/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.304 - (hide annotations) (download)
Mon Mar 30 01:48:30 2009 UTC (5 years ago) by gengor
Branch: MAIN
Changes since 1.303: +5 -1 lines
Stable sys-kernel/hardened-sources-2.6.28-r7 on amd64/x86 and remove 2.6.28-r4
(Portage version: 2.1.6.7/cvs/Linux i686)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 gengor 1.268 # Copyright 2000-2009 Gentoo Foundation; Distributed under the GPL v2
3 gengor 1.304 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.303 2009/03/27 06:29:16 gengor Exp $
4    
5     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
6     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
7     Stable amd64/x86 and remove old.
8 gengor 1.303
9     *hardened-sources-2.6.28-r7 (27 Mar 2009)
10    
11     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
12     +hardened-sources-2.6.28-r7.ebuild:
13     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
14 gengor 1.302
15     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
16     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
17     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
18     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
19     Stable amd64/x86 and remove old versions.
20 nixnut 1.301
21     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
22     ppc stable
23 gengor 1.300
24     *hardened-sources-2.6.28-r6 (21 Mar 2009)
25    
26     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
27     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
28     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
29 gengor 1.299
30     *hardened-sources-2.6.28-r5 (20 Mar 2009)
31    
32     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
33     +hardened-sources-2.6.28-r5.ebuild:
34     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
35 gengor 1.298
36     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
37     hardened-sources-2.6.28-r4.ebuild:
38     Stable amd64/x86.
39 gengor 1.297
40     *hardened-sources-2.6.28-r4 (18 Mar 2009)
41    
42     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
43     +hardened-sources-2.6.28-r4.ebuild:
44     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
45     compilation with CPA_DEBUG and more.
46 gengor 1.296
47     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
48     hardened-sources-2.6.28-r3.ebuild:
49     Quick stable amd64/x86.
50 gengor 1.295
51     *hardened-sources-2.6.28-r3 (15 Mar 2009)
52    
53     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
54     +hardened-sources-2.6.28-r3.ebuild:
55     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
56 nixnut 1.294
57     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
58     ppc stable
59 gengor 1.293
60     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
61     hardened-sources-2.6.28-r2.ebuild:
62     Stable amd64/x86.
63 gengor 1.292
64     *hardened-sources-2.6.28-r2 (11 Mar 2009)
65    
66     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
67     +hardened-sources-2.6.28-r2.ebuild:
68     Version bump bringing in latest grsecurity patch.
69 gengor 1.291
70     *hardened-sources-2.6.28-r1 (09 Mar 2009)
71    
72     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
73     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
74     Version bump and remove old.
75 nixnut 1.290
76     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
77     ppc stable
78 gengor 1.289
79     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
80     hardened-sources-2.6.27-r8.ebuild:
81     Remove amd64 testing keyword, bug 256226.
82 gengor 1.288
83     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
84     hardened-sources-2.6.27-r8.ebuild:
85     Revert amd64 stable, bug #256226.
86 gengor 1.287
87     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
88     hardened-sources-2.6.27-r8.ebuild:
89     Stable on amd64/x86.
90 gengor 1.286
91     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
92     -hardened-sources-2.6.27-r6.ebuild:
93     Remove old 2.6.27 release.
94 gengor 1.285
95     *hardened-sources-2.6.27-r8 (24 Feb 2009)
96    
97     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
98     +hardened-sources-2.6.27-r8.ebuild:
99     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
100     and probably more.
101 nixnut 1.284
102     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
103     ppc stable
104 gengor 1.283
105     *hardened-sources-2.6.28 (25 Jan 2009)
106    
107     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
108     +hardened-sources-2.6.28.ebuild:
109     Initial 2.6.28 release.
110 gengor 1.282
111     *hardened-sources-2.6.27-r7 (25 Jan 2009)
112    
113     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
114     +hardened-sources-2.6.27-r7.ebuild:
115     Bump to Linux 2.6.27.13.
116 gengor 1.281
117     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
118     hardened-sources-2.6.26-r9.ebuild:
119     Stable amd64/x86.
120 gengor 1.280
121     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
122     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
123     -hardened-sources-2.6.27-r5.ebuild:
124     Remove problem versions.
125 gengor 1.279
126     *hardened-sources-2.6.27-r6 (24 Jan 2009)
127    
128     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
129     +hardened-sources-2.6.27-r6.ebuild:
130     Revert PaX test29 to test30 changes. Fixes bug 256226.
131 gengor 1.277
132     *hardened-sources-2.6.27-r5 (24 Jan 2009)
133    
134     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
135     +hardened-sources-2.6.27-r5.ebuild:
136 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
137 gengor 1.277 254843.
138 gengor 1.276
139     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
140     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
141     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
142     Remove problem versions.
143 nixnut 1.275
144     23 Jan 2009; nixnut <nixnut@gentoo.org>
145     hardened-sources-2.6.25-r13.ebuild:
146     ppc stable
147 gengor 1.274
148     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
149     hardened-sources-2.6.25-r13.ebuild:
150     Fasttrack stable amd64/x86.
151 gengor 1.273
152     *hardened-sources-2.6.26-r9 (21 Jan 2009)
153    
154     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
155     +hardened-sources-2.6.26-r9.ebuild:
156 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
157 gengor 1.272
158     *hardened-sources-2.6.25-r13 (20 Jan 2009)
159    
160     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
161     +hardened-sources-2.6.25-r13.ebuild:
162 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
163 nixnut 1.271
164     20 Jan 2009; nixnut <nixnut@gentoo.org>
165     hardened-sources-2.6.25-r12.ebuild:
166     ppc stable
167 gengor 1.270
168     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
169     hardened-sources-2.6.25-r12.ebuild:
170     Stable amd64/x86.
171 gengor 1.269
172     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
173     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
174     -hardened-sources-2.6.27-r2.ebuild:
175     Clean out old versions.
176 gengor 1.268
177     *hardened-sources-2.6.27-r4 (14 Jan 2009)
178     *hardened-sources-2.6.26-r8 (14 Jan 2009)
179     *hardened-sources-2.6.25-r12 (14 Jan 2009)
180    
181     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
182     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
183     +hardened-sources-2.6.27-r4.ebuild:
184     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
185     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
186     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
187     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
188 nixnut 1.267
189     15 Dec 2008; nixnut <nixnut@gentoo.org>
190     hardened-sources-2.6.25-r11.ebuild:
191     Stable on ppc
192 gengor 1.266
193     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
194     hardened-sources-2.6.25-r11.ebuild:
195     Stable amd64/x86.
196 gengor 1.265
197     *hardened-sources-2.6.27-r3 (07 Dec 2008)
198    
199     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
200     +hardened-sources-2.6.27-r3.ebuild:
201     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
202     Fixes bug #248754, #249729 and #246607.
203 gengor 1.264
204     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
205     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
206     Remove old versions.
207 gengor 1.262
208     *hardened-sources-2.6.26-r7 (03 Dec 2008)
209     *hardened-sources-2.6.25-r11 (03 Dec 2008)
210    
211 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
212     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
213 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
214     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
215     Both include many backports from 2.6.27.{6,7} -stable releases.
216 gengor 1.261
217     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
218     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
219     Remove versions broken on ARCHes != x86/amd64.
220 gengor 1.260
221     *hardened-sources-2.6.27-r2 (24 Nov 2008)
222    
223     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
224     +hardened-sources-2.6.27-r2.ebuild:
225     Bump to Linux 2.6.27.7 and latest grsecurity patch.
226 gengor 1.259
227     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
228     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
229     Remove old versions.
230 gengor 1.258
231     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
232     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
233     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
234 nixnut 1.257
235     16 Nov 2008; nixnut <nixnut@gentoo.org>
236     hardened-sources-2.6.25-r10.ebuild:
237     Stable on ppc
238 gengor 1.256
239     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
240     hardened-sources-2.6.25-r10.ebuild:
241     Stable amd64/x86.
242 gengor 1.255
243     *hardened-sources-2.6.26-r6 (12 Nov 2008)
244    
245     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
246     +hardened-sources-2.6.26-r6.ebuild:
247     Bump to Linux 2.6.26.8 and fix security bug #245650.
248 gengor 1.254
249     *hardened-sources-2.6.25-r10 (12 Nov 2008)
250    
251     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
252     +hardened-sources-2.6.25-r10.ebuild:
253     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
254 gengor 1.253
255     *hardened-sources-2.6.27-r1 (09 Nov 2008)
256    
257     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
258     +hardened-sources-2.6.27-r1.ebuild:
259     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
260 gengor 1.252
261     *hardened-sources-2.6.27 (04 Nov 2008)
262    
263     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
264     +hardened-sources-2.6.27.ebuild:
265     Initial 2.6.27 release.
266 gengor 1.251
267     *hardened-sources-2.6.26-r5 (03 Nov 2008)
268    
269     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
270     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
271     +hardened-sources-2.6.26-r5.ebuild:
272     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
273     Clean out some old versions.
274 nixnut 1.250
275     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
276     Stable on ppc
277 gengor 1.249
278     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
279     hardened-sources-2.6.25-r9.ebuild:
280     Stable on amd64/x86.
281 gengor 1.248
282     *hardened-sources-2.6.25-r9 (26 Oct 2008)
283    
284     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
285     +hardened-sources-2.6.25-r9.ebuild:
286     Update to Linux 2.6.25.19
287 nixnut 1.247
288     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
289     Stable on ppc
290 gengor 1.246
291     *hardened-sources-2.6.26-r4 (14 Oct 2008)
292    
293     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
294     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
295     Update to latest grsecurity patch, fixing building of non-modular kernels.
296 gengor 1.245
297     *hardened-sources-2.6.26-r3 (12 Oct 2008)
298    
299     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
300     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
301     +hardened-sources-2.6.26-r3.ebuild:
302     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
303     2.6.26-r1: Removed.
304     2.6.25-r8: Stable amd64/x86.
305 gengor 1.244
306     *hardened-sources-2.6.25-r8 (09 Oct 2008)
307    
308     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
309     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
310     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
311     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
312 nixnut 1.243
313     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
314     Stable on ppc
315 gengor 1.242
316     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
317     hardened-sources-2.6.25-r7.ebuild:
318     Stable amd64/x86.
319 gengor 1.241
320     *hardened-sources-2.6.26-r2 (13 Sep 2008)
321    
322     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
323     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
324     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
325     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
326 gengor 1.240
327     *hardened-sources-2.6.25-r7 (13 Sep 2008)
328    
329     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
330     +hardened-sources-2.6.25-r7.ebuild:
331     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
332 gengor 1.239
333     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
334     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
335     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
336     hardened-sources-2.6.26-r1.ebuild:
337     Update DESCRIPTION and HGPV_URI.
338 gengor 1.238
339     *hardened-sources-2.6.25-r6 (09 Sep 2008)
340    
341     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
342     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
343     2.6.25-r6: Update to Linux 2.6.25.17.
344     2.6.24-r3: Removed.
345 gengor 1.237
346     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
347     hardened-sources-2.6.25-r5.ebuild:
348     Stable on amd64/x86
349 gengor 1.236
350     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
351     Update my email address.
352 nixnut 1.235
353     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
354     stable on ppc
355 battousai 1.234
356     *hardened-sources-2.6.26-r1 (23 Aug 2008)
357     *hardened-sources-2.6.25-r5 (23 Aug 2008)
358    
359     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
360     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
361     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
362     +hardened-sources-2.6.26-r1.ebuild:
363     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
364     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
365     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
366     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
367     (gengor).
368 solar 1.233
369     *hardened-sources-2.6.26 (18 Aug 2008)
370     *hardened-sources-2.6.25-r4 (18 Aug 2008)
371    
372     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
373     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
374     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
375     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
376     2.6.25-r2: Removed.
377 tove 1.232
378     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
379     Remove phreak from metadata.xml (#96398)
380 solar 1.231
381     *hardened-sources-2.6.25-r3 (31 Jul 2008)
382    
383     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
384     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
385     +hardened-sources-2.6.25-r3.ebuild:
386     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
387     fixes, including security bug #231750.
388 nixnut 1.230
389     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
390     Stable on ppc
391 solar 1.229
392     *hardened-sources-2.6.25-r2 (05 Jul 2008)
393    
394     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
395     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
396     +hardened-sources-2.6.25-r2.ebuild:
397     2.6.23-r4: Stable x86/amd64
398     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
399     2.6.23-r{11,12}: Removed due to multiple vulns.
400     (gengor & kerframil)
401 nixnut 1.228
402     04 Jul 2008; nixnut <nixnut@gentoo.org>
403     hardened-sources-2.6.23-r13.ebuild:
404     Stable on ppc
405 solar 1.227
406     *hardened-sources-2.6.25-r1 (30 Jun 2008)
407    
408     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
409     +hardened-sources-2.6.25-r1.ebuild:
410     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
411     grsecurity release. 2.6.23-r13: x86/amd64 stable
412 solar 1.226
413     *hardened-sources-2.6.25 (17 Jun 2008)
414     *hardened-sources-2.6.24-r3 (17 Jun 2008)
415     *hardened-sources-2.6.23-r13 (17 Jun 2008)
416    
417     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
418     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
419     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
420     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
421     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
422     2.6.25: Initial 2.6.25 release.
423 solar 1.225
424     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
425     - fasttrack to stable x86/amd64
426 swegener 1.224
427     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
428     Fix broken digest for linux-2.6.24.tar.bz2.
429 solar 1.223
430     *hardened-sources-2.6.24-r2 (11 May 2008)
431     *hardened-sources-2.6.23-r12 (11 May 2008)
432    
433     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
434     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
435     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
436     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
437     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
438     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
439     security bugs 219901, 220691, 220975, 220979, 221123. New
440     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
441     should be removed as far as I'm concerned, everything else remove due to
442     vulnerable to numerous security bugs or brokeness.
443 nixnut 1.222
444     10 May 2008; nixnut <nixnut@gentoo.org>
445     hardened-sources-2.6.23-r11.ebuild:
446     Stable on ppc
447 solar 1.221
448     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
449     - -r11 stable on x86/amd64
450 solar 1.220
451     *hardened-sources-2.6.23-r11 (01 May 2008)
452    
453     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
454     - version bump to fix ulgy linux bugs
455 phreak 1.219
456     *hardened-sources-2.6.24-r1 (30 Apr 2008)
457    
458     30 Apr 2008; Christian Heim <phreak@gentoo.org>
459     +hardened-sources-2.6.24-r1.ebuild:
460     Revision bump (thanks to Kerin and Gordon, again), pulling
461     genpatches-2.6.24-7, solving #219089. Additionally contains further security
462     fixes plus some minor updates.
463 phreak 1.218
464     *hardened-sources-2.6.23-r10 (30 Apr 2008)
465    
466     30 Apr 2008; Christian Heim <phreak@gentoo.org>
467     +hardened-sources-2.6.23-r10.ebuild:
468     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
469     Additional contains "various other fixes".
470 phreak 1.217
471     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
472     Update the longdescription in metadata, thanks to Gordon Malm.
473 nixnut 1.216
474     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
475     Stable on ppc wrt bug #213255
476 solar 1.215
477     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
478     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
479     - stable on x86/amd64 per request. Removed obsolete ebuilds
480 phreak 1.214
481     *hardened-sources-2.6.24 (07 Apr 2008)
482    
483     07 Apr 2008; Christian Heim <phreak@gentoo.org>
484     +hardened-sources-2.6.24.ebuild:
485     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
486     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
487     for the many contributions and their continued effort in #216612) based on
488     2.6.24 and genpatches-2.6.24-5.
489    
490     The current ebuild/patchset contains these things:
491     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
492     * Introduces bespoke server and workstation oriented security levels
493     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
494 phreak 1.213
495     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
496     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
497     maintaining it).
498 phreak 1.212
499     24 Mar 2008; Christian Heim <phreak@gentoo.org>
500     hardened-sources-2.4.35-r2.ebuild:
501     Fixing SRC_URI for 2.4.35-r2.
502 phreak 1.211
503     *hardened-sources-2.6.23-r9 (22 Mar 2008)
504    
505     22 Mar 2008; Christian Heim <phreak@gentoo.org>
506     +hardened-sources-2.6.23-r9.ebuild:
507     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
508     * Change the default GIDs for some grsecurity options
509     * Revamp the Hardened [Gentoo] security level and make it the default level
510     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
511     * Fix a recursive lock -- call to capable() within ptrace_attach()
512     * Fix bug that allows audit and iscsi operations to be controlled via netlink
513 solar 1.210
514     *hardened-sources-2.6.23-r8 (27 Feb 2008)
515    
516     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
517     - version bump from Kerin Millar bug 210026
518 solar 1.209
519     17 Feb 2008; <solar@gentoo.org> metadata.xml,
520     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
521     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
522     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
523     - stable on x86 and remove old ebuilds
524 solar 1.207
525     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
526 solar 1.208 - stable on amd64 per request of amd64 lead
527 solar 1.206
528     *hardened-sources-2.6.23-r7 (11 Feb 2008)
529    
530     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
531     - version bump from kerin.millar
532     Changes:
533    
534     * Bump to genpatches-base-2.6.23-9
535     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
536     * Disables COMPAT_VDSO in x86/defconfig
537     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
538 phreak 1.205
539     25 Jan 2008; Christian Heim <phreak@gentoo.org>
540     -hardened-sources-2.6.22-r8.ebuild:
541     Cleaning up old versions.
542 phreak 1.204
543     *hardened-sources-2.6.23-r6 (25 Jan 2008)
544    
545     25 Jan 2008; Christian Heim <phreak@gentoo.org>
546     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
547     Revision bump, pulling in the latest genpatches.
548 phreak 1.203
549     *hardened-sources-2.6.23-r5 (24 Dec 2007)
550    
551     24 Dec 2007; Christian Heim <phreak@gentoo.org>
552     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
553     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
554     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
555     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
556 phreak 1.202
557     24 Dec 2007; Christian Heim <phreak@gentoo.org>
558     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
559     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
560     -hardened-sources-2.6.23-r3.ebuild:
561     Cleaning out some unused, old versions.
562 phreak 1.201
563     24 Dec 2007; Christian Heim <phreak@gentoo.org>
564     hardened-sources-2.6.23-r4.ebuild:
565     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
566     in the tree for long, but there isn't much of a difference between this and
567     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
568 phreak 1.200
569     *hardened-sources-2.6.23-r4 (23 Dec 2007)
570    
571     23 Dec 2007; Christian Heim <phreak@gentoo.org>
572     +hardened-sources-2.6.23-r4.ebuild:
573     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
574 phreak 1.199
575     *hardened-sources-2.6.23-r3 (04 Dec 2007)
576    
577     04 Dec 2007; Christian Heim <phreak@gentoo.org>
578     +hardened-sources-2.6.23-r3.ebuild:
579     Revision bump, pulling in 2.6.23.9.
580 phreak 1.198
581     *hardened-sources-2.6.23-r2 (25 Nov 2007)
582    
583     25 Nov 2007; Christian Heim <phreak@gentoo.org>
584     +hardened-sources-2.6.23-r2.ebuild:
585     Updated patchset, thanks to solar.
586 phreak 1.197
587     *hardened-sources-2.6.23-r1 (31 Oct 2007)
588    
589     31 Oct 2007; Christian Heim <phreak@gentoo.org>
590     +hardened-sources-2.6.23-r1.ebuild:
591     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
592 solar 1.196
593     29 Oct 2007; <solar@gentoo.org> metadata.xml:
594     - update metadata.xml
595 phreak 1.195
596     25 Oct 2007; Christian Heim <phreak@gentoo.org>
597     hardened-sources-2.6.22-r8.ebuild:
598     Marking 2.6.22-r8 stable on amd64 and x86.
599 phreak 1.194
600     21 Oct 2007; Christian Heim <phreak@gentoo.org>
601     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
602     -hardened-sources-2.6.21-r4.ebuild:
603     Removing old ebuilds.
604 phreak 1.193
605     *hardened-sources-2.4.35-r2 (21 Oct 2007)
606    
607     21 Oct 2007; Christian Heim <phreak@gentoo.org>
608     +hardened-sources-2.4.35-r2.ebuild:
609     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
610     patches.
611 phreak 1.192
612     *hardened-sources-2.6.22-r8 (21 Oct 2007)
613    
614     21 Oct 2007; Christian Heim <phreak@gentoo.org>
615     +hardened-sources-2.6.22-r8.ebuild:
616     Yet another new patch, hopefully fixing the remaining issues we had w/
617     2.6.22. Candidate for stabling.
618 phreak 1.191
619     *hardened-sources-2.6.23 (13 Oct 2007)
620    
621     13 Oct 2007; Christian Heim <phreak@gentoo.org>
622     +hardened-sources-2.6.23.ebuild:
623     Initial hardened-sources-2.6.23. If people still have problems w/ bug
624     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
625 phreak 1.190
626     11 Oct 2007; Christian Heim <phreak@gentoo.org>
627     hardened-sources-2.6.20-r10.ebuild:
628     Pulling in yet another new genpatches version, fixing the PWC bug for real.
629 phreak 1.189
630     04 Oct 2007; Christian Heim <phreak@gentoo.org>
631     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
632     Removing old versions.
633 phreak 1.188
634     *hardened-sources-2.6.22-r7 (01 Oct 2007)
635    
636     01 Oct 2007; Christian Heim <phreak@gentoo.org>
637     +hardened-sources-2.6.22-r7.ebuild:
638     Revision bump, pulling in a newer patch. Should fix #194276.
639 phreak 1.187
640     30 Sep 2007; Christian Heim <phreak@gentoo.org>
641     hardened-sources-2.6.20-r10.ebuild:
642     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
643     Mike Doty).
644 phreak 1.186
645     *hardened-sources-2.6.22-r6 (26 Sep 2007)
646    
647     26 Sep 2007; Christian Heim <phreak@gentoo.org>
648     +hardened-sources-2.6.22-r6.ebuild:
649     Revision bump, grabbing up till Linux 2.6.22.9.
650 phreak 1.185
651     24 Sep 2007; Christian Heim <phreak@gentoo.org>
652     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
653     Cleaning up further.
654 phreak 1.184
655     *hardened-sources-2.6.20-r10 (24 Sep 2007)
656    
657     24 Sep 2007; Christian Heim <phreak@gentoo.org>
658     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
659     +hardened-sources-2.6.20-r10.ebuild:
660     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
661     revisions.
662 phreak 1.183
663     *hardened-sources-2.6.22-r5 (22 Sep 2007)
664    
665     22 Sep 2007; Christian Heim <phreak@gentoo.org>
666     +hardened-sources-2.6.22-r5.ebuild:
667     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
668 phreak 1.182
669     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
670     Removing johnm from metadata.xml (see #186467 for reference).
671 phreak 1.181
672     *hardened-sources-2.6.22-r4 (17 Sep 2007)
673    
674     17 Sep 2007; Christian Heim <phreak@gentoo.org>
675     +hardened-sources-2.6.22-r4.ebuild:
676     Revision bump, hopefully fixing all those weird PAX failures.
677 phreak 1.180
678     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
679     Updating the metadata.xml.
680 phreak 1.179
681     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
682     Removing tocharian from metadata due to his retirement (see #71718 for
683     reference).
684 phreak 1.178
685     *hardened-sources-2.6.20-r9 (30 Aug 2007)
686    
687     30 Aug 2007; Christian Heim <phreak@gentoo.org>
688     +hardened-sources-2.6.20-r9.ebuild:
689     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
690 phreak 1.177
691     29 Aug 2007; Christian Heim <phreak@gentoo.org>
692     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
693     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
694     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
695     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
696     -hardened-sources-2.6.22-r2.ebuild:
697     Removing some redundant versions.
698 phreak 1.176
699     *hardened-sources-2.4.35-r1 (29 Aug 2007)
700    
701     29 Aug 2007; Christian Heim <phreak@gentoo.org>
702     +hardened-sources-2.4.35-r1.ebuild:
703     Revision bump, new grsecurity patch.
704 phreak 1.175
705     *hardened-sources-2.6.20-r8 (26 Aug 2007)
706    
707     26 Aug 2007; Christian Heim <phreak@gentoo.org>
708     +hardened-sources-2.6.20-r8.ebuild:
709     Revision bump for Linux 2.6.20.17.
710 phreak 1.174
711     *hardened-sources-2.6.22-r3 (22 Aug 2007)
712    
713     22 Aug 2007; Christian Heim <phreak@gentoo.org>
714     +hardened-sources-2.6.22-r3.ebuild:
715     Revision bump for Linux 2.6.22.4.
716 phreak 1.173
717     16 Aug 2007; Christian Heim <phreak@gentoo.org>
718     hardened-sources-2.6.22-r2.ebuild:
719     Updated patchset, to fix the alignment against 2.6.22.3.
720 phreak 1.172
721     *hardened-sources-2.6.22-r2 (16 Aug 2007)
722    
723     16 Aug 2007; Christian Heim <phreak@gentoo.org>
724     +hardened-sources-2.6.22-r2.ebuild:
725     Revision bump for Linux 2.6.22.3.
726 phreak 1.171
727     *hardened-sources-2.4.35 (16 Aug 2007)
728    
729     16 Aug 2007; Christian Heim <phreak@gentoo.org>
730     +hardened-sources-2.4.35.ebuild:
731     Version bump, initial version for Linux 2.4.35.
732 phreak 1.170
733     *hardened-sources-2.6.21-r4 (16 Aug 2007)
734    
735     16 Aug 2007; Christian Heim <phreak@gentoo.org>
736     +hardened-sources-2.6.21-r4.ebuild:
737     Revision bump for Linux 2.6.21.6.
738 phreak 1.169
739     *hardened-sources-2.6.20-r7 (16 Aug 2007)
740    
741     16 Aug 2007; Christian Heim <phreak@gentoo.org>
742     +hardened-sources-2.6.20-r7.ebuild:
743     Revision bump for Linux 2.6.20.16.
744 phreak 1.168
745     *hardened-sources-2.6.22-r1 (13 Aug 2007)
746    
747     13 Aug 2007; Christian Heim <phreak@gentoo.org>
748     +hardened-sources-2.6.22-r1.ebuild:
749     Yet another revision bump.
750 phreak 1.167
751     *hardened-sources-2.6.22 (10 Aug 2007)
752    
753     10 Aug 2007; Christian Heim <phreak@gentoo.org>
754     +hardened-sources-2.6.22.ebuild:
755     Initial release for 2.6.22. If you are using hardened-sources on a desktop
756     machine (P4 or newer), be aware you might need to disable
757     CONFIG_PAX_PAGEEXEC.
758 phreak 1.166
759     04 Aug 2007; Christian Heim <phreak@gentoo.org>
760     hardened-sources-2.6.20-r6.ebuild:
761     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
762     2.6.20.15.
763 phreak 1.165
764     10 Jul 2007; Christian Heim <phreak@gentoo.org>
765     hardened-sources-2.6.20-r5.ebuild:
766     Marking hardened-sources-2.6.20-r5 stable on ppc.
767 phreak 1.164
768     10 Jul 2007; Christian Heim <phreak@gentoo.org>
769     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
770     Cleanup.
771 phreak 1.163
772     *hardened-sources-2.6.20-r6 (08 Jul 2007)
773    
774     08 Jul 2007; Christian Heim <phreak@gentoo.org>
775     +hardened-sources-2.6.20-r6.ebuild:
776     Revision bump, grabbing yet another stable release.
777 phreak 1.162
778     17 Jun 2007; Christian Heim <phreak@gentoo.org>
779     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
780     -hardened-sources-2.6.21-r2.ebuild:
781     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
782     alpha stable KEYWORD by mistake.
783 phreak 1.161
784     17 Jun 2007; Christian Heim <phreak@gentoo.org>
785     hardened-sources-2.6.20-r5.ebuild:
786     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
787     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
788 phreak 1.160
789     *hardened-sources-2.6.21-r3 (12 Jun 2007)
790    
791     12 Jun 2007; Christian Heim <phreak@gentoo.org>
792     +hardened-sources-2.6.21-r3.ebuild:
793     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
794     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
795     love.
796 phreak 1.159
797     *hardened-sources-2.6.20-r5 (11 Jun 2007)
798    
799     11 Jun 2007; Christian Heim <phreak@gentoo.org>
800     +hardened-sources-2.6.20-r5.ebuild:
801     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
802     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
803     love.
804 pappy 1.158
805     *hardened-sources-2.4.34.5 (11 Jun 2007)
806    
807     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
808     +hardened-sources-2.4.34.5.ebuild:
809     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
810 phreak 1.157
811     30 May 2007; Christian Heim <phreak@gentoo.org>
812     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
813     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
814     stale ebuild(s).
815 phreak 1.156
816     30 May 2007; Christian Heim <phreak@gentoo.org>
817     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
818     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
819     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
820     Doing some cleanups, remove stale ebuilds.
821 phreak 1.155
822     26 May 2007; Christian Heim <phreak@gentoo.org>
823     hardened-sources-2.6.21-r2.ebuild:
824     Fixing the grsecurity patch, had one '};' too much.
825 phreak 1.154
826     *hardened-sources-2.6.21-r2 (26 May 2007)
827    
828     26 May 2007; Christian Heim <phreak@gentoo.org>
829     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
830     +hardened-sources-2.6.21-r2.ebuild:
831     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
832     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
833 phreak 1.153
834     *hardened-sources-2.6.20-r4 (26 May 2007)
835    
836     26 May 2007; Christian Heim <phreak@gentoo.org>
837     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
838     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
839 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
840 phreak 1.152
841     15 May 2007; Christian Heim <phreak@gentoo.org>
842     hardened-sources-2.6.20-r3.ebuild:
843     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
844     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
845     grsecurity patch fail in that exact same hunk.
846 phreak 1.151
847     *hardened-sources-2.6.20-r3 (15 May 2007)
848    
849     15 May 2007; Christian Heim <phreak@gentoo.org>
850     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
851     Revision bump, incorporating Linux 2.6.20.11.
852    
853     *hardened-sources-2.6.21-r1 (11 May 2007)
854    
855     11 May 2007; Christian Heim <phreak@gentoo.org>
856     +hardened-sources-2.6.21-r1.ebuild:
857     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
858     mentioned in #177234.
859 kevquinn 1.150
860     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
861     files/digest-hardened-sources-2.6.21, Manifest:
862     Fix Manifest/digest for linux-2.6.21.tar.bz2
863 phreak 1.149
864     06 May 2007; Christian Heim <phreak@gentoo.org>
865     hardened-sources-2.6.21.ebuild:
866     Bumping the hardened-patches version, needed for the fix for #177234.
867 phreak 1.148
868     *hardened-sources-2.6.21 (02 May 2007)
869    
870     02 May 2007; Christian Heim <phreak@gentoo.org>
871     +hardened-sources-2.6.21.ebuild:
872     Version bump, Linux 2.6.21-hardened.
873 phreak 1.147
874     29 Apr 2007; Christian Heim <phreak@gentoo.org>
875     hardened-sources-2.6.20-r2.ebuild:
876     Adding ~ia64 on Ned's request.
877 phreak 1.146
878     29 Apr 2007; Christian Heim <phreak@gentoo.org>
879     hardened-sources-2.6.20-r2.ebuild:
880     Fixing the included grsecurity patch, wasn't alligning due to the Index:
881     header line(s).
882 phreak 1.145
883     29 Apr 2007; Christian Heim <phreak@gentoo.org>
884     hardened-sources-2.6.20-r2.ebuild:
885     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
886 armin76 1.144
887     *hardened-sources-2.6.20-r2 (10 Apr 2007)
888    
889     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
890     +hardened-sources-2.6.20-r2.ebuild:
891     Version bump, on behalf of phreak
892 phreak 1.143
893     *hardened-sources-2.6.20-r1 (04 Apr 2007)
894    
895     04 Apr 2007; Christian Heim <phreak@gentoo.org>
896     +hardened-sources-2.6.20-r1.ebuild:
897     Revision bump, grabbing a newer grsecurity snapshot.
898 phreak 1.142
899     *hardened-sources-2.6.20 (25 Mar 2007)
900    
901     25 Mar 2007; Christian Heim <phreak@gentoo.org>
902     +hardened-sources-2.6.20.ebuild:
903     Finally a hardened-sources version for 2.6.20; many people have been waiting
904     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
905     testbox.
906 chainsaw 1.141
907     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
908     hardened-sources-2.6.18-r6.ebuild:
909     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
910 phreak 1.140
911     *hardened-sources-2.6.18-r6 (16 Mar 2007)
912    
913     16 Mar 2007; Christian Heim <phreak@gentoo.org>
914     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
915     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
916     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
917     supposed to be.
918 phreak 1.139
919     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
920     Fixing the Manifest, the previous one was broken (as in still had the
921     deleted ebuild in it).
922 phreak 1.138
923     06 Mar 2007; Christian Heim <phreak@gentoo.org>
924     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
925     +hardened-sources-2.6.18-r5.ebuild:
926     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
927     Linux 2.6.18.8. Also cleaning up the older version.
928    
929     *hardened-sources-2.6.18-r5 (06 Mar 2007)
930    
931     06 Mar 2007; Christian Heim <phreak@gentoo.org>
932     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
933     +hardened-sources-2.6.18-r5.ebuild:
934     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
935     Linux 2.6.18.8. Also cleaning up the older version.
936 phreak 1.137
937     24 Feb 2007; Christian Heim <phreak@gentoo.org>
938     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
939     -hardened-sources-2.6.19-r5.ebuild:
940     Removing some of the old version, that didn't work.
941 phreak 1.136
942     *hardened-sources-2.6.19-r6 (12 Feb 2007)
943    
944     12 Feb 2007; Christian Heim <phreak@gentoo.org>
945     +hardened-sources-2.6.19-r6.ebuild:
946     Revision bump, including a new grsec version fixing #166235.
947 pappy 1.134
948     *hardened-sources-2.4.34 (24 Jan 2007)
949    
950     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
951 pappy 1.135 Manifest:
952     updating Manifest with checksums of new tarball and ebuild
953    
954     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
955 pappy 1.134 +hardened-sources-2.4.34.ebuild:
956     I added new hardened sources 2.4 update, this is a critical path
957     security bugfix - all users of h-s are strongly advised
958     to update their existing hardened sources to this version.
959     It contains a fix for a kernel vulnerability that is pertaining
960     to the PaX changes to virtual memory management, possibly leading
961     to a local kernel exploit ... see grsecurity.net forums and homepage
962 phreak 1.133
963     23 Jan 2007; Christian Heim <phreak@gentoo.org>
964     files/digest-hardened-sources-2.6.19-r5, Manifest:
965     Fixing the patch-tarball digest.
966 phreak 1.132
967     *hardened-sources-2.6.19-r5 (23 Jan 2007)
968    
969     23 Jan 2007; Christian Heim <phreak@gentoo.org>
970     +hardened-sources-2.6.19-r5.ebuild:
971     Revision bump, closing the recently discovered PaX expand_stack()
972     vulnerability.
973 phreak 1.131
974     *hardened-sources-2.6.19-r4 (14 Jan 2007)
975    
976     14 Jan 2007; Christian Heim <phreak@gentoo.org>
977     +hardened-sources-2.6.19-r4.ebuild:
978     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
979     dropping the randomized PID feature.
980 opfer 1.130
981     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
982     hardened-sources-2.4.33.4.ebuild:
983     stable x86, bug #161171
984 phreak 1.129
985     *hardened-sources-2.6.19-r3 (27 Dec 2006)
986    
987     27 Dec 2006; Christian Heim <phreak@gentoo.org>
988     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
989     Revision bump for bug #157186 and #158786.
990 phreak 1.128
991     *hardened-sources-2.6.18-r4 (27 Dec 2006)
992    
993     27 Dec 2006; Christian Heim <phreak@gentoo.org>
994     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
995     Revision bump for bug #157186.
996 phreak 1.127
997     *hardened-sources-2.6.19-r2 (23 Dec 2006)
998    
999     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1000     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1001     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1002 phreak 1.126
1003     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1004     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1005     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1006     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1007     hardened-sources-2.6.19-r1.ebuild:
1008     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1009     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1010 pappy 1.125
1011     *hardened-sources-2.4.33.4 (17 Dec 2006)
1012    
1013     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1014     +hardened-sources-2.4.33.4.ebuild:
1015     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1016     and quilting
1017 phreak 1.124
1018     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1019    
1020     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1021     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1022     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1023     for reporting).
1024 phreak 1.123
1025     *hardened-sources-2.6.19 (13 Dec 2006)
1026    
1027     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1028     +hardened-sources-2.6.19.ebuild:
1029     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1030     Brad for providing that prompt update.
1031 phreak 1.122
1032     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1033    
1034     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1035     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1036     +hardened-sources-2.6.18-r3.ebuild:
1037     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1038     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1039 phreak 1.121
1040     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1041     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1042 nixnut 1.120
1043     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1044     Stable on ppc wrt bug 157356
1045 opfer 1.119
1046     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1047     hardened-sources-2.6.18.ebuild:
1048     stable x86, bug #157356
1049 phreak 1.118
1050     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1051    
1052     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1053     +hardened-sources-2.6.18-r2.ebuild:
1054     Revision bump, including 2.6.18.5 (via genpatches) and
1055     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1056     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1057     redesign.
1058 phreak 1.117
1059     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1060     hardened-sources-2.6.18.ebuild:
1061     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1062     of Mike Doty).
1063 phreak 1.116
1064     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1065    
1066     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1067     +hardened-sources-2.6.18-r1.ebuild:
1068     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1069 phreak 1.115
1070     *hardened-sources-2.6.18 (11 Nov 2006)
1071    
1072     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1073     +hardened-sources-2.6.18.ebuild:
1074     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1075 solar 1.114
1076     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1077     - mark amd64 stable also. bug #151877
1078 solar 1.113
1079     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1080     - mark 2.6.17-r1 stable
1081 phreak 1.112
1082     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1083     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1084     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1085 phreak 1.111
1086     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1087    
1088     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1089     +hardened-sources-2.6.17-r1.ebuild:
1090     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1091     grsecurity patch.
1092 phreak 1.110
1093     *hardened-sources-2.6.17 (17 Aug 2006)
1094    
1095     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1096     +hardened-sources-2.6.17.ebuild:
1097     Bumping the hardened-sources-2.6 series to 2.6.17, using
1098     genpatches-2.6.17-6.base.
1099 solar 1.109
1100     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1101     - stable on x86 and amd64
1102 solar 1.108
1103     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1104    
1105     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1106     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1107     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1108     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1109     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1110     crusty ebuilds
1111 johnm 1.107
1112     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1113     hardened-sources-2.6.16-r10.ebuild:
1114     marking stable on x86 and amd64
1115 solar 1.106
1116     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1117     - 2.4.32-r6 stable on x86. RSBAC state unknown
1118 kang 1.105
1119     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1120    
1121     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1122     +hardened-sources-2.4.32-r7.ebuild:
1123     Bump PaX for RSBAC to test-17
1124 johnm 1.104
1125     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1126    
1127     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1128     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1129     hardened-sources-2.6.16 bump to latest -base.
1130 solar 1.103
1131     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1132    
1133     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1134     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1135     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1136     sysctl controlable resource logging
1137 johnm 1.102
1138     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1139    
1140     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1141     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1142     push new 2.6.16 release in preparation for stable
1143 solar 1.101
1144     22 May 2006; <solar@gentoo.org> :
1145     - redigest bug 134002
1146 kang 1.100
1147     *hardened-sources-2.4.32-r5 (16 May 2006)
1148    
1149     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1150     +hardened-sources-2.4.32-r5.ebuild:
1151     Fixes rsbac common patching (new patch in new -r5 patchset)
1152 solar 1.99
1153     *hardened-sources-2.4.32-r4 (13 May 2006)
1154    
1155     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1156     +hardened-sources-2.4.32-r4.ebuild:
1157     - security bumps
1158 johnm 1.98
1159     *hardened-sources-2.6.16-r6 (03 May 2006)
1160    
1161     03 May 2006; John Mylchreest <johnm@gentoo.org>
1162     +hardened-sources-2.6.16-r6.ebuild:
1163     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1164 johnm 1.97
1165     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1166     hardened-sources-2.6.14-r8.ebuild:
1167     fix x86_64 build problem, this will delay the digest issue again for a short
1168     while but it will sort itself out
1169 johnm 1.96
1170     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1171     hardened-sources-2.6.14-r8.ebuild:
1172     bump hardened patchset
1173 antarus 1.94
1174     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1175     files/digest-hardened-sources-2.4.32-r2,
1176     files/digest-hardened-sources-2.4.32-r3,
1177     files/digest-hardened-sources-2.6.14-r8, Manifest:
1178     Fixing duff SHA256 digests: Bug # 131293
1179 johnm 1.93
1180 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1181    
1182     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1183     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1184     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1185     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1186     cleanup of old uneccessary sources
1187    
1188 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1189     fix digest
1190 johnm 1.92
1191     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1192    
1193     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1194     +hardened-sources-2.6.14-r8.ebuild:
1195     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1196 johnm 1.91
1197     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1198     Turning on gpg-signing again, and recomitting
1199 johnm 1.90
1200     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1201    
1202     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1203     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1204     +hardened-sources-2.6.16-r4.ebuild:
1205     Fix numerous security vulns
1206 solar 1.89
1207     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1208    
1209     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1210     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1211     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1212     - security bump for bug #112791. Removed old ebuilds
1213 johnm 1.88
1214     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1215    
1216     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1217     +hardened-sources-2.6.16-r3.ebuild:
1218     Removing silly localversion which I missed
1219 johnm 1.87
1220     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1221    
1222     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1223     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1224     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1225 johnm 1.86
1226     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1227    
1228     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1229     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1230     +hardened-sources-2.6.16-r2.ebuild:
1231     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1232     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1233 johnm 1.85
1234     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1235    
1236     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1237     +hardened-sources-2.6.16-r1.ebuild:
1238     Bumping to include ppc build fix and 2.6.16.3
1239 tsunam 1.84
1240     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1241     hardened-sources-2.6.14-r6.ebuild:
1242     Stable on x86; bug #127718
1243 johnm 1.83
1244     *hardened-sources-2.6.16 (31 Mar 2006)
1245    
1246     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1247     +hardened-sources-2.6.16.ebuild:
1248     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1249     2.6.16.1
1250 cryos 1.82
1251     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1252     hardened-sources-2.6.14-r6.ebuild:
1253     Stable on amd64, bug 127718.
1254 nixnut 1.81
1255     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1256     Stable on ppc. Bug #127718
1257 johnm 1.80
1258     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1259     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1260     -hardened-sources-2.6.14-r4.ebuild:
1261     Cleanup.
1262 johnm 1.79
1263     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1264    
1265     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1266     +hardened-sources-2.6.14-r6.ebuild:
1267     Fixes grsec policy recreation bug and adds a
1268     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1269 solar 1.78
1270     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1271     - stable on x86
1272 hansmi 1.77
1273     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1274     hardened-sources-2.6.14-r5.ebuild:
1275     Stable on ppc.
1276 johnm 1.76
1277     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1278    
1279     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1280     +hardened-sources-2.6.14-r5.ebuild:
1281     fixing every known exploit
1282 solar 1.75
1283     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1284    
1285     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1286     +hardened-sources-2.4.32-r2.ebuild:
1287     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1288 solar 1.74
1289     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1290    
1291     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1292     - version bump for new genpatches which fix up a few sec holes
1293 solar 1.73
1294     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1295    
1296     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1297     - revision bump to add misc vital linux kernel security patches.
1298 johnm 1.72
1299     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1300    
1301     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1302     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1303     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1304 johnm 1.71
1305     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1306     hardened-sources-2.6.14-r2.ebuild:
1307     making x86 & amd64 stable following testing.
1308 johnm 1.70
1309     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1310    
1311     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1312     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1313     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1314     network hooks.
1315 johnm 1.69
1316     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1317     hardened-sources-2.6.14-r1.ebuild:
1318     bumping to stable early for sec fix on x86 & amd64
1319 johnm 1.68
1320     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1321    
1322     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1323     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1324     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1325 solar 1.67
1326     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1327     - stable on x86 security bug #114227 CAN-2005-3257
1328 kang 1.66
1329     *hardened-sources-2.4.32 (19 Nov 2005)
1330    
1331     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1332     +hardened-sources-2.4.32.ebuild:
1333     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1334     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1335     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1336     rsbac >> /etc/portage/package.use)
1337 johnm 1.65
1338     *hardened-sources-2.6.14 (14 Nov 2005)
1339    
1340     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1341     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1342     Bumping 2.6 series to 2.6.14.2
1343 johnm 1.64
1344     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1345    
1346     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1347     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1348     +hardened-sources-2.6.13-r2.ebuild:
1349     Fixes minor build error in ppc.
1350 johnm 1.63
1351     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1352    
1353     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1354     +hardened-sources-2.6.13-r1.ebuild:
1355     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1356     2.6.13.4, fixes some major amd64 stability problems.
1357 johnm 1.62
1358     *hardened-sources-2.6.13 (16 Sep 2005)
1359    
1360     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1361     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1362     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1363     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1364     users should test this thoroughly.
1365 solar 1.61
1366     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1367     - stable on x86
1368 johnm 1.60
1369     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1370    
1371     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1372     +hardened-sources-2.6.11-r15.ebuild:
1373     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1374     grsec redefining curr_ip struct.
1375 solar 1.59
1376     *hardened-sources-2.4.31 (20 Jun 2005)
1377    
1378     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1379     initial import of 2.4.31 tree
1380 johnm 1.58
1381     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1382    
1383     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1384     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1385     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1386     naming scheme to abide by genpatches
1387 johnm 1.57
1388     *hardened-sources-2.6.11-r13 (18 May 2005)
1389    
1390     18 May 2005; John Mylchreest <johnm@gentoo.org>
1391     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1392     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1393     target. sorry about that. Fixes bug #93022
1394 johnm 1.56
1395     *hardened-sources-2.6.11-r12 (17 May 2005)
1396    
1397     17 May 2005; John Mylchreest <johnm@gentoo.org>
1398     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1399     +hardened-sources-2.6.11-r12.ebuild:
1400     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1401     merges in genpatches-base
1402 johnm 1.55
1403     *hardened-sources-2.6.11-r12 (17 May 2005)
1404    
1405     17 May 2005; John Mylchreest <johnm@gentoo.org>
1406     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1407     +hardened-sources-2.6.11-r12.ebuild:
1408     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1409     merges in genpatches-base
1410 solar 1.54
1411     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1412     -files/2.4.27-cmdline-race.patch,
1413     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1414     -files/2.4.28-grsec-binfmt_a.out.patch,
1415     -files/2.4.28-grsec-cmdline-race.patch,
1416     -files/2.4.28-selinux-binfmt_a.out.patch,
1417     -files/2.4.28-selinux-cmdline-race.patch,
1418     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1419     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1420     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1421     cleanup..
1422 solar 1.53
1423     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1424    
1425     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1426     - disable aout by default
1427 solar 1.52
1428     *hardened-sources-2.4.30 (18 Apr 2005)
1429    
1430     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1431     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1432     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1433     use
1434 tocharian 1.50
1435 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1436    
1437     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1438     +hardened-sources-2.4.29.ebuild:
1439     New hardened-patches-2.4-29.0 patchball.
1440     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1441    
1442     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1443    
1444     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1445     +hardened-sources-2.4.28-r5.ebuild:
1446     Added a fix for a PaX vulnerability.
1447    
1448     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1449 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1450     Stable on x86
1451 solar 1.49
1452     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1453     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1454     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1455     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1456     - fixed/added RDEPEND= in all kernel-2 ebuilds
1457 tocharian 1.48
1458     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1459    
1460     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1461     +hardened-sources-2.4.28-r4.ebuild:
1462     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1463     backport of neighbour hash updates.
1464 tocharian 1.47
1465     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1466     hardened-sources-2.4.28-r3.ebuild:
1467     Stable on x86
1468 tseng 1.46
1469     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1470    
1471     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1472     +hardened-sources-2.6.10-r3.ebuild:
1473     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1474     in 2005.0
1475 tocharian 1.45
1476     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1477     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1478     hardened-sources-2.4.28-r2.ebuild:
1479     Mark stable on x86
1480 tocharian 1.44
1481     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1482    
1483     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1484     +hardened-sources-2.4.28-r3.ebuild:
1485     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1486 tocharian 1.43
1487     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1488     hardened-sources-2.4.28.ebuild:
1489     Mark stable on x86.
1490 tocharian 1.42
1491     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1492    
1493     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1494     +hardened-sources-2.4.28-r2.ebuild:
1495     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1496     Mazinger for grsecurity patches as well.
1497 plasmaroo 1.41
1498     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1499    
1500     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1501     Security bump. Thank tocharian for rolling a new patchset...
1502 solar 1.40
1503     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1504     +files/2.4.28-grsec-cmdline-race.patch,
1505     +files/2.4.28-selinux-binfmt_a.out.patch,
1506     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1507     - Round up remaining security patches that appear to be missing in 2.4.28. -
1508     PaX standalone updated to current. hgpv=28.1
1509 solar 1.39
1510     *hardened-sources-2.4.28 (28 Nov 2004)
1511    
1512     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1513     security bump. Thank tocharian for rolling a new patchset
1514 scox 1.31
1515 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1516    
1517     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1518     +hardened-sources-2.4.27-r3.ebuild:
1519     Applies the new 2.4-27.2 patchball which updates
1520     GRSecurity to the 2.0.1 version.
1521    
1522 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1523    
1524     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1525     +hardened-sources-2.4.27-r2.ebuild:
1526     Version bump.
1527     This version uses the new 2.4-27.1 patchball which updates
1528     both the SELinux PaX hooks patch and the SELinux headers.
1529    
1530 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1531    
1532     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1533     +hardened-sources-2.4.27-r1.ebuild,
1534     -hardened-sources-2.4.27.ebuild,
1535     +files/2.4.27-cmdline-race.patch:
1536     Version bump, fix for cmdline race. See bug #59905.
1537    
1538     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1539    
1540     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1541     +hardened-sources-2.4.26-r6.ebuild,
1542     -hardened-sources-2.4.26-r5.ebuild,
1543     -hardened-sources-2.4.26-r4.ebuild,
1544     +files/2.4.26-cmdline-race.patch:
1545     Version bump, fix for cmdline race. See bug #59905.
1546    
1547 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1548    
1549     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1550     +hardened-sources-2.4.27.ebuild,
1551     +files/2.4.27-CAN-2004-0394.patch:
1552     Ported the patchball to the 2.4.27 kernel version.
1553    
1554 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1555    
1556     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1557     +hardened-sources-2.4.26-r5.ebuild:
1558 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1559 scox 1.34 It adds the following features:
1560     - Squashfs
1561     - Ebtables
1562     - Netdev random (core+drivers)
1563     - Watchdog Timer (WDT) fix.
1564    
1565 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1566    
1567     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1568     +hardened-sources-2.4.26-r4.ebuild,
1569     +files/2.4.26-CAN-2004-0415.patch,
1570     -hardened-sources-2.4.26-3:
1571     Version bump, fix for CAN 0415, see bug #59378.
1572    
1573 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1574    
1575     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1576     +hardened-sources-2.4.26-r3.ebuild,
1577     +files/2.4.26-CAN-2004-0497.patch,
1578     -hardened-sources-2.4.26-r2.ebuild:
1579     Version bump, fixed CAN 0497, see bug #56171.
1580    
1581 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1582    
1583     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1584 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1585 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1586     +files/2.4.26-CAN-2004-0535.patch,
1587     -hardened-sources-2.4.26-r1.ebuild:
1588     Fixes for both CAN 0495 and 0535, see bug #54976
1589 pvdabeel 1.27
1590 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1591     hardened-sources-2.4.26-r1.ebuild:
1592     QA - fix use invocation
1593 scox 1.28
1594     *hardened-sources-2.4.26-r1 (22 June 2004)
1595    
1596     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1597     +hardened-sources-2.4.26-r1.ebuild,
1598     +files/2.4.26-CAN-2004-0394.patch,
1599     +files/2.4.26-signal-race.patch,
1600     -hardened-sources-2.4.26.ebuild,
1601     -hardened-sources-2.4.24-r3.ebuild:
1602     Version bump for the CAN-2004-0394 issue and bug #53804
1603     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1604    
1605    
1606 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1607     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1608     Masked hardened-sources-2.4.26.ebuild broken for ppc
1609    
1610     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1611     hardened-sources-2.4.24-r3.ebuild:
1612     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1613 plasmaroo 1.25
1614 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1615    
1616     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1617     +hardened-sources-2.4.26.ebuild:
1618     Updated hardened-sources for the 2.4.26 kernel
1619     Removed broken components, updated almost everything.
1620    
1621 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1622    
1623     17 Apr 2004; <plasmaroo@gentoo.org>
1624     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1625     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1626     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1627     +hardened-sources-2.4.24-r3.ebuild:
1628     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1629     vulnerabilities. Old revisions removed.
1630 plasmaroo 1.24
1631     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1632    
1633     15 Apr 2004; <plasmaroo@gentoo.org>
1634     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1635     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1636     Version bump for the CAN-2004-0109 issue; bug #47881.
1637 aliz 1.23
1638     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1639     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1640     Add eutils to inherit.
1641 plasmaroo 1.22
1642     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1643    
1644     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1645     files/hardened-sources-2.4.24.munmap.patch:
1646     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1647 scox 1.19
1648 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1649 scox 1.26
1650 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1651     hardened-sources-2.4.24.ebuild:
1652     Version bump, updated most of the components.
1653     This release includes the following:
1654    
1655     - Hardened security
1656     - Netfilter patch-o-matic 20031219
1657     - FreeSWAN 2.04 & x509 1.4.8
1658     - EVMS 2.2.2
1659     - XFS 1.3.1
1660     - cryptoloop jari
1661     - grsecurity 2.0-rc4
1662     - SELinux
1663     - PaX 200402060000
1664     - PaX Obscurity 200308302223
1665     - Others...
1666    
1667     Neither -ck nor systrace are included anymore.
1668    
1669 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1670    
1671     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1672     hardened-sources-2.4.22-r2.ebuild:
1673 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1674 scox 1.19
1675     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1676 iggy 1.17
1677     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1678 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1679 iggy 1.16
1680     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1681 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1682     Version bump for the 'do_brk' vulnerability.
1683 iggy 1.15
1684     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1685     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1686     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1687     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1688 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1689 frogger 1.14
1690     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1691     hardened-sources-2.4.22.ebuild:
1692 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1693     components. These are no longer handled in the kernel
1694     so this code was not necessary.
1695 frogger 1.13
1696     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1697     New 2.4.22 based hardened-sources thanks to
1698     Phil West <p.west@computer.org>.
1699    
1700     These sources include:
1701 plasmaroo 1.18 - New SELinux API
1702     - Updated CK-base
1703     - Updated GRSec
1704     - Systrace
1705     - SuperFreeS/WAN 1.99.8
1706     - Propolice kernel build support
1707     - EVMS
1708     - Other various security related patches
1709 frogger 1.11
1710 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1711    
1712     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1713     Updated hardened-sources based on the 2.4.21 Linux kernel.
1714     This includes updates to most major components such as:
1715 plasmaroo 1.18 - ck-base-0306300059
1716     - selinux-2.4-2003071106
1717     - grsecurity-2.0-rc1
1718     - Updated IPTables patch-o-matic
1719     - Updated SuperFreeS/WAN
1720    
1721 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1722     updated patch set ready for the 2.4.21 based kernel.
1723    
1724 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1725     Initial import of hardened-sources-2.4.20-r4. This revision
1726     includes only a few changes, but one of these is an important
1727     security fix. It is recommended all users of hardened-sources
1728     upgrade to this release.
1729 plasmaroo 1.18
1730 frogger 1.11 - ioperm bug fix
1731     - fixed compilation failure when building without GRSec
1732 plasmaroo 1.18
1733 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1734     due to time constraints, but is planned for inclusion in the near
1735     future.
1736 msterret 1.10
1737     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1738    
1739     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1740     hardened-sources-2.4.20-r3.ebuild:
1741 plasmaroo 1.18 Add Header...
1742 frogger 1.9
1743     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1744     hardened-sources-2.4.20-r3.ebuild:
1745     Removed warnings from ebuild. This kernel should be safe to
1746     use at this point.
1747 frogger 1.8
1748     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1749    
1750     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1751     hardened-sources-2.4.20-r3.ebuild:
1752     New revision. Includes the following changes over -r2:
1753 plasmaroo 1.18
1754 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1755     - Super FreeS/WAN 1.99.7rc2
1756     - PaX for the LSM/SELinux branch
1757     - GRSecurity 2.0-pre4 (role based access control)
1758     - Systrace 1.3
1759     - EXT3 fixes
1760     - EVMS 2.0.1
1761     - GCC 3.1+ compile optimizations
1762     - ProPolice kernel build support
1763     - Hashing table security fixes
1764 frogger 1.3
1765     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1766 frogger 1.7
1767     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1768     Initial import of hardened-sources-r2. This new
1769     ebuild includes many new performance and security
1770     related patches. As in -r1, it will patch in
1771     LSM/SELinux if "selinux" is in USE, otherwise it
1772     will patch in GRSecurity. The following patches
1773     are included in this revision:
1774 plasmaroo 1.18
1775 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1776     (pulled from the base CK patch)
1777     - ptrace exploit patch for the LSM kernel
1778     (the GRSec patch already fixes this)
1779     - LSM 2.4-2003040709
1780     - SELinux 2.4-2003040709
1781     - Systrace v1.2
1782     - IPTables patch-o-matic base patches - 20030107
1783     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1784     - Super FreeS/WAN 1.99.6.1
1785     - GRSecurity 1.9.9g
1786     - MPPE
1787     - EXT3 data journal fix
1788     - CIPE 1.5.4
1789 frogger 1.6
1790     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1791     hardened-sources-2.4.20-r1.ebuild, manifest:
1792 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1793 frogger 1.5
1794     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1795     hardened-sources-2.4.20-r1.ebuild:
1796     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1797     is patched in instead. Ptrace patches for selinux have also been added. In
1798     either case, systrace support will be patched in as well.
1799 frogger 1.3
1800     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1801     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1802 plasmaroo 1.18 Revision bump for new sources.
1803 frogger 1.4
1804 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1805 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1806 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1807 method 1.1
1808 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1809    
1810 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1811     hardened-sources-2.4.20.ebuild:
1812 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20