This release includes the following:
1507    
1508     - Hardened security
1509     - Netfilter patch-o-matic 20031219
1510     - FreeSWAN 2.04 & x509 1.4.8
1511     - EVMS 2.2.2
1512     - XFS 1.3.1
1513     - cryptoloop jari
1514     - grsecurity 2.0-rc4
1515     - SELinux
1516     - PaX 200402060000
1517     - PaX Obscurity 200308302223
1518     - Others...
1519    
1520     Neither -ck nor systrace are included anymore.
1521    
1522 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1523    
1524     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1525     hardened-sources-2.4.22-r2.ebuild:
1526 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1527 scox 1.19
1528     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1529 iggy 1.17
1530     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1531 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1532 iggy 1.16
1533     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1534 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1535     Version bump for the 'do_brk' vulnerability.
1536 iggy 1.15
1537     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1538     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1539     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1540     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1541 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1542 frogger 1.14
1543     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1544     hardened-sources-2.4.22.ebuild:
1545 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1546     components. These are no longer handled in the kernel
1547     so this code was not necessary.
1548 frogger 1.13
1549     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1550     New 2.4.22 based hardened-sources thanks to
1551     Phil West <p.west@computer.org>.
1552    
1553     These sources include:
1554 plasmaroo 1.18 - New SELinux API
1555     - Updated CK-base
1556     - Updated GRSec
1557     - Systrace
1558     - SuperFreeS/WAN 1.99.8
1559     - Propolice kernel build support
1560     - EVMS
1561     - Other various security related patches
1562 frogger 1.11
1563 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1564    
1565     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1566     Updated hardened-sources based on the 2.4.21 Linux kernel.
1567     This includes updates to most major components such as:
1568 plasmaroo 1.18 - ck-base-0306300059
1569     - selinux-2.4-2003071106
1570     - grsecurity-2.0-rc1
1571     - Updated IPTables patch-o-matic
1572     - Updated SuperFreeS/WAN
1573    
1574 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1575     updated patch set ready for the 2.4.21 based kernel.
1576    
1577 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1578     Initial import of hardened-sources-2.4.20-r4. This revision
1579     includes only a few changes, but one of these is an important
1580     security fix. It is recommended all users of hardened-sources
1581     upgrade to this release.
1582 plasmaroo 1.18
1583 frogger 1.11 - ioperm bug fix
1584     - fixed compilation failure when building without GRSec
1585 plasmaroo 1.18
1586 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1587     due to time constraints, but is planned for inclusion in the near
1588     future.
1589 msterret 1.10
1590     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1591    
1592     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1593     hardened-sources-2.4.20-r3.ebuild:
1594 plasmaroo 1.18 Add Header...
1595 frogger 1.9
1596     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1597     hardened-sources-2.4.20-r3.ebuild:
1598     Removed warnings from ebuild. This kernel should be safe to
1599     use at this point.
1600 frogger 1.8
1601     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1602    
1603     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1604     hardened-sources-2.4.20-r3.ebuild:
1605     New revision. Includes the following changes over -r2:
1606 plasmaroo 1.18
1607 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1608     - Super FreeS/WAN 1.99.7rc2
1609     - PaX for the LSM/SELinux branch
1610     - GRSecurity 2.0-pre4 (role based access control)
1611     - Systrace 1.3
1612     - EXT3 fixes
1613     - EVMS 2.0.1
1614     - GCC 3.1+ compile optimizations
1615     - ProPolice kernel build support
1616     - Hashing table security fixes
1617 frogger 1.3
1618     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1619 frogger 1.7
1620     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1621     Initial import of hardened-sources-r2. This new
1622     ebuild includes many new performance and security
1623     related patches. As in -r1, it will patch in
1624     LSM/SELinux if "selinux" is in USE, otherwise it
1625     will patch in GRSecurity. The following patches
1626     are included in this revision:
1627 plasmaroo 1.18
1628 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1629     (pulled from the base CK patch)
1630     - ptrace exploit patch for the LSM kernel
1631     (the GRSec patch already fixes this)
1632     - LSM 2.4-2003040709
1633     - SELinux 2.4-2003040709
1634     - Systrace v1.2
1635     - IPTables patch-o-matic base patches - 20030107
1636     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1637     - Super FreeS/WAN 1.99.6.1
1638     - GRSecurity 1.9.9g
1639     - MPPE
1640     - EXT3 data journal fix
1641     - CIPE 1.5.4
1642 frogger 1.6
1643     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1644     hardened-sources-2.4.20-r1.ebuild, manifest:
1645 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1646 frogger 1.5
1647     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1648     hardened-sources-2.4.20-r1.ebuild:
1649     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1650     is patched in instead. Ptrace patches for selinux have also been added. In
1651     either case, systrace support will be patched in as well.
1652 frogger 1.3
1653     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1654     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1655 plasmaroo 1.18 Revision bump for new sources.
1656 frogger 1.4
1657 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1658 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1659 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1660 method 1.1
1661 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1662    
1663 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1664     hardened-sources-2.4.20.ebuild:
1665 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20