/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.303 - (hide annotations) (download)
Fri Mar 27 06:29:16 2009 UTC (5 years, 7 months ago) by gengor
Branch: MAIN
Changes since 1.302: +7 -1 lines
Add sys-kernel/hardened-sources-2.6.28-r7
(Portage version: 2.1.6.7/cvs/Linux i686)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 gengor 1.268 # Copyright 2000-2009 Gentoo Foundation; Distributed under the GPL v2
3 gengor 1.303 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.302 2009/03/22 17:57:07 gengor Exp $
4    
5     *hardened-sources-2.6.28-r7 (27 Mar 2009)
6    
7     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
8     +hardened-sources-2.6.28-r7.ebuild:
9     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
10 gengor 1.302
11     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
12     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
13     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
14     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
15     Stable amd64/x86 and remove old versions.
16 nixnut 1.301
17     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
18     ppc stable
19 gengor 1.300
20     *hardened-sources-2.6.28-r6 (21 Mar 2009)
21    
22     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
23     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
24     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
25 gengor 1.299
26     *hardened-sources-2.6.28-r5 (20 Mar 2009)
27    
28     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
29     +hardened-sources-2.6.28-r5.ebuild:
30     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
31 gengor 1.298
32     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
33     hardened-sources-2.6.28-r4.ebuild:
34     Stable amd64/x86.
35 gengor 1.297
36     *hardened-sources-2.6.28-r4 (18 Mar 2009)
37    
38     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
39     +hardened-sources-2.6.28-r4.ebuild:
40     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
41     compilation with CPA_DEBUG and more.
42 gengor 1.296
43     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
44     hardened-sources-2.6.28-r3.ebuild:
45     Quick stable amd64/x86.
46 gengor 1.295
47     *hardened-sources-2.6.28-r3 (15 Mar 2009)
48    
49     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
50     +hardened-sources-2.6.28-r3.ebuild:
51     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
52 nixnut 1.294
53     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
54     ppc stable
55 gengor 1.293
56     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
57     hardened-sources-2.6.28-r2.ebuild:
58     Stable amd64/x86.
59 gengor 1.292
60     *hardened-sources-2.6.28-r2 (11 Mar 2009)
61    
62     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
63     +hardened-sources-2.6.28-r2.ebuild:
64     Version bump bringing in latest grsecurity patch.
65 gengor 1.291
66     *hardened-sources-2.6.28-r1 (09 Mar 2009)
67    
68     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
69     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
70     Version bump and remove old.
71 nixnut 1.290
72     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
73     ppc stable
74 gengor 1.289
75     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
76     hardened-sources-2.6.27-r8.ebuild:
77     Remove amd64 testing keyword, bug 256226.
78 gengor 1.288
79     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
80     hardened-sources-2.6.27-r8.ebuild:
81     Revert amd64 stable, bug #256226.
82 gengor 1.287
83     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
84     hardened-sources-2.6.27-r8.ebuild:
85     Stable on amd64/x86.
86 gengor 1.286
87     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
88     -hardened-sources-2.6.27-r6.ebuild:
89     Remove old 2.6.27 release.
90 gengor 1.285
91     *hardened-sources-2.6.27-r8 (24 Feb 2009)
92    
93     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
94     +hardened-sources-2.6.27-r8.ebuild:
95     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
96     and probably more.
97 nixnut 1.284
98     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
99     ppc stable
100 gengor 1.283
101     *hardened-sources-2.6.28 (25 Jan 2009)
102    
103     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
104     +hardened-sources-2.6.28.ebuild:
105     Initial 2.6.28 release.
106 gengor 1.282
107     *hardened-sources-2.6.27-r7 (25 Jan 2009)
108    
109     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
110     +hardened-sources-2.6.27-r7.ebuild:
111     Bump to Linux 2.6.27.13.
112 gengor 1.281
113     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
114     hardened-sources-2.6.26-r9.ebuild:
115     Stable amd64/x86.
116 gengor 1.280
117     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
118     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
119     -hardened-sources-2.6.27-r5.ebuild:
120     Remove problem versions.
121 gengor 1.279
122     *hardened-sources-2.6.27-r6 (24 Jan 2009)
123    
124     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
125     +hardened-sources-2.6.27-r6.ebuild:
126     Revert PaX test29 to test30 changes. Fixes bug 256226.
127 gengor 1.277
128     *hardened-sources-2.6.27-r5 (24 Jan 2009)
129    
130     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
131     +hardened-sources-2.6.27-r5.ebuild:
132 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
133 gengor 1.277 254843.
134 gengor 1.276
135     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
136     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
137     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
138     Remove problem versions.
139 nixnut 1.275
140     23 Jan 2009; nixnut <nixnut@gentoo.org>
141     hardened-sources-2.6.25-r13.ebuild:
142     ppc stable
143 gengor 1.274
144     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
145     hardened-sources-2.6.25-r13.ebuild:
146     Fasttrack stable amd64/x86.
147 gengor 1.273
148     *hardened-sources-2.6.26-r9 (21 Jan 2009)
149    
150     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
151     +hardened-sources-2.6.26-r9.ebuild:
152 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
153 gengor 1.272
154     *hardened-sources-2.6.25-r13 (20 Jan 2009)
155    
156     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
157     +hardened-sources-2.6.25-r13.ebuild:
158 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
159 nixnut 1.271
160     20 Jan 2009; nixnut <nixnut@gentoo.org>
161     hardened-sources-2.6.25-r12.ebuild:
162     ppc stable
163 gengor 1.270
164     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
165     hardened-sources-2.6.25-r12.ebuild:
166     Stable amd64/x86.
167 gengor 1.269
168     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
169     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
170     -hardened-sources-2.6.27-r2.ebuild:
171     Clean out old versions.
172 gengor 1.268
173     *hardened-sources-2.6.27-r4 (14 Jan 2009)
174     *hardened-sources-2.6.26-r8 (14 Jan 2009)
175     *hardened-sources-2.6.25-r12 (14 Jan 2009)
176    
177     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
178     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
179     +hardened-sources-2.6.27-r4.ebuild:
180     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
181     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
182     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
183     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
184 nixnut 1.267
185     15 Dec 2008; nixnut <nixnut@gentoo.org>
186     hardened-sources-2.6.25-r11.ebuild:
187     Stable on ppc
188 gengor 1.266
189     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
190     hardened-sources-2.6.25-r11.ebuild:
191     Stable amd64/x86.
192 gengor 1.265
193     *hardened-sources-2.6.27-r3 (07 Dec 2008)
194    
195     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
196     +hardened-sources-2.6.27-r3.ebuild:
197     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
198     Fixes bug #248754, #249729 and #246607.
199 gengor 1.264
200     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
201     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
202     Remove old versions.
203 gengor 1.262
204     *hardened-sources-2.6.26-r7 (03 Dec 2008)
205     *hardened-sources-2.6.25-r11 (03 Dec 2008)
206    
207 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
208     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
209 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
210     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
211     Both include many backports from 2.6.27.{6,7} -stable releases.
212 gengor 1.261
213     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
214     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
215     Remove versions broken on ARCHes != x86/amd64.
216 gengor 1.260
217     *hardened-sources-2.6.27-r2 (24 Nov 2008)
218    
219     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
220     +hardened-sources-2.6.27-r2.ebuild:
221     Bump to Linux 2.6.27.7 and latest grsecurity patch.
222 gengor 1.259
223     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
224     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
225     Remove old versions.
226 gengor 1.258
227     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
228     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
229     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
230 nixnut 1.257
231     16 Nov 2008; nixnut <nixnut@gentoo.org>
232     hardened-sources-2.6.25-r10.ebuild:
233     Stable on ppc
234 gengor 1.256
235     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
236     hardened-sources-2.6.25-r10.ebuild:
237     Stable amd64/x86.
238 gengor 1.255
239     *hardened-sources-2.6.26-r6 (12 Nov 2008)
240    
241     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
242     +hardened-sources-2.6.26-r6.ebuild:
243     Bump to Linux 2.6.26.8 and fix security bug #245650.
244 gengor 1.254
245     *hardened-sources-2.6.25-r10 (12 Nov 2008)
246    
247     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
248     +hardened-sources-2.6.25-r10.ebuild:
249     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
250 gengor 1.253
251     *hardened-sources-2.6.27-r1 (09 Nov 2008)
252    
253     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
254     +hardened-sources-2.6.27-r1.ebuild:
255     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
256 gengor 1.252
257     *hardened-sources-2.6.27 (04 Nov 2008)
258    
259     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
260     +hardened-sources-2.6.27.ebuild:
261     Initial 2.6.27 release.
262 gengor 1.251
263     *hardened-sources-2.6.26-r5 (03 Nov 2008)
264    
265     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
266     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
267     +hardened-sources-2.6.26-r5.ebuild:
268     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
269     Clean out some old versions.
270 nixnut 1.250
271     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
272     Stable on ppc
273 gengor 1.249
274     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
275     hardened-sources-2.6.25-r9.ebuild:
276     Stable on amd64/x86.
277 gengor 1.248
278     *hardened-sources-2.6.25-r9 (26 Oct 2008)
279    
280     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
281     +hardened-sources-2.6.25-r9.ebuild:
282     Update to Linux 2.6.25.19
283 nixnut 1.247
284     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
285     Stable on ppc
286 gengor 1.246
287     *hardened-sources-2.6.26-r4 (14 Oct 2008)
288    
289     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
290     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
291     Update to latest grsecurity patch, fixing building of non-modular kernels.
292 gengor 1.245
293     *hardened-sources-2.6.26-r3 (12 Oct 2008)
294    
295     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
296     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
297     +hardened-sources-2.6.26-r3.ebuild:
298     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
299     2.6.26-r1: Removed.
300     2.6.25-r8: Stable amd64/x86.
301 gengor 1.244
302     *hardened-sources-2.6.25-r8 (09 Oct 2008)
303    
304     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
305     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
306     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
307     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
308 nixnut 1.243
309     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
310     Stable on ppc
311 gengor 1.242
312     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
313     hardened-sources-2.6.25-r7.ebuild:
314     Stable amd64/x86.
315 gengor 1.241
316     *hardened-sources-2.6.26-r2 (13 Sep 2008)
317    
318     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
319     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
320     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
321     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
322 gengor 1.240
323     *hardened-sources-2.6.25-r7 (13 Sep 2008)
324    
325     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
326     +hardened-sources-2.6.25-r7.ebuild:
327     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
328 gengor 1.239
329     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
330     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
331     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
332     hardened-sources-2.6.26-r1.ebuild:
333     Update DESCRIPTION and HGPV_URI.
334 gengor 1.238
335     *hardened-sources-2.6.25-r6 (09 Sep 2008)
336    
337     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
338     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
339     2.6.25-r6: Update to Linux 2.6.25.17.
340     2.6.24-r3: Removed.
341 gengor 1.237
342     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
343     hardened-sources-2.6.25-r5.ebuild:
344     Stable on amd64/x86
345 gengor 1.236
346     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
347     Update my email address.
348 nixnut 1.235
349     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
350     stable on ppc
351 battousai 1.234
352     *hardened-sources-2.6.26-r1 (23 Aug 2008)
353     *hardened-sources-2.6.25-r5 (23 Aug 2008)
354    
355     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
356     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
357     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
358     +hardened-sources-2.6.26-r1.ebuild:
359     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
360     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
361     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
362     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
363     (gengor).
364 solar 1.233
365     *hardened-sources-2.6.26 (18 Aug 2008)
366     *hardened-sources-2.6.25-r4 (18 Aug 2008)
367    
368     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
369     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
370     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
371     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
372     2.6.25-r2: Removed.
373 tove 1.232
374     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
375     Remove phreak from metadata.xml (#96398)
376 solar 1.231
377     *hardened-sources-2.6.25-r3 (31 Jul 2008)
378    
379     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
380     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
381     +hardened-sources-2.6.25-r3.ebuild:
382     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
383     fixes, including security bug #231750.
384 nixnut 1.230
385     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
386     Stable on ppc
387 solar 1.229
388     *hardened-sources-2.6.25-r2 (05 Jul 2008)
389    
390     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
391     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
392     +hardened-sources-2.6.25-r2.ebuild:
393     2.6.23-r4: Stable x86/amd64
394     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
395     2.6.23-r{11,12}: Removed due to multiple vulns.
396     (gengor & kerframil)
397 nixnut 1.228
398     04 Jul 2008; nixnut <nixnut@gentoo.org>
399     hardened-sources-2.6.23-r13.ebuild:
400     Stable on ppc
401 solar 1.227
402     *hardened-sources-2.6.25-r1 (30 Jun 2008)
403    
404     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
405     +hardened-sources-2.6.25-r1.ebuild:
406     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
407     grsecurity release. 2.6.23-r13: x86/amd64 stable
408 solar 1.226
409     *hardened-sources-2.6.25 (17 Jun 2008)
410     *hardened-sources-2.6.24-r3 (17 Jun 2008)
411     *hardened-sources-2.6.23-r13 (17 Jun 2008)
412    
413     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
414     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
415     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
416     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
417     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
418     2.6.25: Initial 2.6.25 release.
419 solar 1.225
420     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
421     - fasttrack to stable x86/amd64
422 swegener 1.224
423     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
424     Fix broken digest for linux-2.6.24.tar.bz2.
425 solar 1.223
426     *hardened-sources-2.6.24-r2 (11 May 2008)
427     *hardened-sources-2.6.23-r12 (11 May 2008)
428    
429     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
430     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
431     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
432     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
433     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
434     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
435     security bugs 219901, 220691, 220975, 220979, 221123. New
436     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
437     should be removed as far as I'm concerned, everything else remove due to
438     vulnerable to numerous security bugs or brokeness.
439 nixnut 1.222
440     10 May 2008; nixnut <nixnut@gentoo.org>
441     hardened-sources-2.6.23-r11.ebuild:
442     Stable on ppc
443 solar 1.221
444     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
445     - -r11 stable on x86/amd64
446 solar 1.220
447     *hardened-sources-2.6.23-r11 (01 May 2008)
448    
449     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
450     - version bump to fix ulgy linux bugs
451 phreak 1.219
452     *hardened-sources-2.6.24-r1 (30 Apr 2008)
453    
454     30 Apr 2008; Christian Heim <phreak@gentoo.org>
455     +hardened-sources-2.6.24-r1.ebuild:
456     Revision bump (thanks to Kerin and Gordon, again), pulling
457     genpatches-2.6.24-7, solving #219089. Additionally contains further security
458     fixes plus some minor updates.
459 phreak 1.218
460     *hardened-sources-2.6.23-r10 (30 Apr 2008)
461    
462     30 Apr 2008; Christian Heim <phreak@gentoo.org>
463     +hardened-sources-2.6.23-r10.ebuild:
464     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
465     Additional contains "various other fixes".
466 phreak 1.217
467     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
468     Update the longdescription in metadata, thanks to Gordon Malm.
469 nixnut 1.216
470     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
471     Stable on ppc wrt bug #213255
472 solar 1.215
473     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
474     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
475     - stable on x86/amd64 per request. Removed obsolete ebuilds
476 phreak 1.214
477     *hardened-sources-2.6.24 (07 Apr 2008)
478    
479     07 Apr 2008; Christian Heim <phreak@gentoo.org>
480     +hardened-sources-2.6.24.ebuild:
481     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
482     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
483     for the many contributions and their continued effort in #216612) based on
484     2.6.24 and genpatches-2.6.24-5.
485    
486     The current ebuild/patchset contains these things:
487     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
488     * Introduces bespoke server and workstation oriented security levels
489     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
490 phreak 1.213
491     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
492     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
493     maintaining it).
494 phreak 1.212
495     24 Mar 2008; Christian Heim <phreak@gentoo.org>
496     hardened-sources-2.4.35-r2.ebuild:
497     Fixing SRC_URI for 2.4.35-r2.
498 phreak 1.211
499     *hardened-sources-2.6.23-r9 (22 Mar 2008)
500    
501     22 Mar 2008; Christian Heim <phreak@gentoo.org>
502     +hardened-sources-2.6.23-r9.ebuild:
503     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
504     * Change the default GIDs for some grsecurity options
505     * Revamp the Hardened [Gentoo] security level and make it the default level
506     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
507     * Fix a recursive lock -- call to capable() within ptrace_attach()
508     * Fix bug that allows audit and iscsi operations to be controlled via netlink
509 solar 1.210
510     *hardened-sources-2.6.23-r8 (27 Feb 2008)
511    
512     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
513     - version bump from Kerin Millar bug 210026
514 solar 1.209
515     17 Feb 2008; <solar@gentoo.org> metadata.xml,
516     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
517     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
518     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
519     - stable on x86 and remove old ebuilds
520 solar 1.207
521     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
522 solar 1.208 - stable on amd64 per request of amd64 lead
523 solar 1.206
524     *hardened-sources-2.6.23-r7 (11 Feb 2008)
525    
526     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
527     - version bump from kerin.millar
528     Changes:
529    
530     * Bump to genpatches-base-2.6.23-9
531     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
532     * Disables COMPAT_VDSO in x86/defconfig
533     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
534 phreak 1.205
535     25 Jan 2008; Christian Heim <phreak@gentoo.org>
536     -hardened-sources-2.6.22-r8.ebuild:
537     Cleaning up old versions.
538 phreak 1.204
539     *hardened-sources-2.6.23-r6 (25 Jan 2008)
540    
541     25 Jan 2008; Christian Heim <phreak@gentoo.org>
542     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
543     Revision bump, pulling in the latest genpatches.
544 phreak 1.203
545     *hardened-sources-2.6.23-r5 (24 Dec 2007)
546    
547     24 Dec 2007; Christian Heim <phreak@gentoo.org>
548     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
549     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
550     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
551     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
552 phreak 1.202
553     24 Dec 2007; Christian Heim <phreak@gentoo.org>
554     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
555     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
556     -hardened-sources-2.6.23-r3.ebuild:
557     Cleaning out some unused, old versions.
558 phreak 1.201
559     24 Dec 2007; Christian Heim <phreak@gentoo.org>
560     hardened-sources-2.6.23-r4.ebuild:
561     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
562     in the tree for long, but there isn't much of a difference between this and
563     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
564 phreak 1.200
565     *hardened-sources-2.6.23-r4 (23 Dec 2007)
566    
567     23 Dec 2007; Christian Heim <phreak@gentoo.org>
568     +hardened-sources-2.6.23-r4.ebuild:
569     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
570 phreak 1.199
571     *hardened-sources-2.6.23-r3 (04 Dec 2007)
572    
573     04 Dec 2007; Christian Heim <phreak@gentoo.org>
574     +hardened-sources-2.6.23-r3.ebuild:
575     Revision bump, pulling in 2.6.23.9.
576 phreak 1.198
577     *hardened-sources-2.6.23-r2 (25 Nov 2007)
578    
579     25 Nov 2007; Christian Heim <phreak@gentoo.org>
580     +hardened-sources-2.6.23-r2.ebuild:
581     Updated patchset, thanks to solar.
582 phreak 1.197
583     *hardened-sources-2.6.23-r1 (31 Oct 2007)
584    
585     31 Oct 2007; Christian Heim <phreak@gentoo.org>
586     +hardened-sources-2.6.23-r1.ebuild:
587     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
588 solar 1.196
589     29 Oct 2007; <solar@gentoo.org> metadata.xml:
590     - update metadata.xml
591 phreak 1.195
592     25 Oct 2007; Christian Heim <phreak@gentoo.org>
593     hardened-sources-2.6.22-r8.ebuild:
594     Marking 2.6.22-r8 stable on amd64 and x86.
595 phreak 1.194
596     21 Oct 2007; Christian Heim <phreak@gentoo.org>
597     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
598     -hardened-sources-2.6.21-r4.ebuild:
599     Removing old ebuilds.
600 phreak 1.193
601     *hardened-sources-2.4.35-r2 (21 Oct 2007)
602    
603     21 Oct 2007; Christian Heim <phreak@gentoo.org>
604     +hardened-sources-2.4.35-r2.ebuild:
605     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
606     patches.
607 phreak 1.192
608     *hardened-sources-2.6.22-r8 (21 Oct 2007)
609    
610     21 Oct 2007; Christian Heim <phreak@gentoo.org>
611     +hardened-sources-2.6.22-r8.ebuild:
612     Yet another new patch, hopefully fixing the remaining issues we had w/
613     2.6.22. Candidate for stabling.
614 phreak 1.191
615     *hardened-sources-2.6.23 (13 Oct 2007)
616    
617     13 Oct 2007; Christian Heim <phreak@gentoo.org>
618     +hardened-sources-2.6.23.ebuild:
619     Initial hardened-sources-2.6.23. If people still have problems w/ bug
620     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
621 phreak 1.190
622     11 Oct 2007; Christian Heim <phreak@gentoo.org>
623     hardened-sources-2.6.20-r10.ebuild:
624     Pulling in yet another new genpatches version, fixing the PWC bug for real.
625 phreak 1.189
626     04 Oct 2007; Christian Heim <phreak@gentoo.org>
627     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
628     Removing old versions.
629 phreak 1.188
630     *hardened-sources-2.6.22-r7 (01 Oct 2007)
631    
632     01 Oct 2007; Christian Heim <phreak@gentoo.org>
633     +hardened-sources-2.6.22-r7.ebuild:
634     Revision bump, pulling in a newer patch. Should fix #194276.
635 phreak 1.187
636     30 Sep 2007; Christian Heim <phreak@gentoo.org>
637     hardened-sources-2.6.20-r10.ebuild:
638     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
639     Mike Doty).
640 phreak 1.186
641     *hardened-sources-2.6.22-r6 (26 Sep 2007)
642    
643     26 Sep 2007; Christian Heim <phreak@gentoo.org>
644     +hardened-sources-2.6.22-r6.ebuild:
645     Revision bump, grabbing up till Linux 2.6.22.9.
646 phreak 1.185
647     24 Sep 2007; Christian Heim <phreak@gentoo.org>
648     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
649     Cleaning up further.
650 phreak 1.184
651     *hardened-sources-2.6.20-r10 (24 Sep 2007)
652    
653     24 Sep 2007; Christian Heim <phreak@gentoo.org>
654     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
655     +hardened-sources-2.6.20-r10.ebuild:
656     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
657     revisions.
658 phreak 1.183
659     *hardened-sources-2.6.22-r5 (22 Sep 2007)
660    
661     22 Sep 2007; Christian Heim <phreak@gentoo.org>
662     +hardened-sources-2.6.22-r5.ebuild:
663     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
664 phreak 1.182
665     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
666     Removing johnm from metadata.xml (see #186467 for reference).
667 phreak 1.181
668     *hardened-sources-2.6.22-r4 (17 Sep 2007)
669    
670     17 Sep 2007; Christian Heim <phreak@gentoo.org>
671     +hardened-sources-2.6.22-r4.ebuild:
672     Revision bump, hopefully fixing all those weird PAX failures.
673 phreak 1.180
674     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
675     Updating the metadata.xml.
676 phreak 1.179
677     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
678     Removing tocharian from metadata due to his retirement (see #71718 for
679     reference).
680 phreak 1.178
681     *hardened-sources-2.6.20-r9 (30 Aug 2007)
682    
683     30 Aug 2007; Christian Heim <phreak@gentoo.org>
684     +hardened-sources-2.6.20-r9.ebuild:
685     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
686 phreak 1.177
687     29 Aug 2007; Christian Heim <phreak@gentoo.org>
688     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
689     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
690     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
691     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
692     -hardened-sources-2.6.22-r2.ebuild:
693     Removing some redundant versions.
694 phreak 1.176
695     *hardened-sources-2.4.35-r1 (29 Aug 2007)
696    
697     29 Aug 2007; Christian Heim <phreak@gentoo.org>
698     +hardened-sources-2.4.35-r1.ebuild:
699     Revision bump, new grsecurity patch.
700 phreak 1.175
701     *hardened-sources-2.6.20-r8 (26 Aug 2007)
702    
703     26 Aug 2007; Christian Heim <phreak@gentoo.org>
704     +hardened-sources-2.6.20-r8.ebuild:
705     Revision bump for Linux 2.6.20.17.
706 phreak 1.174
707     *hardened-sources-2.6.22-r3 (22 Aug 2007)
708    
709     22 Aug 2007; Christian Heim <phreak@gentoo.org>
710     +hardened-sources-2.6.22-r3.ebuild:
711     Revision bump for Linux 2.6.22.4.
712 phreak 1.173
713     16 Aug 2007; Christian Heim <phreak@gentoo.org>
714     hardened-sources-2.6.22-r2.ebuild:
715     Updated patchset, to fix the alignment against 2.6.22.3.
716 phreak 1.172
717     *hardened-sources-2.6.22-r2 (16 Aug 2007)
718    
719     16 Aug 2007; Christian Heim <phreak@gentoo.org>
720     +hardened-sources-2.6.22-r2.ebuild:
721     Revision bump for Linux 2.6.22.3.
722 phreak 1.171
723     *hardened-sources-2.4.35 (16 Aug 2007)
724    
725     16 Aug 2007; Christian Heim <phreak@gentoo.org>
726     +hardened-sources-2.4.35.ebuild:
727     Version bump, initial version for Linux 2.4.35.
728 phreak 1.170
729     *hardened-sources-2.6.21-r4 (16 Aug 2007)
730    
731     16 Aug 2007; Christian Heim <phreak@gentoo.org>
732     +hardened-sources-2.6.21-r4.ebuild:
733     Revision bump for Linux 2.6.21.6.
734 phreak 1.169
735     *hardened-sources-2.6.20-r7 (16 Aug 2007)
736    
737     16 Aug 2007; Christian Heim <phreak@gentoo.org>
738     +hardened-sources-2.6.20-r7.ebuild:
739     Revision bump for Linux 2.6.20.16.
740 phreak 1.168
741     *hardened-sources-2.6.22-r1 (13 Aug 2007)
742    
743     13 Aug 2007; Christian Heim <phreak@gentoo.org>
744     +hardened-sources-2.6.22-r1.ebuild:
745     Yet another revision bump.
746 phreak 1.167
747     *hardened-sources-2.6.22 (10 Aug 2007)
748    
749     10 Aug 2007; Christian Heim <phreak@gentoo.org>
750     +hardened-sources-2.6.22.ebuild:
751     Initial release for 2.6.22. If you are using hardened-sources on a desktop
752     machine (P4 or newer), be aware you might need to disable
753     CONFIG_PAX_PAGEEXEC.
754 phreak 1.166
755     04 Aug 2007; Christian Heim <phreak@gentoo.org>
756     hardened-sources-2.6.20-r6.ebuild:
757     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
758     2.6.20.15.
759 phreak 1.165
760     10 Jul 2007; Christian Heim <phreak@gentoo.org>
761     hardened-sources-2.6.20-r5.ebuild:
762     Marking hardened-sources-2.6.20-r5 stable on ppc.
763 phreak 1.164
764     10 Jul 2007; Christian Heim <phreak@gentoo.org>
765     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
766     Cleanup.
767 phreak 1.163
768     *hardened-sources-2.6.20-r6 (08 Jul 2007)
769    
770     08 Jul 2007; Christian Heim <phreak@gentoo.org>
771     +hardened-sources-2.6.20-r6.ebuild:
772     Revision bump, grabbing yet another stable release.
773 phreak 1.162
774     17 Jun 2007; Christian Heim <phreak@gentoo.org>
775     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
776     -hardened-sources-2.6.21-r2.ebuild:
777     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
778     alpha stable KEYWORD by mistake.
779 phreak 1.161
780     17 Jun 2007; Christian Heim <phreak@gentoo.org>
781     hardened-sources-2.6.20-r5.ebuild:
782     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
783     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
784 phreak 1.160
785     *hardened-sources-2.6.21-r3 (12 Jun 2007)
786    
787     12 Jun 2007; Christian Heim <phreak@gentoo.org>
788     +hardened-sources-2.6.21-r3.ebuild:
789     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
790     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
791     love.
792 phreak 1.159
793     *hardened-sources-2.6.20-r5 (11 Jun 2007)
794    
795     11 Jun 2007; Christian Heim <phreak@gentoo.org>
796     +hardened-sources-2.6.20-r5.ebuild:
797     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
798     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
799     love.
800 pappy 1.158
801     *hardened-sources-2.4.34.5 (11 Jun 2007)
802    
803     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
804     +hardened-sources-2.4.34.5.ebuild:
805     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
806 phreak 1.157
807     30 May 2007; Christian Heim <phreak@gentoo.org>
808     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
809     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
810     stale ebuild(s).
811 phreak 1.156
812     30 May 2007; Christian Heim <phreak@gentoo.org>
813     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
814     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
815     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
816     Doing some cleanups, remove stale ebuilds.
817 phreak 1.155
818     26 May 2007; Christian Heim <phreak@gentoo.org>
819     hardened-sources-2.6.21-r2.ebuild:
820     Fixing the grsecurity patch, had one '};' too much.
821 phreak 1.154
822     *hardened-sources-2.6.21-r2 (26 May 2007)
823    
824     26 May 2007; Christian Heim <phreak@gentoo.org>
825     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
826     +hardened-sources-2.6.21-r2.ebuild:
827     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
828     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
829 phreak 1.153
830     *hardened-sources-2.6.20-r4 (26 May 2007)
831    
832     26 May 2007; Christian Heim <phreak@gentoo.org>
833     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
834     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
835 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
836 phreak 1.152
837     15 May 2007; Christian Heim <phreak@gentoo.org>
838     hardened-sources-2.6.20-r3.ebuild:
839     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
840     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
841     grsecurity patch fail in that exact same hunk.
842 phreak 1.151
843     *hardened-sources-2.6.20-r3 (15 May 2007)
844    
845     15 May 2007; Christian Heim <phreak@gentoo.org>
846     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
847     Revision bump, incorporating Linux 2.6.20.11.
848    
849     *hardened-sources-2.6.21-r1 (11 May 2007)
850    
851     11 May 2007; Christian Heim <phreak@gentoo.org>
852     +hardened-sources-2.6.21-r1.ebuild:
853     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
854     mentioned in #177234.
855 kevquinn 1.150
856     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
857     files/digest-hardened-sources-2.6.21, Manifest:
858     Fix Manifest/digest for linux-2.6.21.tar.bz2
859 phreak 1.149
860     06 May 2007; Christian Heim <phreak@gentoo.org>
861     hardened-sources-2.6.21.ebuild:
862     Bumping the hardened-patches version, needed for the fix for #177234.
863 phreak 1.148
864     *hardened-sources-2.6.21 (02 May 2007)
865    
866     02 May 2007; Christian Heim <phreak@gentoo.org>
867     +hardened-sources-2.6.21.ebuild:
868     Version bump, Linux 2.6.21-hardened.
869 phreak 1.147
870     29 Apr 2007; Christian Heim <phreak@gentoo.org>
871     hardened-sources-2.6.20-r2.ebuild:
872     Adding ~ia64 on Ned's request.
873 phreak 1.146
874     29 Apr 2007; Christian Heim <phreak@gentoo.org>
875     hardened-sources-2.6.20-r2.ebuild:
876     Fixing the included grsecurity patch, wasn't alligning due to the Index:
877     header line(s).
878 phreak 1.145
879     29 Apr 2007; Christian Heim <phreak@gentoo.org>
880     hardened-sources-2.6.20-r2.ebuild:
881     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
882 armin76 1.144
883     *hardened-sources-2.6.20-r2 (10 Apr 2007)
884    
885     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
886     +hardened-sources-2.6.20-r2.ebuild:
887     Version bump, on behalf of phreak
888 phreak 1.143
889     *hardened-sources-2.6.20-r1 (04 Apr 2007)
890    
891     04 Apr 2007; Christian Heim <phreak@gentoo.org>
892     +hardened-sources-2.6.20-r1.ebuild:
893     Revision bump, grabbing a newer grsecurity snapshot.
894 phreak 1.142
895     *hardened-sources-2.6.20 (25 Mar 2007)
896    
897     25 Mar 2007; Christian Heim <phreak@gentoo.org>
898     +hardened-sources-2.6.20.ebuild:
899     Finally a hardened-sources version for 2.6.20; many people have been waiting
900     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
901     testbox.
902 chainsaw 1.141
903     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
904     hardened-sources-2.6.18-r6.ebuild:
905     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
906 phreak 1.140
907     *hardened-sources-2.6.18-r6 (16 Mar 2007)
908    
909     16 Mar 2007; Christian Heim <phreak@gentoo.org>
910     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
911     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
912     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
913     supposed to be.
914 phreak 1.139
915     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
916     Fixing the Manifest, the previous one was broken (as in still had the
917     deleted ebuild in it).
918 phreak 1.138
919     06 Mar 2007; Christian Heim <phreak@gentoo.org>
920     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
921     +hardened-sources-2.6.18-r5.ebuild:
922     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
923     Linux 2.6.18.8. Also cleaning up the older version.
924    
925     *hardened-sources-2.6.18-r5 (06 Mar 2007)
926    
927     06 Mar 2007; Christian Heim <phreak@gentoo.org>
928     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
929     +hardened-sources-2.6.18-r5.ebuild:
930     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
931     Linux 2.6.18.8. Also cleaning up the older version.
932 phreak 1.137
933     24 Feb 2007; Christian Heim <phreak@gentoo.org>
934     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
935     -hardened-sources-2.6.19-r5.ebuild:
936     Removing some of the old version, that didn't work.
937 phreak 1.136
938     *hardened-sources-2.6.19-r6 (12 Feb 2007)
939    
940     12 Feb 2007; Christian Heim <phreak@gentoo.org>
941     +hardened-sources-2.6.19-r6.ebuild:
942     Revision bump, including a new grsec version fixing #166235.
943 pappy 1.134
944     *hardened-sources-2.4.34 (24 Jan 2007)
945    
946     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
947 pappy 1.135 Manifest:
948     updating Manifest with checksums of new tarball and ebuild
949    
950     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
951 pappy 1.134 +hardened-sources-2.4.34.ebuild:
952     I added new hardened sources 2.4 update, this is a critical path
953     security bugfix - all users of h-s are strongly advised
954     to update their existing hardened sources to this version.
955     It contains a fix for a kernel vulnerability that is pertaining
956     to the PaX changes to virtual memory management, possibly leading
957     to a local kernel exploit ... see grsecurity.net forums and homepage
958 phreak 1.133
959     23 Jan 2007; Christian Heim <phreak@gentoo.org>
960     files/digest-hardened-sources-2.6.19-r5, Manifest:
961     Fixing the patch-tarball digest.
962 phreak 1.132
963     *hardened-sources-2.6.19-r5 (23 Jan 2007)
964    
965     23 Jan 2007; Christian Heim <phreak@gentoo.org>
966     +hardened-sources-2.6.19-r5.ebuild:
967     Revision bump, closing the recently discovered PaX expand_stack()
968     vulnerability.
969 phreak 1.131
970     *hardened-sources-2.6.19-r4 (14 Jan 2007)
971    
972     14 Jan 2007; Christian Heim <phreak@gentoo.org>
973     +hardened-sources-2.6.19-r4.ebuild:
974     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
975     dropping the randomized PID feature.
976 opfer 1.130
977     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
978     hardened-sources-2.4.33.4.ebuild:
979     stable x86, bug #161171
980 phreak 1.129
981     *hardened-sources-2.6.19-r3 (27 Dec 2006)
982    
983     27 Dec 2006; Christian Heim <phreak@gentoo.org>
984     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
985     Revision bump for bug #157186 and #158786.
986 phreak 1.128
987     *hardened-sources-2.6.18-r4 (27 Dec 2006)
988    
989     27 Dec 2006; Christian Heim <phreak@gentoo.org>
990     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
991     Revision bump for bug #157186.
992 phreak 1.127
993     *hardened-sources-2.6.19-r2 (23 Dec 2006)
994    
995     23 Dec 2006; Christian Heim <phreak@gentoo.org>
996     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
997     Revision bump to pull in genpatches-2.6.19-3 for #157186.
998 phreak 1.126
999     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1000     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1001     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1002     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1003     hardened-sources-2.6.19-r1.ebuild:
1004     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1005     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1006 pappy 1.125
1007     *hardened-sources-2.4.33.4 (17 Dec 2006)
1008    
1009     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1010     +hardened-sources-2.4.33.4.ebuild:
1011     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1012     and quilting
1013 phreak 1.124
1014     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1015    
1016     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1017     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1018     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1019     for reporting).
1020 phreak 1.123
1021     *hardened-sources-2.6.19 (13 Dec 2006)
1022    
1023     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1024     +hardened-sources-2.6.19.ebuild:
1025     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1026     Brad for providing that prompt update.
1027 phreak 1.122
1028     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1029    
1030     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1031     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1032     +hardened-sources-2.6.18-r3.ebuild:
1033     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1034     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1035 phreak 1.121
1036     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1037     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1038 nixnut 1.120
1039     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1040     Stable on ppc wrt bug 157356
1041 opfer 1.119
1042     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1043     hardened-sources-2.6.18.ebuild:
1044     stable x86, bug #157356
1045 phreak 1.118
1046     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1047    
1048     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1049     +hardened-sources-2.6.18-r2.ebuild:
1050     Revision bump, including 2.6.18.5 (via genpatches) and
1051     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1052     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1053     redesign.
1054 phreak 1.117
1055     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1056     hardened-sources-2.6.18.ebuild:
1057     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1058     of Mike Doty).
1059 phreak 1.116
1060     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1061    
1062     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1063     +hardened-sources-2.6.18-r1.ebuild:
1064     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1065 phreak 1.115
1066     *hardened-sources-2.6.18 (11 Nov 2006)
1067    
1068     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1069     +hardened-sources-2.6.18.ebuild:
1070     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1071 solar 1.114
1072     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1073     - mark amd64 stable also. bug #151877
1074 solar 1.113
1075     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1076     - mark 2.6.17-r1 stable
1077 phreak 1.112
1078     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1079     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1080     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1081 phreak 1.111
1082     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1083    
1084     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1085     +hardened-sources-2.6.17-r1.ebuild:
1086     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1087     grsecurity patch.
1088 phreak 1.110
1089     *hardened-sources-2.6.17 (17 Aug 2006)
1090    
1091     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1092     +hardened-sources-2.6.17.ebuild:
1093     Bumping the hardened-sources-2.6 series to 2.6.17, using
1094     genpatches-2.6.17-6.base.
1095 solar 1.109
1096     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1097     - stable on x86 and amd64
1098 solar 1.108
1099     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1100    
1101     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1102     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1103     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1104     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1105     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1106     crusty ebuilds
1107 johnm 1.107
1108     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1109     hardened-sources-2.6.16-r10.ebuild:
1110     marking stable on x86 and amd64
1111 solar 1.106
1112     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1113     - 2.4.32-r6 stable on x86. RSBAC state unknown
1114 kang 1.105
1115     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1116    
1117     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1118     +hardened-sources-2.4.32-r7.ebuild:
1119     Bump PaX for RSBAC to test-17
1120 johnm 1.104
1121     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1122    
1123     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1124     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1125     hardened-sources-2.6.16 bump to latest -base.
1126 solar 1.103
1127     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1128    
1129     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1130     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1131     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1132     sysctl controlable resource logging
1133 johnm 1.102
1134     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1135    
1136     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1137     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1138     push new 2.6.16 release in preparation for stable
1139 solar 1.101
1140     22 May 2006; <solar@gentoo.org> :
1141     - redigest bug 134002
1142 kang 1.100
1143     *hardened-sources-2.4.32-r5 (16 May 2006)
1144    
1145     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1146     +hardened-sources-2.4.32-r5.ebuild:
1147     Fixes rsbac common patching (new patch in new -r5 patchset)
1148 solar 1.99
1149     *hardened-sources-2.4.32-r4 (13 May 2006)
1150    
1151     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1152     +hardened-sources-2.4.32-r4.ebuild:
1153     - security bumps
1154 johnm 1.98
1155     *hardened-sources-2.6.16-r6 (03 May 2006)
1156    
1157     03 May 2006; John Mylchreest <johnm@gentoo.org>
1158     +hardened-sources-2.6.16-r6.ebuild:
1159     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1160 johnm 1.97
1161     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1162     hardened-sources-2.6.14-r8.ebuild:
1163     fix x86_64 build problem, this will delay the digest issue again for a short
1164     while but it will sort itself out
1165 johnm 1.96
1166     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1167     hardened-sources-2.6.14-r8.ebuild:
1168     bump hardened patchset
1169 antarus 1.94
1170     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1171     files/digest-hardened-sources-2.4.32-r2,
1172     files/digest-hardened-sources-2.4.32-r3,
1173     files/digest-hardened-sources-2.6.14-r8, Manifest:
1174     Fixing duff SHA256 digests: Bug # 131293
1175 johnm 1.93
1176 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1177    
1178     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1179     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1180     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1181     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1182     cleanup of old uneccessary sources
1183    
1184 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1185     fix digest
1186 johnm 1.92
1187     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1188    
1189     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1190     +hardened-sources-2.6.14-r8.ebuild:
1191     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1192 johnm 1.91
1193     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1194     Turning on gpg-signing again, and recomitting
1195 johnm 1.90
1196     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1197    
1198     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1199     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1200     +hardened-sources-2.6.16-r4.ebuild:
1201     Fix numerous security vulns
1202 solar 1.89
1203     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1204    
1205     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1206     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1207     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1208     - security bump for bug #112791. Removed old ebuilds
1209 johnm 1.88
1210     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1211    
1212     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1213     +hardened-sources-2.6.16-r3.ebuild:
1214     Removing silly localversion which I missed
1215 johnm 1.87
1216     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1217    
1218     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1219     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1220     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1221 johnm 1.86
1222     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1223    
1224     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1225     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1226     +hardened-sources-2.6.16-r2.ebuild:
1227     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1228     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1229 johnm 1.85
1230     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1231    
1232     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1233     +hardened-sources-2.6.16-r1.ebuild:
1234     Bumping to include ppc build fix and 2.6.16.3
1235 tsunam 1.84
1236     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1237     hardened-sources-2.6.14-r6.ebuild:
1238     Stable on x86; bug #127718
1239 johnm 1.83
1240     *hardened-sources-2.6.16 (31 Mar 2006)
1241    
1242     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1243     +hardened-sources-2.6.16.ebuild:
1244     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1245     2.6.16.1
1246 cryos 1.82
1247     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1248     hardened-sources-2.6.14-r6.ebuild:
1249     Stable on amd64, bug 127718.
1250 nixnut 1.81
1251     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1252     Stable on ppc. Bug #127718
1253 johnm 1.80
1254     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1255     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1256     -hardened-sources-2.6.14-r4.ebuild:
1257     Cleanup.
1258 johnm 1.79
1259     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1260    
1261     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1262     +hardened-sources-2.6.14-r6.ebuild:
1263     Fixes grsec policy recreation bug and adds a
1264     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1265 solar 1.78
1266     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1267     - stable on x86
1268 hansmi 1.77
1269     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1270     hardened-sources-2.6.14-r5.ebuild:
1271     Stable on ppc.
1272 johnm 1.76
1273     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1274    
1275     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1276     +hardened-sources-2.6.14-r5.ebuild:
1277     fixing every known exploit
1278 solar 1.75
1279     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1280    
1281     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1282     +hardened-sources-2.4.32-r2.ebuild:
1283     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1284 solar 1.74
1285     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1286    
1287     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1288     - version bump for new genpatches which fix up a few sec holes
1289 solar 1.73
1290     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1291    
1292     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1293     - revision bump to add misc vital linux kernel security patches.
1294 johnm 1.72
1295     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1296    
1297     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1298     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1299     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1300 johnm 1.71
1301     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1302     hardened-sources-2.6.14-r2.ebuild:
1303     making x86 & amd64 stable following testing.
1304 johnm 1.70
1305     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1306    
1307     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1308     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1309     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1310     network hooks.
1311 johnm 1.69
1312     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1313     hardened-sources-2.6.14-r1.ebuild:
1314     bumping to stable early for sec fix on x86 & amd64
1315 johnm 1.68
1316     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1317    
1318     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1319     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1320     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1321 solar 1.67
1322     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1323     - stable on x86 security bug #114227 CAN-2005-3257
1324 kang 1.66
1325     *hardened-sources-2.4.32 (19 Nov 2005)
1326    
1327     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1328     +hardened-sources-2.4.32.ebuild:
1329     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1330     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1331     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1332     rsbac >> /etc/portage/package.use)
1333 johnm 1.65
1334     *hardened-sources-2.6.14 (14 Nov 2005)
1335    
1336     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1337     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1338     Bumping 2.6 series to 2.6.14.2
1339 johnm 1.64
1340     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1341    
1342     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1343     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1344     +hardened-sources-2.6.13-r2.ebuild:
1345     Fixes minor build error in ppc.
1346 johnm 1.63
1347     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1348    
1349     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1350     +hardened-sources-2.6.13-r1.ebuild:
1351     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1352     2.6.13.4, fixes some major amd64 stability problems.
1353 johnm 1.62
1354     *hardened-sources-2.6.13 (16 Sep 2005)
1355    
1356     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1357     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1358     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1359     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1360     users should test this thoroughly.
1361 solar 1.61
1362     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1363     - stable on x86
1364 johnm 1.60
1365     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1366    
1367     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1368     +hardened-sources-2.6.11-r15.ebuild:
1369     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1370     grsec redefining curr_ip struct.
1371 solar 1.59
1372     *hardened-sources-2.4.31 (20 Jun 2005)
1373    
1374     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1375     initial import of 2.4.31 tree
1376 johnm 1.58
1377     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1378    
1379     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1380     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1381     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1382     naming scheme to abide by genpatches
1383 johnm 1.57
1384     *hardened-sources-2.6.11-r13 (18 May 2005)
1385    
1386     18 May 2005; John Mylchreest <johnm@gentoo.org>
1387     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1388     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1389     target. sorry about that. Fixes bug #93022
1390 johnm 1.56
1391     *hardened-sources-2.6.11-r12 (17 May 2005)
1392    
1393     17 May 2005; John Mylchreest <johnm@gentoo.org>
1394     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1395     +hardened-sources-2.6.11-r12.ebuild:
1396     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1397     merges in genpatches-base
1398 johnm 1.55
1399     *hardened-sources-2.6.11-r12 (17 May 2005)
1400    
1401     17 May 2005; John Mylchreest <johnm@gentoo.org>
1402     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1403     +hardened-sources-2.6.11-r12.ebuild:
1404     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1405     merges in genpatches-base
1406 solar 1.54
1407     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1408     -files/2.4.27-cmdline-race.patch,
1409     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1410     -files/2.4.28-grsec-binfmt_a.out.patch,
1411     -files/2.4.28-grsec-cmdline-race.patch,
1412     -files/2.4.28-selinux-binfmt_a.out.patch,
1413     -files/2.4.28-selinux-cmdline-race.patch,
1414     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1415     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1416     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1417     cleanup..
1418 solar 1.53
1419     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1420    
1421     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1422     - disable aout by default
1423 solar 1.52
1424     *hardened-sources-2.4.30 (18 Apr 2005)
1425    
1426     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1427     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1428     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1429     use
1430 tocharian 1.50
1431 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1432    
1433     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1434     +hardened-sources-2.4.29.ebuild:
1435     New hardened-patches-2.4-29.0 patchball.
1436     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1437    
1438     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1439    
1440     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1441     +hardened-sources-2.4.28-r5.ebuild:
1442     Added a fix for a PaX vulnerability.
1443    
1444     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1445 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1446     Stable on x86
1447 solar 1.49
1448     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1449     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1450     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1451     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1452     - fixed/added RDEPEND= in all kernel-2 ebuilds
1453 tocharian 1.48
1454     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1455    
1456     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1457     +hardened-sources-2.4.28-r4.ebuild:
1458     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1459     backport of neighbour hash updates.
1460 tocharian 1.47
1461     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1462     hardened-sources-2.4.28-r3.ebuild:
1463     Stable on x86
1464 tseng 1.46
1465     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1466    
1467     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1468     +hardened-sources-2.6.10-r3.ebuild:
1469     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1470     in 2005.0
1471 tocharian 1.45
1472     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1473     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1474     hardened-sources-2.4.28-r2.ebuild:
1475     Mark stable on x86
1476 tocharian 1.44
1477     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1478    
1479     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1480     +hardened-sources-2.4.28-r3.ebuild:
1481     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1482 tocharian 1.43
1483     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1484     hardened-sources-2.4.28.ebuild:
1485     Mark stable on x86.
1486 tocharian 1.42
1487     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1488    
1489     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1490     +hardened-sources-2.4.28-r2.ebuild:
1491     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1492     Mazinger for grsecurity patches as well.
1493 plasmaroo 1.41
1494     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1495    
1496     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1497     Security bump. Thank tocharian for rolling a new patchset...
1498 solar 1.40
1499     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1500     +files/2.4.28-grsec-cmdline-race.patch,
1501     +files/2.4.28-selinux-binfmt_a.out.patch,
1502     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1503     - Round up remaining security patches that appear to be missing in 2.4.28. -
1504     PaX standalone updated to current. hgpv=28.1
1505 solar 1.39
1506     *hardened-sources-2.4.28 (28 Nov 2004)
1507    
1508     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1509     security bump. Thank tocharian for rolling a new patchset
1510 scox 1.31
1511 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1512    
1513     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1514     +hardened-sources-2.4.27-r3.ebuild:
1515     Applies the new 2.4-27.2 patchball which updates
1516     GRSecurity to the 2.0.1 version.
1517    
1518 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1519    
1520     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1521     +hardened-sources-2.4.27-r2.ebuild:
1522     Version bump.
1523     This version uses the new 2.4-27.1 patchball which updates
1524     both the SELinux PaX hooks patch and the SELinux headers.
1525    
1526 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1527    
1528     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1529     +hardened-sources-2.4.27-r1.ebuild,
1530     -hardened-sources-2.4.27.ebuild,
1531     +files/2.4.27-cmdline-race.patch:
1532     Version bump, fix for cmdline race. See bug #59905.
1533    
1534     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1535    
1536     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1537     +hardened-sources-2.4.26-r6.ebuild,
1538     -hardened-sources-2.4.26-r5.ebuild,
1539     -hardened-sources-2.4.26-r4.ebuild,
1540     +files/2.4.26-cmdline-race.patch:
1541     Version bump, fix for cmdline race. See bug #59905.
1542    
1543 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1544    
1545     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1546     +hardened-sources-2.4.27.ebuild,
1547     +files/2.4.27-CAN-2004-0394.patch:
1548     Ported the patchball to the 2.4.27 kernel version.
1549    
1550 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1551    
1552     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1553     +hardened-sources-2.4.26-r5.ebuild:
1554 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1555 scox 1.34 It adds the following features:
1556     - Squashfs
1557     - Ebtables
1558     - Netdev random (core+drivers)
1559     - Watchdog Timer (WDT) fix.
1560    
1561 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1562    
1563     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1564     +hardened-sources-2.4.26-r4.ebuild,
1565     +files/2.4.26-CAN-2004-0415.patch,
1566     -hardened-sources-2.4.26-3:
1567     Version bump, fix for CAN 0415, see bug #59378.
1568    
1569 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1570    
1571     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1572     +hardened-sources-2.4.26-r3.ebuild,
1573     +files/2.4.26-CAN-2004-0497.patch,
1574     -hardened-sources-2.4.26-r2.ebuild:
1575     Version bump, fixed CAN 0497, see bug #56171.
1576    
1577 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1578    
1579     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1580 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1581 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1582     +files/2.4.26-CAN-2004-0535.patch,
1583     -hardened-sources-2.4.26-r1.ebuild:
1584     Fixes for both CAN 0495 and 0535, see bug #54976
1585 pvdabeel 1.27
1586 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1587     hardened-sources-2.4.26-r1.ebuild:
1588     QA - fix use invocation
1589 scox 1.28
1590     *hardened-sources-2.4.26-r1 (22 June 2004)
1591    
1592     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1593     +hardened-sources-2.4.26-r1.ebuild,
1594     +files/2.4.26-CAN-2004-0394.patch,
1595     +files/2.4.26-signal-race.patch,
1596     -hardened-sources-2.4.26.ebuild,
1597     -hardened-sources-2.4.24-r3.ebuild:
1598     Version bump for the CAN-2004-0394 issue and bug #53804
1599     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1600    
1601    
1602 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1603     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1604     Masked hardened-sources-2.4.26.ebuild broken for ppc
1605    
1606     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1607     hardened-sources-2.4.24-r3.ebuild:
1608     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1609 plasmaroo 1.25
1610 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1611    
1612     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1613     +hardened-sources-2.4.26.ebuild:
1614     Updated hardened-sources for the 2.4.26 kernel
1615     Removed broken components, updated almost everything.
1616    
1617 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1618    
1619     17 Apr 2004; <plasmaroo@gentoo.org>
1620     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1621     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1622     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1623     +hardened-sources-2.4.24-r3.ebuild:
1624     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1625     vulnerabilities. Old revisions removed.
1626 plasmaroo 1.24
1627     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1628    
1629     15 Apr 2004; <plasmaroo@gentoo.org>
1630     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1631     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1632     Version bump for the CAN-2004-0109 issue; bug #47881.
1633 aliz 1.23
1634     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1635     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1636     Add eutils to inherit.
1637 plasmaroo 1.22
1638     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1639    
1640     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1641     files/hardened-sources-2.4.24.munmap.patch:
1642     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1643 scox 1.19
1644 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1645 scox 1.26
1646 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1647     hardened-sources-2.4.24.ebuild:
1648     Version bump, updated most of the components.
1649     This release includes the following:
1650    
1651     - Hardened security
1652     - Netfilter patch-o-matic 20031219
1653     - FreeSWAN 2.04 & x509 1.4.8
1654     - EVMS 2.2.2
1655     - XFS 1.3.1
1656     - cryptoloop jari
1657     - grsecurity 2.0-rc4
1658     - SELinux
1659     - PaX 200402060000
1660     - PaX Obscurity 200308302223
1661     - Others...
1662    
1663     Neither -ck nor systrace are included anymore.
1664    
1665 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1666    
1667     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1668     hardened-sources-2.4.22-r2.ebuild:
1669 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1670 scox 1.19
1671     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1672 iggy 1.17
1673     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1674 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1675 iggy 1.16
1676     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1677 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1678     Version bump for the 'do_brk' vulnerability.
1679 iggy 1.15
1680     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1681     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1682     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1683     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1684 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1685 frogger 1.14
1686     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1687     hardened-sources-2.4.22.ebuild:
1688 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1689     components. These are no longer handled in the kernel
1690     so this code was not necessary.
1691 frogger 1.13
1692     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1693     New 2.4.22 based hardened-sources thanks to
1694     Phil West <p.west@computer.org>.
1695    
1696     These sources include:
1697 plasmaroo 1.18 - New SELinux API
1698     - Updated CK-base
1699     - Updated GRSec
1700     - Systrace
1701     - SuperFreeS/WAN 1.99.8
1702     - Propolice kernel build support
1703     - EVMS
1704     - Other various security related patches
1705 frogger 1.11
1706 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1707    
1708     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1709     Updated hardened-sources based on the 2.4.21 Linux kernel.
1710     This includes updates to most major components such as:
1711 plasmaroo 1.18 - ck-base-0306300059
1712     - selinux-2.4-2003071106
1713     - grsecurity-2.0-rc1
1714     - Updated IPTables patch-o-matic
1715     - Updated SuperFreeS/WAN
1716    
1717 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1718     updated patch set ready for the 2.4.21 based kernel.
1719    
1720 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1721     Initial import of hardened-sources-2.4.20-r4. This revision
1722     includes only a few changes, but one of these is an important
1723     security fix. It is recommended all users of hardened-sources
1724     upgrade to this release.
1725 plasmaroo 1.18
1726 frogger 1.11 - ioperm bug fix
1727     - fixed compilation failure when building without GRSec
1728 plasmaroo 1.18
1729 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1730     due to time constraints, but is planned for inclusion in the near
1731     future.
1732 msterret 1.10
1733     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1734    
1735     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1736     hardened-sources-2.4.20-r3.ebuild:
1737 plasmaroo 1.18 Add Header...
1738 frogger 1.9
1739     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1740     hardened-sources-2.4.20-r3.ebuild:
1741     Removed warnings from ebuild. This kernel should be safe to
1742     use at this point.
1743 frogger 1.8
1744     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1745    
1746     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1747     hardened-sources-2.4.20-r3.ebuild:
1748     New revision. Includes the following changes over -r2:
1749 plasmaroo 1.18
1750 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1751     - Super FreeS/WAN 1.99.7rc2
1752     - PaX for the LSM/SELinux branch
1753     - GRSecurity 2.0-pre4 (role based access control)
1754     - Systrace 1.3
1755     - EXT3 fixes
1756     - EVMS 2.0.1
1757     - GCC 3.1+ compile optimizations
1758     - ProPolice kernel build support
1759     - Hashing table security fixes
1760 frogger 1.3
1761     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1762 frogger 1.7
1763     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1764     Initial import of hardened-sources-r2. This new
1765     ebuild includes many new performance and security
1766     related patches. As in -r1, it will patch in
1767     LSM/SELinux if "selinux" is in USE, otherwise it
1768     will patch in GRSecurity. The following patches
1769     are included in this revision:
1770 plasmaroo 1.18
1771 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1772     (pulled from the base CK patch)
1773     - ptrace exploit patch for the LSM kernel
1774     (the GRSec patch already fixes this)
1775     - LSM 2.4-2003040709
1776     - SELinux 2.4-2003040709
1777     - Systrace v1.2
1778     - IPTables patch-o-matic base patches - 20030107
1779     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1780     - Super FreeS/WAN 1.99.6.1
1781     - GRSecurity 1.9.9g
1782     - MPPE
1783     - EXT3 data journal fix
1784     - CIPE 1.5.4
1785 frogger 1.6
1786     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1787     hardened-sources-2.4.20-r1.ebuild, manifest:
1788 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1789 frogger 1.5
1790     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1791     hardened-sources-2.4.20-r1.ebuild:
1792     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1793     is patched in instead. Ptrace patches for selinux have also been added. In
1794     either case, systrace support will be patched in as well.
1795 frogger 1.3
1796     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1797     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1798 plasmaroo 1.18 Revision bump for new sources.
1799 frogger 1.4
1800 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1801 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1802 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1803 method 1.1
1804 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1805    
1806 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1807     hardened-sources-2.4.20.ebuild:
1808 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20