/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.287 - (hide annotations) (download)
Sun Mar 1 04:07:14 2009 UTC (5 years, 4 months ago) by gengor
Branch: MAIN
Changes since 1.286: +5 -1 lines
Stable sys-kernel/hardened-sources-2.6.27-r8 on amd64/x86
(Portage version: 2.1.6.7/cvs/Linux i686)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 gengor 1.268 # Copyright 2000-2009 Gentoo Foundation; Distributed under the GPL v2
3 gengor 1.287 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.286 2009/02/24 05:41:41 gengor Exp $
4    
5     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
6     hardened-sources-2.6.27-r8.ebuild:
7     Stable on amd64/x86.
8 gengor 1.286
9     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
10     -hardened-sources-2.6.27-r6.ebuild:
11     Remove old 2.6.27 release.
12 gengor 1.285
13     *hardened-sources-2.6.27-r8 (24 Feb 2009)
14    
15     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
16     +hardened-sources-2.6.27-r8.ebuild:
17     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
18     and probably more.
19 nixnut 1.284
20     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
21     ppc stable
22 gengor 1.283
23     *hardened-sources-2.6.28 (25 Jan 2009)
24    
25     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
26     +hardened-sources-2.6.28.ebuild:
27     Initial 2.6.28 release.
28 gengor 1.282
29     *hardened-sources-2.6.27-r7 (25 Jan 2009)
30    
31     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
32     +hardened-sources-2.6.27-r7.ebuild:
33     Bump to Linux 2.6.27.13.
34 gengor 1.281
35     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
36     hardened-sources-2.6.26-r9.ebuild:
37     Stable amd64/x86.
38 gengor 1.280
39     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
40     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
41     -hardened-sources-2.6.27-r5.ebuild:
42     Remove problem versions.
43 gengor 1.279
44     *hardened-sources-2.6.27-r6 (24 Jan 2009)
45    
46     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
47     +hardened-sources-2.6.27-r6.ebuild:
48     Revert PaX test29 to test30 changes. Fixes bug 256226.
49 gengor 1.277
50     *hardened-sources-2.6.27-r5 (24 Jan 2009)
51    
52     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
53     +hardened-sources-2.6.27-r5.ebuild:
54 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
55 gengor 1.277 254843.
56 gengor 1.276
57     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
58     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
59     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
60     Remove problem versions.
61 nixnut 1.275
62     23 Jan 2009; nixnut <nixnut@gentoo.org>
63     hardened-sources-2.6.25-r13.ebuild:
64     ppc stable
65 gengor 1.274
66     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
67     hardened-sources-2.6.25-r13.ebuild:
68     Fasttrack stable amd64/x86.
69 gengor 1.273
70     *hardened-sources-2.6.26-r9 (21 Jan 2009)
71    
72     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
73     +hardened-sources-2.6.26-r9.ebuild:
74 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
75 gengor 1.272
76     *hardened-sources-2.6.25-r13 (20 Jan 2009)
77    
78     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
79     +hardened-sources-2.6.25-r13.ebuild:
80 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
81 nixnut 1.271
82     20 Jan 2009; nixnut <nixnut@gentoo.org>
83     hardened-sources-2.6.25-r12.ebuild:
84     ppc stable
85 gengor 1.270
86     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
87     hardened-sources-2.6.25-r12.ebuild:
88     Stable amd64/x86.
89 gengor 1.269
90     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
91     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
92     -hardened-sources-2.6.27-r2.ebuild:
93     Clean out old versions.
94 gengor 1.268
95     *hardened-sources-2.6.27-r4 (14 Jan 2009)
96     *hardened-sources-2.6.26-r8 (14 Jan 2009)
97     *hardened-sources-2.6.25-r12 (14 Jan 2009)
98    
99     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
100     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
101     +hardened-sources-2.6.27-r4.ebuild:
102     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
103     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
104     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
105     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
106 nixnut 1.267
107     15 Dec 2008; nixnut <nixnut@gentoo.org>
108     hardened-sources-2.6.25-r11.ebuild:
109     Stable on ppc
110 gengor 1.266
111     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
112     hardened-sources-2.6.25-r11.ebuild:
113     Stable amd64/x86.
114 gengor 1.265
115     *hardened-sources-2.6.27-r3 (07 Dec 2008)
116    
117     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
118     +hardened-sources-2.6.27-r3.ebuild:
119     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
120     Fixes bug #248754, #249729 and #246607.
121 gengor 1.264
122     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
123     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
124     Remove old versions.
125 gengor 1.262
126     *hardened-sources-2.6.26-r7 (03 Dec 2008)
127     *hardened-sources-2.6.25-r11 (03 Dec 2008)
128    
129 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
130     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
131 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
132     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
133     Both include many backports from 2.6.27.{6,7} -stable releases.
134 gengor 1.261
135     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
136     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
137     Remove versions broken on ARCHes != x86/amd64.
138 gengor 1.260
139     *hardened-sources-2.6.27-r2 (24 Nov 2008)
140    
141     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
142     +hardened-sources-2.6.27-r2.ebuild:
143     Bump to Linux 2.6.27.7 and latest grsecurity patch.
144 gengor 1.259
145     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
146     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
147     Remove old versions.
148 gengor 1.258
149     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
150     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
151     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
152 nixnut 1.257
153     16 Nov 2008; nixnut <nixnut@gentoo.org>
154     hardened-sources-2.6.25-r10.ebuild:
155     Stable on ppc
156 gengor 1.256
157     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
158     hardened-sources-2.6.25-r10.ebuild:
159     Stable amd64/x86.
160 gengor 1.255
161     *hardened-sources-2.6.26-r6 (12 Nov 2008)
162    
163     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
164     +hardened-sources-2.6.26-r6.ebuild:
165     Bump to Linux 2.6.26.8 and fix security bug #245650.
166 gengor 1.254
167     *hardened-sources-2.6.25-r10 (12 Nov 2008)
168    
169     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
170     +hardened-sources-2.6.25-r10.ebuild:
171     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
172 gengor 1.253
173     *hardened-sources-2.6.27-r1 (09 Nov 2008)
174    
175     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
176     +hardened-sources-2.6.27-r1.ebuild:
177     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
178 gengor 1.252
179     *hardened-sources-2.6.27 (04 Nov 2008)
180    
181     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
182     +hardened-sources-2.6.27.ebuild:
183     Initial 2.6.27 release.
184 gengor 1.251
185     *hardened-sources-2.6.26-r5 (03 Nov 2008)
186    
187     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
188     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
189     +hardened-sources-2.6.26-r5.ebuild:
190     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
191     Clean out some old versions.
192 nixnut 1.250
193     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
194     Stable on ppc
195 gengor 1.249
196     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
197     hardened-sources-2.6.25-r9.ebuild:
198     Stable on amd64/x86.
199 gengor 1.248
200     *hardened-sources-2.6.25-r9 (26 Oct 2008)
201    
202     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
203     +hardened-sources-2.6.25-r9.ebuild:
204     Update to Linux 2.6.25.19
205 nixnut 1.247
206     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
207     Stable on ppc
208 gengor 1.246
209     *hardened-sources-2.6.26-r4 (14 Oct 2008)
210    
211     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
212     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
213     Update to latest grsecurity patch, fixing building of non-modular kernels.
214 gengor 1.245
215     *hardened-sources-2.6.26-r3 (12 Oct 2008)
216    
217     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
218     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
219     +hardened-sources-2.6.26-r3.ebuild:
220     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
221     2.6.26-r1: Removed.
222     2.6.25-r8: Stable amd64/x86.
223 gengor 1.244
224     *hardened-sources-2.6.25-r8 (09 Oct 2008)
225    
226     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
227     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
228     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
229     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
230 nixnut 1.243
231     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
232     Stable on ppc
233 gengor 1.242
234     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
235     hardened-sources-2.6.25-r7.ebuild:
236     Stable amd64/x86.
237 gengor 1.241
238     *hardened-sources-2.6.26-r2 (13 Sep 2008)
239    
240     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
241     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
242     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
243     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
244 gengor 1.240
245     *hardened-sources-2.6.25-r7 (13 Sep 2008)
246    
247     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
248     +hardened-sources-2.6.25-r7.ebuild:
249     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
250 gengor 1.239
251     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
252     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
253     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
254     hardened-sources-2.6.26-r1.ebuild:
255     Update DESCRIPTION and HGPV_URI.
256 gengor 1.238
257     *hardened-sources-2.6.25-r6 (09 Sep 2008)
258    
259     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
260     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
261     2.6.25-r6: Update to Linux 2.6.25.17.
262     2.6.24-r3: Removed.
263 gengor 1.237
264     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
265     hardened-sources-2.6.25-r5.ebuild:
266     Stable on amd64/x86
267 gengor 1.236
268     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
269     Update my email address.
270 nixnut 1.235
271     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
272     stable on ppc
273 battousai 1.234
274     *hardened-sources-2.6.26-r1 (23 Aug 2008)
275     *hardened-sources-2.6.25-r5 (23 Aug 2008)
276    
277     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
278     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
279     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
280     +hardened-sources-2.6.26-r1.ebuild:
281     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
282     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
283     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
284     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
285     (gengor).
286 solar 1.233
287     *hardened-sources-2.6.26 (18 Aug 2008)
288     *hardened-sources-2.6.25-r4 (18 Aug 2008)
289    
290     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
291     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
292     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
293     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
294     2.6.25-r2: Removed.
295 tove 1.232
296     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
297     Remove phreak from metadata.xml (#96398)
298 solar 1.231
299     *hardened-sources-2.6.25-r3 (31 Jul 2008)
300    
301     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
302     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
303     +hardened-sources-2.6.25-r3.ebuild:
304     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
305     fixes, including security bug #231750.
306 nixnut 1.230
307     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
308     Stable on ppc
309 solar 1.229
310     *hardened-sources-2.6.25-r2 (05 Jul 2008)
311    
312     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
313     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
314     +hardened-sources-2.6.25-r2.ebuild:
315     2.6.23-r4: Stable x86/amd64
316     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
317     2.6.23-r{11,12}: Removed due to multiple vulns.
318     (gengor & kerframil)
319 nixnut 1.228
320     04 Jul 2008; nixnut <nixnut@gentoo.org>
321     hardened-sources-2.6.23-r13.ebuild:
322     Stable on ppc
323 solar 1.227
324     *hardened-sources-2.6.25-r1 (30 Jun 2008)
325    
326     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
327     +hardened-sources-2.6.25-r1.ebuild:
328     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
329     grsecurity release. 2.6.23-r13: x86/amd64 stable
330 solar 1.226
331     *hardened-sources-2.6.25 (17 Jun 2008)
332     *hardened-sources-2.6.24-r3 (17 Jun 2008)
333     *hardened-sources-2.6.23-r13 (17 Jun 2008)
334    
335     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
336     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
337     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
338     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
339     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
340     2.6.25: Initial 2.6.25 release.
341 solar 1.225
342     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
343     - fasttrack to stable x86/amd64
344 swegener 1.224
345     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
346     Fix broken digest for linux-2.6.24.tar.bz2.
347 solar 1.223
348     *hardened-sources-2.6.24-r2 (11 May 2008)
349     *hardened-sources-2.6.23-r12 (11 May 2008)
350    
351     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
352     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
353     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
354     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
355     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
356     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
357     security bugs 219901, 220691, 220975, 220979, 221123. New
358     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
359     should be removed as far as I'm concerned, everything else remove due to
360     vulnerable to numerous security bugs or brokeness.
361 nixnut 1.222
362     10 May 2008; nixnut <nixnut@gentoo.org>
363     hardened-sources-2.6.23-r11.ebuild:
364     Stable on ppc
365 solar 1.221
366     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
367     - -r11 stable on x86/amd64
368 solar 1.220
369     *hardened-sources-2.6.23-r11 (01 May 2008)
370    
371     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
372     - version bump to fix ulgy linux bugs
373 phreak 1.219
374     *hardened-sources-2.6.24-r1 (30 Apr 2008)
375    
376     30 Apr 2008; Christian Heim <phreak@gentoo.org>
377     +hardened-sources-2.6.24-r1.ebuild:
378     Revision bump (thanks to Kerin and Gordon, again), pulling
379     genpatches-2.6.24-7, solving #219089. Additionally contains further security
380     fixes plus some minor updates.
381 phreak 1.218
382     *hardened-sources-2.6.23-r10 (30 Apr 2008)
383    
384     30 Apr 2008; Christian Heim <phreak@gentoo.org>
385     +hardened-sources-2.6.23-r10.ebuild:
386     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
387     Additional contains "various other fixes".
388 phreak 1.217
389     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
390     Update the longdescription in metadata, thanks to Gordon Malm.
391 nixnut 1.216
392     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
393     Stable on ppc wrt bug #213255
394 solar 1.215
395     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
396     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
397     - stable on x86/amd64 per request. Removed obsolete ebuilds
398 phreak 1.214
399     *hardened-sources-2.6.24 (07 Apr 2008)
400    
401     07 Apr 2008; Christian Heim <phreak@gentoo.org>
402     +hardened-sources-2.6.24.ebuild:
403     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
404     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
405     for the many contributions and their continued effort in #216612) based on
406     2.6.24 and genpatches-2.6.24-5.
407    
408     The current ebuild/patchset contains these things:
409     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
410     * Introduces bespoke server and workstation oriented security levels
411     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
412 phreak 1.213
413     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
414     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
415     maintaining it).
416 phreak 1.212
417     24 Mar 2008; Christian Heim <phreak@gentoo.org>
418     hardened-sources-2.4.35-r2.ebuild:
419     Fixing SRC_URI for 2.4.35-r2.
420 phreak 1.211
421     *hardened-sources-2.6.23-r9 (22 Mar 2008)
422    
423     22 Mar 2008; Christian Heim <phreak@gentoo.org>
424     +hardened-sources-2.6.23-r9.ebuild:
425     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
426     * Change the default GIDs for some grsecurity options
427     * Revamp the Hardened [Gentoo] security level and make it the default level
428     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
429     * Fix a recursive lock -- call to capable() within ptrace_attach()
430     * Fix bug that allows audit and iscsi operations to be controlled via netlink
431 solar 1.210
432     *hardened-sources-2.6.23-r8 (27 Feb 2008)
433    
434     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
435     - version bump from Kerin Millar bug 210026
436 solar 1.209
437     17 Feb 2008; <solar@gentoo.org> metadata.xml,
438     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
439     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
440     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
441     - stable on x86 and remove old ebuilds
442 solar 1.207
443     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
444 solar 1.208 - stable on amd64 per request of amd64 lead
445 solar 1.206
446     *hardened-sources-2.6.23-r7 (11 Feb 2008)
447    
448     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
449     - version bump from kerin.millar
450     Changes:
451    
452     * Bump to genpatches-base-2.6.23-9
453     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
454     * Disables COMPAT_VDSO in x86/defconfig
455     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
456 phreak 1.205
457     25 Jan 2008; Christian Heim <phreak@gentoo.org>
458     -hardened-sources-2.6.22-r8.ebuild:
459     Cleaning up old versions.
460 phreak 1.204
461     *hardened-sources-2.6.23-r6 (25 Jan 2008)
462    
463     25 Jan 2008; Christian Heim <phreak@gentoo.org>
464     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
465     Revision bump, pulling in the latest genpatches.
466 phreak 1.203
467     *hardened-sources-2.6.23-r5 (24 Dec 2007)
468    
469     24 Dec 2007; Christian Heim <phreak@gentoo.org>
470     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
471     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
472     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
473     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
474 phreak 1.202
475     24 Dec 2007; Christian Heim <phreak@gentoo.org>
476     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
477     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
478     -hardened-sources-2.6.23-r3.ebuild:
479     Cleaning out some unused, old versions.
480 phreak 1.201
481     24 Dec 2007; Christian Heim <phreak@gentoo.org>
482     hardened-sources-2.6.23-r4.ebuild:
483     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
484     in the tree for long, but there isn't much of a difference between this and
485     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
486 phreak 1.200
487     *hardened-sources-2.6.23-r4 (23 Dec 2007)
488    
489     23 Dec 2007; Christian Heim <phreak@gentoo.org>
490     +hardened-sources-2.6.23-r4.ebuild:
491     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
492 phreak 1.199
493     *hardened-sources-2.6.23-r3 (04 Dec 2007)
494    
495     04 Dec 2007; Christian Heim <phreak@gentoo.org>
496     +hardened-sources-2.6.23-r3.ebuild:
497     Revision bump, pulling in 2.6.23.9.
498 phreak 1.198
499     *hardened-sources-2.6.23-r2 (25 Nov 2007)
500    
501     25 Nov 2007; Christian Heim <phreak@gentoo.org>
502     +hardened-sources-2.6.23-r2.ebuild:
503     Updated patchset, thanks to solar.
504 phreak 1.197
505     *hardened-sources-2.6.23-r1 (31 Oct 2007)
506    
507     31 Oct 2007; Christian Heim <phreak@gentoo.org>
508     +hardened-sources-2.6.23-r1.ebuild:
509     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
510 solar 1.196
511     29 Oct 2007; <solar@gentoo.org> metadata.xml:
512     - update metadata.xml
513 phreak 1.195
514     25 Oct 2007; Christian Heim <phreak@gentoo.org>
515     hardened-sources-2.6.22-r8.ebuild:
516     Marking 2.6.22-r8 stable on amd64 and x86.
517 phreak 1.194
518     21 Oct 2007; Christian Heim <phreak@gentoo.org>
519     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
520     -hardened-sources-2.6.21-r4.ebuild:
521     Removing old ebuilds.
522 phreak 1.193
523     *hardened-sources-2.4.35-r2 (21 Oct 2007)
524    
525     21 Oct 2007; Christian Heim <phreak@gentoo.org>
526     +hardened-sources-2.4.35-r2.ebuild:
527     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
528     patches.
529 phreak 1.192
530     *hardened-sources-2.6.22-r8 (21 Oct 2007)
531    
532     21 Oct 2007; Christian Heim <phreak@gentoo.org>
533     +hardened-sources-2.6.22-r8.ebuild:
534     Yet another new patch, hopefully fixing the remaining issues we had w/
535     2.6.22. Candidate for stabling.
536 phreak 1.191
537     *hardened-sources-2.6.23 (13 Oct 2007)
538    
539     13 Oct 2007; Christian Heim <phreak@gentoo.org>
540     +hardened-sources-2.6.23.ebuild:
541     Initial hardened-sources-2.6.23. If people still have problems w/ bug
542     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
543 phreak 1.190
544     11 Oct 2007; Christian Heim <phreak@gentoo.org>
545     hardened-sources-2.6.20-r10.ebuild:
546     Pulling in yet another new genpatches version, fixing the PWC bug for real.
547 phreak 1.189
548     04 Oct 2007; Christian Heim <phreak@gentoo.org>
549     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
550     Removing old versions.
551 phreak 1.188
552     *hardened-sources-2.6.22-r7 (01 Oct 2007)
553    
554     01 Oct 2007; Christian Heim <phreak@gentoo.org>
555     +hardened-sources-2.6.22-r7.ebuild:
556     Revision bump, pulling in a newer patch. Should fix #194276.
557 phreak 1.187
558     30 Sep 2007; Christian Heim <phreak@gentoo.org>
559     hardened-sources-2.6.20-r10.ebuild:
560     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
561     Mike Doty).
562 phreak 1.186
563     *hardened-sources-2.6.22-r6 (26 Sep 2007)
564    
565     26 Sep 2007; Christian Heim <phreak@gentoo.org>
566     +hardened-sources-2.6.22-r6.ebuild:
567     Revision bump, grabbing up till Linux 2.6.22.9.
568 phreak 1.185
569     24 Sep 2007; Christian Heim <phreak@gentoo.org>
570     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
571     Cleaning up further.
572 phreak 1.184
573     *hardened-sources-2.6.20-r10 (24 Sep 2007)
574    
575     24 Sep 2007; Christian Heim <phreak@gentoo.org>
576     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
577     +hardened-sources-2.6.20-r10.ebuild:
578     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
579     revisions.
580 phreak 1.183
581     *hardened-sources-2.6.22-r5 (22 Sep 2007)
582    
583     22 Sep 2007; Christian Heim <phreak@gentoo.org>
584     +hardened-sources-2.6.22-r5.ebuild:
585     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
586 phreak 1.182
587     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
588     Removing johnm from metadata.xml (see #186467 for reference).
589 phreak 1.181
590     *hardened-sources-2.6.22-r4 (17 Sep 2007)
591    
592     17 Sep 2007; Christian Heim <phreak@gentoo.org>
593     +hardened-sources-2.6.22-r4.ebuild:
594     Revision bump, hopefully fixing all those weird PAX failures.
595 phreak 1.180
596     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
597     Updating the metadata.xml.
598 phreak 1.179
599     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
600     Removing tocharian from metadata due to his retirement (see #71718 for
601     reference).
602 phreak 1.178
603     *hardened-sources-2.6.20-r9 (30 Aug 2007)
604    
605     30 Aug 2007; Christian Heim <phreak@gentoo.org>
606     +hardened-sources-2.6.20-r9.ebuild:
607     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
608 phreak 1.177
609     29 Aug 2007; Christian Heim <phreak@gentoo.org>
610     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
611     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
612     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
613     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
614     -hardened-sources-2.6.22-r2.ebuild:
615     Removing some redundant versions.
616 phreak 1.176
617     *hardened-sources-2.4.35-r1 (29 Aug 2007)
618    
619     29 Aug 2007; Christian Heim <phreak@gentoo.org>
620     +hardened-sources-2.4.35-r1.ebuild:
621     Revision bump, new grsecurity patch.
622 phreak 1.175
623     *hardened-sources-2.6.20-r8 (26 Aug 2007)
624    
625     26 Aug 2007; Christian Heim <phreak@gentoo.org>
626     +hardened-sources-2.6.20-r8.ebuild:
627     Revision bump for Linux 2.6.20.17.
628 phreak 1.174
629     *hardened-sources-2.6.22-r3 (22 Aug 2007)
630    
631     22 Aug 2007; Christian Heim <phreak@gentoo.org>
632     +hardened-sources-2.6.22-r3.ebuild:
633     Revision bump for Linux 2.6.22.4.
634 phreak 1.173
635     16 Aug 2007; Christian Heim <phreak@gentoo.org>
636     hardened-sources-2.6.22-r2.ebuild:
637     Updated patchset, to fix the alignment against 2.6.22.3.
638 phreak 1.172
639     *hardened-sources-2.6.22-r2 (16 Aug 2007)
640    
641     16 Aug 2007; Christian Heim <phreak@gentoo.org>
642     +hardened-sources-2.6.22-r2.ebuild:
643     Revision bump for Linux 2.6.22.3.
644 phreak 1.171
645     *hardened-sources-2.4.35 (16 Aug 2007)
646    
647     16 Aug 2007; Christian Heim <phreak@gentoo.org>
648     +hardened-sources-2.4.35.ebuild:
649     Version bump, initial version for Linux 2.4.35.
650 phreak 1.170
651     *hardened-sources-2.6.21-r4 (16 Aug 2007)
652    
653     16 Aug 2007; Christian Heim <phreak@gentoo.org>
654     +hardened-sources-2.6.21-r4.ebuild:
655     Revision bump for Linux 2.6.21.6.
656 phreak 1.169
657     *hardened-sources-2.6.20-r7 (16 Aug 2007)
658    
659     16 Aug 2007; Christian Heim <phreak@gentoo.org>
660     +hardened-sources-2.6.20-r7.ebuild:
661     Revision bump for Linux 2.6.20.16.
662 phreak 1.168
663     *hardened-sources-2.6.22-r1 (13 Aug 2007)
664    
665     13 Aug 2007; Christian Heim <phreak@gentoo.org>
666     +hardened-sources-2.6.22-r1.ebuild:
667     Yet another revision bump.
668 phreak 1.167
669     *hardened-sources-2.6.22 (10 Aug 2007)
670    
671     10 Aug 2007; Christian Heim <phreak@gentoo.org>
672     +hardened-sources-2.6.22.ebuild:
673     Initial release for 2.6.22. If you are using hardened-sources on a desktop
674     machine (P4 or newer), be aware you might need to disable
675     CONFIG_PAX_PAGEEXEC.
676 phreak 1.166
677     04 Aug 2007; Christian Heim <phreak@gentoo.org>
678     hardened-sources-2.6.20-r6.ebuild:
679     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
680     2.6.20.15.
681 phreak 1.165
682     10 Jul 2007; Christian Heim <phreak@gentoo.org>
683     hardened-sources-2.6.20-r5.ebuild:
684     Marking hardened-sources-2.6.20-r5 stable on ppc.
685 phreak 1.164
686     10 Jul 2007; Christian Heim <phreak@gentoo.org>
687     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
688     Cleanup.
689 phreak 1.163
690     *hardened-sources-2.6.20-r6 (08 Jul 2007)
691    
692     08 Jul 2007; Christian Heim <phreak@gentoo.org>
693     +hardened-sources-2.6.20-r6.ebuild:
694     Revision bump, grabbing yet another stable release.
695 phreak 1.162
696     17 Jun 2007; Christian Heim <phreak@gentoo.org>
697     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
698     -hardened-sources-2.6.21-r2.ebuild:
699     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
700     alpha stable KEYWORD by mistake.
701 phreak 1.161
702     17 Jun 2007; Christian Heim <phreak@gentoo.org>
703     hardened-sources-2.6.20-r5.ebuild:
704     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
705     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
706 phreak 1.160
707     *hardened-sources-2.6.21-r3 (12 Jun 2007)
708    
709     12 Jun 2007; Christian Heim <phreak@gentoo.org>
710     +hardened-sources-2.6.21-r3.ebuild:
711     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
712     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
713     love.
714 phreak 1.159
715     *hardened-sources-2.6.20-r5 (11 Jun 2007)
716    
717     11 Jun 2007; Christian Heim <phreak@gentoo.org>
718     +hardened-sources-2.6.20-r5.ebuild:
719     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
720     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
721     love.
722 pappy 1.158
723     *hardened-sources-2.4.34.5 (11 Jun 2007)
724    
725     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
726     +hardened-sources-2.4.34.5.ebuild:
727     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
728 phreak 1.157
729     30 May 2007; Christian Heim <phreak@gentoo.org>
730     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
731     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
732     stale ebuild(s).
733 phreak 1.156
734     30 May 2007; Christian Heim <phreak@gentoo.org>
735     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
736     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
737     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
738     Doing some cleanups, remove stale ebuilds.
739 phreak 1.155
740     26 May 2007; Christian Heim <phreak@gentoo.org>
741     hardened-sources-2.6.21-r2.ebuild:
742     Fixing the grsecurity patch, had one '};' too much.
743 phreak 1.154
744     *hardened-sources-2.6.21-r2 (26 May 2007)
745    
746     26 May 2007; Christian Heim <phreak@gentoo.org>
747     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
748     +hardened-sources-2.6.21-r2.ebuild:
749     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
750     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
751 phreak 1.153
752     *hardened-sources-2.6.20-r4 (26 May 2007)
753    
754     26 May 2007; Christian Heim <phreak@gentoo.org>
755     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
756     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
757 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
758 phreak 1.152
759     15 May 2007; Christian Heim <phreak@gentoo.org>
760     hardened-sources-2.6.20-r3.ebuild:
761     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
762     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
763     grsecurity patch fail in that exact same hunk.
764 phreak 1.151
765     *hardened-sources-2.6.20-r3 (15 May 2007)
766    
767     15 May 2007; Christian Heim <phreak@gentoo.org>
768     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
769     Revision bump, incorporating Linux 2.6.20.11.
770    
771     *hardened-sources-2.6.21-r1 (11 May 2007)
772    
773     11 May 2007; Christian Heim <phreak@gentoo.org>
774     +hardened-sources-2.6.21-r1.ebuild:
775     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
776     mentioned in #177234.
777 kevquinn 1.150
778     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
779     files/digest-hardened-sources-2.6.21, Manifest:
780     Fix Manifest/digest for linux-2.6.21.tar.bz2
781 phreak 1.149
782     06 May 2007; Christian Heim <phreak@gentoo.org>
783     hardened-sources-2.6.21.ebuild:
784     Bumping the hardened-patches version, needed for the fix for #177234.
785 phreak 1.148
786     *hardened-sources-2.6.21 (02 May 2007)
787    
788     02 May 2007; Christian Heim <phreak@gentoo.org>
789     +hardened-sources-2.6.21.ebuild:
790     Version bump, Linux 2.6.21-hardened.
791 phreak 1.147
792     29 Apr 2007; Christian Heim <phreak@gentoo.org>
793     hardened-sources-2.6.20-r2.ebuild:
794     Adding ~ia64 on Ned's request.
795 phreak 1.146
796     29 Apr 2007; Christian Heim <phreak@gentoo.org>
797     hardened-sources-2.6.20-r2.ebuild:
798     Fixing the included grsecurity patch, wasn't alligning due to the Index:
799     header line(s).
800 phreak 1.145
801     29 Apr 2007; Christian Heim <phreak@gentoo.org>
802     hardened-sources-2.6.20-r2.ebuild:
803     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
804 armin76 1.144
805     *hardened-sources-2.6.20-r2 (10 Apr 2007)
806    
807     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
808     +hardened-sources-2.6.20-r2.ebuild:
809     Version bump, on behalf of phreak
810 phreak 1.143
811     *hardened-sources-2.6.20-r1 (04 Apr 2007)
812    
813     04 Apr 2007; Christian Heim <phreak@gentoo.org>
814     +hardened-sources-2.6.20-r1.ebuild:
815     Revision bump, grabbing a newer grsecurity snapshot.
816 phreak 1.142
817     *hardened-sources-2.6.20 (25 Mar 2007)
818    
819     25 Mar 2007; Christian Heim <phreak@gentoo.org>
820     +hardened-sources-2.6.20.ebuild:
821     Finally a hardened-sources version for 2.6.20; many people have been waiting
822     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
823     testbox.
824 chainsaw 1.141
825     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
826     hardened-sources-2.6.18-r6.ebuild:
827     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
828 phreak 1.140
829     *hardened-sources-2.6.18-r6 (16 Mar 2007)
830    
831     16 Mar 2007; Christian Heim <phreak@gentoo.org>
832     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
833     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
834     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
835     supposed to be.
836 phreak 1.139
837     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
838     Fixing the Manifest, the previous one was broken (as in still had the
839     deleted ebuild in it).
840 phreak 1.138
841     06 Mar 2007; Christian Heim <phreak@gentoo.org>
842     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
843     +hardened-sources-2.6.18-r5.ebuild:
844     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
845     Linux 2.6.18.8. Also cleaning up the older version.
846    
847     *hardened-sources-2.6.18-r5 (06 Mar 2007)
848    
849     06 Mar 2007; Christian Heim <phreak@gentoo.org>
850     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
851     +hardened-sources-2.6.18-r5.ebuild:
852     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
853     Linux 2.6.18.8. Also cleaning up the older version.
854 phreak 1.137
855     24 Feb 2007; Christian Heim <phreak@gentoo.org>
856     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
857     -hardened-sources-2.6.19-r5.ebuild:
858     Removing some of the old version, that didn't work.
859 phreak 1.136
860     *hardened-sources-2.6.19-r6 (12 Feb 2007)
861    
862     12 Feb 2007; Christian Heim <phreak@gentoo.org>
863     +hardened-sources-2.6.19-r6.ebuild:
864     Revision bump, including a new grsec version fixing #166235.
865 pappy 1.134
866     *hardened-sources-2.4.34 (24 Jan 2007)
867    
868     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
869 pappy 1.135 Manifest:
870     updating Manifest with checksums of new tarball and ebuild
871    
872     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
873 pappy 1.134 +hardened-sources-2.4.34.ebuild:
874     I added new hardened sources 2.4 update, this is a critical path
875     security bugfix - all users of h-s are strongly advised
876     to update their existing hardened sources to this version.
877     It contains a fix for a kernel vulnerability that is pertaining
878     to the PaX changes to virtual memory management, possibly leading
879     to a local kernel exploit ... see grsecurity.net forums and homepage
880 phreak 1.133
881     23 Jan 2007; Christian Heim <phreak@gentoo.org>
882     files/digest-hardened-sources-2.6.19-r5, Manifest:
883     Fixing the patch-tarball digest.
884 phreak 1.132
885     *hardened-sources-2.6.19-r5 (23 Jan 2007)
886    
887     23 Jan 2007; Christian Heim <phreak@gentoo.org>
888     +hardened-sources-2.6.19-r5.ebuild:
889     Revision bump, closing the recently discovered PaX expand_stack()
890     vulnerability.
891 phreak 1.131
892     *hardened-sources-2.6.19-r4 (14 Jan 2007)
893    
894     14 Jan 2007; Christian Heim <phreak@gentoo.org>
895     +hardened-sources-2.6.19-r4.ebuild:
896     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
897     dropping the randomized PID feature.
898 opfer 1.130
899     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
900     hardened-sources-2.4.33.4.ebuild:
901     stable x86, bug #161171
902 phreak 1.129
903     *hardened-sources-2.6.19-r3 (27 Dec 2006)
904    
905     27 Dec 2006; Christian Heim <phreak@gentoo.org>
906     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
907     Revision bump for bug #157186 and #158786.
908 phreak 1.128
909     *hardened-sources-2.6.18-r4 (27 Dec 2006)
910    
911     27 Dec 2006; Christian Heim <phreak@gentoo.org>
912     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
913     Revision bump for bug #157186.
914 phreak 1.127
915     *hardened-sources-2.6.19-r2 (23 Dec 2006)
916    
917     23 Dec 2006; Christian Heim <phreak@gentoo.org>
918     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
919     Revision bump to pull in genpatches-2.6.19-3 for #157186.
920 phreak 1.126
921     17 Dec 2006; Christian Heim <phreak@gentoo.org>
922     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
923     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
924     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
925     hardened-sources-2.6.19-r1.ebuild:
926     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
927     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
928 pappy 1.125
929     *hardened-sources-2.4.33.4 (17 Dec 2006)
930    
931     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
932     +hardened-sources-2.4.33.4.ebuild:
933     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
934     and quilting
935 phreak 1.124
936     *hardened-sources-2.6.19-r1 (14 Dec 2006)
937    
938     14 Dec 2006; Christian Heim <phreak@gentoo.org>
939     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
940     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
941     for reporting).
942 phreak 1.123
943     *hardened-sources-2.6.19 (13 Dec 2006)
944    
945     13 Dec 2006; Christian Heim <phreak@gentoo.org>
946     +hardened-sources-2.6.19.ebuild:
947     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
948     Brad for providing that prompt update.
949 phreak 1.122
950     *hardened-sources-2.6.18-r3 (13 Dec 2006)
951    
952     13 Dec 2006; Christian Heim <phreak@gentoo.org>
953     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
954     +hardened-sources-2.6.18-r3.ebuild:
955     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
956     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
957 phreak 1.121
958     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
959     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
960 nixnut 1.120
961     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
962     Stable on ppc wrt bug 157356
963 opfer 1.119
964     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
965     hardened-sources-2.6.18.ebuild:
966     stable x86, bug #157356
967 phreak 1.118
968     *hardened-sources-2.6.18-r2 (06 Dec 2006)
969    
970     06 Dec 2006; Christian Heim <phreak@gentoo.org>
971     +hardened-sources-2.6.18-r2.ebuild:
972     Revision bump, including 2.6.18.5 (via genpatches) and
973     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
974     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
975     redesign.
976 phreak 1.117
977     06 Dec 2006; Christian Heim <phreak@gentoo.org>
978     hardened-sources-2.6.18.ebuild:
979     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
980     of Mike Doty).
981 phreak 1.116
982     *hardened-sources-2.6.18-r1 (23 Nov 2006)
983    
984     23 Nov 2006; Christian Heim <phreak@gentoo.org>
985     +hardened-sources-2.6.18-r1.ebuild:
986     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
987 phreak 1.115
988     *hardened-sources-2.6.18 (11 Nov 2006)
989    
990     11 Nov 2006; Christian Heim <phreak@gentoo.org>
991     +hardened-sources-2.6.18.ebuild:
992     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
993 solar 1.114
994     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
995     - mark amd64 stable also. bug #151877
996 solar 1.113
997     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
998     - mark 2.6.17-r1 stable
999 phreak 1.112
1000     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1001     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1002     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1003 phreak 1.111
1004     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1005    
1006     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1007     +hardened-sources-2.6.17-r1.ebuild:
1008     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1009     grsecurity patch.
1010 phreak 1.110
1011     *hardened-sources-2.6.17 (17 Aug 2006)
1012    
1013     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1014     +hardened-sources-2.6.17.ebuild:
1015     Bumping the hardened-sources-2.6 series to 2.6.17, using
1016     genpatches-2.6.17-6.base.
1017 solar 1.109
1018     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1019     - stable on x86 and amd64
1020 solar 1.108
1021     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1022    
1023     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1024     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1025     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1026     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1027     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1028     crusty ebuilds
1029 johnm 1.107
1030     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1031     hardened-sources-2.6.16-r10.ebuild:
1032     marking stable on x86 and amd64
1033 solar 1.106
1034     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1035     - 2.4.32-r6 stable on x86. RSBAC state unknown
1036 kang 1.105
1037     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1038    
1039     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1040     +hardened-sources-2.4.32-r7.ebuild:
1041     Bump PaX for RSBAC to test-17
1042 johnm 1.104
1043     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1044    
1045     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1046     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1047     hardened-sources-2.6.16 bump to latest -base.
1048 solar 1.103
1049     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1050    
1051     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1052     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1053     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1054     sysctl controlable resource logging
1055 johnm 1.102
1056     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1057    
1058     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1059     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1060     push new 2.6.16 release in preparation for stable
1061 solar 1.101
1062     22 May 2006; <solar@gentoo.org> :
1063     - redigest bug 134002
1064 kang 1.100
1065     *hardened-sources-2.4.32-r5 (16 May 2006)
1066    
1067     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1068     +hardened-sources-2.4.32-r5.ebuild:
1069     Fixes rsbac common patching (new patch in new -r5 patchset)
1070 solar 1.99
1071     *hardened-sources-2.4.32-r4 (13 May 2006)
1072    
1073     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1074     +hardened-sources-2.4.32-r4.ebuild:
1075     - security bumps
1076 johnm 1.98
1077     *hardened-sources-2.6.16-r6 (03 May 2006)
1078    
1079     03 May 2006; John Mylchreest <johnm@gentoo.org>
1080     +hardened-sources-2.6.16-r6.ebuild:
1081     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1082 johnm 1.97
1083     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1084     hardened-sources-2.6.14-r8.ebuild:
1085     fix x86_64 build problem, this will delay the digest issue again for a short
1086     while but it will sort itself out
1087 johnm 1.96
1088     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1089     hardened-sources-2.6.14-r8.ebuild:
1090     bump hardened patchset
1091 antarus 1.94
1092     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1093     files/digest-hardened-sources-2.4.32-r2,
1094     files/digest-hardened-sources-2.4.32-r3,
1095     files/digest-hardened-sources-2.6.14-r8, Manifest:
1096     Fixing duff SHA256 digests: Bug # 131293
1097 johnm 1.93
1098 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1099    
1100     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1101     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1102     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1103     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1104     cleanup of old uneccessary sources
1105    
1106 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1107     fix digest
1108 johnm 1.92
1109     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1110    
1111     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1112     +hardened-sources-2.6.14-r8.ebuild:
1113     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1114 johnm 1.91
1115     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1116     Turning on gpg-signing again, and recomitting
1117 johnm 1.90
1118     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1119    
1120     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1121     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1122     +hardened-sources-2.6.16-r4.ebuild:
1123     Fix numerous security vulns
1124 solar 1.89
1125     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1126    
1127     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1128     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1129     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1130     - security bump for bug #112791. Removed old ebuilds
1131 johnm 1.88
1132     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1133    
1134     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1135     +hardened-sources-2.6.16-r3.ebuild:
1136     Removing silly localversion which I missed
1137 johnm 1.87
1138     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1139    
1140     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1141     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1142     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1143 johnm 1.86
1144     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1145    
1146     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1147     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1148     +hardened-sources-2.6.16-r2.ebuild:
1149     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1150     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1151 johnm 1.85
1152     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1153    
1154     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1155     +hardened-sources-2.6.16-r1.ebuild:
1156     Bumping to include ppc build fix and 2.6.16.3
1157 tsunam 1.84
1158     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1159     hardened-sources-2.6.14-r6.ebuild:
1160     Stable on x86; bug #127718
1161 johnm 1.83
1162     *hardened-sources-2.6.16 (31 Mar 2006)
1163    
1164     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1165     +hardened-sources-2.6.16.ebuild:
1166     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1167     2.6.16.1
1168 cryos 1.82
1169     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1170     hardened-sources-2.6.14-r6.ebuild:
1171     Stable on amd64, bug 127718.
1172 nixnut 1.81
1173     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1174     Stable on ppc. Bug #127718
1175 johnm 1.80
1176     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1177     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1178     -hardened-sources-2.6.14-r4.ebuild:
1179     Cleanup.
1180 johnm 1.79
1181     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1182    
1183     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1184     +hardened-sources-2.6.14-r6.ebuild:
1185     Fixes grsec policy recreation bug and adds a
1186     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1187 solar 1.78
1188     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1189     - stable on x86
1190 hansmi 1.77
1191     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1192     hardened-sources-2.6.14-r5.ebuild:
1193     Stable on ppc.
1194 johnm 1.76
1195     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1196    
1197     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1198     +hardened-sources-2.6.14-r5.ebuild:
1199     fixing every known exploit
1200 solar 1.75
1201     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1202    
1203     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1204     +hardened-sources-2.4.32-r2.ebuild:
1205     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1206 solar 1.74
1207     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1208    
1209     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1210     - version bump for new genpatches which fix up a few sec holes
1211 solar 1.73
1212     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1213    
1214     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1215     - revision bump to add misc vital linux kernel security patches.
1216 johnm 1.72
1217     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1218    
1219     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1220     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1221     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1222 johnm 1.71
1223     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1224     hardened-sources-2.6.14-r2.ebuild:
1225     making x86 & amd64 stable following testing.
1226 johnm 1.70
1227     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1228    
1229     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1230     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1231     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1232     network hooks.
1233 johnm 1.69
1234     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1235     hardened-sources-2.6.14-r1.ebuild:
1236     bumping to stable early for sec fix on x86 & amd64
1237 johnm 1.68
1238     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1239    
1240     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1241     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1242     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1243 solar 1.67
1244     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1245     - stable on x86 security bug #114227 CAN-2005-3257
1246 kang 1.66
1247     *hardened-sources-2.4.32 (19 Nov 2005)
1248    
1249     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1250     +hardened-sources-2.4.32.ebuild:
1251     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1252     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1253     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1254     rsbac >> /etc/portage/package.use)
1255 johnm 1.65
1256     *hardened-sources-2.6.14 (14 Nov 2005)
1257    
1258     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1259     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1260     Bumping 2.6 series to 2.6.14.2
1261 johnm 1.64
1262     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1263    
1264     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1265     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1266     +hardened-sources-2.6.13-r2.ebuild:
1267     Fixes minor build error in ppc.
1268 johnm 1.63
1269     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1270    
1271     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1272     +hardened-sources-2.6.13-r1.ebuild:
1273     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1274     2.6.13.4, fixes some major amd64 stability problems.
1275 johnm 1.62
1276     *hardened-sources-2.6.13 (16 Sep 2005)
1277    
1278     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1279     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1280     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1281     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1282     users should test this thoroughly.
1283 solar 1.61
1284     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1285     - stable on x86
1286 johnm 1.60
1287     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1288    
1289     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1290     +hardened-sources-2.6.11-r15.ebuild:
1291     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1292     grsec redefining curr_ip struct.
1293 solar 1.59
1294     *hardened-sources-2.4.31 (20 Jun 2005)
1295    
1296     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1297     initial import of 2.4.31 tree
1298 johnm 1.58
1299     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1300    
1301     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1302     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1303     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1304     naming scheme to abide by genpatches
1305 johnm 1.57
1306     *hardened-sources-2.6.11-r13 (18 May 2005)
1307    
1308     18 May 2005; John Mylchreest <johnm@gentoo.org>
1309     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1310     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1311     target. sorry about that. Fixes bug #93022
1312 johnm 1.56
1313     *hardened-sources-2.6.11-r12 (17 May 2005)
1314    
1315     17 May 2005; John Mylchreest <johnm@gentoo.org>
1316     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1317     +hardened-sources-2.6.11-r12.ebuild:
1318     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1319     merges in genpatches-base
1320 johnm 1.55
1321     *hardened-sources-2.6.11-r12 (17 May 2005)
1322    
1323     17 May 2005; John Mylchreest <johnm@gentoo.org>
1324     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1325     +hardened-sources-2.6.11-r12.ebuild:
1326     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1327     merges in genpatches-base
1328 solar 1.54
1329     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1330     -files/2.4.27-cmdline-race.patch,
1331     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1332     -files/2.4.28-grsec-binfmt_a.out.patch,
1333     -files/2.4.28-grsec-cmdline-race.patch,
1334     -files/2.4.28-selinux-binfmt_a.out.patch,
1335     -files/2.4.28-selinux-cmdline-race.patch,
1336     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1337     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1338     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1339     cleanup..
1340 solar 1.53
1341     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1342    
1343     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1344     - disable aout by default
1345 solar 1.52
1346     *hardened-sources-2.4.30 (18 Apr 2005)
1347    
1348     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1349     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1350     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1351     use
1352 tocharian 1.50
1353 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1354    
1355     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1356     +hardened-sources-2.4.29.ebuild:
1357     New hardened-patches-2.4-29.0 patchball.
1358     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1359    
1360     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1361    
1362     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1363     +hardened-sources-2.4.28-r5.ebuild:
1364     Added a fix for a PaX vulnerability.
1365    
1366     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1367 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1368     Stable on x86
1369 solar 1.49
1370     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1371     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1372     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1373     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1374     - fixed/added RDEPEND= in all kernel-2 ebuilds
1375 tocharian 1.48
1376     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1377    
1378     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1379     +hardened-sources-2.4.28-r4.ebuild:
1380     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1381     backport of neighbour hash updates.
1382 tocharian 1.47
1383     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1384     hardened-sources-2.4.28-r3.ebuild:
1385     Stable on x86
1386 tseng 1.46
1387     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1388    
1389     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1390     +hardened-sources-2.6.10-r3.ebuild:
1391     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1392     in 2005.0
1393 tocharian 1.45
1394     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1395     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1396     hardened-sources-2.4.28-r2.ebuild:
1397     Mark stable on x86
1398 tocharian 1.44
1399     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1400    
1401     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1402     +hardened-sources-2.4.28-r3.ebuild:
1403     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1404 tocharian 1.43
1405     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1406     hardened-sources-2.4.28.ebuild:
1407     Mark stable on x86.
1408 tocharian 1.42
1409     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1410    
1411     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1412     +hardened-sources-2.4.28-r2.ebuild:
1413     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1414     Mazinger for grsecurity patches as well.
1415 plasmaroo 1.41
1416     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1417    
1418     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1419     Security bump. Thank tocharian for rolling a new patchset...
1420 solar 1.40
1421     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1422     +files/2.4.28-grsec-cmdline-race.patch,
1423     +files/2.4.28-selinux-binfmt_a.out.patch,
1424     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1425     - Round up remaining security patches that appear to be missing in 2.4.28. -
1426     PaX standalone updated to current. hgpv=28.1
1427 solar 1.39
1428     *hardened-sources-2.4.28 (28 Nov 2004)
1429    
1430     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1431     security bump. Thank tocharian for rolling a new patchset
1432 scox 1.31
1433 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1434    
1435     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1436     +hardened-sources-2.4.27-r3.ebuild:
1437     Applies the new 2.4-27.2 patchball which updates
1438     GRSecurity to the 2.0.1 version.
1439    
1440 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1441    
1442     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1443     +hardened-sources-2.4.27-r2.ebuild:
1444     Version bump.
1445     This version uses the new 2.4-27.1 patchball which updates
1446     both the SELinux PaX hooks patch and the SELinux headers.
1447    
1448 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1449    
1450     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1451     +hardened-sources-2.4.27-r1.ebuild,
1452     -hardened-sources-2.4.27.ebuild,
1453     +files/2.4.27-cmdline-race.patch:
1454     Version bump, fix for cmdline race. See bug #59905.
1455    
1456     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1457    
1458     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1459     +hardened-sources-2.4.26-r6.ebuild,
1460     -hardened-sources-2.4.26-r5.ebuild,
1461     -hardened-sources-2.4.26-r4.ebuild,
1462     +files/2.4.26-cmdline-race.patch:
1463     Version bump, fix for cmdline race. See bug #59905.
1464    
1465 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1466    
1467     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1468     +hardened-sources-2.4.27.ebuild,
1469     +files/2.4.27-CAN-2004-0394.patch:
1470     Ported the patchball to the 2.4.27 kernel version.
1471    
1472 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1473    
1474     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1475     +hardened-sources-2.4.26-r5.ebuild:
1476 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1477 scox 1.34 It adds the following features:
1478     - Squashfs
1479     - Ebtables
1480     - Netdev random (core+drivers)
1481     - Watchdog Timer (WDT) fix.
1482    
1483 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1484    
1485     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1486     +hardened-sources-2.4.26-r4.ebuild,
1487     +files/2.4.26-CAN-2004-0415.patch,
1488     -hardened-sources-2.4.26-3:
1489     Version bump, fix for CAN 0415, see bug #59378.
1490    
1491 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1492    
1493     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1494     +hardened-sources-2.4.26-r3.ebuild,
1495     +files/2.4.26-CAN-2004-0497.patch,
1496     -hardened-sources-2.4.26-r2.ebuild:
1497     Version bump, fixed CAN 0497, see bug #56171.
1498    
1499 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1500    
1501     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1502 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1503 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1504     +files/2.4.26-CAN-2004-0535.patch,
1505     -hardened-sources-2.4.26-r1.ebuild:
1506     Fixes for both CAN 0495 and 0535, see bug #54976
1507 pvdabeel 1.27
1508 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1509     hardened-sources-2.4.26-r1.ebuild:
1510     QA - fix use invocation
1511 scox 1.28
1512     *hardened-sources-2.4.26-r1 (22 June 2004)
1513    
1514     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1515     +hardened-sources-2.4.26-r1.ebuild,
1516     +files/2.4.26-CAN-2004-0394.patch,
1517     +files/2.4.26-signal-race.patch,
1518     -hardened-sources-2.4.26.ebuild,
1519     -hardened-sources-2.4.24-r3.ebuild:
1520     Version bump for the CAN-2004-0394 issue and bug #53804
1521     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1522    
1523    
1524 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1525     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1526     Masked hardened-sources-2.4.26.ebuild broken for ppc
1527    
1528     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1529     hardened-sources-2.4.24-r3.ebuild:
1530     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1531 plasmaroo 1.25
1532 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1533    
1534     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1535     +hardened-sources-2.4.26.ebuild:
1536     Updated hardened-sources for the 2.4.26 kernel
1537     Removed broken components, updated almost everything.
1538    
1539 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1540    
1541     17 Apr 2004; <plasmaroo@gentoo.org>
1542     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1543     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1544     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1545     +hardened-sources-2.4.24-r3.ebuild:
1546     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1547     vulnerabilities. Old revisions removed.
1548 plasmaroo 1.24
1549     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1550    
1551     15 Apr 2004; <plasmaroo@gentoo.org>
1552     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1553     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1554     Version bump for the CAN-2004-0109 issue; bug #47881.
1555 aliz 1.23
1556     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1557     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1558     Add eutils to inherit.
1559 plasmaroo 1.22
1560     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1561    
1562     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1563     files/hardened-sources-2.4.24.munmap.patch:
1564     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1565 scox 1.19
1566 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1567 scox 1.26
1568 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1569     hardened-sources-2.4.24.ebuild:
1570     Version bump, updated most of the components.
1571     This release includes the following:
1572    
1573     - Hardened security
1574     - Netfilter patch-o-matic 20031219
1575     - FreeSWAN 2.04 & x509 1.4.8
1576     - EVMS 2.2.2
1577     - XFS 1.3.1
1578     - cryptoloop jari
1579     - grsecurity 2.0-rc4
1580     - SELinux
1581     - PaX 200402060000
1582     - PaX Obscurity 200308302223
1583     - Others...
1584    
1585     Neither -ck nor systrace are included anymore.
1586    
1587 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1588    
1589     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1590     hardened-sources-2.4.22-r2.ebuild:
1591 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1592 scox 1.19
1593     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1594 iggy 1.17
1595     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1596 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1597 iggy 1.16
1598     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1599 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1600     Version bump for the 'do_brk' vulnerability.
1601 iggy 1.15
1602     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1603     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1604     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1605     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1606 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1607 frogger 1.14
1608     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1609     hardened-sources-2.4.22.ebuild:
1610 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1611     components. These are no longer handled in the kernel
1612     so this code was not necessary.
1613 frogger 1.13
1614     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1615     New 2.4.22 based hardened-sources thanks to
1616     Phil West <p.west@computer.org>.
1617    
1618     These sources include:
1619 plasmaroo 1.18 - New SELinux API
1620     - Updated CK-base
1621     - Updated GRSec
1622     - Systrace
1623     - SuperFreeS/WAN 1.99.8
1624     - Propolice kernel build support
1625     - EVMS
1626     - Other various security related patches
1627 frogger 1.11
1628 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1629    
1630     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1631     Updated hardened-sources based on the 2.4.21 Linux kernel.
1632     This includes updates to most major components such as:
1633 plasmaroo 1.18 - ck-base-0306300059
1634     - selinux-2.4-2003071106
1635     - grsecurity-2.0-rc1
1636     - Updated IPTables patch-o-matic
1637     - Updated SuperFreeS/WAN
1638    
1639 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1640     updated patch set ready for the 2.4.21 based kernel.
1641    
1642 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1643     Initial import of hardened-sources-2.4.20-r4. This revision
1644     includes only a few changes, but one of these is an important
1645     security fix. It is recommended all users of hardened-sources
1646     upgrade to this release.
1647 plasmaroo 1.18
1648 frogger 1.11 - ioperm bug fix
1649     - fixed compilation failure when building without GRSec
1650 plasmaroo 1.18
1651 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1652     due to time constraints, but is planned for inclusion in the near
1653     future.
1654 msterret 1.10
1655     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1656    
1657     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1658     hardened-sources-2.4.20-r3.ebuild:
1659 plasmaroo 1.18 Add Header...
1660 frogger 1.9
1661     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1662     hardened-sources-2.4.20-r3.ebuild:
1663     Removed warnings from ebuild. This kernel should be safe to
1664     use at this point.
1665 frogger 1.8
1666     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1667    
1668     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1669     hardened-sources-2.4.20-r3.ebuild:
1670     New revision. Includes the following changes over -r2:
1671 plasmaroo 1.18
1672 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1673     - Super FreeS/WAN 1.99.7rc2
1674     - PaX for the LSM/SELinux branch
1675     - GRSecurity 2.0-pre4 (role based access control)
1676     - Systrace 1.3
1677     - EXT3 fixes
1678     - EVMS 2.0.1
1679     - GCC 3.1+ compile optimizations
1680     - ProPolice kernel build support
1681     - Hashing table security fixes
1682 frogger 1.3
1683     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1684 frogger 1.7
1685     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1686     Initial import of hardened-sources-r2. This new
1687     ebuild includes many new performance and security
1688     related patches. As in -r1, it will patch in
1689     LSM/SELinux if "selinux" is in USE, otherwise it
1690     will patch in GRSecurity. The following patches
1691     are included in this revision:
1692 plasmaroo 1.18
1693 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1694     (pulled from the base CK patch)
1695     - ptrace exploit patch for the LSM kernel
1696     (the GRSec patch already fixes this)
1697     - LSM 2.4-2003040709
1698     - SELinux 2.4-2003040709
1699     - Systrace v1.2
1700     - IPTables patch-o-matic base patches - 20030107
1701     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1702     - Super FreeS/WAN 1.99.6.1
1703     - GRSecurity 1.9.9g
1704     - MPPE
1705     - EXT3 data journal fix
1706     - CIPE 1.5.4
1707 frogger 1.6
1708     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1709     hardened-sources-2.4.20-r1.ebuild, manifest:
1710 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1711 frogger 1.5
1712     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1713     hardened-sources-2.4.20-r1.ebuild:
1714     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1715     is patched in instead. Ptrace patches for selinux have also been added. In
1716     either case, systrace support will be patched in as well.
1717 frogger 1.3
1718     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1719     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1720 plasmaroo 1.18 Revision bump for new sources.
1721 frogger 1.4
1722 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1723 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1724 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1725 method 1.1
1726 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1727    
1728 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1729     hardened-sources-2.4.20.ebuild:
1730 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20