/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.305 - (hide annotations) (download)
Sun Apr 5 18:26:47 2009 UTC (5 years ago) by nixnut
Branch: MAIN
Changes since 1.304: +4 -1 lines
ppc stable
(Portage version: 2.1.6.11/cvs/Linux ppc)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 gengor 1.268 # Copyright 2000-2009 Gentoo Foundation; Distributed under the GPL v2
3 nixnut 1.305 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.304 2009/03/30 01:48:30 gengor Exp $
4    
5     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
6     ppc stable
7 gengor 1.304
8     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
9     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
10     Stable amd64/x86 and remove old.
11 gengor 1.303
12     *hardened-sources-2.6.28-r7 (27 Mar 2009)
13    
14     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
15     +hardened-sources-2.6.28-r7.ebuild:
16     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
17 gengor 1.302
18     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
19     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
20     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
21     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
22     Stable amd64/x86 and remove old versions.
23 nixnut 1.301
24     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
25     ppc stable
26 gengor 1.300
27     *hardened-sources-2.6.28-r6 (21 Mar 2009)
28    
29     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
30     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
31     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
32 gengor 1.299
33     *hardened-sources-2.6.28-r5 (20 Mar 2009)
34    
35     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
36     +hardened-sources-2.6.28-r5.ebuild:
37     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
38 gengor 1.298
39     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
40     hardened-sources-2.6.28-r4.ebuild:
41     Stable amd64/x86.
42 gengor 1.297
43     *hardened-sources-2.6.28-r4 (18 Mar 2009)
44    
45     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
46     +hardened-sources-2.6.28-r4.ebuild:
47     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
48     compilation with CPA_DEBUG and more.
49 gengor 1.296
50     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
51     hardened-sources-2.6.28-r3.ebuild:
52     Quick stable amd64/x86.
53 gengor 1.295
54     *hardened-sources-2.6.28-r3 (15 Mar 2009)
55    
56     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
57     +hardened-sources-2.6.28-r3.ebuild:
58     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
59 nixnut 1.294
60     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
61     ppc stable
62 gengor 1.293
63     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
64     hardened-sources-2.6.28-r2.ebuild:
65     Stable amd64/x86.
66 gengor 1.292
67     *hardened-sources-2.6.28-r2 (11 Mar 2009)
68    
69     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
70     +hardened-sources-2.6.28-r2.ebuild:
71     Version bump bringing in latest grsecurity patch.
72 gengor 1.291
73     *hardened-sources-2.6.28-r1 (09 Mar 2009)
74    
75     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
76     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
77     Version bump and remove old.
78 nixnut 1.290
79     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
80     ppc stable
81 gengor 1.289
82     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
83     hardened-sources-2.6.27-r8.ebuild:
84     Remove amd64 testing keyword, bug 256226.
85 gengor 1.288
86     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
87     hardened-sources-2.6.27-r8.ebuild:
88     Revert amd64 stable, bug #256226.
89 gengor 1.287
90     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
91     hardened-sources-2.6.27-r8.ebuild:
92     Stable on amd64/x86.
93 gengor 1.286
94     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
95     -hardened-sources-2.6.27-r6.ebuild:
96     Remove old 2.6.27 release.
97 gengor 1.285
98     *hardened-sources-2.6.27-r8 (24 Feb 2009)
99    
100     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
101     +hardened-sources-2.6.27-r8.ebuild:
102     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
103     and probably more.
104 nixnut 1.284
105     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
106     ppc stable
107 gengor 1.283
108     *hardened-sources-2.6.28 (25 Jan 2009)
109    
110     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
111     +hardened-sources-2.6.28.ebuild:
112     Initial 2.6.28 release.
113 gengor 1.282
114     *hardened-sources-2.6.27-r7 (25 Jan 2009)
115    
116     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
117     +hardened-sources-2.6.27-r7.ebuild:
118     Bump to Linux 2.6.27.13.
119 gengor 1.281
120     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
121     hardened-sources-2.6.26-r9.ebuild:
122     Stable amd64/x86.
123 gengor 1.280
124     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
125     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
126     -hardened-sources-2.6.27-r5.ebuild:
127     Remove problem versions.
128 gengor 1.279
129     *hardened-sources-2.6.27-r6 (24 Jan 2009)
130    
131     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
132     +hardened-sources-2.6.27-r6.ebuild:
133     Revert PaX test29 to test30 changes. Fixes bug 256226.
134 gengor 1.277
135     *hardened-sources-2.6.27-r5 (24 Jan 2009)
136    
137     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
138     +hardened-sources-2.6.27-r5.ebuild:
139 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
140 gengor 1.277 254843.
141 gengor 1.276
142     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
143     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
144     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
145     Remove problem versions.
146 nixnut 1.275
147     23 Jan 2009; nixnut <nixnut@gentoo.org>
148     hardened-sources-2.6.25-r13.ebuild:
149     ppc stable
150 gengor 1.274
151     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
152     hardened-sources-2.6.25-r13.ebuild:
153     Fasttrack stable amd64/x86.
154 gengor 1.273
155     *hardened-sources-2.6.26-r9 (21 Jan 2009)
156    
157     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
158     +hardened-sources-2.6.26-r9.ebuild:
159 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
160 gengor 1.272
161     *hardened-sources-2.6.25-r13 (20 Jan 2009)
162    
163     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
164     +hardened-sources-2.6.25-r13.ebuild:
165 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
166 nixnut 1.271
167     20 Jan 2009; nixnut <nixnut@gentoo.org>
168     hardened-sources-2.6.25-r12.ebuild:
169     ppc stable
170 gengor 1.270
171     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
172     hardened-sources-2.6.25-r12.ebuild:
173     Stable amd64/x86.
174 gengor 1.269
175     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
176     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
177     -hardened-sources-2.6.27-r2.ebuild:
178     Clean out old versions.
179 gengor 1.268
180     *hardened-sources-2.6.27-r4 (14 Jan 2009)
181     *hardened-sources-2.6.26-r8 (14 Jan 2009)
182     *hardened-sources-2.6.25-r12 (14 Jan 2009)
183    
184     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
185     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
186     +hardened-sources-2.6.27-r4.ebuild:
187     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
188     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
189     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
190     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
191 nixnut 1.267
192     15 Dec 2008; nixnut <nixnut@gentoo.org>
193     hardened-sources-2.6.25-r11.ebuild:
194     Stable on ppc
195 gengor 1.266
196     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
197     hardened-sources-2.6.25-r11.ebuild:
198     Stable amd64/x86.
199 gengor 1.265
200     *hardened-sources-2.6.27-r3 (07 Dec 2008)
201    
202     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
203     +hardened-sources-2.6.27-r3.ebuild:
204     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
205     Fixes bug #248754, #249729 and #246607.
206 gengor 1.264
207     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
208     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
209     Remove old versions.
210 gengor 1.262
211     *hardened-sources-2.6.26-r7 (03 Dec 2008)
212     *hardened-sources-2.6.25-r11 (03 Dec 2008)
213    
214 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
215     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
216 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
217     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
218     Both include many backports from 2.6.27.{6,7} -stable releases.
219 gengor 1.261
220     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
221     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
222     Remove versions broken on ARCHes != x86/amd64.
223 gengor 1.260
224     *hardened-sources-2.6.27-r2 (24 Nov 2008)
225    
226     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
227     +hardened-sources-2.6.27-r2.ebuild:
228     Bump to Linux 2.6.27.7 and latest grsecurity patch.
229 gengor 1.259
230     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
231     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
232     Remove old versions.
233 gengor 1.258
234     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
235     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
236     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
237 nixnut 1.257
238     16 Nov 2008; nixnut <nixnut@gentoo.org>
239     hardened-sources-2.6.25-r10.ebuild:
240     Stable on ppc
241 gengor 1.256
242     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
243     hardened-sources-2.6.25-r10.ebuild:
244     Stable amd64/x86.
245 gengor 1.255
246     *hardened-sources-2.6.26-r6 (12 Nov 2008)
247    
248     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
249     +hardened-sources-2.6.26-r6.ebuild:
250     Bump to Linux 2.6.26.8 and fix security bug #245650.
251 gengor 1.254
252     *hardened-sources-2.6.25-r10 (12 Nov 2008)
253    
254     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
255     +hardened-sources-2.6.25-r10.ebuild:
256     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
257 gengor 1.253
258     *hardened-sources-2.6.27-r1 (09 Nov 2008)
259    
260     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
261     +hardened-sources-2.6.27-r1.ebuild:
262     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
263 gengor 1.252
264     *hardened-sources-2.6.27 (04 Nov 2008)
265    
266     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
267     +hardened-sources-2.6.27.ebuild:
268     Initial 2.6.27 release.
269 gengor 1.251
270     *hardened-sources-2.6.26-r5 (03 Nov 2008)
271    
272     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
273     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
274     +hardened-sources-2.6.26-r5.ebuild:
275     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
276     Clean out some old versions.
277 nixnut 1.250
278     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
279     Stable on ppc
280 gengor 1.249
281     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
282     hardened-sources-2.6.25-r9.ebuild:
283     Stable on amd64/x86.
284 gengor 1.248
285     *hardened-sources-2.6.25-r9 (26 Oct 2008)
286    
287     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
288     +hardened-sources-2.6.25-r9.ebuild:
289     Update to Linux 2.6.25.19
290 nixnut 1.247
291     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
292     Stable on ppc
293 gengor 1.246
294     *hardened-sources-2.6.26-r4 (14 Oct 2008)
295    
296     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
297     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
298     Update to latest grsecurity patch, fixing building of non-modular kernels.
299 gengor 1.245
300     *hardened-sources-2.6.26-r3 (12 Oct 2008)
301    
302     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
303     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
304     +hardened-sources-2.6.26-r3.ebuild:
305     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
306     2.6.26-r1: Removed.
307     2.6.25-r8: Stable amd64/x86.
308 gengor 1.244
309     *hardened-sources-2.6.25-r8 (09 Oct 2008)
310    
311     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
312     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
313     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
314     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
315 nixnut 1.243
316     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
317     Stable on ppc
318 gengor 1.242
319     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
320     hardened-sources-2.6.25-r7.ebuild:
321     Stable amd64/x86.
322 gengor 1.241
323     *hardened-sources-2.6.26-r2 (13 Sep 2008)
324    
325     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
326     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
327     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
328     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
329 gengor 1.240
330     *hardened-sources-2.6.25-r7 (13 Sep 2008)
331    
332     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
333     +hardened-sources-2.6.25-r7.ebuild:
334     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
335 gengor 1.239
336     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
337     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
338     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
339     hardened-sources-2.6.26-r1.ebuild:
340     Update DESCRIPTION and HGPV_URI.
341 gengor 1.238
342     *hardened-sources-2.6.25-r6 (09 Sep 2008)
343    
344     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
345     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
346     2.6.25-r6: Update to Linux 2.6.25.17.
347     2.6.24-r3: Removed.
348 gengor 1.237
349     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
350     hardened-sources-2.6.25-r5.ebuild:
351     Stable on amd64/x86
352 gengor 1.236
353     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
354     Update my email address.
355 nixnut 1.235
356     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
357     stable on ppc
358 battousai 1.234
359     *hardened-sources-2.6.26-r1 (23 Aug 2008)
360     *hardened-sources-2.6.25-r5 (23 Aug 2008)
361    
362     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
363     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
364     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
365     +hardened-sources-2.6.26-r1.ebuild:
366     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
367     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
368     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
369     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
370     (gengor).
371 solar 1.233
372     *hardened-sources-2.6.26 (18 Aug 2008)
373     *hardened-sources-2.6.25-r4 (18 Aug 2008)
374    
375     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
376     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
377     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
378     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
379     2.6.25-r2: Removed.
380 tove 1.232
381     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
382     Remove phreak from metadata.xml (#96398)
383 solar 1.231
384     *hardened-sources-2.6.25-r3 (31 Jul 2008)
385    
386     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
387     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
388     +hardened-sources-2.6.25-r3.ebuild:
389     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
390     fixes, including security bug #231750.
391 nixnut 1.230
392     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
393     Stable on ppc
394 solar 1.229
395     *hardened-sources-2.6.25-r2 (05 Jul 2008)
396    
397     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
398     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
399     +hardened-sources-2.6.25-r2.ebuild:
400     2.6.23-r4: Stable x86/amd64
401     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
402     2.6.23-r{11,12}: Removed due to multiple vulns.
403     (gengor & kerframil)
404 nixnut 1.228
405     04 Jul 2008; nixnut <nixnut@gentoo.org>
406     hardened-sources-2.6.23-r13.ebuild:
407     Stable on ppc
408 solar 1.227
409     *hardened-sources-2.6.25-r1 (30 Jun 2008)
410    
411     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
412     +hardened-sources-2.6.25-r1.ebuild:
413     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
414     grsecurity release. 2.6.23-r13: x86/amd64 stable
415 solar 1.226
416     *hardened-sources-2.6.25 (17 Jun 2008)
417     *hardened-sources-2.6.24-r3 (17 Jun 2008)
418     *hardened-sources-2.6.23-r13 (17 Jun 2008)
419    
420     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
421     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
422     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
423     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
424     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
425     2.6.25: Initial 2.6.25 release.
426 solar 1.225
427     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
428     - fasttrack to stable x86/amd64
429 swegener 1.224
430     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
431     Fix broken digest for linux-2.6.24.tar.bz2.
432 solar 1.223
433     *hardened-sources-2.6.24-r2 (11 May 2008)
434     *hardened-sources-2.6.23-r12 (11 May 2008)
435    
436     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
437     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
438     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
439     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
440     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
441     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
442     security bugs 219901, 220691, 220975, 220979, 221123. New
443     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
444     should be removed as far as I'm concerned, everything else remove due to
445     vulnerable to numerous security bugs or brokeness.
446 nixnut 1.222
447     10 May 2008; nixnut <nixnut@gentoo.org>
448     hardened-sources-2.6.23-r11.ebuild:
449     Stable on ppc
450 solar 1.221
451     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
452     - -r11 stable on x86/amd64
453 solar 1.220
454     *hardened-sources-2.6.23-r11 (01 May 2008)
455    
456     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
457     - version bump to fix ulgy linux bugs
458 phreak 1.219
459     *hardened-sources-2.6.24-r1 (30 Apr 2008)
460    
461     30 Apr 2008; Christian Heim <phreak@gentoo.org>
462     +hardened-sources-2.6.24-r1.ebuild:
463     Revision bump (thanks to Kerin and Gordon, again), pulling
464     genpatches-2.6.24-7, solving #219089. Additionally contains further security
465     fixes plus some minor updates.
466 phreak 1.218
467     *hardened-sources-2.6.23-r10 (30 Apr 2008)
468    
469     30 Apr 2008; Christian Heim <phreak@gentoo.org>
470     +hardened-sources-2.6.23-r10.ebuild:
471     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
472     Additional contains "various other fixes".
473 phreak 1.217
474     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
475     Update the longdescription in metadata, thanks to Gordon Malm.
476 nixnut 1.216
477     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
478     Stable on ppc wrt bug #213255
479 solar 1.215
480     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
481     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
482     - stable on x86/amd64 per request. Removed obsolete ebuilds
483 phreak 1.214
484     *hardened-sources-2.6.24 (07 Apr 2008)
485    
486     07 Apr 2008; Christian Heim <phreak@gentoo.org>
487     +hardened-sources-2.6.24.ebuild:
488     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
489     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
490     for the many contributions and their continued effort in #216612) based on
491     2.6.24 and genpatches-2.6.24-5.
492    
493     The current ebuild/patchset contains these things:
494     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
495     * Introduces bespoke server and workstation oriented security levels
496     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
497 phreak 1.213
498     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
499     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
500     maintaining it).
501 phreak 1.212
502     24 Mar 2008; Christian Heim <phreak@gentoo.org>
503     hardened-sources-2.4.35-r2.ebuild:
504     Fixing SRC_URI for 2.4.35-r2.
505 phreak 1.211
506     *hardened-sources-2.6.23-r9 (22 Mar 2008)
507    
508     22 Mar 2008; Christian Heim <phreak@gentoo.org>
509     +hardened-sources-2.6.23-r9.ebuild:
510     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
511     * Change the default GIDs for some grsecurity options
512     * Revamp the Hardened [Gentoo] security level and make it the default level
513     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
514     * Fix a recursive lock -- call to capable() within ptrace_attach()
515     * Fix bug that allows audit and iscsi operations to be controlled via netlink
516 solar 1.210
517     *hardened-sources-2.6.23-r8 (27 Feb 2008)
518    
519     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
520     - version bump from Kerin Millar bug 210026
521 solar 1.209
522     17 Feb 2008; <solar@gentoo.org> metadata.xml,
523     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
524     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
525     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
526     - stable on x86 and remove old ebuilds
527 solar 1.207
528     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
529 solar 1.208 - stable on amd64 per request of amd64 lead
530 solar 1.206
531     *hardened-sources-2.6.23-r7 (11 Feb 2008)
532    
533     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
534     - version bump from kerin.millar
535     Changes:
536    
537     * Bump to genpatches-base-2.6.23-9
538     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
539     * Disables COMPAT_VDSO in x86/defconfig
540     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
541 phreak 1.205
542     25 Jan 2008; Christian Heim <phreak@gentoo.org>
543     -hardened-sources-2.6.22-r8.ebuild:
544     Cleaning up old versions.
545 phreak 1.204
546     *hardened-sources-2.6.23-r6 (25 Jan 2008)
547    
548     25 Jan 2008; Christian Heim <phreak@gentoo.org>
549     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
550     Revision bump, pulling in the latest genpatches.
551 phreak 1.203
552     *hardened-sources-2.6.23-r5 (24 Dec 2007)
553    
554     24 Dec 2007; Christian Heim <phreak@gentoo.org>
555     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
556     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
557     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
558     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
559 phreak 1.202
560     24 Dec 2007; Christian Heim <phreak@gentoo.org>
561     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
562     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
563     -hardened-sources-2.6.23-r3.ebuild:
564     Cleaning out some unused, old versions.
565 phreak 1.201
566     24 Dec 2007; Christian Heim <phreak@gentoo.org>
567     hardened-sources-2.6.23-r4.ebuild:
568     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
569     in the tree for long, but there isn't much of a difference between this and
570     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
571 phreak 1.200
572     *hardened-sources-2.6.23-r4 (23 Dec 2007)
573    
574     23 Dec 2007; Christian Heim <phreak@gentoo.org>
575     +hardened-sources-2.6.23-r4.ebuild:
576     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
577 phreak 1.199
578     *hardened-sources-2.6.23-r3 (04 Dec 2007)
579    
580     04 Dec 2007; Christian Heim <phreak@gentoo.org>
581     +hardened-sources-2.6.23-r3.ebuild:
582     Revision bump, pulling in 2.6.23.9.
583 phreak 1.198
584     *hardened-sources-2.6.23-r2 (25 Nov 2007)
585    
586     25 Nov 2007; Christian Heim <phreak@gentoo.org>
587     +hardened-sources-2.6.23-r2.ebuild:
588     Updated patchset, thanks to solar.
589 phreak 1.197
590     *hardened-sources-2.6.23-r1 (31 Oct 2007)
591    
592     31 Oct 2007; Christian Heim <phreak@gentoo.org>
593     +hardened-sources-2.6.23-r1.ebuild:
594     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
595 solar 1.196
596     29 Oct 2007; <solar@gentoo.org> metadata.xml:
597     - update metadata.xml
598 phreak 1.195
599     25 Oct 2007; Christian Heim <phreak@gentoo.org>
600     hardened-sources-2.6.22-r8.ebuild:
601     Marking 2.6.22-r8 stable on amd64 and x86.
602 phreak 1.194
603     21 Oct 2007; Christian Heim <phreak@gentoo.org>
604     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
605     -hardened-sources-2.6.21-r4.ebuild:
606     Removing old ebuilds.
607 phreak 1.193
608     *hardened-sources-2.4.35-r2 (21 Oct 2007)
609    
610     21 Oct 2007; Christian Heim <phreak@gentoo.org>
611     +hardened-sources-2.4.35-r2.ebuild:
612     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
613     patches.
614 phreak 1.192
615     *hardened-sources-2.6.22-r8 (21 Oct 2007)
616    
617     21 Oct 2007; Christian Heim <phreak@gentoo.org>
618     +hardened-sources-2.6.22-r8.ebuild:
619     Yet another new patch, hopefully fixing the remaining issues we had w/
620     2.6.22. Candidate for stabling.
621 phreak 1.191
622     *hardened-sources-2.6.23 (13 Oct 2007)
623    
624     13 Oct 2007; Christian Heim <phreak@gentoo.org>
625     +hardened-sources-2.6.23.ebuild:
626     Initial hardened-sources-2.6.23. If people still have problems w/ bug
627     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
628 phreak 1.190
629     11 Oct 2007; Christian Heim <phreak@gentoo.org>
630     hardened-sources-2.6.20-r10.ebuild:
631     Pulling in yet another new genpatches version, fixing the PWC bug for real.
632 phreak 1.189
633     04 Oct 2007; Christian Heim <phreak@gentoo.org>
634     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
635     Removing old versions.
636 phreak 1.188
637     *hardened-sources-2.6.22-r7 (01 Oct 2007)
638    
639     01 Oct 2007; Christian Heim <phreak@gentoo.org>
640     +hardened-sources-2.6.22-r7.ebuild:
641     Revision bump, pulling in a newer patch. Should fix #194276.
642 phreak 1.187
643     30 Sep 2007; Christian Heim <phreak@gentoo.org>
644     hardened-sources-2.6.20-r10.ebuild:
645     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
646     Mike Doty).
647 phreak 1.186
648     *hardened-sources-2.6.22-r6 (26 Sep 2007)
649    
650     26 Sep 2007; Christian Heim <phreak@gentoo.org>
651     +hardened-sources-2.6.22-r6.ebuild:
652     Revision bump, grabbing up till Linux 2.6.22.9.
653 phreak 1.185
654     24 Sep 2007; Christian Heim <phreak@gentoo.org>
655     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
656     Cleaning up further.
657 phreak 1.184
658     *hardened-sources-2.6.20-r10 (24 Sep 2007)
659    
660     24 Sep 2007; Christian Heim <phreak@gentoo.org>
661     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
662     +hardened-sources-2.6.20-r10.ebuild:
663     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
664     revisions.
665 phreak 1.183
666     *hardened-sources-2.6.22-r5 (22 Sep 2007)
667    
668     22 Sep 2007; Christian Heim <phreak@gentoo.org>
669     +hardened-sources-2.6.22-r5.ebuild:
670     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
671 phreak 1.182
672     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
673     Removing johnm from metadata.xml (see #186467 for reference).
674 phreak 1.181
675     *hardened-sources-2.6.22-r4 (17 Sep 2007)
676    
677     17 Sep 2007; Christian Heim <phreak@gentoo.org>
678     +hardened-sources-2.6.22-r4.ebuild:
679     Revision bump, hopefully fixing all those weird PAX failures.
680 phreak 1.180
681     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
682     Updating the metadata.xml.
683 phreak 1.179
684     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
685     Removing tocharian from metadata due to his retirement (see #71718 for
686     reference).
687 phreak 1.178
688     *hardened-sources-2.6.20-r9 (30 Aug 2007)
689    
690     30 Aug 2007; Christian Heim <phreak@gentoo.org>
691     +hardened-sources-2.6.20-r9.ebuild:
692     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
693 phreak 1.177
694     29 Aug 2007; Christian Heim <phreak@gentoo.org>
695     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
696     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
697     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
698     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
699     -hardened-sources-2.6.22-r2.ebuild:
700     Removing some redundant versions.
701 phreak 1.176
702     *hardened-sources-2.4.35-r1 (29 Aug 2007)
703    
704     29 Aug 2007; Christian Heim <phreak@gentoo.org>
705     +hardened-sources-2.4.35-r1.ebuild:
706     Revision bump, new grsecurity patch.
707 phreak 1.175
708     *hardened-sources-2.6.20-r8 (26 Aug 2007)
709    
710     26 Aug 2007; Christian Heim <phreak@gentoo.org>
711     +hardened-sources-2.6.20-r8.ebuild:
712     Revision bump for Linux 2.6.20.17.
713 phreak 1.174
714     *hardened-sources-2.6.22-r3 (22 Aug 2007)
715    
716     22 Aug 2007; Christian Heim <phreak@gentoo.org>
717     +hardened-sources-2.6.22-r3.ebuild:
718     Revision bump for Linux 2.6.22.4.
719 phreak 1.173
720     16 Aug 2007; Christian Heim <phreak@gentoo.org>
721     hardened-sources-2.6.22-r2.ebuild:
722     Updated patchset, to fix the alignment against 2.6.22.3.
723 phreak 1.172
724     *hardened-sources-2.6.22-r2 (16 Aug 2007)
725    
726     16 Aug 2007; Christian Heim <phreak@gentoo.org>
727     +hardened-sources-2.6.22-r2.ebuild:
728     Revision bump for Linux 2.6.22.3.
729 phreak 1.171
730     *hardened-sources-2.4.35 (16 Aug 2007)
731    
732     16 Aug 2007; Christian Heim <phreak@gentoo.org>
733     +hardened-sources-2.4.35.ebuild:
734     Version bump, initial version for Linux 2.4.35.
735 phreak 1.170
736     *hardened-sources-2.6.21-r4 (16 Aug 2007)
737    
738     16 Aug 2007; Christian Heim <phreak@gentoo.org>
739     +hardened-sources-2.6.21-r4.ebuild:
740     Revision bump for Linux 2.6.21.6.
741 phreak 1.169
742     *hardened-sources-2.6.20-r7 (16 Aug 2007)
743    
744     16 Aug 2007; Christian Heim <phreak@gentoo.org>
745     +hardened-sources-2.6.20-r7.ebuild:
746     Revision bump for Linux 2.6.20.16.
747 phreak 1.168
748     *hardened-sources-2.6.22-r1 (13 Aug 2007)
749    
750     13 Aug 2007; Christian Heim <phreak@gentoo.org>
751     +hardened-sources-2.6.22-r1.ebuild:
752     Yet another revision bump.
753 phreak 1.167
754     *hardened-sources-2.6.22 (10 Aug 2007)
755    
756     10 Aug 2007; Christian Heim <phreak@gentoo.org>
757     +hardened-sources-2.6.22.ebuild:
758     Initial release for 2.6.22. If you are using hardened-sources on a desktop
759     machine (P4 or newer), be aware you might need to disable
760     CONFIG_PAX_PAGEEXEC.
761 phreak 1.166
762     04 Aug 2007; Christian Heim <phreak@gentoo.org>
763     hardened-sources-2.6.20-r6.ebuild:
764     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
765     2.6.20.15.
766 phreak 1.165
767     10 Jul 2007; Christian Heim <phreak@gentoo.org>
768     hardened-sources-2.6.20-r5.ebuild:
769     Marking hardened-sources-2.6.20-r5 stable on ppc.
770 phreak 1.164
771     10 Jul 2007; Christian Heim <phreak@gentoo.org>
772     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
773     Cleanup.
774 phreak 1.163
775     *hardened-sources-2.6.20-r6 (08 Jul 2007)
776    
777     08 Jul 2007; Christian Heim <phreak@gentoo.org>
778     +hardened-sources-2.6.20-r6.ebuild:
779     Revision bump, grabbing yet another stable release.
780 phreak 1.162
781     17 Jun 2007; Christian Heim <phreak@gentoo.org>
782     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
783     -hardened-sources-2.6.21-r2.ebuild:
784     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
785     alpha stable KEYWORD by mistake.
786 phreak 1.161
787     17 Jun 2007; Christian Heim <phreak@gentoo.org>
788     hardened-sources-2.6.20-r5.ebuild:
789     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
790     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
791 phreak 1.160
792     *hardened-sources-2.6.21-r3 (12 Jun 2007)
793    
794     12 Jun 2007; Christian Heim <phreak@gentoo.org>
795     +hardened-sources-2.6.21-r3.ebuild:
796     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
797     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
798     love.
799 phreak 1.159
800     *hardened-sources-2.6.20-r5 (11 Jun 2007)
801    
802     11 Jun 2007; Christian Heim <phreak@gentoo.org>
803     +hardened-sources-2.6.20-r5.ebuild:
804     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
805     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
806     love.
807 pappy 1.158
808     *hardened-sources-2.4.34.5 (11 Jun 2007)
809    
810     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
811     +hardened-sources-2.4.34.5.ebuild:
812     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
813 phreak 1.157
814     30 May 2007; Christian Heim <phreak@gentoo.org>
815     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
816     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
817     stale ebuild(s).
818 phreak 1.156
819     30 May 2007; Christian Heim <phreak@gentoo.org>
820     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
821     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
822     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
823     Doing some cleanups, remove stale ebuilds.
824 phreak 1.155
825     26 May 2007; Christian Heim <phreak@gentoo.org>
826     hardened-sources-2.6.21-r2.ebuild:
827     Fixing the grsecurity patch, had one '};' too much.
828 phreak 1.154
829     *hardened-sources-2.6.21-r2 (26 May 2007)
830    
831     26 May 2007; Christian Heim <phreak@gentoo.org>
832     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
833     +hardened-sources-2.6.21-r2.ebuild:
834     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
835     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
836 phreak 1.153
837     *hardened-sources-2.6.20-r4 (26 May 2007)
838    
839     26 May 2007; Christian Heim <phreak@gentoo.org>
840     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
841     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
842 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
843 phreak 1.152
844     15 May 2007; Christian Heim <phreak@gentoo.org>
845     hardened-sources-2.6.20-r3.ebuild:
846     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
847     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
848     grsecurity patch fail in that exact same hunk.
849 phreak 1.151
850     *hardened-sources-2.6.20-r3 (15 May 2007)
851    
852     15 May 2007; Christian Heim <phreak@gentoo.org>
853     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
854     Revision bump, incorporating Linux 2.6.20.11.
855    
856     *hardened-sources-2.6.21-r1 (11 May 2007)
857    
858     11 May 2007; Christian Heim <phreak@gentoo.org>
859     +hardened-sources-2.6.21-r1.ebuild:
860     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
861     mentioned in #177234.
862 kevquinn 1.150
863     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
864     files/digest-hardened-sources-2.6.21, Manifest:
865     Fix Manifest/digest for linux-2.6.21.tar.bz2
866 phreak 1.149
867     06 May 2007; Christian Heim <phreak@gentoo.org>
868     hardened-sources-2.6.21.ebuild:
869     Bumping the hardened-patches version, needed for the fix for #177234.
870 phreak 1.148
871     *hardened-sources-2.6.21 (02 May 2007)
872    
873     02 May 2007; Christian Heim <phreak@gentoo.org>
874     +hardened-sources-2.6.21.ebuild:
875     Version bump, Linux 2.6.21-hardened.
876 phreak 1.147
877     29 Apr 2007; Christian Heim <phreak@gentoo.org>
878     hardened-sources-2.6.20-r2.ebuild:
879     Adding ~ia64 on Ned's request.
880 phreak 1.146
881     29 Apr 2007; Christian Heim <phreak@gentoo.org>
882     hardened-sources-2.6.20-r2.ebuild:
883     Fixing the included grsecurity patch, wasn't alligning due to the Index:
884     header line(s).
885 phreak 1.145
886     29 Apr 2007; Christian Heim <phreak@gentoo.org>
887     hardened-sources-2.6.20-r2.ebuild:
888     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
889 armin76 1.144
890     *hardened-sources-2.6.20-r2 (10 Apr 2007)
891    
892     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
893     +hardened-sources-2.6.20-r2.ebuild:
894     Version bump, on behalf of phreak
895 phreak 1.143
896     *hardened-sources-2.6.20-r1 (04 Apr 2007)
897    
898     04 Apr 2007; Christian Heim <phreak@gentoo.org>
899     +hardened-sources-2.6.20-r1.ebuild:
900     Revision bump, grabbing a newer grsecurity snapshot.
901 phreak 1.142
902     *hardened-sources-2.6.20 (25 Mar 2007)
903    
904     25 Mar 2007; Christian Heim <phreak@gentoo.org>
905     +hardened-sources-2.6.20.ebuild:
906     Finally a hardened-sources version for 2.6.20; many people have been waiting
907     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
908     testbox.
909 chainsaw 1.141
910     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
911     hardened-sources-2.6.18-r6.ebuild:
912     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
913 phreak 1.140
914     *hardened-sources-2.6.18-r6 (16 Mar 2007)
915    
916     16 Mar 2007; Christian Heim <phreak@gentoo.org>
917     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
918     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
919     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
920     supposed to be.
921 phreak 1.139
922     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
923     Fixing the Manifest, the previous one was broken (as in still had the
924     deleted ebuild in it).
925 phreak 1.138
926     06 Mar 2007; Christian Heim <phreak@gentoo.org>
927     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
928     +hardened-sources-2.6.18-r5.ebuild:
929     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
930     Linux 2.6.18.8. Also cleaning up the older version.
931    
932     *hardened-sources-2.6.18-r5 (06 Mar 2007)
933    
934     06 Mar 2007; Christian Heim <phreak@gentoo.org>
935     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
936     +hardened-sources-2.6.18-r5.ebuild:
937     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
938     Linux 2.6.18.8. Also cleaning up the older version.
939 phreak 1.137
940     24 Feb 2007; Christian Heim <phreak@gentoo.org>
941     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
942     -hardened-sources-2.6.19-r5.ebuild:
943     Removing some of the old version, that didn't work.
944 phreak 1.136
945     *hardened-sources-2.6.19-r6 (12 Feb 2007)
946    
947     12 Feb 2007; Christian Heim <phreak@gentoo.org>
948     +hardened-sources-2.6.19-r6.ebuild:
949     Revision bump, including a new grsec version fixing #166235.
950 pappy 1.134
951     *hardened-sources-2.4.34 (24 Jan 2007)
952    
953     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
954 pappy 1.135 Manifest:
955     updating Manifest with checksums of new tarball and ebuild
956    
957     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
958 pappy 1.134 +hardened-sources-2.4.34.ebuild:
959     I added new hardened sources 2.4 update, this is a critical path
960     security bugfix - all users of h-s are strongly advised
961     to update their existing hardened sources to this version.
962     It contains a fix for a kernel vulnerability that is pertaining
963     to the PaX changes to virtual memory management, possibly leading
964     to a local kernel exploit ... see grsecurity.net forums and homepage
965 phreak 1.133
966     23 Jan 2007; Christian Heim <phreak@gentoo.org>
967     files/digest-hardened-sources-2.6.19-r5, Manifest:
968     Fixing the patch-tarball digest.
969 phreak 1.132
970     *hardened-sources-2.6.19-r5 (23 Jan 2007)
971    
972     23 Jan 2007; Christian Heim <phreak@gentoo.org>
973     +hardened-sources-2.6.19-r5.ebuild:
974     Revision bump, closing the recently discovered PaX expand_stack()
975     vulnerability.
976 phreak 1.131
977     *hardened-sources-2.6.19-r4 (14 Jan 2007)
978    
979     14 Jan 2007; Christian Heim <phreak@gentoo.org>
980     +hardened-sources-2.6.19-r4.ebuild:
981     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
982     dropping the randomized PID feature.
983 opfer 1.130
984     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
985     hardened-sources-2.4.33.4.ebuild:
986     stable x86, bug #161171
987 phreak 1.129
988     *hardened-sources-2.6.19-r3 (27 Dec 2006)
989    
990     27 Dec 2006; Christian Heim <phreak@gentoo.org>
991     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
992     Revision bump for bug #157186 and #158786.
993 phreak 1.128
994     *hardened-sources-2.6.18-r4 (27 Dec 2006)
995    
996     27 Dec 2006; Christian Heim <phreak@gentoo.org>
997     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
998     Revision bump for bug #157186.
999 phreak 1.127
1000     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1001    
1002     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1003     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1004     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1005 phreak 1.126
1006     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1007     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1008     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1009     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1010     hardened-sources-2.6.19-r1.ebuild:
1011     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1012     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1013 pappy 1.125
1014     *hardened-sources-2.4.33.4 (17 Dec 2006)
1015    
1016     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1017     +hardened-sources-2.4.33.4.ebuild:
1018     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1019     and quilting
1020 phreak 1.124
1021     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1022    
1023     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1024     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1025     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1026     for reporting).
1027 phreak 1.123
1028     *hardened-sources-2.6.19 (13 Dec 2006)
1029    
1030     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1031     +hardened-sources-2.6.19.ebuild:
1032     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1033     Brad for providing that prompt update.
1034 phreak 1.122
1035     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1036    
1037     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1038     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1039     +hardened-sources-2.6.18-r3.ebuild:
1040     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1041     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1042 phreak 1.121
1043     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1044     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1045 nixnut 1.120
1046     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1047     Stable on ppc wrt bug 157356
1048 opfer 1.119
1049     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1050     hardened-sources-2.6.18.ebuild:
1051     stable x86, bug #157356
1052 phreak 1.118
1053     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1054    
1055     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1056     +hardened-sources-2.6.18-r2.ebuild:
1057     Revision bump, including 2.6.18.5 (via genpatches) and
1058     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1059     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1060     redesign.
1061 phreak 1.117
1062     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1063     hardened-sources-2.6.18.ebuild:
1064     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1065     of Mike Doty).
1066 phreak 1.116
1067     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1068    
1069     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1070     +hardened-sources-2.6.18-r1.ebuild:
1071     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1072 phreak 1.115
1073     *hardened-sources-2.6.18 (11 Nov 2006)
1074    
1075     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1076     +hardened-sources-2.6.18.ebuild:
1077     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1078 solar 1.114
1079     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1080     - mark amd64 stable also. bug #151877
1081 solar 1.113
1082     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1083     - mark 2.6.17-r1 stable
1084 phreak 1.112
1085     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1086     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1087     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1088 phreak 1.111
1089     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1090    
1091     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1092     +hardened-sources-2.6.17-r1.ebuild:
1093     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1094     grsecurity patch.
1095 phreak 1.110
1096     *hardened-sources-2.6.17 (17 Aug 2006)
1097    
1098     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1099     +hardened-sources-2.6.17.ebuild:
1100     Bumping the hardened-sources-2.6 series to 2.6.17, using
1101     genpatches-2.6.17-6.base.
1102 solar 1.109
1103     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1104     - stable on x86 and amd64
1105 solar 1.108
1106     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1107    
1108     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1109     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1110     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1111     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1112     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1113     crusty ebuilds
1114 johnm 1.107
1115     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1116     hardened-sources-2.6.16-r10.ebuild:
1117     marking stable on x86 and amd64
1118 solar 1.106
1119     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1120     - 2.4.32-r6 stable on x86. RSBAC state unknown
1121 kang 1.105
1122     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1123    
1124     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1125     +hardened-sources-2.4.32-r7.ebuild:
1126     Bump PaX for RSBAC to test-17
1127 johnm 1.104
1128     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1129    
1130     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1131     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1132     hardened-sources-2.6.16 bump to latest -base.
1133 solar 1.103
1134     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1135    
1136     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1137     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1138     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1139     sysctl controlable resource logging
1140 johnm 1.102
1141     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1142    
1143     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1144     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1145     push new 2.6.16 release in preparation for stable
1146 solar 1.101
1147     22 May 2006; <solar@gentoo.org> :
1148     - redigest bug 134002
1149 kang 1.100
1150     *hardened-sources-2.4.32-r5 (16 May 2006)
1151    
1152     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1153     +hardened-sources-2.4.32-r5.ebuild:
1154     Fixes rsbac common patching (new patch in new -r5 patchset)
1155 solar 1.99
1156     *hardened-sources-2.4.32-r4 (13 May 2006)
1157    
1158     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1159     +hardened-sources-2.4.32-r4.ebuild:
1160     - security bumps
1161 johnm 1.98
1162     *hardened-sources-2.6.16-r6 (03 May 2006)
1163    
1164     03 May 2006; John Mylchreest <johnm@gentoo.org>
1165     +hardened-sources-2.6.16-r6.ebuild:
1166     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1167 johnm 1.97
1168     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1169     hardened-sources-2.6.14-r8.ebuild:
1170     fix x86_64 build problem, this will delay the digest issue again for a short
1171     while but it will sort itself out
1172 johnm 1.96
1173     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1174     hardened-sources-2.6.14-r8.ebuild:
1175     bump hardened patchset
1176 antarus 1.94
1177     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1178     files/digest-hardened-sources-2.4.32-r2,
1179     files/digest-hardened-sources-2.4.32-r3,
1180     files/digest-hardened-sources-2.6.14-r8, Manifest:
1181     Fixing duff SHA256 digests: Bug # 131293
1182 johnm 1.93
1183 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1184    
1185     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1186     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1187     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1188     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1189     cleanup of old uneccessary sources
1190    
1191 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1192     fix digest
1193 johnm 1.92
1194     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1195    
1196     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1197     +hardened-sources-2.6.14-r8.ebuild:
1198     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1199 johnm 1.91
1200     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1201     Turning on gpg-signing again, and recomitting
1202 johnm 1.90
1203     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1204    
1205     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1206     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1207     +hardened-sources-2.6.16-r4.ebuild:
1208     Fix numerous security vulns
1209 solar 1.89
1210     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1211    
1212     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1213     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1214     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1215     - security bump for bug #112791. Removed old ebuilds
1216 johnm 1.88
1217     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1218    
1219     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1220     +hardened-sources-2.6.16-r3.ebuild:
1221     Removing silly localversion which I missed
1222 johnm 1.87
1223     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1224    
1225     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1226     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1227     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1228 johnm 1.86
1229     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1230    
1231     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1232     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1233     +hardened-sources-2.6.16-r2.ebuild:
1234     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1235     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1236 johnm 1.85
1237     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1238    
1239     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1240     +hardened-sources-2.6.16-r1.ebuild:
1241     Bumping to include ppc build fix and 2.6.16.3
1242 tsunam 1.84
1243     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1244     hardened-sources-2.6.14-r6.ebuild:
1245     Stable on x86; bug #127718
1246 johnm 1.83
1247     *hardened-sources-2.6.16 (31 Mar 2006)
1248    
1249     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1250     +hardened-sources-2.6.16.ebuild:
1251     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1252     2.6.16.1
1253 cryos 1.82
1254     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1255     hardened-sources-2.6.14-r6.ebuild:
1256     Stable on amd64, bug 127718.
1257 nixnut 1.81
1258     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1259     Stable on ppc. Bug #127718
1260 johnm 1.80
1261     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1262     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1263     -hardened-sources-2.6.14-r4.ebuild:
1264     Cleanup.
1265 johnm 1.79
1266     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1267    
1268     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1269     +hardened-sources-2.6.14-r6.ebuild:
1270     Fixes grsec policy recreation bug and adds a
1271     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1272 solar 1.78
1273     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1274     - stable on x86
1275 hansmi 1.77
1276     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1277     hardened-sources-2.6.14-r5.ebuild:
1278     Stable on ppc.
1279 johnm 1.76
1280     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1281    
1282     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1283     +hardened-sources-2.6.14-r5.ebuild:
1284     fixing every known exploit
1285 solar 1.75
1286     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1287    
1288     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1289     +hardened-sources-2.4.32-r2.ebuild:
1290     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1291 solar 1.74
1292     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1293    
1294     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1295     - version bump for new genpatches which fix up a few sec holes
1296 solar 1.73
1297     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1298    
1299     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1300     - revision bump to add misc vital linux kernel security patches.
1301 johnm 1.72
1302     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1303    
1304     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1305     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1306     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1307 johnm 1.71
1308     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1309     hardened-sources-2.6.14-r2.ebuild:
1310     making x86 & amd64 stable following testing.
1311 johnm 1.70
1312     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1313    
1314     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1315     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1316     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1317     network hooks.
1318 johnm 1.69
1319     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1320     hardened-sources-2.6.14-r1.ebuild:
1321     bumping to stable early for sec fix on x86 & amd64
1322 johnm 1.68
1323     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1324    
1325     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1326     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1327     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1328 solar 1.67
1329     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1330     - stable on x86 security bug #114227 CAN-2005-3257
1331 kang 1.66
1332     *hardened-sources-2.4.32 (19 Nov 2005)
1333    
1334     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1335     +hardened-sources-2.4.32.ebuild:
1336     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1337     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1338     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1339     rsbac >> /etc/portage/package.use)
1340 johnm 1.65
1341     *hardened-sources-2.6.14 (14 Nov 2005)
1342    
1343     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1344     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1345     Bumping 2.6 series to 2.6.14.2
1346 johnm 1.64
1347     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1348    
1349     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1350     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1351     +hardened-sources-2.6.13-r2.ebuild:
1352     Fixes minor build error in ppc.
1353 johnm 1.63
1354     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1355    
1356     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1357     +hardened-sources-2.6.13-r1.ebuild:
1358     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1359     2.6.13.4, fixes some major amd64 stability problems.
1360 johnm 1.62
1361     *hardened-sources-2.6.13 (16 Sep 2005)
1362    
1363     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1364     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1365     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1366     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1367     users should test this thoroughly.
1368 solar 1.61
1369     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1370     - stable on x86
1371 johnm 1.60
1372     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1373    
1374     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1375     +hardened-sources-2.6.11-r15.ebuild:
1376     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1377     grsec redefining curr_ip struct.
1378 solar 1.59
1379     *hardened-sources-2.4.31 (20 Jun 2005)
1380    
1381     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1382     initial import of 2.4.31 tree
1383 johnm 1.58
1384     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1385    
1386     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1387     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1388     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1389     naming scheme to abide by genpatches
1390 johnm 1.57
1391     *hardened-sources-2.6.11-r13 (18 May 2005)
1392    
1393     18 May 2005; John Mylchreest <johnm@gentoo.org>
1394     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1395     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1396     target. sorry about that. Fixes bug #93022
1397 johnm 1.56
1398     *hardened-sources-2.6.11-r12 (17 May 2005)
1399    
1400     17 May 2005; John Mylchreest <johnm@gentoo.org>
1401     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1402     +hardened-sources-2.6.11-r12.ebuild:
1403     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1404     merges in genpatches-base
1405 johnm 1.55
1406     *hardened-sources-2.6.11-r12 (17 May 2005)
1407    
1408     17 May 2005; John Mylchreest <johnm@gentoo.org>
1409     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1410     +hardened-sources-2.6.11-r12.ebuild:
1411     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1412     merges in genpatches-base
1413 solar 1.54
1414     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1415     -files/2.4.27-cmdline-race.patch,
1416     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1417     -files/2.4.28-grsec-binfmt_a.out.patch,
1418     -files/2.4.28-grsec-cmdline-race.patch,
1419     -files/2.4.28-selinux-binfmt_a.out.patch,
1420     -files/2.4.28-selinux-cmdline-race.patch,
1421     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1422     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1423     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1424     cleanup..
1425 solar 1.53
1426     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1427    
1428     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1429     - disable aout by default
1430 solar 1.52
1431     *hardened-sources-2.4.30 (18 Apr 2005)
1432    
1433     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1434     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1435     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1436     use
1437 tocharian 1.50
1438 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1439    
1440     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1441     +hardened-sources-2.4.29.ebuild:
1442     New hardened-patches-2.4-29.0 patchball.
1443     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1444    
1445     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1446    
1447     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1448     +hardened-sources-2.4.28-r5.ebuild:
1449     Added a fix for a PaX vulnerability.
1450    
1451     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1452 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1453     Stable on x86
1454 solar 1.49
1455     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1456     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1457     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1458     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1459     - fixed/added RDEPEND= in all kernel-2 ebuilds
1460 tocharian 1.48
1461     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1462    
1463     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1464     +hardened-sources-2.4.28-r4.ebuild:
1465     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1466     backport of neighbour hash updates.
1467 tocharian 1.47
1468     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1469     hardened-sources-2.4.28-r3.ebuild:
1470     Stable on x86
1471 tseng 1.46
1472     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1473    
1474     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1475     +hardened-sources-2.6.10-r3.ebuild:
1476     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1477     in 2005.0
1478 tocharian 1.45
1479     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1480     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1481     hardened-sources-2.4.28-r2.ebuild:
1482     Mark stable on x86
1483 tocharian 1.44
1484     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1485    
1486     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1487     +hardened-sources-2.4.28-r3.ebuild:
1488     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1489 tocharian 1.43
1490     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1491     hardened-sources-2.4.28.ebuild:
1492     Mark stable on x86.
1493 tocharian 1.42
1494     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1495    
1496     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1497     +hardened-sources-2.4.28-r2.ebuild:
1498     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1499     Mazinger for grsecurity patches as well.
1500 plasmaroo 1.41
1501     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1502    
1503     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1504     Security bump. Thank tocharian for rolling a new patchset...
1505 solar 1.40
1506     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1507     +files/2.4.28-grsec-cmdline-race.patch,
1508     +files/2.4.28-selinux-binfmt_a.out.patch,
1509     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1510     - Round up remaining security patches that appear to be missing in 2.4.28. -
1511     PaX standalone updated to current. hgpv=28.1
1512 solar 1.39
1513     *hardened-sources-2.4.28 (28 Nov 2004)
1514    
1515     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1516     security bump. Thank tocharian for rolling a new patchset
1517 scox 1.31
1518 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1519    
1520     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1521     +hardened-sources-2.4.27-r3.ebuild:
1522     Applies the new 2.4-27.2 patchball which updates
1523     GRSecurity to the 2.0.1 version.
1524    
1525 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1526    
1527     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1528     +hardened-sources-2.4.27-r2.ebuild:
1529     Version bump.
1530     This version uses the new 2.4-27.1 patchball which updates
1531     both the SELinux PaX hooks patch and the SELinux headers.
1532    
1533 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1534    
1535     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1536     +hardened-sources-2.4.27-r1.ebuild,
1537     -hardened-sources-2.4.27.ebuild,
1538     +files/2.4.27-cmdline-race.patch:
1539     Version bump, fix for cmdline race. See bug #59905.
1540    
1541     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1542    
1543     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1544     +hardened-sources-2.4.26-r6.ebuild,
1545     -hardened-sources-2.4.26-r5.ebuild,
1546     -hardened-sources-2.4.26-r4.ebuild,
1547     +files/2.4.26-cmdline-race.patch:
1548     Version bump, fix for cmdline race. See bug #59905.
1549    
1550 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1551    
1552     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1553     +hardened-sources-2.4.27.ebuild,
1554     +files/2.4.27-CAN-2004-0394.patch:
1555     Ported the patchball to the 2.4.27 kernel version.
1556    
1557 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1558    
1559     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1560     +hardened-sources-2.4.26-r5.ebuild:
1561 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1562 scox 1.34 It adds the following features:
1563     - Squashfs
1564     - Ebtables
1565     - Netdev random (core+drivers)
1566     - Watchdog Timer (WDT) fix.
1567    
1568 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1569    
1570     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1571     +hardened-sources-2.4.26-r4.ebuild,
1572     +files/2.4.26-CAN-2004-0415.patch,
1573     -hardened-sources-2.4.26-3:
1574     Version bump, fix for CAN 0415, see bug #59378.
1575    
1576 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1577    
1578     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1579     +hardened-sources-2.4.26-r3.ebuild,
1580     +files/2.4.26-CAN-2004-0497.patch,
1581     -hardened-sources-2.4.26-r2.ebuild:
1582     Version bump, fixed CAN 0497, see bug #56171.
1583    
1584 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1585    
1586     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1587 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1588 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1589     +files/2.4.26-CAN-2004-0535.patch,
1590     -hardened-sources-2.4.26-r1.ebuild:
1591     Fixes for both CAN 0495 and 0535, see bug #54976
1592 pvdabeel 1.27
1593 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1594     hardened-sources-2.4.26-r1.ebuild:
1595     QA - fix use invocation
1596 scox 1.28
1597     *hardened-sources-2.4.26-r1 (22 June 2004)
1598    
1599     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1600     +hardened-sources-2.4.26-r1.ebuild,
1601     +files/2.4.26-CAN-2004-0394.patch,
1602     +files/2.4.26-signal-race.patch,
1603     -hardened-sources-2.4.26.ebuild,
1604     -hardened-sources-2.4.24-r3.ebuild:
1605     Version bump for the CAN-2004-0394 issue and bug #53804
1606     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1607    
1608    
1609 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1610     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1611     Masked hardened-sources-2.4.26.ebuild broken for ppc
1612    
1613     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1614     hardened-sources-2.4.24-r3.ebuild:
1615     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1616 plasmaroo 1.25
1617 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1618    
1619     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1620     +hardened-sources-2.4.26.ebuild:
1621     Updated hardened-sources for the 2.4.26 kernel
1622     Removed broken components, updated almost everything.
1623    
1624 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1625    
1626     17 Apr 2004; <plasmaroo@gentoo.org>
1627     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1628     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1629     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1630     +hardened-sources-2.4.24-r3.ebuild:
1631     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1632     vulnerabilities. Old revisions removed.
1633 plasmaroo 1.24
1634     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1635    
1636     15 Apr 2004; <plasmaroo@gentoo.org>
1637     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1638     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1639     Version bump for the CAN-2004-0109 issue; bug #47881.
1640 aliz 1.23
1641     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1642     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1643     Add eutils to inherit.
1644 plasmaroo 1.22
1645     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1646    
1647     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1648     files/hardened-sources-2.4.24.munmap.patch:
1649     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1650 scox 1.19
1651 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1652 scox 1.26
1653 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1654     hardened-sources-2.4.24.ebuild:
1655     Version bump, updated most of the components.
1656     This release includes the following:
1657    
1658     - Hardened security
1659     - Netfilter patch-o-matic 20031219
1660     - FreeSWAN 2.04 & x509 1.4.8
1661     - EVMS 2.2.2
1662     - XFS 1.3.1
1663     - cryptoloop jari
1664     - grsecurity 2.0-rc4
1665     - SELinux
1666     - PaX 200402060000
1667     - PaX Obscurity 200308302223
1668     - Others...
1669    
1670     Neither -ck nor systrace are included anymore.
1671    
1672 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1673    
1674     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1675     hardened-sources-2.4.22-r2.ebuild:
1676 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1677 scox 1.19
1678     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1679 iggy 1.17
1680     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1681 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1682 iggy 1.16
1683     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1684 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1685     Version bump for the 'do_brk' vulnerability.
1686 iggy 1.15
1687     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1688     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1689     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1690     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1691 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1692 frogger 1.14
1693     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1694     hardened-sources-2.4.22.ebuild:
1695 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1696     components. These are no longer handled in the kernel
1697     so this code was not necessary.
1698 frogger 1.13
1699     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1700     New 2.4.22 based hardened-sources thanks to
1701     Phil West <p.west@computer.org>.
1702    
1703     These sources include:
1704 plasmaroo 1.18 - New SELinux API
1705     - Updated CK-base
1706     - Updated GRSec
1707     - Systrace
1708     - SuperFreeS/WAN 1.99.8
1709     - Propolice kernel build support
1710     - EVMS
1711     - Other various security related patches
1712 frogger 1.11
1713 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1714    
1715     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1716     Updated hardened-sources based on the 2.4.21 Linux kernel.
1717     This includes updates to most major components such as:
1718 plasmaroo 1.18 - ck-base-0306300059
1719     - selinux-2.4-2003071106
1720     - grsecurity-2.0-rc1
1721     - Updated IPTables patch-o-matic
1722     - Updated SuperFreeS/WAN
1723    
1724 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1725     updated patch set ready for the 2.4.21 based kernel.
1726    
1727 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1728     Initial import of hardened-sources-2.4.20-r4. This revision
1729     includes only a few changes, but one of these is an important
1730     security fix. It is recommended all users of hardened-sources
1731     upgrade to this release.
1732 plasmaroo 1.18
1733 frogger 1.11 - ioperm bug fix
1734     - fixed compilation failure when building without GRSec
1735 plasmaroo 1.18
1736 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1737     due to time constraints, but is planned for inclusion in the near
1738     future.
1739 msterret 1.10
1740     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1741    
1742     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1743     hardened-sources-2.4.20-r3.ebuild:
1744 plasmaroo 1.18 Add Header...
1745 frogger 1.9
1746     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1747     hardened-sources-2.4.20-r3.ebuild:
1748     Removed warnings from ebuild. This kernel should be safe to
1749     use at this point.
1750 frogger 1.8
1751     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1752    
1753     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1754     hardened-sources-2.4.20-r3.ebuild:
1755     New revision. Includes the following changes over -r2:
1756 plasmaroo 1.18
1757 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1758     - Super FreeS/WAN 1.99.7rc2
1759     - PaX for the LSM/SELinux branch
1760     - GRSecurity 2.0-pre4 (role based access control)
1761     - Systrace 1.3
1762     - EXT3 fixes
1763     - EVMS 2.0.1
1764     - GCC 3.1+ compile optimizations
1765     - ProPolice kernel build support
1766     - Hashing table security fixes
1767 frogger 1.3
1768     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1769 frogger 1.7
1770     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1771     Initial import of hardened-sources-r2. This new
1772     ebuild includes many new performance and security
1773     related patches. As in -r1, it will patch in
1774     LSM/SELinux if "selinux" is in USE, otherwise it
1775     will patch in GRSecurity. The following patches
1776     are included in this revision:
1777 plasmaroo 1.18
1778 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1779     (pulled from the base CK patch)
1780     - ptrace exploit patch for the LSM kernel
1781     (the GRSec patch already fixes this)
1782     - LSM 2.4-2003040709
1783     - SELinux 2.4-2003040709
1784     - Systrace v1.2
1785     - IPTables patch-o-matic base patches - 20030107
1786     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1787     - Super FreeS/WAN 1.99.6.1
1788     - GRSecurity 1.9.9g
1789     - MPPE
1790     - EXT3 data journal fix
1791     - CIPE 1.5.4
1792 frogger 1.6
1793     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1794     hardened-sources-2.4.20-r1.ebuild, manifest:
1795 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1796 frogger 1.5
1797     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1798     hardened-sources-2.4.20-r1.ebuild:
1799     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1800     is patched in instead. Ptrace patches for selinux have also been added. In
1801     either case, systrace support will be patched in as well.
1802 frogger 1.3
1803     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1804     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1805 plasmaroo 1.18 Revision bump for new sources.
1806 frogger 1.4
1807 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1808 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1809 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1810 method 1.1
1811 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1812    
1813 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1814     hardened-sources-2.4.20.ebuild:
1815 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20