/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.282 - (hide annotations) (download)
Sun Jan 25 08:04:08 2009 UTC (5 years, 9 months ago) by gengor
Branch: MAIN
Changes since 1.281: +7 -1 lines
Add hardened-sources-2.6.27-r7 release
(Portage version: 2.1.6.4/cvs/Linux 2.6.27-hardened-r7-rc1-2009012401 i686)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 gengor 1.268 # Copyright 2000-2009 Gentoo Foundation; Distributed under the GPL v2
3 gengor 1.282 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.281 2009/01/25 00:57:58 gengor Exp $
4    
5     *hardened-sources-2.6.27-r7 (25 Jan 2009)
6    
7     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
8     +hardened-sources-2.6.27-r7.ebuild:
9     Bump to Linux 2.6.27.13.
10 gengor 1.281
11     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
12     hardened-sources-2.6.26-r9.ebuild:
13     Stable amd64/x86.
14 gengor 1.280
15     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
16     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
17     -hardened-sources-2.6.27-r5.ebuild:
18     Remove problem versions.
19 gengor 1.279
20     *hardened-sources-2.6.27-r6 (24 Jan 2009)
21    
22     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
23     +hardened-sources-2.6.27-r6.ebuild:
24     Revert PaX test29 to test30 changes. Fixes bug 256226.
25 gengor 1.277
26     *hardened-sources-2.6.27-r5 (24 Jan 2009)
27    
28     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
29     +hardened-sources-2.6.27-r5.ebuild:
30 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
31 gengor 1.277 254843.
32 gengor 1.276
33     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
34     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
35     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
36     Remove problem versions.
37 nixnut 1.275
38     23 Jan 2009; nixnut <nixnut@gentoo.org>
39     hardened-sources-2.6.25-r13.ebuild:
40     ppc stable
41 gengor 1.274
42     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
43     hardened-sources-2.6.25-r13.ebuild:
44     Fasttrack stable amd64/x86.
45 gengor 1.273
46     *hardened-sources-2.6.26-r9 (21 Jan 2009)
47    
48     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
49     +hardened-sources-2.6.26-r9.ebuild:
50 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
51 gengor 1.272
52     *hardened-sources-2.6.25-r13 (20 Jan 2009)
53    
54     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
55     +hardened-sources-2.6.25-r13.ebuild:
56 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
57 nixnut 1.271
58     20 Jan 2009; nixnut <nixnut@gentoo.org>
59     hardened-sources-2.6.25-r12.ebuild:
60     ppc stable
61 gengor 1.270
62     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
63     hardened-sources-2.6.25-r12.ebuild:
64     Stable amd64/x86.
65 gengor 1.269
66     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
67     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
68     -hardened-sources-2.6.27-r2.ebuild:
69     Clean out old versions.
70 gengor 1.268
71     *hardened-sources-2.6.27-r4 (14 Jan 2009)
72     *hardened-sources-2.6.26-r8 (14 Jan 2009)
73     *hardened-sources-2.6.25-r12 (14 Jan 2009)
74    
75     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
76     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
77     +hardened-sources-2.6.27-r4.ebuild:
78     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
79     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
80     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
81     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
82 nixnut 1.267
83     15 Dec 2008; nixnut <nixnut@gentoo.org>
84     hardened-sources-2.6.25-r11.ebuild:
85     Stable on ppc
86 gengor 1.266
87     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
88     hardened-sources-2.6.25-r11.ebuild:
89     Stable amd64/x86.
90 gengor 1.265
91     *hardened-sources-2.6.27-r3 (07 Dec 2008)
92    
93     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
94     +hardened-sources-2.6.27-r3.ebuild:
95     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
96     Fixes bug #248754, #249729 and #246607.
97 gengor 1.264
98     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
99     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
100     Remove old versions.
101 gengor 1.262
102     *hardened-sources-2.6.26-r7 (03 Dec 2008)
103     *hardened-sources-2.6.25-r11 (03 Dec 2008)
104    
105 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
106     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
107 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
108     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
109     Both include many backports from 2.6.27.{6,7} -stable releases.
110 gengor 1.261
111     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
112     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
113     Remove versions broken on ARCHes != x86/amd64.
114 gengor 1.260
115     *hardened-sources-2.6.27-r2 (24 Nov 2008)
116    
117     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
118     +hardened-sources-2.6.27-r2.ebuild:
119     Bump to Linux 2.6.27.7 and latest grsecurity patch.
120 gengor 1.259
121     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
122     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
123     Remove old versions.
124 gengor 1.258
125     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
126     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
127     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
128 nixnut 1.257
129     16 Nov 2008; nixnut <nixnut@gentoo.org>
130     hardened-sources-2.6.25-r10.ebuild:
131     Stable on ppc
132 gengor 1.256
133     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
134     hardened-sources-2.6.25-r10.ebuild:
135     Stable amd64/x86.
136 gengor 1.255
137     *hardened-sources-2.6.26-r6 (12 Nov 2008)
138    
139     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
140     +hardened-sources-2.6.26-r6.ebuild:
141     Bump to Linux 2.6.26.8 and fix security bug #245650.
142 gengor 1.254
143     *hardened-sources-2.6.25-r10 (12 Nov 2008)
144    
145     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
146     +hardened-sources-2.6.25-r10.ebuild:
147     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
148 gengor 1.253
149     *hardened-sources-2.6.27-r1 (09 Nov 2008)
150    
151     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
152     +hardened-sources-2.6.27-r1.ebuild:
153     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
154 gengor 1.252
155     *hardened-sources-2.6.27 (04 Nov 2008)
156    
157     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
158     +hardened-sources-2.6.27.ebuild:
159     Initial 2.6.27 release.
160 gengor 1.251
161     *hardened-sources-2.6.26-r5 (03 Nov 2008)
162    
163     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
164     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
165     +hardened-sources-2.6.26-r5.ebuild:
166     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
167     Clean out some old versions.
168 nixnut 1.250
169     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
170     Stable on ppc
171 gengor 1.249
172     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
173     hardened-sources-2.6.25-r9.ebuild:
174     Stable on amd64/x86.
175 gengor 1.248
176     *hardened-sources-2.6.25-r9 (26 Oct 2008)
177    
178     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
179     +hardened-sources-2.6.25-r9.ebuild:
180     Update to Linux 2.6.25.19
181 nixnut 1.247
182     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
183     Stable on ppc
184 gengor 1.246
185     *hardened-sources-2.6.26-r4 (14 Oct 2008)
186    
187     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
188     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
189     Update to latest grsecurity patch, fixing building of non-modular kernels.
190 gengor 1.245
191     *hardened-sources-2.6.26-r3 (12 Oct 2008)
192    
193     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
194     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
195     +hardened-sources-2.6.26-r3.ebuild:
196     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
197     2.6.26-r1: Removed.
198     2.6.25-r8: Stable amd64/x86.
199 gengor 1.244
200     *hardened-sources-2.6.25-r8 (09 Oct 2008)
201    
202     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
203     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
204     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
205     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
206 nixnut 1.243
207     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
208     Stable on ppc
209 gengor 1.242
210     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
211     hardened-sources-2.6.25-r7.ebuild:
212     Stable amd64/x86.
213 gengor 1.241
214     *hardened-sources-2.6.26-r2 (13 Sep 2008)
215    
216     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
217     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
218     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
219     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
220 gengor 1.240
221     *hardened-sources-2.6.25-r7 (13 Sep 2008)
222    
223     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
224     +hardened-sources-2.6.25-r7.ebuild:
225     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
226 gengor 1.239
227     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
228     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
229     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
230     hardened-sources-2.6.26-r1.ebuild:
231     Update DESCRIPTION and HGPV_URI.
232 gengor 1.238
233     *hardened-sources-2.6.25-r6 (09 Sep 2008)
234    
235     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
236     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
237     2.6.25-r6: Update to Linux 2.6.25.17.
238     2.6.24-r3: Removed.
239 gengor 1.237
240     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
241     hardened-sources-2.6.25-r5.ebuild:
242     Stable on amd64/x86
243 gengor 1.236
244     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
245     Update my email address.
246 nixnut 1.235
247     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
248     stable on ppc
249 battousai 1.234
250     *hardened-sources-2.6.26-r1 (23 Aug 2008)
251     *hardened-sources-2.6.25-r5 (23 Aug 2008)
252    
253     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
254     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
255     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
256     +hardened-sources-2.6.26-r1.ebuild:
257     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
258     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
259     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
260     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
261     (gengor).
262 solar 1.233
263     *hardened-sources-2.6.26 (18 Aug 2008)
264     *hardened-sources-2.6.25-r4 (18 Aug 2008)
265    
266     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
267     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
268     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
269     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
270     2.6.25-r2: Removed.
271 tove 1.232
272     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
273     Remove phreak from metadata.xml (#96398)
274 solar 1.231
275     *hardened-sources-2.6.25-r3 (31 Jul 2008)
276    
277     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
278     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
279     +hardened-sources-2.6.25-r3.ebuild:
280     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
281     fixes, including security bug #231750.
282 nixnut 1.230
283     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
284     Stable on ppc
285 solar 1.229
286     *hardened-sources-2.6.25-r2 (05 Jul 2008)
287    
288     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
289     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
290     +hardened-sources-2.6.25-r2.ebuild:
291     2.6.23-r4: Stable x86/amd64
292     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
293     2.6.23-r{11,12}: Removed due to multiple vulns.
294     (gengor & kerframil)
295 nixnut 1.228
296     04 Jul 2008; nixnut <nixnut@gentoo.org>
297     hardened-sources-2.6.23-r13.ebuild:
298     Stable on ppc
299 solar 1.227
300     *hardened-sources-2.6.25-r1 (30 Jun 2008)
301    
302     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
303     +hardened-sources-2.6.25-r1.ebuild:
304     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
305     grsecurity release. 2.6.23-r13: x86/amd64 stable
306 solar 1.226
307     *hardened-sources-2.6.25 (17 Jun 2008)
308     *hardened-sources-2.6.24-r3 (17 Jun 2008)
309     *hardened-sources-2.6.23-r13 (17 Jun 2008)
310    
311     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
312     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
313     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
314     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
315     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
316     2.6.25: Initial 2.6.25 release.
317 solar 1.225
318     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
319     - fasttrack to stable x86/amd64
320 swegener 1.224
321     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
322     Fix broken digest for linux-2.6.24.tar.bz2.
323 solar 1.223
324     *hardened-sources-2.6.24-r2 (11 May 2008)
325     *hardened-sources-2.6.23-r12 (11 May 2008)
326    
327     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
328     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
329     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
330     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
331     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
332     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
333     security bugs 219901, 220691, 220975, 220979, 221123. New
334     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
335     should be removed as far as I'm concerned, everything else remove due to
336     vulnerable to numerous security bugs or brokeness.
337 nixnut 1.222
338     10 May 2008; nixnut <nixnut@gentoo.org>
339     hardened-sources-2.6.23-r11.ebuild:
340     Stable on ppc
341 solar 1.221
342     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
343     - -r11 stable on x86/amd64
344 solar 1.220
345     *hardened-sources-2.6.23-r11 (01 May 2008)
346    
347     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
348     - version bump to fix ulgy linux bugs
349 phreak 1.219
350     *hardened-sources-2.6.24-r1 (30 Apr 2008)
351    
352     30 Apr 2008; Christian Heim <phreak@gentoo.org>
353     +hardened-sources-2.6.24-r1.ebuild:
354     Revision bump (thanks to Kerin and Gordon, again), pulling
355     genpatches-2.6.24-7, solving #219089. Additionally contains further security
356     fixes plus some minor updates.
357 phreak 1.218
358     *hardened-sources-2.6.23-r10 (30 Apr 2008)
359    
360     30 Apr 2008; Christian Heim <phreak@gentoo.org>
361     +hardened-sources-2.6.23-r10.ebuild:
362     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
363     Additional contains "various other fixes".
364 phreak 1.217
365     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
366     Update the longdescription in metadata, thanks to Gordon Malm.
367 nixnut 1.216
368     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
369     Stable on ppc wrt bug #213255
370 solar 1.215
371     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
372     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
373     - stable on x86/amd64 per request. Removed obsolete ebuilds
374 phreak 1.214
375     *hardened-sources-2.6.24 (07 Apr 2008)
376    
377     07 Apr 2008; Christian Heim <phreak@gentoo.org>
378     +hardened-sources-2.6.24.ebuild:
379     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
380     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
381     for the many contributions and their continued effort in #216612) based on
382     2.6.24 and genpatches-2.6.24-5.
383    
384     The current ebuild/patchset contains these things:
385     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
386     * Introduces bespoke server and workstation oriented security levels
387     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
388 phreak 1.213
389     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
390     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
391     maintaining it).
392 phreak 1.212
393     24 Mar 2008; Christian Heim <phreak@gentoo.org>
394     hardened-sources-2.4.35-r2.ebuild:
395     Fixing SRC_URI for 2.4.35-r2.
396 phreak 1.211
397     *hardened-sources-2.6.23-r9 (22 Mar 2008)
398    
399     22 Mar 2008; Christian Heim <phreak@gentoo.org>
400     +hardened-sources-2.6.23-r9.ebuild:
401     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
402     * Change the default GIDs for some grsecurity options
403     * Revamp the Hardened [Gentoo] security level and make it the default level
404     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
405     * Fix a recursive lock -- call to capable() within ptrace_attach()
406     * Fix bug that allows audit and iscsi operations to be controlled via netlink
407 solar 1.210
408     *hardened-sources-2.6.23-r8 (27 Feb 2008)
409    
410     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
411     - version bump from Kerin Millar bug 210026
412 solar 1.209
413     17 Feb 2008; <solar@gentoo.org> metadata.xml,
414     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
415     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
416     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
417     - stable on x86 and remove old ebuilds
418 solar 1.207
419     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
420 solar 1.208 - stable on amd64 per request of amd64 lead
421 solar 1.206
422     *hardened-sources-2.6.23-r7 (11 Feb 2008)
423    
424     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
425     - version bump from kerin.millar
426     Changes:
427    
428     * Bump to genpatches-base-2.6.23-9
429     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
430     * Disables COMPAT_VDSO in x86/defconfig
431     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
432 phreak 1.205
433     25 Jan 2008; Christian Heim <phreak@gentoo.org>
434     -hardened-sources-2.6.22-r8.ebuild:
435     Cleaning up old versions.
436 phreak 1.204
437     *hardened-sources-2.6.23-r6 (25 Jan 2008)
438    
439     25 Jan 2008; Christian Heim <phreak@gentoo.org>
440     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
441     Revision bump, pulling in the latest genpatches.
442 phreak 1.203
443     *hardened-sources-2.6.23-r5 (24 Dec 2007)
444    
445     24 Dec 2007; Christian Heim <phreak@gentoo.org>
446     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
447     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
448     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
449     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
450 phreak 1.202
451     24 Dec 2007; Christian Heim <phreak@gentoo.org>
452     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
453     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
454     -hardened-sources-2.6.23-r3.ebuild:
455     Cleaning out some unused, old versions.
456 phreak 1.201
457     24 Dec 2007; Christian Heim <phreak@gentoo.org>
458     hardened-sources-2.6.23-r4.ebuild:
459     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
460     in the tree for long, but there isn't much of a difference between this and
461     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
462 phreak 1.200
463     *hardened-sources-2.6.23-r4 (23 Dec 2007)
464    
465     23 Dec 2007; Christian Heim <phreak@gentoo.org>
466     +hardened-sources-2.6.23-r4.ebuild:
467     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
468 phreak 1.199
469     *hardened-sources-2.6.23-r3 (04 Dec 2007)
470    
471     04 Dec 2007; Christian Heim <phreak@gentoo.org>
472     +hardened-sources-2.6.23-r3.ebuild:
473     Revision bump, pulling in 2.6.23.9.
474 phreak 1.198
475     *hardened-sources-2.6.23-r2 (25 Nov 2007)
476    
477     25 Nov 2007; Christian Heim <phreak@gentoo.org>
478     +hardened-sources-2.6.23-r2.ebuild:
479     Updated patchset, thanks to solar.
480 phreak 1.197
481     *hardened-sources-2.6.23-r1 (31 Oct 2007)
482    
483     31 Oct 2007; Christian Heim <phreak@gentoo.org>
484     +hardened-sources-2.6.23-r1.ebuild:
485     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
486 solar 1.196
487     29 Oct 2007; <solar@gentoo.org> metadata.xml:
488     - update metadata.xml
489 phreak 1.195
490     25 Oct 2007; Christian Heim <phreak@gentoo.org>
491     hardened-sources-2.6.22-r8.ebuild:
492     Marking 2.6.22-r8 stable on amd64 and x86.
493 phreak 1.194
494     21 Oct 2007; Christian Heim <phreak@gentoo.org>
495     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
496     -hardened-sources-2.6.21-r4.ebuild:
497     Removing old ebuilds.
498 phreak 1.193
499     *hardened-sources-2.4.35-r2 (21 Oct 2007)
500    
501     21 Oct 2007; Christian Heim <phreak@gentoo.org>
502     +hardened-sources-2.4.35-r2.ebuild:
503     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
504     patches.
505 phreak 1.192
506     *hardened-sources-2.6.22-r8 (21 Oct 2007)
507    
508     21 Oct 2007; Christian Heim <phreak@gentoo.org>
509     +hardened-sources-2.6.22-r8.ebuild:
510     Yet another new patch, hopefully fixing the remaining issues we had w/
511     2.6.22. Candidate for stabling.
512 phreak 1.191
513     *hardened-sources-2.6.23 (13 Oct 2007)
514    
515     13 Oct 2007; Christian Heim <phreak@gentoo.org>
516     +hardened-sources-2.6.23.ebuild:
517     Initial hardened-sources-2.6.23. If people still have problems w/ bug
518     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
519 phreak 1.190
520     11 Oct 2007; Christian Heim <phreak@gentoo.org>
521     hardened-sources-2.6.20-r10.ebuild:
522     Pulling in yet another new genpatches version, fixing the PWC bug for real.
523 phreak 1.189
524     04 Oct 2007; Christian Heim <phreak@gentoo.org>
525     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
526     Removing old versions.
527 phreak 1.188
528     *hardened-sources-2.6.22-r7 (01 Oct 2007)
529    
530     01 Oct 2007; Christian Heim <phreak@gentoo.org>
531     +hardened-sources-2.6.22-r7.ebuild:
532     Revision bump, pulling in a newer patch. Should fix #194276.
533 phreak 1.187
534     30 Sep 2007; Christian Heim <phreak@gentoo.org>
535     hardened-sources-2.6.20-r10.ebuild:
536     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
537     Mike Doty).
538 phreak 1.186
539     *hardened-sources-2.6.22-r6 (26 Sep 2007)
540    
541     26 Sep 2007; Christian Heim <phreak@gentoo.org>
542     +hardened-sources-2.6.22-r6.ebuild:
543     Revision bump, grabbing up till Linux 2.6.22.9.
544 phreak 1.185
545     24 Sep 2007; Christian Heim <phreak@gentoo.org>
546     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
547     Cleaning up further.
548 phreak 1.184
549     *hardened-sources-2.6.20-r10 (24 Sep 2007)
550    
551     24 Sep 2007; Christian Heim <phreak@gentoo.org>
552     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
553     +hardened-sources-2.6.20-r10.ebuild:
554     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
555     revisions.
556 phreak 1.183
557     *hardened-sources-2.6.22-r5 (22 Sep 2007)
558    
559     22 Sep 2007; Christian Heim <phreak@gentoo.org>
560     +hardened-sources-2.6.22-r5.ebuild:
561     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
562 phreak 1.182
563     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
564     Removing johnm from metadata.xml (see #186467 for reference).
565 phreak 1.181
566     *hardened-sources-2.6.22-r4 (17 Sep 2007)
567    
568     17 Sep 2007; Christian Heim <phreak@gentoo.org>
569     +hardened-sources-2.6.22-r4.ebuild:
570     Revision bump, hopefully fixing all those weird PAX failures.
571 phreak 1.180
572     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
573     Updating the metadata.xml.
574 phreak 1.179
575     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
576     Removing tocharian from metadata due to his retirement (see #71718 for
577     reference).
578 phreak 1.178
579     *hardened-sources-2.6.20-r9 (30 Aug 2007)
580    
581     30 Aug 2007; Christian Heim <phreak@gentoo.org>
582     +hardened-sources-2.6.20-r9.ebuild:
583     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
584 phreak 1.177
585     29 Aug 2007; Christian Heim <phreak@gentoo.org>
586     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
587     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
588     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
589     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
590     -hardened-sources-2.6.22-r2.ebuild:
591     Removing some redundant versions.
592 phreak 1.176
593     *hardened-sources-2.4.35-r1 (29 Aug 2007)
594    
595     29 Aug 2007; Christian Heim <phreak@gentoo.org>
596     +hardened-sources-2.4.35-r1.ebuild:
597     Revision bump, new grsecurity patch.
598 phreak 1.175
599     *hardened-sources-2.6.20-r8 (26 Aug 2007)
600    
601     26 Aug 2007; Christian Heim <phreak@gentoo.org>
602     +hardened-sources-2.6.20-r8.ebuild:
603     Revision bump for Linux 2.6.20.17.
604 phreak 1.174
605     *hardened-sources-2.6.22-r3 (22 Aug 2007)
606    
607     22 Aug 2007; Christian Heim <phreak@gentoo.org>
608     +hardened-sources-2.6.22-r3.ebuild:
609     Revision bump for Linux 2.6.22.4.
610 phreak 1.173
611     16 Aug 2007; Christian Heim <phreak@gentoo.org>
612     hardened-sources-2.6.22-r2.ebuild:
613     Updated patchset, to fix the alignment against 2.6.22.3.
614 phreak 1.172
615     *hardened-sources-2.6.22-r2 (16 Aug 2007)
616    
617     16 Aug 2007; Christian Heim <phreak@gentoo.org>
618     +hardened-sources-2.6.22-r2.ebuild:
619     Revision bump for Linux 2.6.22.3.
620 phreak 1.171
621     *hardened-sources-2.4.35 (16 Aug 2007)
622    
623     16 Aug 2007; Christian Heim <phreak@gentoo.org>
624     +hardened-sources-2.4.35.ebuild:
625     Version bump, initial version for Linux 2.4.35.
626 phreak 1.170
627     *hardened-sources-2.6.21-r4 (16 Aug 2007)
628    
629     16 Aug 2007; Christian Heim <phreak@gentoo.org>
630     +hardened-sources-2.6.21-r4.ebuild:
631     Revision bump for Linux 2.6.21.6.
632 phreak 1.169
633     *hardened-sources-2.6.20-r7 (16 Aug 2007)
634    
635     16 Aug 2007; Christian Heim <phreak@gentoo.org>
636     +hardened-sources-2.6.20-r7.ebuild:
637     Revision bump for Linux 2.6.20.16.
638 phreak 1.168
639     *hardened-sources-2.6.22-r1 (13 Aug 2007)
640    
641     13 Aug 2007; Christian Heim <phreak@gentoo.org>
642     +hardened-sources-2.6.22-r1.ebuild:
643     Yet another revision bump.
644 phreak 1.167
645     *hardened-sources-2.6.22 (10 Aug 2007)
646    
647     10 Aug 2007; Christian Heim <phreak@gentoo.org>
648     +hardened-sources-2.6.22.ebuild:
649     Initial release for 2.6.22. If you are using hardened-sources on a desktop
650     machine (P4 or newer), be aware you might need to disable
651     CONFIG_PAX_PAGEEXEC.
652 phreak 1.166
653     04 Aug 2007; Christian Heim <phreak@gentoo.org>
654     hardened-sources-2.6.20-r6.ebuild:
655     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
656     2.6.20.15.
657 phreak 1.165
658     10 Jul 2007; Christian Heim <phreak@gentoo.org>
659     hardened-sources-2.6.20-r5.ebuild:
660     Marking hardened-sources-2.6.20-r5 stable on ppc.
661 phreak 1.164
662     10 Jul 2007; Christian Heim <phreak@gentoo.org>
663     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
664     Cleanup.
665 phreak 1.163
666     *hardened-sources-2.6.20-r6 (08 Jul 2007)
667    
668     08 Jul 2007; Christian Heim <phreak@gentoo.org>
669     +hardened-sources-2.6.20-r6.ebuild:
670     Revision bump, grabbing yet another stable release.
671 phreak 1.162
672     17 Jun 2007; Christian Heim <phreak@gentoo.org>
673     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
674     -hardened-sources-2.6.21-r2.ebuild:
675     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
676     alpha stable KEYWORD by mistake.
677 phreak 1.161
678     17 Jun 2007; Christian Heim <phreak@gentoo.org>
679     hardened-sources-2.6.20-r5.ebuild:
680     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
681     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
682 phreak 1.160
683     *hardened-sources-2.6.21-r3 (12 Jun 2007)
684    
685     12 Jun 2007; Christian Heim <phreak@gentoo.org>
686     +hardened-sources-2.6.21-r3.ebuild:
687     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
688     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
689     love.
690 phreak 1.159
691     *hardened-sources-2.6.20-r5 (11 Jun 2007)
692    
693     11 Jun 2007; Christian Heim <phreak@gentoo.org>
694     +hardened-sources-2.6.20-r5.ebuild:
695     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
696     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
697     love.
698 pappy 1.158
699     *hardened-sources-2.4.34.5 (11 Jun 2007)
700    
701     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
702     +hardened-sources-2.4.34.5.ebuild:
703     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
704 phreak 1.157
705     30 May 2007; Christian Heim <phreak@gentoo.org>
706     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
707     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
708     stale ebuild(s).
709 phreak 1.156
710     30 May 2007; Christian Heim <phreak@gentoo.org>
711     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
712     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
713     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
714     Doing some cleanups, remove stale ebuilds.
715 phreak 1.155
716     26 May 2007; Christian Heim <phreak@gentoo.org>
717     hardened-sources-2.6.21-r2.ebuild:
718     Fixing the grsecurity patch, had one '};' too much.
719 phreak 1.154
720     *hardened-sources-2.6.21-r2 (26 May 2007)
721    
722     26 May 2007; Christian Heim <phreak@gentoo.org>
723     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
724     +hardened-sources-2.6.21-r2.ebuild:
725     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
726     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
727 phreak 1.153
728     *hardened-sources-2.6.20-r4 (26 May 2007)
729    
730     26 May 2007; Christian Heim <phreak@gentoo.org>
731     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
732     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
733 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
734 phreak 1.152
735     15 May 2007; Christian Heim <phreak@gentoo.org>
736     hardened-sources-2.6.20-r3.ebuild:
737     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
738     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
739     grsecurity patch fail in that exact same hunk.
740 phreak 1.151
741     *hardened-sources-2.6.20-r3 (15 May 2007)
742    
743     15 May 2007; Christian Heim <phreak@gentoo.org>
744     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
745     Revision bump, incorporating Linux 2.6.20.11.
746    
747     *hardened-sources-2.6.21-r1 (11 May 2007)
748    
749     11 May 2007; Christian Heim <phreak@gentoo.org>
750     +hardened-sources-2.6.21-r1.ebuild:
751     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
752     mentioned in #177234.
753 kevquinn 1.150
754     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
755     files/digest-hardened-sources-2.6.21, Manifest:
756     Fix Manifest/digest for linux-2.6.21.tar.bz2
757 phreak 1.149
758     06 May 2007; Christian Heim <phreak@gentoo.org>
759     hardened-sources-2.6.21.ebuild:
760     Bumping the hardened-patches version, needed for the fix for #177234.
761 phreak 1.148
762     *hardened-sources-2.6.21 (02 May 2007)
763    
764     02 May 2007; Christian Heim <phreak@gentoo.org>
765     +hardened-sources-2.6.21.ebuild:
766     Version bump, Linux 2.6.21-hardened.
767 phreak 1.147
768     29 Apr 2007; Christian Heim <phreak@gentoo.org>
769     hardened-sources-2.6.20-r2.ebuild:
770     Adding ~ia64 on Ned's request.
771 phreak 1.146
772     29 Apr 2007; Christian Heim <phreak@gentoo.org>
773     hardened-sources-2.6.20-r2.ebuild:
774     Fixing the included grsecurity patch, wasn't alligning due to the Index:
775     header line(s).
776 phreak 1.145
777     29 Apr 2007; Christian Heim <phreak@gentoo.org>
778     hardened-sources-2.6.20-r2.ebuild:
779     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
780 armin76 1.144
781     *hardened-sources-2.6.20-r2 (10 Apr 2007)
782    
783     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
784     +hardened-sources-2.6.20-r2.ebuild:
785     Version bump, on behalf of phreak
786 phreak 1.143
787     *hardened-sources-2.6.20-r1 (04 Apr 2007)
788    
789     04 Apr 2007; Christian Heim <phreak@gentoo.org>
790     +hardened-sources-2.6.20-r1.ebuild:
791     Revision bump, grabbing a newer grsecurity snapshot.
792 phreak 1.142
793     *hardened-sources-2.6.20 (25 Mar 2007)
794    
795     25 Mar 2007; Christian Heim <phreak@gentoo.org>
796     +hardened-sources-2.6.20.ebuild:
797     Finally a hardened-sources version for 2.6.20; many people have been waiting
798     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
799     testbox.
800 chainsaw 1.141
801     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
802     hardened-sources-2.6.18-r6.ebuild:
803     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
804 phreak 1.140
805     *hardened-sources-2.6.18-r6 (16 Mar 2007)
806    
807     16 Mar 2007; Christian Heim <phreak@gentoo.org>
808     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
809     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
810     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
811     supposed to be.
812 phreak 1.139
813     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
814     Fixing the Manifest, the previous one was broken (as in still had the
815     deleted ebuild in it).
816 phreak 1.138
817     06 Mar 2007; Christian Heim <phreak@gentoo.org>
818     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
819     +hardened-sources-2.6.18-r5.ebuild:
820     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
821     Linux 2.6.18.8. Also cleaning up the older version.
822    
823     *hardened-sources-2.6.18-r5 (06 Mar 2007)
824    
825     06 Mar 2007; Christian Heim <phreak@gentoo.org>
826     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
827     +hardened-sources-2.6.18-r5.ebuild:
828     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
829     Linux 2.6.18.8. Also cleaning up the older version.
830 phreak 1.137
831     24 Feb 2007; Christian Heim <phreak@gentoo.org>
832     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
833     -hardened-sources-2.6.19-r5.ebuild:
834     Removing some of the old version, that didn't work.
835 phreak 1.136
836     *hardened-sources-2.6.19-r6 (12 Feb 2007)
837    
838     12 Feb 2007; Christian Heim <phreak@gentoo.org>
839     +hardened-sources-2.6.19-r6.ebuild:
840     Revision bump, including a new grsec version fixing #166235.
841 pappy 1.134
842     *hardened-sources-2.4.34 (24 Jan 2007)
843    
844     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
845 pappy 1.135 Manifest:
846     updating Manifest with checksums of new tarball and ebuild
847    
848     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
849 pappy 1.134 +hardened-sources-2.4.34.ebuild:
850     I added new hardened sources 2.4 update, this is a critical path
851     security bugfix - all users of h-s are strongly advised
852     to update their existing hardened sources to this version.
853     It contains a fix for a kernel vulnerability that is pertaining
854     to the PaX changes to virtual memory management, possibly leading
855     to a local kernel exploit ... see grsecurity.net forums and homepage
856 phreak 1.133
857     23 Jan 2007; Christian Heim <phreak@gentoo.org>
858     files/digest-hardened-sources-2.6.19-r5, Manifest:
859     Fixing the patch-tarball digest.
860 phreak 1.132
861     *hardened-sources-2.6.19-r5 (23 Jan 2007)
862    
863     23 Jan 2007; Christian Heim <phreak@gentoo.org>
864     +hardened-sources-2.6.19-r5.ebuild:
865     Revision bump, closing the recently discovered PaX expand_stack()
866     vulnerability.
867 phreak 1.131
868     *hardened-sources-2.6.19-r4 (14 Jan 2007)
869    
870     14 Jan 2007; Christian Heim <phreak@gentoo.org>
871     +hardened-sources-2.6.19-r4.ebuild:
872     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
873     dropping the randomized PID feature.
874 opfer 1.130
875     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
876     hardened-sources-2.4.33.4.ebuild:
877     stable x86, bug #161171
878 phreak 1.129
879     *hardened-sources-2.6.19-r3 (27 Dec 2006)
880    
881     27 Dec 2006; Christian Heim <phreak@gentoo.org>
882     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
883     Revision bump for bug #157186 and #158786.
884 phreak 1.128
885     *hardened-sources-2.6.18-r4 (27 Dec 2006)
886    
887     27 Dec 2006; Christian Heim <phreak@gentoo.org>
888     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
889     Revision bump for bug #157186.
890 phreak 1.127
891     *hardened-sources-2.6.19-r2 (23 Dec 2006)
892    
893     23 Dec 2006; Christian Heim <phreak@gentoo.org>
894     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
895     Revision bump to pull in genpatches-2.6.19-3 for #157186.
896 phreak 1.126
897     17 Dec 2006; Christian Heim <phreak@gentoo.org>
898     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
899     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
900     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
901     hardened-sources-2.6.19-r1.ebuild:
902     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
903     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
904 pappy 1.125
905     *hardened-sources-2.4.33.4 (17 Dec 2006)
906    
907     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
908     +hardened-sources-2.4.33.4.ebuild:
909     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
910     and quilting
911 phreak 1.124
912     *hardened-sources-2.6.19-r1 (14 Dec 2006)
913    
914     14 Dec 2006; Christian Heim <phreak@gentoo.org>
915     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
916     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
917     for reporting).
918 phreak 1.123
919     *hardened-sources-2.6.19 (13 Dec 2006)
920    
921     13 Dec 2006; Christian Heim <phreak@gentoo.org>
922     +hardened-sources-2.6.19.ebuild:
923     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
924     Brad for providing that prompt update.
925 phreak 1.122
926     *hardened-sources-2.6.18-r3 (13 Dec 2006)
927    
928     13 Dec 2006; Christian Heim <phreak@gentoo.org>
929     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
930     +hardened-sources-2.6.18-r3.ebuild:
931     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
932     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
933 phreak 1.121
934     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
935     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
936 nixnut 1.120
937     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
938     Stable on ppc wrt bug 157356
939 opfer 1.119
940     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
941     hardened-sources-2.6.18.ebuild:
942     stable x86, bug #157356
943 phreak 1.118
944     *hardened-sources-2.6.18-r2 (06 Dec 2006)
945    
946     06 Dec 2006; Christian Heim <phreak@gentoo.org>
947     +hardened-sources-2.6.18-r2.ebuild:
948     Revision bump, including 2.6.18.5 (via genpatches) and
949     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
950     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
951     redesign.
952 phreak 1.117
953     06 Dec 2006; Christian Heim <phreak@gentoo.org>
954     hardened-sources-2.6.18.ebuild:
955     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
956     of Mike Doty).
957 phreak 1.116
958     *hardened-sources-2.6.18-r1 (23 Nov 2006)
959    
960     23 Nov 2006; Christian Heim <phreak@gentoo.org>
961     +hardened-sources-2.6.18-r1.ebuild:
962     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
963 phreak 1.115
964     *hardened-sources-2.6.18 (11 Nov 2006)
965    
966     11 Nov 2006; Christian Heim <phreak@gentoo.org>
967     +hardened-sources-2.6.18.ebuild:
968     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
969 solar 1.114
970     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
971     - mark amd64 stable also. bug #151877
972 solar 1.113
973     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
974     - mark 2.6.17-r1 stable
975 phreak 1.112
976     27 Aug 2006; Christian Heim <phreak@gentoo.org>
977     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
978     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
979 phreak 1.111
980     *hardened-sources-2.6.17-r1 (26 Aug 2006)
981    
982     26 Aug 2006; Christian Heim <phreak@gentoo.org>
983     +hardened-sources-2.6.17-r1.ebuild:
984     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
985     grsecurity patch.
986 phreak 1.110
987     *hardened-sources-2.6.17 (17 Aug 2006)
988    
989     17 Aug 2006; Christian Heim <phreak@gentoo.org>
990     +hardened-sources-2.6.17.ebuild:
991     Bumping the hardened-sources-2.6 series to 2.6.17, using
992     genpatches-2.6.17-6.base.
993 solar 1.109
994     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
995     - stable on x86 and amd64
996 solar 1.108
997     *hardened-sources-2.6.16-r11 (15 Jul 2006)
998    
999     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1000     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1001     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1002     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1003     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1004     crusty ebuilds
1005 johnm 1.107
1006     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1007     hardened-sources-2.6.16-r10.ebuild:
1008     marking stable on x86 and amd64
1009 solar 1.106
1010     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1011     - 2.4.32-r6 stable on x86. RSBAC state unknown
1012 kang 1.105
1013     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1014    
1015     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1016     +hardened-sources-2.4.32-r7.ebuild:
1017     Bump PaX for RSBAC to test-17
1018 johnm 1.104
1019     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1020    
1021     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1022     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1023     hardened-sources-2.6.16 bump to latest -base.
1024 solar 1.103
1025     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1026    
1027     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1028     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1029     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1030     sysctl controlable resource logging
1031 johnm 1.102
1032     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1033    
1034     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1035     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1036     push new 2.6.16 release in preparation for stable
1037 solar 1.101
1038     22 May 2006; <solar@gentoo.org> :
1039     - redigest bug 134002
1040 kang 1.100
1041     *hardened-sources-2.4.32-r5 (16 May 2006)
1042    
1043     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1044     +hardened-sources-2.4.32-r5.ebuild:
1045     Fixes rsbac common patching (new patch in new -r5 patchset)
1046 solar 1.99
1047     *hardened-sources-2.4.32-r4 (13 May 2006)
1048    
1049     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1050     +hardened-sources-2.4.32-r4.ebuild:
1051     - security bumps
1052 johnm 1.98
1053     *hardened-sources-2.6.16-r6 (03 May 2006)
1054    
1055     03 May 2006; John Mylchreest <johnm@gentoo.org>
1056     +hardened-sources-2.6.16-r6.ebuild:
1057     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1058 johnm 1.97
1059     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1060     hardened-sources-2.6.14-r8.ebuild:
1061     fix x86_64 build problem, this will delay the digest issue again for a short
1062     while but it will sort itself out
1063 johnm 1.96
1064     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1065     hardened-sources-2.6.14-r8.ebuild:
1066     bump hardened patchset
1067 antarus 1.94
1068     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1069     files/digest-hardened-sources-2.4.32-r2,
1070     files/digest-hardened-sources-2.4.32-r3,
1071     files/digest-hardened-sources-2.6.14-r8, Manifest:
1072     Fixing duff SHA256 digests: Bug # 131293
1073 johnm 1.93
1074 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1075    
1076     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1077     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1078     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1079     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1080     cleanup of old uneccessary sources
1081    
1082 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1083     fix digest
1084 johnm 1.92
1085     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1086    
1087     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1088     +hardened-sources-2.6.14-r8.ebuild:
1089     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1090 johnm 1.91
1091     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1092     Turning on gpg-signing again, and recomitting
1093 johnm 1.90
1094     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1095    
1096     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1097     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1098     +hardened-sources-2.6.16-r4.ebuild:
1099     Fix numerous security vulns
1100 solar 1.89
1101     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1102    
1103     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1104     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1105     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1106     - security bump for bug #112791. Removed old ebuilds
1107 johnm 1.88
1108     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1109    
1110     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1111     +hardened-sources-2.6.16-r3.ebuild:
1112     Removing silly localversion which I missed
1113 johnm 1.87
1114     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1115    
1116     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1117     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1118     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1119 johnm 1.86
1120     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1121    
1122     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1123     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1124     +hardened-sources-2.6.16-r2.ebuild:
1125     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1126     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1127 johnm 1.85
1128     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1129    
1130     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1131     +hardened-sources-2.6.16-r1.ebuild:
1132     Bumping to include ppc build fix and 2.6.16.3
1133 tsunam 1.84
1134     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1135     hardened-sources-2.6.14-r6.ebuild:
1136     Stable on x86; bug #127718
1137 johnm 1.83
1138     *hardened-sources-2.6.16 (31 Mar 2006)
1139    
1140     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1141     +hardened-sources-2.6.16.ebuild:
1142     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1143     2.6.16.1
1144 cryos 1.82
1145     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1146     hardened-sources-2.6.14-r6.ebuild:
1147     Stable on amd64, bug 127718.
1148 nixnut 1.81
1149     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1150     Stable on ppc. Bug #127718
1151 johnm 1.80
1152     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1153     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1154     -hardened-sources-2.6.14-r4.ebuild:
1155     Cleanup.
1156 johnm 1.79
1157     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1158    
1159     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1160     +hardened-sources-2.6.14-r6.ebuild:
1161     Fixes grsec policy recreation bug and adds a
1162     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1163 solar 1.78
1164     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1165     - stable on x86
1166 hansmi 1.77
1167     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1168     hardened-sources-2.6.14-r5.ebuild:
1169     Stable on ppc.
1170 johnm 1.76
1171     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1172    
1173     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1174     +hardened-sources-2.6.14-r5.ebuild:
1175     fixing every known exploit
1176 solar 1.75
1177     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1178    
1179     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1180     +hardened-sources-2.4.32-r2.ebuild:
1181     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1182 solar 1.74
1183     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1184    
1185     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1186     - version bump for new genpatches which fix up a few sec holes
1187 solar 1.73
1188     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1189    
1190     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1191     - revision bump to add misc vital linux kernel security patches.
1192 johnm 1.72
1193     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1194    
1195     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1196     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1197     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1198 johnm 1.71
1199     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1200     hardened-sources-2.6.14-r2.ebuild:
1201     making x86 & amd64 stable following testing.
1202 johnm 1.70
1203     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1204    
1205     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1206     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1207     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1208     network hooks.
1209 johnm 1.69
1210     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1211     hardened-sources-2.6.14-r1.ebuild:
1212     bumping to stable early for sec fix on x86 & amd64
1213 johnm 1.68
1214     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1215    
1216     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1217     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1218     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1219 solar 1.67
1220     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1221     - stable on x86 security bug #114227 CAN-2005-3257
1222 kang 1.66
1223     *hardened-sources-2.4.32 (19 Nov 2005)
1224    
1225     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1226     +hardened-sources-2.4.32.ebuild:
1227     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1228     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1229     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1230     rsbac >> /etc/portage/package.use)
1231 johnm 1.65
1232     *hardened-sources-2.6.14 (14 Nov 2005)
1233    
1234     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1235     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1236     Bumping 2.6 series to 2.6.14.2
1237 johnm 1.64
1238     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1239    
1240     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1241     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1242     +hardened-sources-2.6.13-r2.ebuild:
1243     Fixes minor build error in ppc.
1244 johnm 1.63
1245     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1246    
1247     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1248     +hardened-sources-2.6.13-r1.ebuild:
1249     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1250     2.6.13.4, fixes some major amd64 stability problems.
1251 johnm 1.62
1252     *hardened-sources-2.6.13 (16 Sep 2005)
1253    
1254     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1255     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1256     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1257     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1258     users should test this thoroughly.
1259 solar 1.61
1260     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1261     - stable on x86
1262 johnm 1.60
1263     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1264    
1265     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1266     +hardened-sources-2.6.11-r15.ebuild:
1267     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1268     grsec redefining curr_ip struct.
1269 solar 1.59
1270     *hardened-sources-2.4.31 (20 Jun 2005)
1271    
1272     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1273     initial import of 2.4.31 tree
1274 johnm 1.58
1275     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1276    
1277     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1278     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1279     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1280     naming scheme to abide by genpatches
1281 johnm 1.57
1282     *hardened-sources-2.6.11-r13 (18 May 2005)
1283    
1284     18 May 2005; John Mylchreest <johnm@gentoo.org>
1285     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1286     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1287     target. sorry about that. Fixes bug #93022
1288 johnm 1.56
1289     *hardened-sources-2.6.11-r12 (17 May 2005)
1290    
1291     17 May 2005; John Mylchreest <johnm@gentoo.org>
1292     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1293     +hardened-sources-2.6.11-r12.ebuild:
1294     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1295     merges in genpatches-base
1296 johnm 1.55
1297     *hardened-sources-2.6.11-r12 (17 May 2005)
1298    
1299     17 May 2005; John Mylchreest <johnm@gentoo.org>
1300     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1301     +hardened-sources-2.6.11-r12.ebuild:
1302     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1303     merges in genpatches-base
1304 solar 1.54
1305     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1306     -files/2.4.27-cmdline-race.patch,
1307     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1308     -files/2.4.28-grsec-binfmt_a.out.patch,
1309     -files/2.4.28-grsec-cmdline-race.patch,
1310     -files/2.4.28-selinux-binfmt_a.out.patch,
1311     -files/2.4.28-selinux-cmdline-race.patch,
1312     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1313     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1314     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1315     cleanup..
1316 solar 1.53
1317     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1318    
1319     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1320     - disable aout by default
1321 solar 1.52
1322     *hardened-sources-2.4.30 (18 Apr 2005)
1323    
1324     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1325     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1326     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1327     use
1328 tocharian 1.50
1329 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1330    
1331     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1332     +hardened-sources-2.4.29.ebuild:
1333     New hardened-patches-2.4-29.0 patchball.
1334     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1335    
1336     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1337    
1338     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1339     +hardened-sources-2.4.28-r5.ebuild:
1340     Added a fix for a PaX vulnerability.
1341    
1342     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1343 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1344     Stable on x86
1345 solar 1.49
1346     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1347     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1348     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1349     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1350     - fixed/added RDEPEND= in all kernel-2 ebuilds
1351 tocharian 1.48
1352     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1353    
1354     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1355     +hardened-sources-2.4.28-r4.ebuild:
1356     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1357     backport of neighbour hash updates.
1358 tocharian 1.47
1359     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1360     hardened-sources-2.4.28-r3.ebuild:
1361     Stable on x86
1362 tseng 1.46
1363     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1364    
1365     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1366     +hardened-sources-2.6.10-r3.ebuild:
1367     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1368     in 2005.0
1369 tocharian 1.45
1370     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1371     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1372     hardened-sources-2.4.28-r2.ebuild:
1373     Mark stable on x86
1374 tocharian 1.44
1375     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1376    
1377     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1378     +hardened-sources-2.4.28-r3.ebuild:
1379     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1380 tocharian 1.43
1381     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1382     hardened-sources-2.4.28.ebuild:
1383     Mark stable on x86.
1384 tocharian 1.42
1385     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1386    
1387     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1388     +hardened-sources-2.4.28-r2.ebuild:
1389     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1390     Mazinger for grsecurity patches as well.
1391 plasmaroo 1.41
1392     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1393    
1394     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1395     Security bump. Thank tocharian for rolling a new patchset...
1396 solar 1.40
1397     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1398     +files/2.4.28-grsec-cmdline-race.patch,
1399     +files/2.4.28-selinux-binfmt_a.out.patch,
1400     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1401     - Round up remaining security patches that appear to be missing in 2.4.28. -
1402     PaX standalone updated to current. hgpv=28.1
1403 solar 1.39
1404     *hardened-sources-2.4.28 (28 Nov 2004)
1405    
1406     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1407     security bump. Thank tocharian for rolling a new patchset
1408 scox 1.31
1409 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1410    
1411     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1412     +hardened-sources-2.4.27-r3.ebuild:
1413     Applies the new 2.4-27.2 patchball which updates
1414     GRSecurity to the 2.0.1 version.
1415    
1416 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1417    
1418     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1419     +hardened-sources-2.4.27-r2.ebuild:
1420     Version bump.
1421     This version uses the new 2.4-27.1 patchball which updates
1422     both the SELinux PaX hooks patch and the SELinux headers.
1423    
1424 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1425    
1426     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1427     +hardened-sources-2.4.27-r1.ebuild,
1428     -hardened-sources-2.4.27.ebuild,
1429     +files/2.4.27-cmdline-race.patch:
1430     Version bump, fix for cmdline race. See bug #59905.
1431    
1432     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1433    
1434     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1435     +hardened-sources-2.4.26-r6.ebuild,
1436     -hardened-sources-2.4.26-r5.ebuild,
1437     -hardened-sources-2.4.26-r4.ebuild,
1438     +files/2.4.26-cmdline-race.patch:
1439     Version bump, fix for cmdline race. See bug #59905.
1440    
1441 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1442    
1443     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1444     +hardened-sources-2.4.27.ebuild,
1445     +files/2.4.27-CAN-2004-0394.patch:
1446     Ported the patchball to the 2.4.27 kernel version.
1447    
1448 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1449    
1450     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1451     +hardened-sources-2.4.26-r5.ebuild:
1452 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1453 scox 1.34 It adds the following features:
1454     - Squashfs
1455     - Ebtables
1456     - Netdev random (core+drivers)
1457     - Watchdog Timer (WDT) fix.
1458    
1459 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1460    
1461     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1462     +hardened-sources-2.4.26-r4.ebuild,
1463     +files/2.4.26-CAN-2004-0415.patch,
1464     -hardened-sources-2.4.26-3:
1465     Version bump, fix for CAN 0415, see bug #59378.
1466    
1467 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1468    
1469     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1470     +hardened-sources-2.4.26-r3.ebuild,
1471     +files/2.4.26-CAN-2004-0497.patch,
1472     -hardened-sources-2.4.26-r2.ebuild:
1473     Version bump, fixed CAN 0497, see bug #56171.
1474    
1475 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1476    
1477     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1478 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1479 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1480     +files/2.4.26-CAN-2004-0535.patch,
1481     -hardened-sources-2.4.26-r1.ebuild:
1482     Fixes for both CAN 0495 and 0535, see bug #54976
1483 pvdabeel 1.27
1484 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1485     hardened-sources-2.4.26-r1.ebuild:
1486     QA - fix use invocation
1487 scox 1.28
1488     *hardened-sources-2.4.26-r1 (22 June 2004)
1489    
1490     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1491     +hardened-sources-2.4.26-r1.ebuild,
1492     +files/2.4.26-CAN-2004-0394.patch,
1493     +files/2.4.26-signal-race.patch,
1494     -hardened-sources-2.4.26.ebuild,
1495     -hardened-sources-2.4.24-r3.ebuild:
1496     Version bump for the CAN-2004-0394 issue and bug #53804
1497     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1498    
1499    
1500 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1501     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1502     Masked hardened-sources-2.4.26.ebuild broken for ppc
1503    
1504     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1505     hardened-sources-2.4.24-r3.ebuild:
1506     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1507 plasmaroo 1.25
1508 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1509    
1510     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1511     +hardened-sources-2.4.26.ebuild:
1512     Updated hardened-sources for the 2.4.26 kernel
1513     Removed broken components, updated almost everything.
1514    
1515 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1516    
1517     17 Apr 2004; <plasmaroo@gentoo.org>
1518     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1519     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1520     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1521     +hardened-sources-2.4.24-r3.ebuild:
1522     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1523     vulnerabilities. Old revisions removed.
1524 plasmaroo 1.24
1525     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1526    
1527     15 Apr 2004; <plasmaroo@gentoo.org>
1528     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1529     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1530     Version bump for the CAN-2004-0109 issue; bug #47881.
1531 aliz 1.23
1532     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1533     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1534     Add eutils to inherit.
1535 plasmaroo 1.22
1536     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1537    
1538     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1539     files/hardened-sources-2.4.24.munmap.patch:
1540     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1541 scox 1.19
1542 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1543 scox 1.26
1544 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1545     hardened-sources-2.4.24.ebuild:
1546     Version bump, updated most of the components.
1547     This release includes the following:
1548    
1549     - Hardened security
1550     - Netfilter patch-o-matic 20031219
1551     - FreeSWAN 2.04 & x509 1.4.8
1552     - EVMS 2.2.2
1553     - XFS 1.3.1
1554     - cryptoloop jari
1555     - grsecurity 2.0-rc4
1556     - SELinux
1557     - PaX 200402060000
1558     - PaX Obscurity 200308302223
1559     - Others...
1560    
1561     Neither -ck nor systrace are included anymore.
1562    
1563 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1564    
1565     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1566     hardened-sources-2.4.22-r2.ebuild:
1567 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1568 scox 1.19
1569     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1570 iggy 1.17
1571     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1572 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1573 iggy 1.16
1574     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1575 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1576     Version bump for the 'do_brk' vulnerability.
1577 iggy 1.15
1578     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1579     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1580     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1581     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1582 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1583 frogger 1.14
1584     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1585     hardened-sources-2.4.22.ebuild:
1586 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1587     components. These are no longer handled in the kernel
1588     so this code was not necessary.
1589 frogger 1.13
1590     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1591     New 2.4.22 based hardened-sources thanks to
1592     Phil West <p.west@computer.org>.
1593    
1594     These sources include:
1595 plasmaroo 1.18 - New SELinux API
1596     - Updated CK-base
1597     - Updated GRSec
1598     - Systrace
1599     - SuperFreeS/WAN 1.99.8
1600     - Propolice kernel build support
1601     - EVMS
1602     - Other various security related patches
1603 frogger 1.11
1604 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1605    
1606     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1607     Updated hardened-sources based on the 2.4.21 Linux kernel.
1608     This includes updates to most major components such as:
1609 plasmaroo 1.18 - ck-base-0306300059
1610     - selinux-2.4-2003071106
1611     - grsecurity-2.0-rc1
1612     - Updated IPTables patch-o-matic
1613     - Updated SuperFreeS/WAN
1614    
1615 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1616     updated patch set ready for the 2.4.21 based kernel.
1617    
1618 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1619     Initial import of hardened-sources-2.4.20-r4. This revision
1620     includes only a few changes, but one of these is an important
1621     security fix. It is recommended all users of hardened-sources
1622     upgrade to this release.
1623 plasmaroo 1.18
1624 frogger 1.11 - ioperm bug fix
1625     - fixed compilation failure when building without GRSec
1626 plasmaroo 1.18
1627 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1628     due to time constraints, but is planned for inclusion in the near
1629     future.
1630 msterret 1.10
1631     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1632    
1633     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1634     hardened-sources-2.4.20-r3.ebuild:
1635 plasmaroo 1.18 Add Header...
1636 frogger 1.9
1637     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1638     hardened-sources-2.4.20-r3.ebuild:
1639     Removed warnings from ebuild. This kernel should be safe to
1640     use at this point.
1641 frogger 1.8
1642     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1643    
1644     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1645     hardened-sources-2.4.20-r3.ebuild:
1646     New revision. Includes the following changes over -r2:
1647 plasmaroo 1.18
1648 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1649     - Super FreeS/WAN 1.99.7rc2
1650     - PaX for the LSM/SELinux branch
1651     - GRSecurity 2.0-pre4 (role based access control)
1652     - Systrace 1.3
1653     - EXT3 fixes
1654     - EVMS 2.0.1
1655     - GCC 3.1+ compile optimizations
1656     - ProPolice kernel build support
1657     - Hashing table security fixes
1658 frogger 1.3
1659     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1660 frogger 1.7
1661     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1662     Initial import of hardened-sources-r2. This new
1663     ebuild includes many new performance and security
1664     related patches. As in -r1, it will patch in
1665     LSM/SELinux if "selinux" is in USE, otherwise it
1666     will patch in GRSecurity. The following patches
1667     are included in this revision:
1668 plasmaroo 1.18
1669 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1670     (pulled from the base CK patch)
1671     - ptrace exploit patch for the LSM kernel
1672     (the GRSec patch already fixes this)
1673     - LSM 2.4-2003040709
1674     - SELinux 2.4-2003040709
1675     - Systrace v1.2
1676     - IPTables patch-o-matic base patches - 20030107
1677     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1678     - Super FreeS/WAN 1.99.6.1
1679     - GRSecurity 1.9.9g
1680     - MPPE
1681     - EXT3 data journal fix
1682     - CIPE 1.5.4
1683 frogger 1.6
1684     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1685     hardened-sources-2.4.20-r1.ebuild, manifest:
1686 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1687 frogger 1.5
1688     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1689     hardened-sources-2.4.20-r1.ebuild:
1690     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1691     is patched in instead. Ptrace patches for selinux have also been added. In
1692     either case, systrace support will be patched in as well.
1693 frogger 1.3
1694     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1695     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1696 plasmaroo 1.18 Revision bump for new sources.
1697 frogger 1.4
1698 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1699 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1700 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1701 method 1.1
1702 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1703    
1704 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1705     hardened-sources-2.4.20.ebuild:
1706 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20