/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.306 - (hide annotations) (download)
Fri May 1 23:52:38 2009 UTC (5 years, 2 months ago) by gengor
Branch: MAIN
Changes since 1.305: +6 -1 lines
Remove unnecessary mirror://gentoo from SRC_URI.
(Portage version: 2.1.6.11/cvs/Linux i686)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 gengor 1.268 # Copyright 2000-2009 Gentoo Foundation; Distributed under the GPL v2
3 gengor 1.306 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.305 2009/04/05 18:26:47 nixnut Exp $
4    
5     01 May 2009; Gordon Malm <gengor@gentoo.org>
6     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
7     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
8     Remove unnecessary mirror://gentoo from SRC_URI.
9 nixnut 1.305
10     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
11     ppc stable
12 gengor 1.304
13     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
14     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
15     Stable amd64/x86 and remove old.
16 gengor 1.303
17     *hardened-sources-2.6.28-r7 (27 Mar 2009)
18    
19     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
20     +hardened-sources-2.6.28-r7.ebuild:
21     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
22 gengor 1.302
23     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
24     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
25     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
26     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
27     Stable amd64/x86 and remove old versions.
28 nixnut 1.301
29     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
30     ppc stable
31 gengor 1.300
32     *hardened-sources-2.6.28-r6 (21 Mar 2009)
33    
34     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
35     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
36     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
37 gengor 1.299
38     *hardened-sources-2.6.28-r5 (20 Mar 2009)
39    
40     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
41     +hardened-sources-2.6.28-r5.ebuild:
42     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
43 gengor 1.298
44     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
45     hardened-sources-2.6.28-r4.ebuild:
46     Stable amd64/x86.
47 gengor 1.297
48     *hardened-sources-2.6.28-r4 (18 Mar 2009)
49    
50     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
51     +hardened-sources-2.6.28-r4.ebuild:
52     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
53     compilation with CPA_DEBUG and more.
54 gengor 1.296
55     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
56     hardened-sources-2.6.28-r3.ebuild:
57     Quick stable amd64/x86.
58 gengor 1.295
59     *hardened-sources-2.6.28-r3 (15 Mar 2009)
60    
61     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
62     +hardened-sources-2.6.28-r3.ebuild:
63     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
64 nixnut 1.294
65     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
66     ppc stable
67 gengor 1.293
68     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
69     hardened-sources-2.6.28-r2.ebuild:
70     Stable amd64/x86.
71 gengor 1.292
72     *hardened-sources-2.6.28-r2 (11 Mar 2009)
73    
74     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
75     +hardened-sources-2.6.28-r2.ebuild:
76     Version bump bringing in latest grsecurity patch.
77 gengor 1.291
78     *hardened-sources-2.6.28-r1 (09 Mar 2009)
79    
80     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
81     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
82     Version bump and remove old.
83 nixnut 1.290
84     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
85     ppc stable
86 gengor 1.289
87     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
88     hardened-sources-2.6.27-r8.ebuild:
89     Remove amd64 testing keyword, bug 256226.
90 gengor 1.288
91     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
92     hardened-sources-2.6.27-r8.ebuild:
93     Revert amd64 stable, bug #256226.
94 gengor 1.287
95     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
96     hardened-sources-2.6.27-r8.ebuild:
97     Stable on amd64/x86.
98 gengor 1.286
99     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
100     -hardened-sources-2.6.27-r6.ebuild:
101     Remove old 2.6.27 release.
102 gengor 1.285
103     *hardened-sources-2.6.27-r8 (24 Feb 2009)
104    
105     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
106     +hardened-sources-2.6.27-r8.ebuild:
107     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
108     and probably more.
109 nixnut 1.284
110     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
111     ppc stable
112 gengor 1.283
113     *hardened-sources-2.6.28 (25 Jan 2009)
114    
115     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
116     +hardened-sources-2.6.28.ebuild:
117     Initial 2.6.28 release.
118 gengor 1.282
119     *hardened-sources-2.6.27-r7 (25 Jan 2009)
120    
121     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
122     +hardened-sources-2.6.27-r7.ebuild:
123     Bump to Linux 2.6.27.13.
124 gengor 1.281
125     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
126     hardened-sources-2.6.26-r9.ebuild:
127     Stable amd64/x86.
128 gengor 1.280
129     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
130     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
131     -hardened-sources-2.6.27-r5.ebuild:
132     Remove problem versions.
133 gengor 1.279
134     *hardened-sources-2.6.27-r6 (24 Jan 2009)
135    
136     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
137     +hardened-sources-2.6.27-r6.ebuild:
138     Revert PaX test29 to test30 changes. Fixes bug 256226.
139 gengor 1.277
140     *hardened-sources-2.6.27-r5 (24 Jan 2009)
141    
142     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
143     +hardened-sources-2.6.27-r5.ebuild:
144 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
145 gengor 1.277 254843.
146 gengor 1.276
147     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
148     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
149     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
150     Remove problem versions.
151 nixnut 1.275
152     23 Jan 2009; nixnut <nixnut@gentoo.org>
153     hardened-sources-2.6.25-r13.ebuild:
154     ppc stable
155 gengor 1.274
156     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
157     hardened-sources-2.6.25-r13.ebuild:
158     Fasttrack stable amd64/x86.
159 gengor 1.273
160     *hardened-sources-2.6.26-r9 (21 Jan 2009)
161    
162     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
163     +hardened-sources-2.6.26-r9.ebuild:
164 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
165 gengor 1.272
166     *hardened-sources-2.6.25-r13 (20 Jan 2009)
167    
168     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
169     +hardened-sources-2.6.25-r13.ebuild:
170 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
171 nixnut 1.271
172     20 Jan 2009; nixnut <nixnut@gentoo.org>
173     hardened-sources-2.6.25-r12.ebuild:
174     ppc stable
175 gengor 1.270
176     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
177     hardened-sources-2.6.25-r12.ebuild:
178     Stable amd64/x86.
179 gengor 1.269
180     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
181     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
182     -hardened-sources-2.6.27-r2.ebuild:
183     Clean out old versions.
184 gengor 1.268
185     *hardened-sources-2.6.27-r4 (14 Jan 2009)
186     *hardened-sources-2.6.26-r8 (14 Jan 2009)
187     *hardened-sources-2.6.25-r12 (14 Jan 2009)
188    
189     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
190     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
191     +hardened-sources-2.6.27-r4.ebuild:
192     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
193     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
194     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
195     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
196 nixnut 1.267
197     15 Dec 2008; nixnut <nixnut@gentoo.org>
198     hardened-sources-2.6.25-r11.ebuild:
199     Stable on ppc
200 gengor 1.266
201     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
202     hardened-sources-2.6.25-r11.ebuild:
203     Stable amd64/x86.
204 gengor 1.265
205     *hardened-sources-2.6.27-r3 (07 Dec 2008)
206    
207     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
208     +hardened-sources-2.6.27-r3.ebuild:
209     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
210     Fixes bug #248754, #249729 and #246607.
211 gengor 1.264
212     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
213     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
214     Remove old versions.
215 gengor 1.262
216     *hardened-sources-2.6.26-r7 (03 Dec 2008)
217     *hardened-sources-2.6.25-r11 (03 Dec 2008)
218    
219 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
220     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
221 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
222     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
223     Both include many backports from 2.6.27.{6,7} -stable releases.
224 gengor 1.261
225     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
226     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
227     Remove versions broken on ARCHes != x86/amd64.
228 gengor 1.260
229     *hardened-sources-2.6.27-r2 (24 Nov 2008)
230    
231     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
232     +hardened-sources-2.6.27-r2.ebuild:
233     Bump to Linux 2.6.27.7 and latest grsecurity patch.
234 gengor 1.259
235     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
236     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
237     Remove old versions.
238 gengor 1.258
239     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
240     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
241     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
242 nixnut 1.257
243     16 Nov 2008; nixnut <nixnut@gentoo.org>
244     hardened-sources-2.6.25-r10.ebuild:
245     Stable on ppc
246 gengor 1.256
247     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
248     hardened-sources-2.6.25-r10.ebuild:
249     Stable amd64/x86.
250 gengor 1.255
251     *hardened-sources-2.6.26-r6 (12 Nov 2008)
252    
253     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
254     +hardened-sources-2.6.26-r6.ebuild:
255     Bump to Linux 2.6.26.8 and fix security bug #245650.
256 gengor 1.254
257     *hardened-sources-2.6.25-r10 (12 Nov 2008)
258    
259     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
260     +hardened-sources-2.6.25-r10.ebuild:
261     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
262 gengor 1.253
263     *hardened-sources-2.6.27-r1 (09 Nov 2008)
264    
265     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
266     +hardened-sources-2.6.27-r1.ebuild:
267     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
268 gengor 1.252
269     *hardened-sources-2.6.27 (04 Nov 2008)
270    
271     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
272     +hardened-sources-2.6.27.ebuild:
273     Initial 2.6.27 release.
274 gengor 1.251
275     *hardened-sources-2.6.26-r5 (03 Nov 2008)
276    
277     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
278     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
279     +hardened-sources-2.6.26-r5.ebuild:
280     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
281     Clean out some old versions.
282 nixnut 1.250
283     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
284     Stable on ppc
285 gengor 1.249
286     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
287     hardened-sources-2.6.25-r9.ebuild:
288     Stable on amd64/x86.
289 gengor 1.248
290     *hardened-sources-2.6.25-r9 (26 Oct 2008)
291    
292     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
293     +hardened-sources-2.6.25-r9.ebuild:
294     Update to Linux 2.6.25.19
295 nixnut 1.247
296     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
297     Stable on ppc
298 gengor 1.246
299     *hardened-sources-2.6.26-r4 (14 Oct 2008)
300    
301     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
302     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
303     Update to latest grsecurity patch, fixing building of non-modular kernels.
304 gengor 1.245
305     *hardened-sources-2.6.26-r3 (12 Oct 2008)
306    
307     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
308     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
309     +hardened-sources-2.6.26-r3.ebuild:
310     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
311     2.6.26-r1: Removed.
312     2.6.25-r8: Stable amd64/x86.
313 gengor 1.244
314     *hardened-sources-2.6.25-r8 (09 Oct 2008)
315    
316     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
317     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
318     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
319     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
320 nixnut 1.243
321     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
322     Stable on ppc
323 gengor 1.242
324     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
325     hardened-sources-2.6.25-r7.ebuild:
326     Stable amd64/x86.
327 gengor 1.241
328     *hardened-sources-2.6.26-r2 (13 Sep 2008)
329    
330     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
331     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
332     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
333     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
334 gengor 1.240
335     *hardened-sources-2.6.25-r7 (13 Sep 2008)
336    
337     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
338     +hardened-sources-2.6.25-r7.ebuild:
339     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
340 gengor 1.239
341     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
342     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
343     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
344     hardened-sources-2.6.26-r1.ebuild:
345     Update DESCRIPTION and HGPV_URI.
346 gengor 1.238
347     *hardened-sources-2.6.25-r6 (09 Sep 2008)
348    
349     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
350     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
351     2.6.25-r6: Update to Linux 2.6.25.17.
352     2.6.24-r3: Removed.
353 gengor 1.237
354     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
355     hardened-sources-2.6.25-r5.ebuild:
356     Stable on amd64/x86
357 gengor 1.236
358     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
359     Update my email address.
360 nixnut 1.235
361     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
362     stable on ppc
363 battousai 1.234
364     *hardened-sources-2.6.26-r1 (23 Aug 2008)
365     *hardened-sources-2.6.25-r5 (23 Aug 2008)
366    
367     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
368     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
369     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
370     +hardened-sources-2.6.26-r1.ebuild:
371     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
372     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
373     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
374     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
375     (gengor).
376 solar 1.233
377     *hardened-sources-2.6.26 (18 Aug 2008)
378     *hardened-sources-2.6.25-r4 (18 Aug 2008)
379    
380     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
381     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
382     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
383     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
384     2.6.25-r2: Removed.
385 tove 1.232
386     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
387     Remove phreak from metadata.xml (#96398)
388 solar 1.231
389     *hardened-sources-2.6.25-r3 (31 Jul 2008)
390    
391     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
392     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
393     +hardened-sources-2.6.25-r3.ebuild:
394     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
395     fixes, including security bug #231750.
396 nixnut 1.230
397     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
398     Stable on ppc
399 solar 1.229
400     *hardened-sources-2.6.25-r2 (05 Jul 2008)
401    
402     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
403     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
404     +hardened-sources-2.6.25-r2.ebuild:
405     2.6.23-r4: Stable x86/amd64
406     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
407     2.6.23-r{11,12}: Removed due to multiple vulns.
408     (gengor & kerframil)
409 nixnut 1.228
410     04 Jul 2008; nixnut <nixnut@gentoo.org>
411     hardened-sources-2.6.23-r13.ebuild:
412     Stable on ppc
413 solar 1.227
414     *hardened-sources-2.6.25-r1 (30 Jun 2008)
415    
416     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
417     +hardened-sources-2.6.25-r1.ebuild:
418     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
419     grsecurity release. 2.6.23-r13: x86/amd64 stable
420 solar 1.226
421     *hardened-sources-2.6.25 (17 Jun 2008)
422     *hardened-sources-2.6.24-r3 (17 Jun 2008)
423     *hardened-sources-2.6.23-r13 (17 Jun 2008)
424    
425     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
426     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
427     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
428     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
429     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
430     2.6.25: Initial 2.6.25 release.
431 solar 1.225
432     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
433     - fasttrack to stable x86/amd64
434 swegener 1.224
435     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
436     Fix broken digest for linux-2.6.24.tar.bz2.
437 solar 1.223
438     *hardened-sources-2.6.24-r2 (11 May 2008)
439     *hardened-sources-2.6.23-r12 (11 May 2008)
440    
441     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
442     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
443     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
444     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
445     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
446     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
447     security bugs 219901, 220691, 220975, 220979, 221123. New
448     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
449     should be removed as far as I'm concerned, everything else remove due to
450     vulnerable to numerous security bugs or brokeness.
451 nixnut 1.222
452     10 May 2008; nixnut <nixnut@gentoo.org>
453     hardened-sources-2.6.23-r11.ebuild:
454     Stable on ppc
455 solar 1.221
456     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
457     - -r11 stable on x86/amd64
458 solar 1.220
459     *hardened-sources-2.6.23-r11 (01 May 2008)
460    
461     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
462     - version bump to fix ulgy linux bugs
463 phreak 1.219
464     *hardened-sources-2.6.24-r1 (30 Apr 2008)
465    
466     30 Apr 2008; Christian Heim <phreak@gentoo.org>
467     +hardened-sources-2.6.24-r1.ebuild:
468     Revision bump (thanks to Kerin and Gordon, again), pulling
469     genpatches-2.6.24-7, solving #219089. Additionally contains further security
470     fixes plus some minor updates.
471 phreak 1.218
472     *hardened-sources-2.6.23-r10 (30 Apr 2008)
473    
474     30 Apr 2008; Christian Heim <phreak@gentoo.org>
475     +hardened-sources-2.6.23-r10.ebuild:
476     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
477     Additional contains "various other fixes".
478 phreak 1.217
479     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
480     Update the longdescription in metadata, thanks to Gordon Malm.
481 nixnut 1.216
482     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
483     Stable on ppc wrt bug #213255
484 solar 1.215
485     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
486     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
487     - stable on x86/amd64 per request. Removed obsolete ebuilds
488 phreak 1.214
489     *hardened-sources-2.6.24 (07 Apr 2008)
490    
491     07 Apr 2008; Christian Heim <phreak@gentoo.org>
492     +hardened-sources-2.6.24.ebuild:
493     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
494     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
495     for the many contributions and their continued effort in #216612) based on
496     2.6.24 and genpatches-2.6.24-5.
497    
498     The current ebuild/patchset contains these things:
499     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
500     * Introduces bespoke server and workstation oriented security levels
501     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
502 phreak 1.213
503     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
504     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
505     maintaining it).
506 phreak 1.212
507     24 Mar 2008; Christian Heim <phreak@gentoo.org>
508     hardened-sources-2.4.35-r2.ebuild:
509     Fixing SRC_URI for 2.4.35-r2.
510 phreak 1.211
511     *hardened-sources-2.6.23-r9 (22 Mar 2008)
512    
513     22 Mar 2008; Christian Heim <phreak@gentoo.org>
514     +hardened-sources-2.6.23-r9.ebuild:
515     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
516     * Change the default GIDs for some grsecurity options
517     * Revamp the Hardened [Gentoo] security level and make it the default level
518     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
519     * Fix a recursive lock -- call to capable() within ptrace_attach()
520     * Fix bug that allows audit and iscsi operations to be controlled via netlink
521 solar 1.210
522     *hardened-sources-2.6.23-r8 (27 Feb 2008)
523    
524     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
525     - version bump from Kerin Millar bug 210026
526 solar 1.209
527     17 Feb 2008; <solar@gentoo.org> metadata.xml,
528     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
529     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
530     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
531     - stable on x86 and remove old ebuilds
532 solar 1.207
533     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
534 solar 1.208 - stable on amd64 per request of amd64 lead
535 solar 1.206
536     *hardened-sources-2.6.23-r7 (11 Feb 2008)
537    
538     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
539     - version bump from kerin.millar
540     Changes:
541    
542     * Bump to genpatches-base-2.6.23-9
543     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
544     * Disables COMPAT_VDSO in x86/defconfig
545     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
546 phreak 1.205
547     25 Jan 2008; Christian Heim <phreak@gentoo.org>
548     -hardened-sources-2.6.22-r8.ebuild:
549     Cleaning up old versions.
550 phreak 1.204
551     *hardened-sources-2.6.23-r6 (25 Jan 2008)
552    
553     25 Jan 2008; Christian Heim <phreak@gentoo.org>
554     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
555     Revision bump, pulling in the latest genpatches.
556 phreak 1.203
557     *hardened-sources-2.6.23-r5 (24 Dec 2007)
558    
559     24 Dec 2007; Christian Heim <phreak@gentoo.org>
560     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
561     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
562     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
563     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
564 phreak 1.202
565     24 Dec 2007; Christian Heim <phreak@gentoo.org>
566     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
567     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
568     -hardened-sources-2.6.23-r3.ebuild:
569     Cleaning out some unused, old versions.
570 phreak 1.201
571     24 Dec 2007; Christian Heim <phreak@gentoo.org>
572     hardened-sources-2.6.23-r4.ebuild:
573     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
574     in the tree for long, but there isn't much of a difference between this and
575     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
576 phreak 1.200
577     *hardened-sources-2.6.23-r4 (23 Dec 2007)
578    
579     23 Dec 2007; Christian Heim <phreak@gentoo.org>
580     +hardened-sources-2.6.23-r4.ebuild:
581     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
582 phreak 1.199
583     *hardened-sources-2.6.23-r3 (04 Dec 2007)
584    
585     04 Dec 2007; Christian Heim <phreak@gentoo.org>
586     +hardened-sources-2.6.23-r3.ebuild:
587     Revision bump, pulling in 2.6.23.9.
588 phreak 1.198
589     *hardened-sources-2.6.23-r2 (25 Nov 2007)
590    
591     25 Nov 2007; Christian Heim <phreak@gentoo.org>
592     +hardened-sources-2.6.23-r2.ebuild:
593     Updated patchset, thanks to solar.
594 phreak 1.197
595     *hardened-sources-2.6.23-r1 (31 Oct 2007)
596    
597     31 Oct 2007; Christian Heim <phreak@gentoo.org>
598     +hardened-sources-2.6.23-r1.ebuild:
599     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
600 solar 1.196
601     29 Oct 2007; <solar@gentoo.org> metadata.xml:
602     - update metadata.xml
603 phreak 1.195
604     25 Oct 2007; Christian Heim <phreak@gentoo.org>
605     hardened-sources-2.6.22-r8.ebuild:
606     Marking 2.6.22-r8 stable on amd64 and x86.
607 phreak 1.194
608     21 Oct 2007; Christian Heim <phreak@gentoo.org>
609     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
610     -hardened-sources-2.6.21-r4.ebuild:
611     Removing old ebuilds.
612 phreak 1.193
613     *hardened-sources-2.4.35-r2 (21 Oct 2007)
614    
615     21 Oct 2007; Christian Heim <phreak@gentoo.org>
616     +hardened-sources-2.4.35-r2.ebuild:
617     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
618     patches.
619 phreak 1.192
620     *hardened-sources-2.6.22-r8 (21 Oct 2007)
621    
622     21 Oct 2007; Christian Heim <phreak@gentoo.org>
623     +hardened-sources-2.6.22-r8.ebuild:
624     Yet another new patch, hopefully fixing the remaining issues we had w/
625     2.6.22. Candidate for stabling.
626 phreak 1.191
627     *hardened-sources-2.6.23 (13 Oct 2007)
628    
629     13 Oct 2007; Christian Heim <phreak@gentoo.org>
630     +hardened-sources-2.6.23.ebuild:
631     Initial hardened-sources-2.6.23. If people still have problems w/ bug
632     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
633 phreak 1.190
634     11 Oct 2007; Christian Heim <phreak@gentoo.org>
635     hardened-sources-2.6.20-r10.ebuild:
636     Pulling in yet another new genpatches version, fixing the PWC bug for real.
637 phreak 1.189
638     04 Oct 2007; Christian Heim <phreak@gentoo.org>
639     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
640     Removing old versions.
641 phreak 1.188
642     *hardened-sources-2.6.22-r7 (01 Oct 2007)
643    
644     01 Oct 2007; Christian Heim <phreak@gentoo.org>
645     +hardened-sources-2.6.22-r7.ebuild:
646     Revision bump, pulling in a newer patch. Should fix #194276.
647 phreak 1.187
648     30 Sep 2007; Christian Heim <phreak@gentoo.org>
649     hardened-sources-2.6.20-r10.ebuild:
650     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
651     Mike Doty).
652 phreak 1.186
653     *hardened-sources-2.6.22-r6 (26 Sep 2007)
654    
655     26 Sep 2007; Christian Heim <phreak@gentoo.org>
656     +hardened-sources-2.6.22-r6.ebuild:
657     Revision bump, grabbing up till Linux 2.6.22.9.
658 phreak 1.185
659     24 Sep 2007; Christian Heim <phreak@gentoo.org>
660     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
661     Cleaning up further.
662 phreak 1.184
663     *hardened-sources-2.6.20-r10 (24 Sep 2007)
664    
665     24 Sep 2007; Christian Heim <phreak@gentoo.org>
666     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
667     +hardened-sources-2.6.20-r10.ebuild:
668     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
669     revisions.
670 phreak 1.183
671     *hardened-sources-2.6.22-r5 (22 Sep 2007)
672    
673     22 Sep 2007; Christian Heim <phreak@gentoo.org>
674     +hardened-sources-2.6.22-r5.ebuild:
675     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
676 phreak 1.182
677     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
678     Removing johnm from metadata.xml (see #186467 for reference).
679 phreak 1.181
680     *hardened-sources-2.6.22-r4 (17 Sep 2007)
681    
682     17 Sep 2007; Christian Heim <phreak@gentoo.org>
683     +hardened-sources-2.6.22-r4.ebuild:
684     Revision bump, hopefully fixing all those weird PAX failures.
685 phreak 1.180
686     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
687     Updating the metadata.xml.
688 phreak 1.179
689     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
690     Removing tocharian from metadata due to his retirement (see #71718 for
691     reference).
692 phreak 1.178
693     *hardened-sources-2.6.20-r9 (30 Aug 2007)
694    
695     30 Aug 2007; Christian Heim <phreak@gentoo.org>
696     +hardened-sources-2.6.20-r9.ebuild:
697     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
698 phreak 1.177
699     29 Aug 2007; Christian Heim <phreak@gentoo.org>
700     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
701     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
702     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
703     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
704     -hardened-sources-2.6.22-r2.ebuild:
705     Removing some redundant versions.
706 phreak 1.176
707     *hardened-sources-2.4.35-r1 (29 Aug 2007)
708    
709     29 Aug 2007; Christian Heim <phreak@gentoo.org>
710     +hardened-sources-2.4.35-r1.ebuild:
711     Revision bump, new grsecurity patch.
712 phreak 1.175
713     *hardened-sources-2.6.20-r8 (26 Aug 2007)
714    
715     26 Aug 2007; Christian Heim <phreak@gentoo.org>
716     +hardened-sources-2.6.20-r8.ebuild:
717     Revision bump for Linux 2.6.20.17.
718 phreak 1.174
719     *hardened-sources-2.6.22-r3 (22 Aug 2007)
720    
721     22 Aug 2007; Christian Heim <phreak@gentoo.org>
722     +hardened-sources-2.6.22-r3.ebuild:
723     Revision bump for Linux 2.6.22.4.
724 phreak 1.173
725     16 Aug 2007; Christian Heim <phreak@gentoo.org>
726     hardened-sources-2.6.22-r2.ebuild:
727     Updated patchset, to fix the alignment against 2.6.22.3.
728 phreak 1.172
729     *hardened-sources-2.6.22-r2 (16 Aug 2007)
730    
731     16 Aug 2007; Christian Heim <phreak@gentoo.org>
732     +hardened-sources-2.6.22-r2.ebuild:
733     Revision bump for Linux 2.6.22.3.
734 phreak 1.171
735     *hardened-sources-2.4.35 (16 Aug 2007)
736    
737     16 Aug 2007; Christian Heim <phreak@gentoo.org>
738     +hardened-sources-2.4.35.ebuild:
739     Version bump, initial version for Linux 2.4.35.
740 phreak 1.170
741     *hardened-sources-2.6.21-r4 (16 Aug 2007)
742    
743     16 Aug 2007; Christian Heim <phreak@gentoo.org>
744     +hardened-sources-2.6.21-r4.ebuild:
745     Revision bump for Linux 2.6.21.6.
746 phreak 1.169
747     *hardened-sources-2.6.20-r7 (16 Aug 2007)
748    
749     16 Aug 2007; Christian Heim <phreak@gentoo.org>
750     +hardened-sources-2.6.20-r7.ebuild:
751     Revision bump for Linux 2.6.20.16.
752 phreak 1.168
753     *hardened-sources-2.6.22-r1 (13 Aug 2007)
754    
755     13 Aug 2007; Christian Heim <phreak@gentoo.org>
756     +hardened-sources-2.6.22-r1.ebuild:
757     Yet another revision bump.
758 phreak 1.167
759     *hardened-sources-2.6.22 (10 Aug 2007)
760    
761     10 Aug 2007; Christian Heim <phreak@gentoo.org>
762     +hardened-sources-2.6.22.ebuild:
763     Initial release for 2.6.22. If you are using hardened-sources on a desktop
764     machine (P4 or newer), be aware you might need to disable
765     CONFIG_PAX_PAGEEXEC.
766 phreak 1.166
767     04 Aug 2007; Christian Heim <phreak@gentoo.org>
768     hardened-sources-2.6.20-r6.ebuild:
769     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
770     2.6.20.15.
771 phreak 1.165
772     10 Jul 2007; Christian Heim <phreak@gentoo.org>
773     hardened-sources-2.6.20-r5.ebuild:
774     Marking hardened-sources-2.6.20-r5 stable on ppc.
775 phreak 1.164
776     10 Jul 2007; Christian Heim <phreak@gentoo.org>
777     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
778     Cleanup.
779 phreak 1.163
780     *hardened-sources-2.6.20-r6 (08 Jul 2007)
781    
782     08 Jul 2007; Christian Heim <phreak@gentoo.org>
783     +hardened-sources-2.6.20-r6.ebuild:
784     Revision bump, grabbing yet another stable release.
785 phreak 1.162
786     17 Jun 2007; Christian Heim <phreak@gentoo.org>
787     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
788     -hardened-sources-2.6.21-r2.ebuild:
789     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
790     alpha stable KEYWORD by mistake.
791 phreak 1.161
792     17 Jun 2007; Christian Heim <phreak@gentoo.org>
793     hardened-sources-2.6.20-r5.ebuild:
794     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
795     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
796 phreak 1.160
797     *hardened-sources-2.6.21-r3 (12 Jun 2007)
798    
799     12 Jun 2007; Christian Heim <phreak@gentoo.org>
800     +hardened-sources-2.6.21-r3.ebuild:
801     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
802     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
803     love.
804 phreak 1.159
805     *hardened-sources-2.6.20-r5 (11 Jun 2007)
806    
807     11 Jun 2007; Christian Heim <phreak@gentoo.org>
808     +hardened-sources-2.6.20-r5.ebuild:
809     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
810     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
811     love.
812 pappy 1.158
813     *hardened-sources-2.4.34.5 (11 Jun 2007)
814    
815     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
816     +hardened-sources-2.4.34.5.ebuild:
817     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
818 phreak 1.157
819     30 May 2007; Christian Heim <phreak@gentoo.org>
820     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
821     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
822     stale ebuild(s).
823 phreak 1.156
824     30 May 2007; Christian Heim <phreak@gentoo.org>
825     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
826     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
827     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
828     Doing some cleanups, remove stale ebuilds.
829 phreak 1.155
830     26 May 2007; Christian Heim <phreak@gentoo.org>
831     hardened-sources-2.6.21-r2.ebuild:
832     Fixing the grsecurity patch, had one '};' too much.
833 phreak 1.154
834     *hardened-sources-2.6.21-r2 (26 May 2007)
835    
836     26 May 2007; Christian Heim <phreak@gentoo.org>
837     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
838     +hardened-sources-2.6.21-r2.ebuild:
839     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
840     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
841 phreak 1.153
842     *hardened-sources-2.6.20-r4 (26 May 2007)
843    
844     26 May 2007; Christian Heim <phreak@gentoo.org>
845     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
846     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
847 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
848 phreak 1.152
849     15 May 2007; Christian Heim <phreak@gentoo.org>
850     hardened-sources-2.6.20-r3.ebuild:
851     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
852     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
853     grsecurity patch fail in that exact same hunk.
854 phreak 1.151
855     *hardened-sources-2.6.20-r3 (15 May 2007)
856    
857     15 May 2007; Christian Heim <phreak@gentoo.org>
858     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
859     Revision bump, incorporating Linux 2.6.20.11.
860    
861     *hardened-sources-2.6.21-r1 (11 May 2007)
862    
863     11 May 2007; Christian Heim <phreak@gentoo.org>
864     +hardened-sources-2.6.21-r1.ebuild:
865     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
866     mentioned in #177234.
867 kevquinn 1.150
868     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
869     files/digest-hardened-sources-2.6.21, Manifest:
870     Fix Manifest/digest for linux-2.6.21.tar.bz2
871 phreak 1.149
872     06 May 2007; Christian Heim <phreak@gentoo.org>
873     hardened-sources-2.6.21.ebuild:
874     Bumping the hardened-patches version, needed for the fix for #177234.
875 phreak 1.148
876     *hardened-sources-2.6.21 (02 May 2007)
877    
878     02 May 2007; Christian Heim <phreak@gentoo.org>
879     +hardened-sources-2.6.21.ebuild:
880     Version bump, Linux 2.6.21-hardened.
881 phreak 1.147
882     29 Apr 2007; Christian Heim <phreak@gentoo.org>
883     hardened-sources-2.6.20-r2.ebuild:
884     Adding ~ia64 on Ned's request.
885 phreak 1.146
886     29 Apr 2007; Christian Heim <phreak@gentoo.org>
887     hardened-sources-2.6.20-r2.ebuild:
888     Fixing the included grsecurity patch, wasn't alligning due to the Index:
889     header line(s).
890 phreak 1.145
891     29 Apr 2007; Christian Heim <phreak@gentoo.org>
892     hardened-sources-2.6.20-r2.ebuild:
893     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
894 armin76 1.144
895     *hardened-sources-2.6.20-r2 (10 Apr 2007)
896    
897     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
898     +hardened-sources-2.6.20-r2.ebuild:
899     Version bump, on behalf of phreak
900 phreak 1.143
901     *hardened-sources-2.6.20-r1 (04 Apr 2007)
902    
903     04 Apr 2007; Christian Heim <phreak@gentoo.org>
904     +hardened-sources-2.6.20-r1.ebuild:
905     Revision bump, grabbing a newer grsecurity snapshot.
906 phreak 1.142
907     *hardened-sources-2.6.20 (25 Mar 2007)
908    
909     25 Mar 2007; Christian Heim <phreak@gentoo.org>
910     +hardened-sources-2.6.20.ebuild:
911     Finally a hardened-sources version for 2.6.20; many people have been waiting
912     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
913     testbox.
914 chainsaw 1.141
915     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
916     hardened-sources-2.6.18-r6.ebuild:
917     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
918 phreak 1.140
919     *hardened-sources-2.6.18-r6 (16 Mar 2007)
920    
921     16 Mar 2007; Christian Heim <phreak@gentoo.org>
922     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
923     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
924     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
925     supposed to be.
926 phreak 1.139
927     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
928     Fixing the Manifest, the previous one was broken (as in still had the
929     deleted ebuild in it).
930 phreak 1.138
931     06 Mar 2007; Christian Heim <phreak@gentoo.org>
932     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
933     +hardened-sources-2.6.18-r5.ebuild:
934     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
935     Linux 2.6.18.8. Also cleaning up the older version.
936    
937     *hardened-sources-2.6.18-r5 (06 Mar 2007)
938    
939     06 Mar 2007; Christian Heim <phreak@gentoo.org>
940     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
941     +hardened-sources-2.6.18-r5.ebuild:
942     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
943     Linux 2.6.18.8. Also cleaning up the older version.
944 phreak 1.137
945     24 Feb 2007; Christian Heim <phreak@gentoo.org>
946     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
947     -hardened-sources-2.6.19-r5.ebuild:
948     Removing some of the old version, that didn't work.
949 phreak 1.136
950     *hardened-sources-2.6.19-r6 (12 Feb 2007)
951    
952     12 Feb 2007; Christian Heim <phreak@gentoo.org>
953     +hardened-sources-2.6.19-r6.ebuild:
954     Revision bump, including a new grsec version fixing #166235.
955 pappy 1.134
956     *hardened-sources-2.4.34 (24 Jan 2007)
957    
958     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
959 pappy 1.135 Manifest:
960     updating Manifest with checksums of new tarball and ebuild
961    
962     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
963 pappy 1.134 +hardened-sources-2.4.34.ebuild:
964     I added new hardened sources 2.4 update, this is a critical path
965     security bugfix - all users of h-s are strongly advised
966     to update their existing hardened sources to this version.
967     It contains a fix for a kernel vulnerability that is pertaining
968     to the PaX changes to virtual memory management, possibly leading
969     to a local kernel exploit ... see grsecurity.net forums and homepage
970 phreak 1.133
971     23 Jan 2007; Christian Heim <phreak@gentoo.org>
972     files/digest-hardened-sources-2.6.19-r5, Manifest:
973     Fixing the patch-tarball digest.
974 phreak 1.132
975     *hardened-sources-2.6.19-r5 (23 Jan 2007)
976    
977     23 Jan 2007; Christian Heim <phreak@gentoo.org>
978     +hardened-sources-2.6.19-r5.ebuild:
979     Revision bump, closing the recently discovered PaX expand_stack()
980     vulnerability.
981 phreak 1.131
982     *hardened-sources-2.6.19-r4 (14 Jan 2007)
983    
984     14 Jan 2007; Christian Heim <phreak@gentoo.org>
985     +hardened-sources-2.6.19-r4.ebuild:
986     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
987     dropping the randomized PID feature.
988 opfer 1.130
989     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
990     hardened-sources-2.4.33.4.ebuild:
991     stable x86, bug #161171
992 phreak 1.129
993     *hardened-sources-2.6.19-r3 (27 Dec 2006)
994    
995     27 Dec 2006; Christian Heim <phreak@gentoo.org>
996     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
997     Revision bump for bug #157186 and #158786.
998 phreak 1.128
999     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1000    
1001     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1002     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1003     Revision bump for bug #157186.
1004 phreak 1.127
1005     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1006    
1007     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1008     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1009     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1010 phreak 1.126
1011     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1012     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1013     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1014     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1015     hardened-sources-2.6.19-r1.ebuild:
1016     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1017     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1018 pappy 1.125
1019     *hardened-sources-2.4.33.4 (17 Dec 2006)
1020    
1021     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1022     +hardened-sources-2.4.33.4.ebuild:
1023     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1024     and quilting
1025 phreak 1.124
1026     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1027    
1028     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1029     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1030     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1031     for reporting).
1032 phreak 1.123
1033     *hardened-sources-2.6.19 (13 Dec 2006)
1034    
1035     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1036     +hardened-sources-2.6.19.ebuild:
1037     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1038     Brad for providing that prompt update.
1039 phreak 1.122
1040     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1041    
1042     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1043     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1044     +hardened-sources-2.6.18-r3.ebuild:
1045     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1046     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1047 phreak 1.121
1048     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1049     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1050 nixnut 1.120
1051     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1052     Stable on ppc wrt bug 157356
1053 opfer 1.119
1054     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1055     hardened-sources-2.6.18.ebuild:
1056     stable x86, bug #157356
1057 phreak 1.118
1058     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1059    
1060     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1061     +hardened-sources-2.6.18-r2.ebuild:
1062     Revision bump, including 2.6.18.5 (via genpatches) and
1063     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1064     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1065     redesign.
1066 phreak 1.117
1067     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1068     hardened-sources-2.6.18.ebuild:
1069     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1070     of Mike Doty).
1071 phreak 1.116
1072     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1073    
1074     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1075     +hardened-sources-2.6.18-r1.ebuild:
1076     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1077 phreak 1.115
1078     *hardened-sources-2.6.18 (11 Nov 2006)
1079    
1080     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1081     +hardened-sources-2.6.18.ebuild:
1082     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1083 solar 1.114
1084     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1085     - mark amd64 stable also. bug #151877
1086 solar 1.113
1087     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1088     - mark 2.6.17-r1 stable
1089 phreak 1.112
1090     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1091     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1092     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1093 phreak 1.111
1094     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1095    
1096     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1097     +hardened-sources-2.6.17-r1.ebuild:
1098     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1099     grsecurity patch.
1100 phreak 1.110
1101     *hardened-sources-2.6.17 (17 Aug 2006)
1102    
1103     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1104     +hardened-sources-2.6.17.ebuild:
1105     Bumping the hardened-sources-2.6 series to 2.6.17, using
1106     genpatches-2.6.17-6.base.
1107 solar 1.109
1108     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1109     - stable on x86 and amd64
1110 solar 1.108
1111     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1112    
1113     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1114     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1115     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1116     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1117     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1118     crusty ebuilds
1119 johnm 1.107
1120     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1121     hardened-sources-2.6.16-r10.ebuild:
1122     marking stable on x86 and amd64
1123 solar 1.106
1124     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1125     - 2.4.32-r6 stable on x86. RSBAC state unknown
1126 kang 1.105
1127     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1128    
1129     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1130     +hardened-sources-2.4.32-r7.ebuild:
1131     Bump PaX for RSBAC to test-17
1132 johnm 1.104
1133     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1134    
1135     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1136     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1137     hardened-sources-2.6.16 bump to latest -base.
1138 solar 1.103
1139     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1140    
1141     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1142     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1143     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1144     sysctl controlable resource logging
1145 johnm 1.102
1146     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1147    
1148     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1149     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1150     push new 2.6.16 release in preparation for stable
1151 solar 1.101
1152     22 May 2006; <solar@gentoo.org> :
1153     - redigest bug 134002
1154 kang 1.100
1155     *hardened-sources-2.4.32-r5 (16 May 2006)
1156    
1157     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1158     +hardened-sources-2.4.32-r5.ebuild:
1159     Fixes rsbac common patching (new patch in new -r5 patchset)
1160 solar 1.99
1161     *hardened-sources-2.4.32-r4 (13 May 2006)
1162    
1163     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1164     +hardened-sources-2.4.32-r4.ebuild:
1165     - security bumps
1166 johnm 1.98
1167     *hardened-sources-2.6.16-r6 (03 May 2006)
1168    
1169     03 May 2006; John Mylchreest <johnm@gentoo.org>
1170     +hardened-sources-2.6.16-r6.ebuild:
1171     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1172 johnm 1.97
1173     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1174     hardened-sources-2.6.14-r8.ebuild:
1175     fix x86_64 build problem, this will delay the digest issue again for a short
1176     while but it will sort itself out
1177 johnm 1.96
1178     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1179     hardened-sources-2.6.14-r8.ebuild:
1180     bump hardened patchset
1181 antarus 1.94
1182     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1183     files/digest-hardened-sources-2.4.32-r2,
1184     files/digest-hardened-sources-2.4.32-r3,
1185     files/digest-hardened-sources-2.6.14-r8, Manifest:
1186     Fixing duff SHA256 digests: Bug # 131293
1187 johnm 1.93
1188 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1189    
1190     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1191     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1192     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1193     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1194     cleanup of old uneccessary sources
1195    
1196 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1197     fix digest
1198 johnm 1.92
1199     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1200    
1201     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1202     +hardened-sources-2.6.14-r8.ebuild:
1203     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1204 johnm 1.91
1205     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1206     Turning on gpg-signing again, and recomitting
1207 johnm 1.90
1208     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1209    
1210     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1211     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1212     +hardened-sources-2.6.16-r4.ebuild:
1213     Fix numerous security vulns
1214 solar 1.89
1215     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1216    
1217     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1218     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1219     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1220     - security bump for bug #112791. Removed old ebuilds
1221 johnm 1.88
1222     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1223    
1224     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1225     +hardened-sources-2.6.16-r3.ebuild:
1226     Removing silly localversion which I missed
1227 johnm 1.87
1228     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1229    
1230     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1231     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1232     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1233 johnm 1.86
1234     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1235    
1236     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1237     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1238     +hardened-sources-2.6.16-r2.ebuild:
1239     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1240     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1241 johnm 1.85
1242     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1243    
1244     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1245     +hardened-sources-2.6.16-r1.ebuild:
1246     Bumping to include ppc build fix and 2.6.16.3
1247 tsunam 1.84
1248     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1249     hardened-sources-2.6.14-r6.ebuild:
1250     Stable on x86; bug #127718
1251 johnm 1.83
1252     *hardened-sources-2.6.16 (31 Mar 2006)
1253    
1254     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1255     +hardened-sources-2.6.16.ebuild:
1256     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1257     2.6.16.1
1258 cryos 1.82
1259     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1260     hardened-sources-2.6.14-r6.ebuild:
1261     Stable on amd64, bug 127718.
1262 nixnut 1.81
1263     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1264     Stable on ppc. Bug #127718
1265 johnm 1.80
1266     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1267     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1268     -hardened-sources-2.6.14-r4.ebuild:
1269     Cleanup.
1270 johnm 1.79
1271     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1272    
1273     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1274     +hardened-sources-2.6.14-r6.ebuild:
1275     Fixes grsec policy recreation bug and adds a
1276     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1277 solar 1.78
1278     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1279     - stable on x86
1280 hansmi 1.77
1281     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1282     hardened-sources-2.6.14-r5.ebuild:
1283     Stable on ppc.
1284 johnm 1.76
1285     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1286    
1287     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1288     +hardened-sources-2.6.14-r5.ebuild:
1289     fixing every known exploit
1290 solar 1.75
1291     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1292    
1293     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1294     +hardened-sources-2.4.32-r2.ebuild:
1295     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1296 solar 1.74
1297     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1298    
1299     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1300     - version bump for new genpatches which fix up a few sec holes
1301 solar 1.73
1302     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1303    
1304     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1305     - revision bump to add misc vital linux kernel security patches.
1306 johnm 1.72
1307     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1308    
1309     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1310     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1311     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1312 johnm 1.71
1313     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1314     hardened-sources-2.6.14-r2.ebuild:
1315     making x86 & amd64 stable following testing.
1316 johnm 1.70
1317     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1318    
1319     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1320     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1321     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1322     network hooks.
1323 johnm 1.69
1324     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1325     hardened-sources-2.6.14-r1.ebuild:
1326     bumping to stable early for sec fix on x86 & amd64
1327 johnm 1.68
1328     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1329    
1330     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1331     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1332     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1333 solar 1.67
1334     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1335     - stable on x86 security bug #114227 CAN-2005-3257
1336 kang 1.66
1337     *hardened-sources-2.4.32 (19 Nov 2005)
1338    
1339     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1340     +hardened-sources-2.4.32.ebuild:
1341     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1342     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1343     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1344     rsbac >> /etc/portage/package.use)
1345 johnm 1.65
1346     *hardened-sources-2.6.14 (14 Nov 2005)
1347    
1348     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1349     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1350     Bumping 2.6 series to 2.6.14.2
1351 johnm 1.64
1352     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1353    
1354     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1355     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1356     +hardened-sources-2.6.13-r2.ebuild:
1357     Fixes minor build error in ppc.
1358 johnm 1.63
1359     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1360    
1361     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1362     +hardened-sources-2.6.13-r1.ebuild:
1363     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1364     2.6.13.4, fixes some major amd64 stability problems.
1365 johnm 1.62
1366     *hardened-sources-2.6.13 (16 Sep 2005)
1367    
1368     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1369     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1370     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1371     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1372     users should test this thoroughly.
1373 solar 1.61
1374     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1375     - stable on x86
1376 johnm 1.60
1377     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1378    
1379     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1380     +hardened-sources-2.6.11-r15.ebuild:
1381     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1382     grsec redefining curr_ip struct.
1383 solar 1.59
1384     *hardened-sources-2.4.31 (20 Jun 2005)
1385    
1386     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1387     initial import of 2.4.31 tree
1388 johnm 1.58
1389     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1390    
1391     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1392     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1393     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1394     naming scheme to abide by genpatches
1395 johnm 1.57
1396     *hardened-sources-2.6.11-r13 (18 May 2005)
1397    
1398     18 May 2005; John Mylchreest <johnm@gentoo.org>
1399     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1400     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1401     target. sorry about that. Fixes bug #93022
1402 johnm 1.56
1403     *hardened-sources-2.6.11-r12 (17 May 2005)
1404    
1405     17 May 2005; John Mylchreest <johnm@gentoo.org>
1406     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1407     +hardened-sources-2.6.11-r12.ebuild:
1408     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1409     merges in genpatches-base
1410 johnm 1.55
1411     *hardened-sources-2.6.11-r12 (17 May 2005)
1412    
1413     17 May 2005; John Mylchreest <johnm@gentoo.org>
1414     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1415     +hardened-sources-2.6.11-r12.ebuild:
1416     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1417     merges in genpatches-base
1418 solar 1.54
1419     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1420     -files/2.4.27-cmdline-race.patch,
1421     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1422     -files/2.4.28-grsec-binfmt_a.out.patch,
1423     -files/2.4.28-grsec-cmdline-race.patch,
1424     -files/2.4.28-selinux-binfmt_a.out.patch,
1425     -files/2.4.28-selinux-cmdline-race.patch,
1426     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1427     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1428     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1429     cleanup..
1430 solar 1.53
1431     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1432    
1433     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1434     - disable aout by default
1435 solar 1.52
1436     *hardened-sources-2.4.30 (18 Apr 2005)
1437    
1438     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1439     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1440     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1441     use
1442 tocharian 1.50
1443 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1444    
1445     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1446     +hardened-sources-2.4.29.ebuild:
1447     New hardened-patches-2.4-29.0 patchball.
1448     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1449    
1450     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1451    
1452     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1453     +hardened-sources-2.4.28-r5.ebuild:
1454     Added a fix for a PaX vulnerability.
1455    
1456     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1457 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1458     Stable on x86
1459 solar 1.49
1460     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1461     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1462     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1463     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1464     - fixed/added RDEPEND= in all kernel-2 ebuilds
1465 tocharian 1.48
1466     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1467    
1468     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1469     +hardened-sources-2.4.28-r4.ebuild:
1470     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1471     backport of neighbour hash updates.
1472 tocharian 1.47
1473     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1474     hardened-sources-2.4.28-r3.ebuild:
1475     Stable on x86
1476 tseng 1.46
1477     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1478    
1479     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1480     +hardened-sources-2.6.10-r3.ebuild:
1481     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1482     in 2005.0
1483 tocharian 1.45
1484     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1485     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1486     hardened-sources-2.4.28-r2.ebuild:
1487     Mark stable on x86
1488 tocharian 1.44
1489     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1490    
1491     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1492     +hardened-sources-2.4.28-r3.ebuild:
1493     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1494 tocharian 1.43
1495     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1496     hardened-sources-2.4.28.ebuild:
1497     Mark stable on x86.
1498 tocharian 1.42
1499     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1500    
1501     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1502     +hardened-sources-2.4.28-r2.ebuild:
1503     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1504     Mazinger for grsecurity patches as well.
1505 plasmaroo 1.41
1506     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1507    
1508     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1509     Security bump. Thank tocharian for rolling a new patchset...
1510 solar 1.40
1511     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1512     +files/2.4.28-grsec-cmdline-race.patch,
1513     +files/2.4.28-selinux-binfmt_a.out.patch,
1514     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1515     - Round up remaining security patches that appear to be missing in 2.4.28. -
1516     PaX standalone updated to current. hgpv=28.1
1517 solar 1.39
1518     *hardened-sources-2.4.28 (28 Nov 2004)
1519    
1520     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1521     security bump. Thank tocharian for rolling a new patchset
1522 scox 1.31
1523 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1524    
1525     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1526     +hardened-sources-2.4.27-r3.ebuild:
1527     Applies the new 2.4-27.2 patchball which updates
1528     GRSecurity to the 2.0.1 version.
1529    
1530 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1531    
1532     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1533     +hardened-sources-2.4.27-r2.ebuild:
1534     Version bump.
1535     This version uses the new 2.4-27.1 patchball which updates
1536     both the SELinux PaX hooks patch and the SELinux headers.
1537    
1538 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1539    
1540     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1541     +hardened-sources-2.4.27-r1.ebuild,
1542     -hardened-sources-2.4.27.ebuild,
1543     +files/2.4.27-cmdline-race.patch:
1544     Version bump, fix for cmdline race. See bug #59905.
1545    
1546     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1547    
1548     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1549     +hardened-sources-2.4.26-r6.ebuild,
1550     -hardened-sources-2.4.26-r5.ebuild,
1551     -hardened-sources-2.4.26-r4.ebuild,
1552     +files/2.4.26-cmdline-race.patch:
1553     Version bump, fix for cmdline race. See bug #59905.
1554    
1555 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1556    
1557     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1558     +hardened-sources-2.4.27.ebuild,
1559     +files/2.4.27-CAN-2004-0394.patch:
1560     Ported the patchball to the 2.4.27 kernel version.
1561    
1562 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1563    
1564     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1565     +hardened-sources-2.4.26-r5.ebuild:
1566 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1567 scox 1.34 It adds the following features:
1568     - Squashfs
1569     - Ebtables
1570     - Netdev random (core+drivers)
1571     - Watchdog Timer (WDT) fix.
1572    
1573 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1574    
1575     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1576     +hardened-sources-2.4.26-r4.ebuild,
1577     +files/2.4.26-CAN-2004-0415.patch,
1578     -hardened-sources-2.4.26-3:
1579     Version bump, fix for CAN 0415, see bug #59378.
1580    
1581 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1582    
1583     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1584     +hardened-sources-2.4.26-r3.ebuild,
1585     +files/2.4.26-CAN-2004-0497.patch,
1586     -hardened-sources-2.4.26-r2.ebuild:
1587     Version bump, fixed CAN 0497, see bug #56171.
1588    
1589 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1590    
1591     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1592 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1593 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1594     +files/2.4.26-CAN-2004-0535.patch,
1595     -hardened-sources-2.4.26-r1.ebuild:
1596     Fixes for both CAN 0495 and 0535, see bug #54976
1597 pvdabeel 1.27
1598 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1599     hardened-sources-2.4.26-r1.ebuild:
1600     QA - fix use invocation
1601 scox 1.28
1602     *hardened-sources-2.4.26-r1 (22 June 2004)
1603    
1604     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1605     +hardened-sources-2.4.26-r1.ebuild,
1606     +files/2.4.26-CAN-2004-0394.patch,
1607     +files/2.4.26-signal-race.patch,
1608     -hardened-sources-2.4.26.ebuild,
1609     -hardened-sources-2.4.24-r3.ebuild:
1610     Version bump for the CAN-2004-0394 issue and bug #53804
1611     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1612    
1613    
1614 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1615     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1616     Masked hardened-sources-2.4.26.ebuild broken for ppc
1617    
1618     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1619     hardened-sources-2.4.24-r3.ebuild:
1620     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1621 plasmaroo 1.25
1622 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1623    
1624     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1625     +hardened-sources-2.4.26.ebuild:
1626     Updated hardened-sources for the 2.4.26 kernel
1627     Removed broken components, updated almost everything.
1628    
1629 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1630    
1631     17 Apr 2004; <plasmaroo@gentoo.org>
1632     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1633     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1634     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1635     +hardened-sources-2.4.24-r3.ebuild:
1636     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1637     vulnerabilities. Old revisions removed.
1638 plasmaroo 1.24
1639     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1640    
1641     15 Apr 2004; <plasmaroo@gentoo.org>
1642     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1643     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1644     Version bump for the CAN-2004-0109 issue; bug #47881.
1645 aliz 1.23
1646     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1647     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1648     Add eutils to inherit.
1649 plasmaroo 1.22
1650     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1651    
1652     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1653     files/hardened-sources-2.4.24.munmap.patch:
1654     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1655 scox 1.19
1656 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1657 scox 1.26
1658 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1659     hardened-sources-2.4.24.ebuild:
1660     Version bump, updated most of the components.
1661     This release includes the following:
1662    
1663     - Hardened security
1664     - Netfilter patch-o-matic 20031219
1665     - FreeSWAN 2.04 & x509 1.4.8
1666     - EVMS 2.2.2
1667     - XFS 1.3.1
1668     - cryptoloop jari
1669     - grsecurity 2.0-rc4
1670     - SELinux
1671     - PaX 200402060000
1672     - PaX Obscurity 200308302223
1673     - Others...
1674    
1675     Neither -ck nor systrace are included anymore.
1676    
1677 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1678    
1679     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1680     hardened-sources-2.4.22-r2.ebuild:
1681 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1682 scox 1.19
1683     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1684 iggy 1.17
1685     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1686 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1687 iggy 1.16
1688     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1689 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1690     Version bump for the 'do_brk' vulnerability.
1691 iggy 1.15
1692     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1693     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1694     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1695     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1696 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1697 frogger 1.14
1698     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1699     hardened-sources-2.4.22.ebuild:
1700 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1701     components. These are no longer handled in the kernel
1702     so this code was not necessary.
1703 frogger 1.13
1704     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1705     New 2.4.22 based hardened-sources thanks to
1706     Phil West <p.west@computer.org>.
1707    
1708     These sources include:
1709 plasmaroo 1.18 - New SELinux API
1710     - Updated CK-base
1711     - Updated GRSec
1712     - Systrace
1713     - SuperFreeS/WAN 1.99.8
1714     - Propolice kernel build support
1715     - EVMS
1716     - Other various security related patches
1717 frogger 1.11
1718 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1719    
1720     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1721     Updated hardened-sources based on the 2.4.21 Linux kernel.
1722     This includes updates to most major components such as:
1723 plasmaroo 1.18 - ck-base-0306300059
1724     - selinux-2.4-2003071106
1725     - grsecurity-2.0-rc1
1726     - Updated IPTables patch-o-matic
1727     - Updated SuperFreeS/WAN
1728    
1729 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1730     updated patch set ready for the 2.4.21 based kernel.
1731    
1732 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1733     Initial import of hardened-sources-2.4.20-r4. This revision
1734     includes only a few changes, but one of these is an important
1735     security fix. It is recommended all users of hardened-sources
1736     upgrade to this release.
1737 plasmaroo 1.18
1738 frogger 1.11 - ioperm bug fix
1739     - fixed compilation failure when building without GRSec
1740 plasmaroo 1.18
1741 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1742     due to time constraints, but is planned for inclusion in the near
1743     future.
1744 msterret 1.10
1745     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1746    
1747     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1748     hardened-sources-2.4.20-r3.ebuild:
1749 plasmaroo 1.18 Add Header...
1750 frogger 1.9
1751     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1752     hardened-sources-2.4.20-r3.ebuild:
1753     Removed warnings from ebuild. This kernel should be safe to
1754     use at this point.
1755 frogger 1.8
1756     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1757    
1758     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1759     hardened-sources-2.4.20-r3.ebuild:
1760     New revision. Includes the following changes over -r2:
1761 plasmaroo 1.18
1762 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1763     - Super FreeS/WAN 1.99.7rc2
1764     - PaX for the LSM/SELinux branch
1765     - GRSecurity 2.0-pre4 (role based access control)
1766     - Systrace 1.3
1767     - EXT3 fixes
1768     - EVMS 2.0.1
1769     - GCC 3.1+ compile optimizations
1770     - ProPolice kernel build support
1771     - Hashing table security fixes
1772 frogger 1.3
1773     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1774 frogger 1.7
1775     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1776     Initial import of hardened-sources-r2. This new
1777     ebuild includes many new performance and security
1778     related patches. As in -r1, it will patch in
1779     LSM/SELinux if "selinux" is in USE, otherwise it
1780     will patch in GRSecurity. The following patches
1781     are included in this revision:
1782 plasmaroo 1.18
1783 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1784     (pulled from the base CK patch)
1785     - ptrace exploit patch for the LSM kernel
1786     (the GRSec patch already fixes this)
1787     - LSM 2.4-2003040709
1788     - SELinux 2.4-2003040709
1789     - Systrace v1.2
1790     - IPTables patch-o-matic base patches - 20030107
1791     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1792     - Super FreeS/WAN 1.99.6.1
1793     - GRSecurity 1.9.9g
1794     - MPPE
1795     - EXT3 data journal fix
1796     - CIPE 1.5.4
1797 frogger 1.6
1798     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1799     hardened-sources-2.4.20-r1.ebuild, manifest:
1800 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1801 frogger 1.5
1802     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1803     hardened-sources-2.4.20-r1.ebuild:
1804     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1805     is patched in instead. Ptrace patches for selinux have also been added. In
1806     either case, systrace support will be patched in as well.
1807 frogger 1.3
1808     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1809     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1810 plasmaroo 1.18 Revision bump for new sources.
1811 frogger 1.4
1812 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1813 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1814 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1815 method 1.1
1816 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1817    
1818 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1819     hardened-sources-2.4.20.ebuild:
1820 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20