/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.298 - (hide annotations) (download)
Fri Mar 20 00:29:12 2009 UTC (5 years, 6 months ago) by gengor
Branch: MAIN
Changes since 1.297: +5 -1 lines
Mark sys-kernel/hardened-sources-2.6.28-r4 stable on amd64 and x86
(Portage version: 2.1.6.7/cvs/Linux i686)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 gengor 1.268 # Copyright 2000-2009 Gentoo Foundation; Distributed under the GPL v2
3 gengor 1.298 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.297 2009/03/18 19:22:49 gengor Exp $
4    
5     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
6     hardened-sources-2.6.28-r4.ebuild:
7     Stable amd64/x86.
8 gengor 1.297
9     *hardened-sources-2.6.28-r4 (18 Mar 2009)
10    
11     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
12     +hardened-sources-2.6.28-r4.ebuild:
13     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
14     compilation with CPA_DEBUG and more.
15 gengor 1.296
16     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
17     hardened-sources-2.6.28-r3.ebuild:
18     Quick stable amd64/x86.
19 gengor 1.295
20     *hardened-sources-2.6.28-r3 (15 Mar 2009)
21    
22     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
23     +hardened-sources-2.6.28-r3.ebuild:
24     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
25 nixnut 1.294
26     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
27     ppc stable
28 gengor 1.293
29     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
30     hardened-sources-2.6.28-r2.ebuild:
31     Stable amd64/x86.
32 gengor 1.292
33     *hardened-sources-2.6.28-r2 (11 Mar 2009)
34    
35     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
36     +hardened-sources-2.6.28-r2.ebuild:
37     Version bump bringing in latest grsecurity patch.
38 gengor 1.291
39     *hardened-sources-2.6.28-r1 (09 Mar 2009)
40    
41     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
42     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
43     Version bump and remove old.
44 nixnut 1.290
45     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
46     ppc stable
47 gengor 1.289
48     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
49     hardened-sources-2.6.27-r8.ebuild:
50     Remove amd64 testing keyword, bug 256226.
51 gengor 1.288
52     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
53     hardened-sources-2.6.27-r8.ebuild:
54     Revert amd64 stable, bug #256226.
55 gengor 1.287
56     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
57     hardened-sources-2.6.27-r8.ebuild:
58     Stable on amd64/x86.
59 gengor 1.286
60     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
61     -hardened-sources-2.6.27-r6.ebuild:
62     Remove old 2.6.27 release.
63 gengor 1.285
64     *hardened-sources-2.6.27-r8 (24 Feb 2009)
65    
66     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
67     +hardened-sources-2.6.27-r8.ebuild:
68     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
69     and probably more.
70 nixnut 1.284
71     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
72     ppc stable
73 gengor 1.283
74     *hardened-sources-2.6.28 (25 Jan 2009)
75    
76     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
77     +hardened-sources-2.6.28.ebuild:
78     Initial 2.6.28 release.
79 gengor 1.282
80     *hardened-sources-2.6.27-r7 (25 Jan 2009)
81    
82     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
83     +hardened-sources-2.6.27-r7.ebuild:
84     Bump to Linux 2.6.27.13.
85 gengor 1.281
86     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
87     hardened-sources-2.6.26-r9.ebuild:
88     Stable amd64/x86.
89 gengor 1.280
90     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
91     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
92     -hardened-sources-2.6.27-r5.ebuild:
93     Remove problem versions.
94 gengor 1.279
95     *hardened-sources-2.6.27-r6 (24 Jan 2009)
96    
97     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
98     +hardened-sources-2.6.27-r6.ebuild:
99     Revert PaX test29 to test30 changes. Fixes bug 256226.
100 gengor 1.277
101     *hardened-sources-2.6.27-r5 (24 Jan 2009)
102    
103     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
104     +hardened-sources-2.6.27-r5.ebuild:
105 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
106 gengor 1.277 254843.
107 gengor 1.276
108     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
109     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
110     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
111     Remove problem versions.
112 nixnut 1.275
113     23 Jan 2009; nixnut <nixnut@gentoo.org>
114     hardened-sources-2.6.25-r13.ebuild:
115     ppc stable
116 gengor 1.274
117     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
118     hardened-sources-2.6.25-r13.ebuild:
119     Fasttrack stable amd64/x86.
120 gengor 1.273
121     *hardened-sources-2.6.26-r9 (21 Jan 2009)
122    
123     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
124     +hardened-sources-2.6.26-r9.ebuild:
125 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
126 gengor 1.272
127     *hardened-sources-2.6.25-r13 (20 Jan 2009)
128    
129     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
130     +hardened-sources-2.6.25-r13.ebuild:
131 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
132 nixnut 1.271
133     20 Jan 2009; nixnut <nixnut@gentoo.org>
134     hardened-sources-2.6.25-r12.ebuild:
135     ppc stable
136 gengor 1.270
137     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
138     hardened-sources-2.6.25-r12.ebuild:
139     Stable amd64/x86.
140 gengor 1.269
141     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
142     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
143     -hardened-sources-2.6.27-r2.ebuild:
144     Clean out old versions.
145 gengor 1.268
146     *hardened-sources-2.6.27-r4 (14 Jan 2009)
147     *hardened-sources-2.6.26-r8 (14 Jan 2009)
148     *hardened-sources-2.6.25-r12 (14 Jan 2009)
149    
150     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
151     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
152     +hardened-sources-2.6.27-r4.ebuild:
153     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
154     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
155     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
156     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
157 nixnut 1.267
158     15 Dec 2008; nixnut <nixnut@gentoo.org>
159     hardened-sources-2.6.25-r11.ebuild:
160     Stable on ppc
161 gengor 1.266
162     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
163     hardened-sources-2.6.25-r11.ebuild:
164     Stable amd64/x86.
165 gengor 1.265
166     *hardened-sources-2.6.27-r3 (07 Dec 2008)
167    
168     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
169     +hardened-sources-2.6.27-r3.ebuild:
170     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
171     Fixes bug #248754, #249729 and #246607.
172 gengor 1.264
173     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
174     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
175     Remove old versions.
176 gengor 1.262
177     *hardened-sources-2.6.26-r7 (03 Dec 2008)
178     *hardened-sources-2.6.25-r11 (03 Dec 2008)
179    
180 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
181     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
182 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
183     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
184     Both include many backports from 2.6.27.{6,7} -stable releases.
185 gengor 1.261
186     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
187     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
188     Remove versions broken on ARCHes != x86/amd64.
189 gengor 1.260
190     *hardened-sources-2.6.27-r2 (24 Nov 2008)
191    
192     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
193     +hardened-sources-2.6.27-r2.ebuild:
194     Bump to Linux 2.6.27.7 and latest grsecurity patch.
195 gengor 1.259
196     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
197     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
198     Remove old versions.
199 gengor 1.258
200     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
201     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
202     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
203 nixnut 1.257
204     16 Nov 2008; nixnut <nixnut@gentoo.org>
205     hardened-sources-2.6.25-r10.ebuild:
206     Stable on ppc
207 gengor 1.256
208     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
209     hardened-sources-2.6.25-r10.ebuild:
210     Stable amd64/x86.
211 gengor 1.255
212     *hardened-sources-2.6.26-r6 (12 Nov 2008)
213    
214     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
215     +hardened-sources-2.6.26-r6.ebuild:
216     Bump to Linux 2.6.26.8 and fix security bug #245650.
217 gengor 1.254
218     *hardened-sources-2.6.25-r10 (12 Nov 2008)
219    
220     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
221     +hardened-sources-2.6.25-r10.ebuild:
222     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
223 gengor 1.253
224     *hardened-sources-2.6.27-r1 (09 Nov 2008)
225    
226     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
227     +hardened-sources-2.6.27-r1.ebuild:
228     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
229 gengor 1.252
230     *hardened-sources-2.6.27 (04 Nov 2008)
231    
232     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
233     +hardened-sources-2.6.27.ebuild:
234     Initial 2.6.27 release.
235 gengor 1.251
236     *hardened-sources-2.6.26-r5 (03 Nov 2008)
237    
238     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
239     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
240     +hardened-sources-2.6.26-r5.ebuild:
241     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
242     Clean out some old versions.
243 nixnut 1.250
244     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
245     Stable on ppc
246 gengor 1.249
247     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
248     hardened-sources-2.6.25-r9.ebuild:
249     Stable on amd64/x86.
250 gengor 1.248
251     *hardened-sources-2.6.25-r9 (26 Oct 2008)
252    
253     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
254     +hardened-sources-2.6.25-r9.ebuild:
255     Update to Linux 2.6.25.19
256 nixnut 1.247
257     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
258     Stable on ppc
259 gengor 1.246
260     *hardened-sources-2.6.26-r4 (14 Oct 2008)
261    
262     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
263     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
264     Update to latest grsecurity patch, fixing building of non-modular kernels.
265 gengor 1.245
266     *hardened-sources-2.6.26-r3 (12 Oct 2008)
267    
268     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
269     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
270     +hardened-sources-2.6.26-r3.ebuild:
271     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
272     2.6.26-r1: Removed.
273     2.6.25-r8: Stable amd64/x86.
274 gengor 1.244
275     *hardened-sources-2.6.25-r8 (09 Oct 2008)
276    
277     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
278     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
279     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
280     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
281 nixnut 1.243
282     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
283     Stable on ppc
284 gengor 1.242
285     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
286     hardened-sources-2.6.25-r7.ebuild:
287     Stable amd64/x86.
288 gengor 1.241
289     *hardened-sources-2.6.26-r2 (13 Sep 2008)
290    
291     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
292     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
293     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
294     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
295 gengor 1.240
296     *hardened-sources-2.6.25-r7 (13 Sep 2008)
297    
298     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
299     +hardened-sources-2.6.25-r7.ebuild:
300     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
301 gengor 1.239
302     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
303     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
304     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
305     hardened-sources-2.6.26-r1.ebuild:
306     Update DESCRIPTION and HGPV_URI.
307 gengor 1.238
308     *hardened-sources-2.6.25-r6 (09 Sep 2008)
309    
310     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
311     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
312     2.6.25-r6: Update to Linux 2.6.25.17.
313     2.6.24-r3: Removed.
314 gengor 1.237
315     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
316     hardened-sources-2.6.25-r5.ebuild:
317     Stable on amd64/x86
318 gengor 1.236
319     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
320     Update my email address.
321 nixnut 1.235
322     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
323     stable on ppc
324 battousai 1.234
325     *hardened-sources-2.6.26-r1 (23 Aug 2008)
326     *hardened-sources-2.6.25-r5 (23 Aug 2008)
327    
328     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
329     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
330     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
331     +hardened-sources-2.6.26-r1.ebuild:
332     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
333     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
334     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
335     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
336     (gengor).
337 solar 1.233
338     *hardened-sources-2.6.26 (18 Aug 2008)
339     *hardened-sources-2.6.25-r4 (18 Aug 2008)
340    
341     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
342     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
343     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
344     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
345     2.6.25-r2: Removed.
346 tove 1.232
347     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
348     Remove phreak from metadata.xml (#96398)
349 solar 1.231
350     *hardened-sources-2.6.25-r3 (31 Jul 2008)
351    
352     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
353     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
354     +hardened-sources-2.6.25-r3.ebuild:
355     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
356     fixes, including security bug #231750.
357 nixnut 1.230
358     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
359     Stable on ppc
360 solar 1.229
361     *hardened-sources-2.6.25-r2 (05 Jul 2008)
362    
363     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
364     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
365     +hardened-sources-2.6.25-r2.ebuild:
366     2.6.23-r4: Stable x86/amd64
367     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
368     2.6.23-r{11,12}: Removed due to multiple vulns.
369     (gengor & kerframil)
370 nixnut 1.228
371     04 Jul 2008; nixnut <nixnut@gentoo.org>
372     hardened-sources-2.6.23-r13.ebuild:
373     Stable on ppc
374 solar 1.227
375     *hardened-sources-2.6.25-r1 (30 Jun 2008)
376    
377     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
378     +hardened-sources-2.6.25-r1.ebuild:
379     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
380     grsecurity release. 2.6.23-r13: x86/amd64 stable
381 solar 1.226
382     *hardened-sources-2.6.25 (17 Jun 2008)
383     *hardened-sources-2.6.24-r3 (17 Jun 2008)
384     *hardened-sources-2.6.23-r13 (17 Jun 2008)
385    
386     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
387     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
388     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
389     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
390     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
391     2.6.25: Initial 2.6.25 release.
392 solar 1.225
393     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
394     - fasttrack to stable x86/amd64
395 swegener 1.224
396     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
397     Fix broken digest for linux-2.6.24.tar.bz2.
398 solar 1.223
399     *hardened-sources-2.6.24-r2 (11 May 2008)
400     *hardened-sources-2.6.23-r12 (11 May 2008)
401    
402     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
403     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
404     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
405     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
406     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
407     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
408     security bugs 219901, 220691, 220975, 220979, 221123. New
409     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
410     should be removed as far as I'm concerned, everything else remove due to
411     vulnerable to numerous security bugs or brokeness.
412 nixnut 1.222
413     10 May 2008; nixnut <nixnut@gentoo.org>
414     hardened-sources-2.6.23-r11.ebuild:
415     Stable on ppc
416 solar 1.221
417     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
418     - -r11 stable on x86/amd64
419 solar 1.220
420     *hardened-sources-2.6.23-r11 (01 May 2008)
421    
422     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
423     - version bump to fix ulgy linux bugs
424 phreak 1.219
425     *hardened-sources-2.6.24-r1 (30 Apr 2008)
426    
427     30 Apr 2008; Christian Heim <phreak@gentoo.org>
428     +hardened-sources-2.6.24-r1.ebuild:
429     Revision bump (thanks to Kerin and Gordon, again), pulling
430     genpatches-2.6.24-7, solving #219089. Additionally contains further security
431     fixes plus some minor updates.
432 phreak 1.218
433     *hardened-sources-2.6.23-r10 (30 Apr 2008)
434    
435     30 Apr 2008; Christian Heim <phreak@gentoo.org>
436     +hardened-sources-2.6.23-r10.ebuild:
437     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
438     Additional contains "various other fixes".
439 phreak 1.217
440     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
441     Update the longdescription in metadata, thanks to Gordon Malm.
442 nixnut 1.216
443     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
444     Stable on ppc wrt bug #213255
445 solar 1.215
446     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
447     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
448     - stable on x86/amd64 per request. Removed obsolete ebuilds
449 phreak 1.214
450     *hardened-sources-2.6.24 (07 Apr 2008)
451    
452     07 Apr 2008; Christian Heim <phreak@gentoo.org>
453     +hardened-sources-2.6.24.ebuild:
454     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
455     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
456     for the many contributions and their continued effort in #216612) based on
457     2.6.24 and genpatches-2.6.24-5.
458    
459     The current ebuild/patchset contains these things:
460     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
461     * Introduces bespoke server and workstation oriented security levels
462     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
463 phreak 1.213
464     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
465     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
466     maintaining it).
467 phreak 1.212
468     24 Mar 2008; Christian Heim <phreak@gentoo.org>
469     hardened-sources-2.4.35-r2.ebuild:
470     Fixing SRC_URI for 2.4.35-r2.
471 phreak 1.211
472     *hardened-sources-2.6.23-r9 (22 Mar 2008)
473    
474     22 Mar 2008; Christian Heim <phreak@gentoo.org>
475     +hardened-sources-2.6.23-r9.ebuild:
476     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
477     * Change the default GIDs for some grsecurity options
478     * Revamp the Hardened [Gentoo] security level and make it the default level
479     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
480     * Fix a recursive lock -- call to capable() within ptrace_attach()
481     * Fix bug that allows audit and iscsi operations to be controlled via netlink
482 solar 1.210
483     *hardened-sources-2.6.23-r8 (27 Feb 2008)
484    
485     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
486     - version bump from Kerin Millar bug 210026
487 solar 1.209
488     17 Feb 2008; <solar@gentoo.org> metadata.xml,
489     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
490     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
491     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
492     - stable on x86 and remove old ebuilds
493 solar 1.207
494     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
495 solar 1.208 - stable on amd64 per request of amd64 lead
496 solar 1.206
497     *hardened-sources-2.6.23-r7 (11 Feb 2008)
498    
499     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
500     - version bump from kerin.millar
501     Changes:
502    
503     * Bump to genpatches-base-2.6.23-9
504     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
505     * Disables COMPAT_VDSO in x86/defconfig
506     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
507 phreak 1.205
508     25 Jan 2008; Christian Heim <phreak@gentoo.org>
509     -hardened-sources-2.6.22-r8.ebuild:
510     Cleaning up old versions.
511 phreak 1.204
512     *hardened-sources-2.6.23-r6 (25 Jan 2008)
513    
514     25 Jan 2008; Christian Heim <phreak@gentoo.org>
515     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
516     Revision bump, pulling in the latest genpatches.
517 phreak 1.203
518     *hardened-sources-2.6.23-r5 (24 Dec 2007)
519    
520     24 Dec 2007; Christian Heim <phreak@gentoo.org>
521     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
522     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
523     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
524     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
525 phreak 1.202
526     24 Dec 2007; Christian Heim <phreak@gentoo.org>
527     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
528     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
529     -hardened-sources-2.6.23-r3.ebuild:
530     Cleaning out some unused, old versions.
531 phreak 1.201
532     24 Dec 2007; Christian Heim <phreak@gentoo.org>
533     hardened-sources-2.6.23-r4.ebuild:
534     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
535     in the tree for long, but there isn't much of a difference between this and
536     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
537 phreak 1.200
538     *hardened-sources-2.6.23-r4 (23 Dec 2007)
539    
540     23 Dec 2007; Christian Heim <phreak@gentoo.org>
541     +hardened-sources-2.6.23-r4.ebuild:
542     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
543 phreak 1.199
544     *hardened-sources-2.6.23-r3 (04 Dec 2007)
545    
546     04 Dec 2007; Christian Heim <phreak@gentoo.org>
547     +hardened-sources-2.6.23-r3.ebuild:
548     Revision bump, pulling in 2.6.23.9.
549 phreak 1.198
550     *hardened-sources-2.6.23-r2 (25 Nov 2007)
551    
552     25 Nov 2007; Christian Heim <phreak@gentoo.org>
553     +hardened-sources-2.6.23-r2.ebuild:
554     Updated patchset, thanks to solar.
555 phreak 1.197
556     *hardened-sources-2.6.23-r1 (31 Oct 2007)
557    
558     31 Oct 2007; Christian Heim <phreak@gentoo.org>
559     +hardened-sources-2.6.23-r1.ebuild:
560     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
561 solar 1.196
562     29 Oct 2007; <solar@gentoo.org> metadata.xml:
563     - update metadata.xml
564 phreak 1.195
565     25 Oct 2007; Christian Heim <phreak@gentoo.org>
566     hardened-sources-2.6.22-r8.ebuild:
567     Marking 2.6.22-r8 stable on amd64 and x86.
568 phreak 1.194
569     21 Oct 2007; Christian Heim <phreak@gentoo.org>
570     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
571     -hardened-sources-2.6.21-r4.ebuild:
572     Removing old ebuilds.
573 phreak 1.193
574     *hardened-sources-2.4.35-r2 (21 Oct 2007)
575    
576     21 Oct 2007; Christian Heim <phreak@gentoo.org>
577     +hardened-sources-2.4.35-r2.ebuild:
578     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
579     patches.
580 phreak 1.192
581     *hardened-sources-2.6.22-r8 (21 Oct 2007)
582    
583     21 Oct 2007; Christian Heim <phreak@gentoo.org>
584     +hardened-sources-2.6.22-r8.ebuild:
585     Yet another new patch, hopefully fixing the remaining issues we had w/
586     2.6.22. Candidate for stabling.
587 phreak 1.191
588     *hardened-sources-2.6.23 (13 Oct 2007)
589    
590     13 Oct 2007; Christian Heim <phreak@gentoo.org>
591     +hardened-sources-2.6.23.ebuild:
592     Initial hardened-sources-2.6.23. If people still have problems w/ bug
593     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
594 phreak 1.190
595     11 Oct 2007; Christian Heim <phreak@gentoo.org>
596     hardened-sources-2.6.20-r10.ebuild:
597     Pulling in yet another new genpatches version, fixing the PWC bug for real.
598 phreak 1.189
599     04 Oct 2007; Christian Heim <phreak@gentoo.org>
600     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
601     Removing old versions.
602 phreak 1.188
603     *hardened-sources-2.6.22-r7 (01 Oct 2007)
604    
605     01 Oct 2007; Christian Heim <phreak@gentoo.org>
606     +hardened-sources-2.6.22-r7.ebuild:
607     Revision bump, pulling in a newer patch. Should fix #194276.
608 phreak 1.187
609     30 Sep 2007; Christian Heim <phreak@gentoo.org>
610     hardened-sources-2.6.20-r10.ebuild:
611     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
612     Mike Doty).
613 phreak 1.186
614     *hardened-sources-2.6.22-r6 (26 Sep 2007)
615    
616     26 Sep 2007; Christian Heim <phreak@gentoo.org>
617     +hardened-sources-2.6.22-r6.ebuild:
618     Revision bump, grabbing up till Linux 2.6.22.9.
619 phreak 1.185
620     24 Sep 2007; Christian Heim <phreak@gentoo.org>
621     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
622     Cleaning up further.
623 phreak 1.184
624     *hardened-sources-2.6.20-r10 (24 Sep 2007)
625    
626     24 Sep 2007; Christian Heim <phreak@gentoo.org>
627     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
628     +hardened-sources-2.6.20-r10.ebuild:
629     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
630     revisions.
631 phreak 1.183
632     *hardened-sources-2.6.22-r5 (22 Sep 2007)
633    
634     22 Sep 2007; Christian Heim <phreak@gentoo.org>
635     +hardened-sources-2.6.22-r5.ebuild:
636     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
637 phreak 1.182
638     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
639     Removing johnm from metadata.xml (see #186467 for reference).
640 phreak 1.181
641     *hardened-sources-2.6.22-r4 (17 Sep 2007)
642    
643     17 Sep 2007; Christian Heim <phreak@gentoo.org>
644     +hardened-sources-2.6.22-r4.ebuild:
645     Revision bump, hopefully fixing all those weird PAX failures.
646 phreak 1.180
647     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
648     Updating the metadata.xml.
649 phreak 1.179
650     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
651     Removing tocharian from metadata due to his retirement (see #71718 for
652     reference).
653 phreak 1.178
654     *hardened-sources-2.6.20-r9 (30 Aug 2007)
655    
656     30 Aug 2007; Christian Heim <phreak@gentoo.org>
657     +hardened-sources-2.6.20-r9.ebuild:
658     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
659 phreak 1.177
660     29 Aug 2007; Christian Heim <phreak@gentoo.org>
661     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
662     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
663     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
664     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
665     -hardened-sources-2.6.22-r2.ebuild:
666     Removing some redundant versions.
667 phreak 1.176
668     *hardened-sources-2.4.35-r1 (29 Aug 2007)
669    
670     29 Aug 2007; Christian Heim <phreak@gentoo.org>
671     +hardened-sources-2.4.35-r1.ebuild:
672     Revision bump, new grsecurity patch.
673 phreak 1.175
674     *hardened-sources-2.6.20-r8 (26 Aug 2007)
675    
676     26 Aug 2007; Christian Heim <phreak@gentoo.org>
677     +hardened-sources-2.6.20-r8.ebuild:
678     Revision bump for Linux 2.6.20.17.
679 phreak 1.174
680     *hardened-sources-2.6.22-r3 (22 Aug 2007)
681    
682     22 Aug 2007; Christian Heim <phreak@gentoo.org>
683     +hardened-sources-2.6.22-r3.ebuild:
684     Revision bump for Linux 2.6.22.4.
685 phreak 1.173
686     16 Aug 2007; Christian Heim <phreak@gentoo.org>
687     hardened-sources-2.6.22-r2.ebuild:
688     Updated patchset, to fix the alignment against 2.6.22.3.
689 phreak 1.172
690     *hardened-sources-2.6.22-r2 (16 Aug 2007)
691    
692     16 Aug 2007; Christian Heim <phreak@gentoo.org>
693     +hardened-sources-2.6.22-r2.ebuild:
694     Revision bump for Linux 2.6.22.3.
695 phreak 1.171
696     *hardened-sources-2.4.35 (16 Aug 2007)
697    
698     16 Aug 2007; Christian Heim <phreak@gentoo.org>
699     +hardened-sources-2.4.35.ebuild:
700     Version bump, initial version for Linux 2.4.35.
701 phreak 1.170
702     *hardened-sources-2.6.21-r4 (16 Aug 2007)
703    
704     16 Aug 2007; Christian Heim <phreak@gentoo.org>
705     +hardened-sources-2.6.21-r4.ebuild:
706     Revision bump for Linux 2.6.21.6.
707 phreak 1.169
708     *hardened-sources-2.6.20-r7 (16 Aug 2007)
709    
710     16 Aug 2007; Christian Heim <phreak@gentoo.org>
711     +hardened-sources-2.6.20-r7.ebuild:
712     Revision bump for Linux 2.6.20.16.
713 phreak 1.168
714     *hardened-sources-2.6.22-r1 (13 Aug 2007)
715    
716     13 Aug 2007; Christian Heim <phreak@gentoo.org>
717     +hardened-sources-2.6.22-r1.ebuild:
718     Yet another revision bump.
719 phreak 1.167
720     *hardened-sources-2.6.22 (10 Aug 2007)
721    
722     10 Aug 2007; Christian Heim <phreak@gentoo.org>
723     +hardened-sources-2.6.22.ebuild:
724     Initial release for 2.6.22. If you are using hardened-sources on a desktop
725     machine (P4 or newer), be aware you might need to disable
726     CONFIG_PAX_PAGEEXEC.
727 phreak 1.166
728     04 Aug 2007; Christian Heim <phreak@gentoo.org>
729     hardened-sources-2.6.20-r6.ebuild:
730     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
731     2.6.20.15.
732 phreak 1.165
733     10 Jul 2007; Christian Heim <phreak@gentoo.org>
734     hardened-sources-2.6.20-r5.ebuild:
735     Marking hardened-sources-2.6.20-r5 stable on ppc.
736 phreak 1.164
737     10 Jul 2007; Christian Heim <phreak@gentoo.org>
738     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
739     Cleanup.
740 phreak 1.163
741     *hardened-sources-2.6.20-r6 (08 Jul 2007)
742    
743     08 Jul 2007; Christian Heim <phreak@gentoo.org>
744     +hardened-sources-2.6.20-r6.ebuild:
745     Revision bump, grabbing yet another stable release.
746 phreak 1.162
747     17 Jun 2007; Christian Heim <phreak@gentoo.org>
748     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
749     -hardened-sources-2.6.21-r2.ebuild:
750     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
751     alpha stable KEYWORD by mistake.
752 phreak 1.161
753     17 Jun 2007; Christian Heim <phreak@gentoo.org>
754     hardened-sources-2.6.20-r5.ebuild:
755     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
756     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
757 phreak 1.160
758     *hardened-sources-2.6.21-r3 (12 Jun 2007)
759    
760     12 Jun 2007; Christian Heim <phreak@gentoo.org>
761     +hardened-sources-2.6.21-r3.ebuild:
762     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
763     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
764     love.
765 phreak 1.159
766     *hardened-sources-2.6.20-r5 (11 Jun 2007)
767    
768     11 Jun 2007; Christian Heim <phreak@gentoo.org>
769     +hardened-sources-2.6.20-r5.ebuild:
770     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
771     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
772     love.
773 pappy 1.158
774     *hardened-sources-2.4.34.5 (11 Jun 2007)
775    
776     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
777     +hardened-sources-2.4.34.5.ebuild:
778     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
779 phreak 1.157
780     30 May 2007; Christian Heim <phreak@gentoo.org>
781     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
782     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
783     stale ebuild(s).
784 phreak 1.156
785     30 May 2007; Christian Heim <phreak@gentoo.org>
786     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
787     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
788     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
789     Doing some cleanups, remove stale ebuilds.
790 phreak 1.155
791     26 May 2007; Christian Heim <phreak@gentoo.org>
792     hardened-sources-2.6.21-r2.ebuild:
793     Fixing the grsecurity patch, had one '};' too much.
794 phreak 1.154
795     *hardened-sources-2.6.21-r2 (26 May 2007)
796    
797     26 May 2007; Christian Heim <phreak@gentoo.org>
798     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
799     +hardened-sources-2.6.21-r2.ebuild:
800     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
801     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
802 phreak 1.153
803     *hardened-sources-2.6.20-r4 (26 May 2007)
804    
805     26 May 2007; Christian Heim <phreak@gentoo.org>
806     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
807     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
808 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
809 phreak 1.152
810     15 May 2007; Christian Heim <phreak@gentoo.org>
811     hardened-sources-2.6.20-r3.ebuild:
812     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
813     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
814     grsecurity patch fail in that exact same hunk.
815 phreak 1.151
816     *hardened-sources-2.6.20-r3 (15 May 2007)
817    
818     15 May 2007; Christian Heim <phreak@gentoo.org>
819     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
820     Revision bump, incorporating Linux 2.6.20.11.
821    
822     *hardened-sources-2.6.21-r1 (11 May 2007)
823    
824     11 May 2007; Christian Heim <phreak@gentoo.org>
825     +hardened-sources-2.6.21-r1.ebuild:
826     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
827     mentioned in #177234.
828 kevquinn 1.150
829     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
830     files/digest-hardened-sources-2.6.21, Manifest:
831     Fix Manifest/digest for linux-2.6.21.tar.bz2
832 phreak 1.149
833     06 May 2007; Christian Heim <phreak@gentoo.org>
834     hardened-sources-2.6.21.ebuild:
835     Bumping the hardened-patches version, needed for the fix for #177234.
836 phreak 1.148
837     *hardened-sources-2.6.21 (02 May 2007)
838    
839     02 May 2007; Christian Heim <phreak@gentoo.org>
840     +hardened-sources-2.6.21.ebuild:
841     Version bump, Linux 2.6.21-hardened.
842 phreak 1.147
843     29 Apr 2007; Christian Heim <phreak@gentoo.org>
844     hardened-sources-2.6.20-r2.ebuild:
845     Adding ~ia64 on Ned's request.
846 phreak 1.146
847     29 Apr 2007; Christian Heim <phreak@gentoo.org>
848     hardened-sources-2.6.20-r2.ebuild:
849     Fixing the included grsecurity patch, wasn't alligning due to the Index:
850     header line(s).
851 phreak 1.145
852     29 Apr 2007; Christian Heim <phreak@gentoo.org>
853     hardened-sources-2.6.20-r2.ebuild:
854     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
855 armin76 1.144
856     *hardened-sources-2.6.20-r2 (10 Apr 2007)
857    
858     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
859     +hardened-sources-2.6.20-r2.ebuild:
860     Version bump, on behalf of phreak
861 phreak 1.143
862     *hardened-sources-2.6.20-r1 (04 Apr 2007)
863    
864     04 Apr 2007; Christian Heim <phreak@gentoo.org>
865     +hardened-sources-2.6.20-r1.ebuild:
866     Revision bump, grabbing a newer grsecurity snapshot.
867 phreak 1.142
868     *hardened-sources-2.6.20 (25 Mar 2007)
869    
870     25 Mar 2007; Christian Heim <phreak@gentoo.org>
871     +hardened-sources-2.6.20.ebuild:
872     Finally a hardened-sources version for 2.6.20; many people have been waiting
873     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
874     testbox.
875 chainsaw 1.141
876     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
877     hardened-sources-2.6.18-r6.ebuild:
878     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
879 phreak 1.140
880     *hardened-sources-2.6.18-r6 (16 Mar 2007)
881    
882     16 Mar 2007; Christian Heim <phreak@gentoo.org>
883     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
884     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
885     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
886     supposed to be.
887 phreak 1.139
888     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
889     Fixing the Manifest, the previous one was broken (as in still had the
890     deleted ebuild in it).
891 phreak 1.138
892     06 Mar 2007; Christian Heim <phreak@gentoo.org>
893     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
894     +hardened-sources-2.6.18-r5.ebuild:
895     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
896     Linux 2.6.18.8. Also cleaning up the older version.
897    
898     *hardened-sources-2.6.18-r5 (06 Mar 2007)
899    
900     06 Mar 2007; Christian Heim <phreak@gentoo.org>
901     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
902     +hardened-sources-2.6.18-r5.ebuild:
903     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
904     Linux 2.6.18.8. Also cleaning up the older version.
905 phreak 1.137
906     24 Feb 2007; Christian Heim <phreak@gentoo.org>
907     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
908     -hardened-sources-2.6.19-r5.ebuild:
909     Removing some of the old version, that didn't work.
910 phreak 1.136
911     *hardened-sources-2.6.19-r6 (12 Feb 2007)
912    
913     12 Feb 2007; Christian Heim <phreak@gentoo.org>
914     +hardened-sources-2.6.19-r6.ebuild:
915     Revision bump, including a new grsec version fixing #166235.
916 pappy 1.134
917     *hardened-sources-2.4.34 (24 Jan 2007)
918    
919     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
920 pappy 1.135 Manifest:
921     updating Manifest with checksums of new tarball and ebuild
922    
923     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
924 pappy 1.134 +hardened-sources-2.4.34.ebuild:
925     I added new hardened sources 2.4 update, this is a critical path
926     security bugfix - all users of h-s are strongly advised
927     to update their existing hardened sources to this version.
928     It contains a fix for a kernel vulnerability that is pertaining
929     to the PaX changes to virtual memory management, possibly leading
930     to a local kernel exploit ... see grsecurity.net forums and homepage
931 phreak 1.133
932     23 Jan 2007; Christian Heim <phreak@gentoo.org>
933     files/digest-hardened-sources-2.6.19-r5, Manifest:
934     Fixing the patch-tarball digest.
935 phreak 1.132
936     *hardened-sources-2.6.19-r5 (23 Jan 2007)
937    
938     23 Jan 2007; Christian Heim <phreak@gentoo.org>
939     +hardened-sources-2.6.19-r5.ebuild:
940     Revision bump, closing the recently discovered PaX expand_stack()
941     vulnerability.
942 phreak 1.131
943     *hardened-sources-2.6.19-r4 (14 Jan 2007)
944    
945     14 Jan 2007; Christian Heim <phreak@gentoo.org>
946     +hardened-sources-2.6.19-r4.ebuild:
947     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
948     dropping the randomized PID feature.
949 opfer 1.130
950     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
951     hardened-sources-2.4.33.4.ebuild:
952     stable x86, bug #161171
953 phreak 1.129
954     *hardened-sources-2.6.19-r3 (27 Dec 2006)
955    
956     27 Dec 2006; Christian Heim <phreak@gentoo.org>
957     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
958     Revision bump for bug #157186 and #158786.
959 phreak 1.128
960     *hardened-sources-2.6.18-r4 (27 Dec 2006)
961    
962     27 Dec 2006; Christian Heim <phreak@gentoo.org>
963     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
964     Revision bump for bug #157186.
965 phreak 1.127
966     *hardened-sources-2.6.19-r2 (23 Dec 2006)
967    
968     23 Dec 2006; Christian Heim <phreak@gentoo.org>
969     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
970     Revision bump to pull in genpatches-2.6.19-3 for #157186.
971 phreak 1.126
972     17 Dec 2006; Christian Heim <phreak@gentoo.org>
973     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
974     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
975     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
976     hardened-sources-2.6.19-r1.ebuild:
977     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
978     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
979 pappy 1.125
980     *hardened-sources-2.4.33.4 (17 Dec 2006)
981    
982     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
983     +hardened-sources-2.4.33.4.ebuild:
984     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
985     and quilting
986 phreak 1.124
987     *hardened-sources-2.6.19-r1 (14 Dec 2006)
988    
989     14 Dec 2006; Christian Heim <phreak@gentoo.org>
990     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
991     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
992     for reporting).
993 phreak 1.123
994     *hardened-sources-2.6.19 (13 Dec 2006)
995    
996     13 Dec 2006; Christian Heim <phreak@gentoo.org>
997     +hardened-sources-2.6.19.ebuild:
998     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
999     Brad for providing that prompt update.
1000 phreak 1.122
1001     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1002    
1003     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1004     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1005     +hardened-sources-2.6.18-r3.ebuild:
1006     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1007     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1008 phreak 1.121
1009     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1010     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1011 nixnut 1.120
1012     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1013     Stable on ppc wrt bug 157356
1014 opfer 1.119
1015     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1016     hardened-sources-2.6.18.ebuild:
1017     stable x86, bug #157356
1018 phreak 1.118
1019     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1020    
1021     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1022     +hardened-sources-2.6.18-r2.ebuild:
1023     Revision bump, including 2.6.18.5 (via genpatches) and
1024     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1025     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1026     redesign.
1027 phreak 1.117
1028     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1029     hardened-sources-2.6.18.ebuild:
1030     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1031     of Mike Doty).
1032 phreak 1.116
1033     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1034    
1035     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1036     +hardened-sources-2.6.18-r1.ebuild:
1037     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1038 phreak 1.115
1039     *hardened-sources-2.6.18 (11 Nov 2006)
1040    
1041     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1042     +hardened-sources-2.6.18.ebuild:
1043     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1044 solar 1.114
1045     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1046     - mark amd64 stable also. bug #151877
1047 solar 1.113
1048     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1049     - mark 2.6.17-r1 stable
1050 phreak 1.112
1051     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1052     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1053     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1054 phreak 1.111
1055     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1056    
1057     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1058     +hardened-sources-2.6.17-r1.ebuild:
1059     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1060     grsecurity patch.
1061 phreak 1.110
1062     *hardened-sources-2.6.17 (17 Aug 2006)
1063    
1064     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1065     +hardened-sources-2.6.17.ebuild:
1066     Bumping the hardened-sources-2.6 series to 2.6.17, using
1067     genpatches-2.6.17-6.base.
1068 solar 1.109
1069     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1070     - stable on x86 and amd64
1071 solar 1.108
1072     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1073    
1074     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1075     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1076     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1077     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1078     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1079     crusty ebuilds
1080 johnm 1.107
1081     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1082     hardened-sources-2.6.16-r10.ebuild:
1083     marking stable on x86 and amd64
1084 solar 1.106
1085     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1086     - 2.4.32-r6 stable on x86. RSBAC state unknown
1087 kang 1.105
1088     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1089    
1090     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1091     +hardened-sources-2.4.32-r7.ebuild:
1092     Bump PaX for RSBAC to test-17
1093 johnm 1.104
1094     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1095    
1096     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1097     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1098     hardened-sources-2.6.16 bump to latest -base.
1099 solar 1.103
1100     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1101    
1102     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1103     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1104     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1105     sysctl controlable resource logging
1106 johnm 1.102
1107     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1108    
1109     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1110     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1111     push new 2.6.16 release in preparation for stable
1112 solar 1.101
1113     22 May 2006; <solar@gentoo.org> :
1114     - redigest bug 134002
1115 kang 1.100
1116     *hardened-sources-2.4.32-r5 (16 May 2006)
1117    
1118     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1119     +hardened-sources-2.4.32-r5.ebuild:
1120     Fixes rsbac common patching (new patch in new -r5 patchset)
1121 solar 1.99
1122     *hardened-sources-2.4.32-r4 (13 May 2006)
1123    
1124     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1125     +hardened-sources-2.4.32-r4.ebuild:
1126     - security bumps
1127 johnm 1.98
1128     *hardened-sources-2.6.16-r6 (03 May 2006)
1129    
1130     03 May 2006; John Mylchreest <johnm@gentoo.org>
1131     +hardened-sources-2.6.16-r6.ebuild:
1132     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1133 johnm 1.97
1134     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1135     hardened-sources-2.6.14-r8.ebuild:
1136     fix x86_64 build problem, this will delay the digest issue again for a short
1137     while but it will sort itself out
1138 johnm 1.96
1139     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1140     hardened-sources-2.6.14-r8.ebuild:
1141     bump hardened patchset
1142 antarus 1.94
1143     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1144     files/digest-hardened-sources-2.4.32-r2,
1145     files/digest-hardened-sources-2.4.32-r3,
1146     files/digest-hardened-sources-2.6.14-r8, Manifest:
1147     Fixing duff SHA256 digests: Bug # 131293
1148 johnm 1.93
1149 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1150    
1151     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1152     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1153     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1154     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1155     cleanup of old uneccessary sources
1156    
1157 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1158     fix digest
1159 johnm 1.92
1160     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1161    
1162     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1163     +hardened-sources-2.6.14-r8.ebuild:
1164     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1165 johnm 1.91
1166     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1167     Turning on gpg-signing again, and recomitting
1168 johnm 1.90
1169     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1170    
1171     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1172     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1173     +hardened-sources-2.6.16-r4.ebuild:
1174     Fix numerous security vulns
1175 solar 1.89
1176     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1177    
1178     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1179     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1180     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1181     - security bump for bug #112791. Removed old ebuilds
1182 johnm 1.88
1183     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1184    
1185     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1186     +hardened-sources-2.6.16-r3.ebuild:
1187     Removing silly localversion which I missed
1188 johnm 1.87
1189     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1190    
1191     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1192     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1193     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1194 johnm 1.86
1195     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1196    
1197     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1198     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1199     +hardened-sources-2.6.16-r2.ebuild:
1200     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1201     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1202 johnm 1.85
1203     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1204    
1205     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1206     +hardened-sources-2.6.16-r1.ebuild:
1207     Bumping to include ppc build fix and 2.6.16.3
1208 tsunam 1.84
1209     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1210     hardened-sources-2.6.14-r6.ebuild:
1211     Stable on x86; bug #127718
1212 johnm 1.83
1213     *hardened-sources-2.6.16 (31 Mar 2006)
1214    
1215     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1216     +hardened-sources-2.6.16.ebuild:
1217     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1218     2.6.16.1
1219 cryos 1.82
1220     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1221     hardened-sources-2.6.14-r6.ebuild:
1222     Stable on amd64, bug 127718.
1223 nixnut 1.81
1224     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1225     Stable on ppc. Bug #127718
1226 johnm 1.80
1227     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1228     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1229     -hardened-sources-2.6.14-r4.ebuild:
1230     Cleanup.
1231 johnm 1.79
1232     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1233    
1234     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1235     +hardened-sources-2.6.14-r6.ebuild:
1236     Fixes grsec policy recreation bug and adds a
1237     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1238 solar 1.78
1239     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1240     - stable on x86
1241 hansmi 1.77
1242     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1243     hardened-sources-2.6.14-r5.ebuild:
1244     Stable on ppc.
1245 johnm 1.76
1246     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1247    
1248     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1249     +hardened-sources-2.6.14-r5.ebuild:
1250     fixing every known exploit
1251 solar 1.75
1252     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1253    
1254     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1255     +hardened-sources-2.4.32-r2.ebuild:
1256     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1257 solar 1.74
1258     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1259    
1260     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1261     - version bump for new genpatches which fix up a few sec holes
1262 solar 1.73
1263     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1264    
1265     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1266     - revision bump to add misc vital linux kernel security patches.
1267 johnm 1.72
1268     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1269    
1270     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1271     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1272     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1273 johnm 1.71
1274     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1275     hardened-sources-2.6.14-r2.ebuild:
1276     making x86 & amd64 stable following testing.
1277 johnm 1.70
1278     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1279    
1280     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1281     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1282     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1283     network hooks.
1284 johnm 1.69
1285     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1286     hardened-sources-2.6.14-r1.ebuild:
1287     bumping to stable early for sec fix on x86 & amd64
1288 johnm 1.68
1289     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1290    
1291     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1292     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1293     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1294 solar 1.67
1295     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1296     - stable on x86 security bug #114227 CAN-2005-3257
1297 kang 1.66
1298     *hardened-sources-2.4.32 (19 Nov 2005)
1299    
1300     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1301     +hardened-sources-2.4.32.ebuild:
1302     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1303     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1304     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1305     rsbac >> /etc/portage/package.use)
1306 johnm 1.65
1307     *hardened-sources-2.6.14 (14 Nov 2005)
1308    
1309     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1310     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1311     Bumping 2.6 series to 2.6.14.2
1312 johnm 1.64
1313     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1314    
1315     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1316     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1317     +hardened-sources-2.6.13-r2.ebuild:
1318     Fixes minor build error in ppc.
1319 johnm 1.63
1320     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1321    
1322     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1323     +hardened-sources-2.6.13-r1.ebuild:
1324     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1325     2.6.13.4, fixes some major amd64 stability problems.
1326 johnm 1.62
1327     *hardened-sources-2.6.13 (16 Sep 2005)
1328    
1329     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1330     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1331     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1332     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1333     users should test this thoroughly.
1334 solar 1.61
1335     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1336     - stable on x86
1337 johnm 1.60
1338     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1339    
1340     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1341     +hardened-sources-2.6.11-r15.ebuild:
1342     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1343     grsec redefining curr_ip struct.
1344 solar 1.59
1345     *hardened-sources-2.4.31 (20 Jun 2005)
1346    
1347     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1348     initial import of 2.4.31 tree
1349 johnm 1.58
1350     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1351    
1352     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1353     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1354     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1355     naming scheme to abide by genpatches
1356 johnm 1.57
1357     *hardened-sources-2.6.11-r13 (18 May 2005)
1358    
1359     18 May 2005; John Mylchreest <johnm@gentoo.org>
1360     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1361     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1362     target. sorry about that. Fixes bug #93022
1363 johnm 1.56
1364     *hardened-sources-2.6.11-r12 (17 May 2005)
1365    
1366     17 May 2005; John Mylchreest <johnm@gentoo.org>
1367     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1368     +hardened-sources-2.6.11-r12.ebuild:
1369     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1370     merges in genpatches-base
1371 johnm 1.55
1372     *hardened-sources-2.6.11-r12 (17 May 2005)
1373    
1374     17 May 2005; John Mylchreest <johnm@gentoo.org>
1375     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1376     +hardened-sources-2.6.11-r12.ebuild:
1377     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1378     merges in genpatches-base
1379 solar 1.54
1380     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1381     -files/2.4.27-cmdline-race.patch,
1382     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1383     -files/2.4.28-grsec-binfmt_a.out.patch,
1384     -files/2.4.28-grsec-cmdline-race.patch,
1385     -files/2.4.28-selinux-binfmt_a.out.patch,
1386     -files/2.4.28-selinux-cmdline-race.patch,
1387     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1388     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1389     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1390     cleanup..
1391 solar 1.53
1392     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1393    
1394     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1395     - disable aout by default
1396 solar 1.52
1397     *hardened-sources-2.4.30 (18 Apr 2005)
1398    
1399     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1400     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1401     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1402     use
1403 tocharian 1.50
1404 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1405    
1406     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1407     +hardened-sources-2.4.29.ebuild:
1408     New hardened-patches-2.4-29.0 patchball.
1409     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1410    
1411     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1412    
1413     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1414     +hardened-sources-2.4.28-r5.ebuild:
1415     Added a fix for a PaX vulnerability.
1416    
1417     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1418 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1419     Stable on x86
1420 solar 1.49
1421     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1422     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1423     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1424     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1425     - fixed/added RDEPEND= in all kernel-2 ebuilds
1426 tocharian 1.48
1427     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1428    
1429     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1430     +hardened-sources-2.4.28-r4.ebuild:
1431     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1432     backport of neighbour hash updates.
1433 tocharian 1.47
1434     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1435     hardened-sources-2.4.28-r3.ebuild:
1436     Stable on x86
1437 tseng 1.46
1438     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1439    
1440     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1441     +hardened-sources-2.6.10-r3.ebuild:
1442     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1443     in 2005.0
1444 tocharian 1.45
1445     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1446     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1447     hardened-sources-2.4.28-r2.ebuild:
1448     Mark stable on x86
1449 tocharian 1.44
1450     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1451    
1452     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1453     +hardened-sources-2.4.28-r3.ebuild:
1454     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1455 tocharian 1.43
1456     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1457     hardened-sources-2.4.28.ebuild:
1458     Mark stable on x86.
1459 tocharian 1.42
1460     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1461    
1462     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1463     +hardened-sources-2.4.28-r2.ebuild:
1464     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1465     Mazinger for grsecurity patches as well.
1466 plasmaroo 1.41
1467     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1468    
1469     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1470     Security bump. Thank tocharian for rolling a new patchset...
1471 solar 1.40
1472     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1473     +files/2.4.28-grsec-cmdline-race.patch,
1474     +files/2.4.28-selinux-binfmt_a.out.patch,
1475     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1476     - Round up remaining security patches that appear to be missing in 2.4.28. -
1477     PaX standalone updated to current. hgpv=28.1
1478 solar 1.39
1479     *hardened-sources-2.4.28 (28 Nov 2004)
1480    
1481     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1482     security bump. Thank tocharian for rolling a new patchset
1483 scox 1.31
1484 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1485    
1486     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1487     +hardened-sources-2.4.27-r3.ebuild:
1488     Applies the new 2.4-27.2 patchball which updates
1489     GRSecurity to the 2.0.1 version.
1490    
1491 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1492    
1493     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1494     +hardened-sources-2.4.27-r2.ebuild:
1495     Version bump.
1496     This version uses the new 2.4-27.1 patchball which updates
1497     both the SELinux PaX hooks patch and the SELinux headers.
1498    
1499 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1500    
1501     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1502     +hardened-sources-2.4.27-r1.ebuild,
1503     -hardened-sources-2.4.27.ebuild,
1504     +files/2.4.27-cmdline-race.patch:
1505     Version bump, fix for cmdline race. See bug #59905.
1506    
1507     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1508    
1509     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1510     +hardened-sources-2.4.26-r6.ebuild,
1511     -hardened-sources-2.4.26-r5.ebuild,
1512     -hardened-sources-2.4.26-r4.ebuild,
1513     +files/2.4.26-cmdline-race.patch:
1514     Version bump, fix for cmdline race. See bug #59905.
1515    
1516 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1517    
1518     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1519     +hardened-sources-2.4.27.ebuild,
1520     +files/2.4.27-CAN-2004-0394.patch:
1521     Ported the patchball to the 2.4.27 kernel version.
1522    
1523 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1524    
1525     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1526     +hardened-sources-2.4.26-r5.ebuild:
1527 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1528 scox 1.34 It adds the following features:
1529     - Squashfs
1530     - Ebtables
1531     - Netdev random (core+drivers)
1532     - Watchdog Timer (WDT) fix.
1533    
1534 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1535    
1536     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1537     +hardened-sources-2.4.26-r4.ebuild,
1538     +files/2.4.26-CAN-2004-0415.patch,
1539     -hardened-sources-2.4.26-3:
1540     Version bump, fix for CAN 0415, see bug #59378.
1541    
1542 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1543    
1544     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1545     +hardened-sources-2.4.26-r3.ebuild,
1546     +files/2.4.26-CAN-2004-0497.patch,
1547     -hardened-sources-2.4.26-r2.ebuild:
1548     Version bump, fixed CAN 0497, see bug #56171.
1549    
1550 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1551    
1552     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1553 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1554 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1555     +files/2.4.26-CAN-2004-0535.patch,
1556     -hardened-sources-2.4.26-r1.ebuild:
1557     Fixes for both CAN 0495 and 0535, see bug #54976
1558 pvdabeel 1.27
1559 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1560     hardened-sources-2.4.26-r1.ebuild:
1561     QA - fix use invocation
1562 scox 1.28
1563     *hardened-sources-2.4.26-r1 (22 June 2004)
1564    
1565     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1566     +hardened-sources-2.4.26-r1.ebuild,
1567     +files/2.4.26-CAN-2004-0394.patch,
1568     +files/2.4.26-signal-race.patch,
1569     -hardened-sources-2.4.26.ebuild,
1570     -hardened-sources-2.4.24-r3.ebuild:
1571     Version bump for the CAN-2004-0394 issue and bug #53804
1572     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1573    
1574    
1575 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1576     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1577     Masked hardened-sources-2.4.26.ebuild broken for ppc
1578    
1579     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1580     hardened-sources-2.4.24-r3.ebuild:
1581     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1582 plasmaroo 1.25
1583 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1584    
1585     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1586     +hardened-sources-2.4.26.ebuild:
1587     Updated hardened-sources for the 2.4.26 kernel
1588     Removed broken components, updated almost everything.
1589    
1590 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1591    
1592     17 Apr 2004; <plasmaroo@gentoo.org>
1593     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1594     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1595     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1596     +hardened-sources-2.4.24-r3.ebuild:
1597     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1598     vulnerabilities. Old revisions removed.
1599 plasmaroo 1.24
1600     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1601    
1602     15 Apr 2004; <plasmaroo@gentoo.org>
1603     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1604     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1605     Version bump for the CAN-2004-0109 issue; bug #47881.
1606 aliz 1.23
1607     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1608     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1609     Add eutils to inherit.
1610 plasmaroo 1.22
1611     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1612    
1613     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1614     files/hardened-sources-2.4.24.munmap.patch:
1615     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1616 scox 1.19
1617 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1618 scox 1.26
1619 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1620     hardened-sources-2.4.24.ebuild:
1621     Version bump, updated most of the components.
1622     This release includes the following:
1623    
1624     - Hardened security
1625     - Netfilter patch-o-matic 20031219
1626     - FreeSWAN 2.04 & x509 1.4.8
1627     - EVMS 2.2.2
1628     - XFS 1.3.1
1629     - cryptoloop jari
1630     - grsecurity 2.0-rc4
1631     - SELinux
1632     - PaX 200402060000
1633     - PaX Obscurity 200308302223
1634     - Others...
1635    
1636     Neither -ck nor systrace are included anymore.
1637    
1638 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1639    
1640     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1641     hardened-sources-2.4.22-r2.ebuild:
1642 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1643 scox 1.19
1644     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1645 iggy 1.17
1646     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1647 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1648 iggy 1.16
1649     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1650 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1651     Version bump for the 'do_brk' vulnerability.
1652 iggy 1.15
1653     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1654     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1655     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1656     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1657 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1658 frogger 1.14
1659     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1660     hardened-sources-2.4.22.ebuild:
1661 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1662     components. These are no longer handled in the kernel
1663     so this code was not necessary.
1664 frogger 1.13
1665     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1666     New 2.4.22 based hardened-sources thanks to
1667     Phil West <p.west@computer.org>.
1668    
1669     These sources include:
1670 plasmaroo 1.18 - New SELinux API
1671     - Updated CK-base
1672     - Updated GRSec
1673     - Systrace
1674     - SuperFreeS/WAN 1.99.8
1675     - Propolice kernel build support
1676     - EVMS
1677     - Other various security related patches
1678 frogger 1.11
1679 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1680    
1681     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1682     Updated hardened-sources based on the 2.4.21 Linux kernel.
1683     This includes updates to most major components such as:
1684 plasmaroo 1.18 - ck-base-0306300059
1685     - selinux-2.4-2003071106
1686     - grsecurity-2.0-rc1
1687     - Updated IPTables patch-o-matic
1688     - Updated SuperFreeS/WAN
1689    
1690 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1691     updated patch set ready for the 2.4.21 based kernel.
1692    
1693 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1694     Initial import of hardened-sources-2.4.20-r4. This revision
1695     includes only a few changes, but one of these is an important
1696     security fix. It is recommended all users of hardened-sources
1697     upgrade to this release.
1698 plasmaroo 1.18
1699 frogger 1.11 - ioperm bug fix
1700     - fixed compilation failure when building without GRSec
1701 plasmaroo 1.18
1702 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1703     due to time constraints, but is planned for inclusion in the near
1704     future.
1705 msterret 1.10
1706     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1707    
1708     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1709     hardened-sources-2.4.20-r3.ebuild:
1710 plasmaroo 1.18 Add Header...
1711 frogger 1.9
1712     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1713     hardened-sources-2.4.20-r3.ebuild:
1714     Removed warnings from ebuild. This kernel should be safe to
1715     use at this point.
1716 frogger 1.8
1717     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1718    
1719     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1720     hardened-sources-2.4.20-r3.ebuild:
1721     New revision. Includes the following changes over -r2:
1722 plasmaroo 1.18
1723 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1724     - Super FreeS/WAN 1.99.7rc2
1725     - PaX for the LSM/SELinux branch
1726     - GRSecurity 2.0-pre4 (role based access control)
1727     - Systrace 1.3
1728     - EXT3 fixes
1729     - EVMS 2.0.1
1730     - GCC 3.1+ compile optimizations
1731     - ProPolice kernel build support
1732     - Hashing table security fixes
1733 frogger 1.3
1734     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1735 frogger 1.7
1736     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1737     Initial import of hardened-sources-r2. This new
1738     ebuild includes many new performance and security
1739     related patches. As in -r1, it will patch in
1740     LSM/SELinux if "selinux" is in USE, otherwise it
1741     will patch in GRSecurity. The following patches
1742     are included in this revision:
1743 plasmaroo 1.18
1744 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1745     (pulled from the base CK patch)
1746     - ptrace exploit patch for the LSM kernel
1747     (the GRSec patch already fixes this)
1748     - LSM 2.4-2003040709
1749     - SELinux 2.4-2003040709
1750     - Systrace v1.2
1751     - IPTables patch-o-matic base patches - 20030107
1752     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1753     - Super FreeS/WAN 1.99.6.1
1754     - GRSecurity 1.9.9g
1755     - MPPE
1756     - EXT3 data journal fix
1757     - CIPE 1.5.4
1758 frogger 1.6
1759     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1760     hardened-sources-2.4.20-r1.ebuild, manifest:
1761 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1762 frogger 1.5
1763     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1764     hardened-sources-2.4.20-r1.ebuild:
1765     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1766     is patched in instead. Ptrace patches for selinux have also been added. In
1767     either case, systrace support will be patched in as well.
1768 frogger 1.3
1769     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1770     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1771 plasmaroo 1.18 Revision bump for new sources.
1772 frogger 1.4
1773 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1774 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1775 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1776 method 1.1
1777 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1778    
1779 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1780     hardened-sources-2.4.20.ebuild:
1781 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20