/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.307 - (hide annotations) (download)
Mon May 18 01:02:24 2009 UTC (5 years, 5 months ago) by gengor
Branch: MAIN
Changes since 1.306: +8 -1 lines
Add sys-kernel/hardened-sources-2.6.28-r8 release
(Portage version: 2.1.6.11/cvs/Linux i686)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 gengor 1.268 # Copyright 2000-2009 Gentoo Foundation; Distributed under the GPL v2
3 gengor 1.307 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.306 2009/05/01 23:52:38 gengor Exp $
4    
5     *hardened-sources-2.6.28-r8 (18 May 2009)
6    
7     18 May 2009; Gordon Malm <gengor@gentoo.org>
8     +hardened-sources-2.6.28-r8.ebuild:
9     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
10     and #262862 among others.
11 gengor 1.306
12     01 May 2009; Gordon Malm <gengor@gentoo.org>
13     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
14     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
15     Remove unnecessary mirror://gentoo from SRC_URI.
16 nixnut 1.305
17     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
18     ppc stable
19 gengor 1.304
20     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
21     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
22     Stable amd64/x86 and remove old.
23 gengor 1.303
24     *hardened-sources-2.6.28-r7 (27 Mar 2009)
25    
26     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
27     +hardened-sources-2.6.28-r7.ebuild:
28     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
29 gengor 1.302
30     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
31     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
32     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
33     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
34     Stable amd64/x86 and remove old versions.
35 nixnut 1.301
36     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
37     ppc stable
38 gengor 1.300
39     *hardened-sources-2.6.28-r6 (21 Mar 2009)
40    
41     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
42     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
43     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
44 gengor 1.299
45     *hardened-sources-2.6.28-r5 (20 Mar 2009)
46    
47     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
48     +hardened-sources-2.6.28-r5.ebuild:
49     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
50 gengor 1.298
51     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
52     hardened-sources-2.6.28-r4.ebuild:
53     Stable amd64/x86.
54 gengor 1.297
55     *hardened-sources-2.6.28-r4 (18 Mar 2009)
56    
57     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
58     +hardened-sources-2.6.28-r4.ebuild:
59     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
60     compilation with CPA_DEBUG and more.
61 gengor 1.296
62     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
63     hardened-sources-2.6.28-r3.ebuild:
64     Quick stable amd64/x86.
65 gengor 1.295
66     *hardened-sources-2.6.28-r3 (15 Mar 2009)
67    
68     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
69     +hardened-sources-2.6.28-r3.ebuild:
70     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
71 nixnut 1.294
72     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
73     ppc stable
74 gengor 1.293
75     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
76     hardened-sources-2.6.28-r2.ebuild:
77     Stable amd64/x86.
78 gengor 1.292
79     *hardened-sources-2.6.28-r2 (11 Mar 2009)
80    
81     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
82     +hardened-sources-2.6.28-r2.ebuild:
83     Version bump bringing in latest grsecurity patch.
84 gengor 1.291
85     *hardened-sources-2.6.28-r1 (09 Mar 2009)
86    
87     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
88     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
89     Version bump and remove old.
90 nixnut 1.290
91     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
92     ppc stable
93 gengor 1.289
94     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
95     hardened-sources-2.6.27-r8.ebuild:
96     Remove amd64 testing keyword, bug 256226.
97 gengor 1.288
98     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
99     hardened-sources-2.6.27-r8.ebuild:
100     Revert amd64 stable, bug #256226.
101 gengor 1.287
102     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
103     hardened-sources-2.6.27-r8.ebuild:
104     Stable on amd64/x86.
105 gengor 1.286
106     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
107     -hardened-sources-2.6.27-r6.ebuild:
108     Remove old 2.6.27 release.
109 gengor 1.285
110     *hardened-sources-2.6.27-r8 (24 Feb 2009)
111    
112     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
113     +hardened-sources-2.6.27-r8.ebuild:
114     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
115     and probably more.
116 nixnut 1.284
117     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
118     ppc stable
119 gengor 1.283
120     *hardened-sources-2.6.28 (25 Jan 2009)
121    
122     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
123     +hardened-sources-2.6.28.ebuild:
124     Initial 2.6.28 release.
125 gengor 1.282
126     *hardened-sources-2.6.27-r7 (25 Jan 2009)
127    
128     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
129     +hardened-sources-2.6.27-r7.ebuild:
130     Bump to Linux 2.6.27.13.
131 gengor 1.281
132     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
133     hardened-sources-2.6.26-r9.ebuild:
134     Stable amd64/x86.
135 gengor 1.280
136     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
137     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
138     -hardened-sources-2.6.27-r5.ebuild:
139     Remove problem versions.
140 gengor 1.279
141     *hardened-sources-2.6.27-r6 (24 Jan 2009)
142    
143     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
144     +hardened-sources-2.6.27-r6.ebuild:
145     Revert PaX test29 to test30 changes. Fixes bug 256226.
146 gengor 1.277
147     *hardened-sources-2.6.27-r5 (24 Jan 2009)
148    
149     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
150     +hardened-sources-2.6.27-r5.ebuild:
151 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
152 gengor 1.277 254843.
153 gengor 1.276
154     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
155     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
156     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
157     Remove problem versions.
158 nixnut 1.275
159     23 Jan 2009; nixnut <nixnut@gentoo.org>
160     hardened-sources-2.6.25-r13.ebuild:
161     ppc stable
162 gengor 1.274
163     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
164     hardened-sources-2.6.25-r13.ebuild:
165     Fasttrack stable amd64/x86.
166 gengor 1.273
167     *hardened-sources-2.6.26-r9 (21 Jan 2009)
168    
169     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
170     +hardened-sources-2.6.26-r9.ebuild:
171 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
172 gengor 1.272
173     *hardened-sources-2.6.25-r13 (20 Jan 2009)
174    
175     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
176     +hardened-sources-2.6.25-r13.ebuild:
177 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
178 nixnut 1.271
179     20 Jan 2009; nixnut <nixnut@gentoo.org>
180     hardened-sources-2.6.25-r12.ebuild:
181     ppc stable
182 gengor 1.270
183     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
184     hardened-sources-2.6.25-r12.ebuild:
185     Stable amd64/x86.
186 gengor 1.269
187     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
188     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
189     -hardened-sources-2.6.27-r2.ebuild:
190     Clean out old versions.
191 gengor 1.268
192     *hardened-sources-2.6.27-r4 (14 Jan 2009)
193     *hardened-sources-2.6.26-r8 (14 Jan 2009)
194     *hardened-sources-2.6.25-r12 (14 Jan 2009)
195    
196     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
197     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
198     +hardened-sources-2.6.27-r4.ebuild:
199     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
200     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
201     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
202     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
203 nixnut 1.267
204     15 Dec 2008; nixnut <nixnut@gentoo.org>
205     hardened-sources-2.6.25-r11.ebuild:
206     Stable on ppc
207 gengor 1.266
208     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
209     hardened-sources-2.6.25-r11.ebuild:
210     Stable amd64/x86.
211 gengor 1.265
212     *hardened-sources-2.6.27-r3 (07 Dec 2008)
213    
214     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
215     +hardened-sources-2.6.27-r3.ebuild:
216     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
217     Fixes bug #248754, #249729 and #246607.
218 gengor 1.264
219     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
220     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
221     Remove old versions.
222 gengor 1.262
223     *hardened-sources-2.6.26-r7 (03 Dec 2008)
224     *hardened-sources-2.6.25-r11 (03 Dec 2008)
225    
226 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
227     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
228 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
229     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
230     Both include many backports from 2.6.27.{6,7} -stable releases.
231 gengor 1.261
232     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
233     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
234     Remove versions broken on ARCHes != x86/amd64.
235 gengor 1.260
236     *hardened-sources-2.6.27-r2 (24 Nov 2008)
237    
238     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
239     +hardened-sources-2.6.27-r2.ebuild:
240     Bump to Linux 2.6.27.7 and latest grsecurity patch.
241 gengor 1.259
242     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
243     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
244     Remove old versions.
245 gengor 1.258
246     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
247     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
248     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
249 nixnut 1.257
250     16 Nov 2008; nixnut <nixnut@gentoo.org>
251     hardened-sources-2.6.25-r10.ebuild:
252     Stable on ppc
253 gengor 1.256
254     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
255     hardened-sources-2.6.25-r10.ebuild:
256     Stable amd64/x86.
257 gengor 1.255
258     *hardened-sources-2.6.26-r6 (12 Nov 2008)
259    
260     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
261     +hardened-sources-2.6.26-r6.ebuild:
262     Bump to Linux 2.6.26.8 and fix security bug #245650.
263 gengor 1.254
264     *hardened-sources-2.6.25-r10 (12 Nov 2008)
265    
266     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
267     +hardened-sources-2.6.25-r10.ebuild:
268     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
269 gengor 1.253
270     *hardened-sources-2.6.27-r1 (09 Nov 2008)
271    
272     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
273     +hardened-sources-2.6.27-r1.ebuild:
274     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
275 gengor 1.252
276     *hardened-sources-2.6.27 (04 Nov 2008)
277    
278     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
279     +hardened-sources-2.6.27.ebuild:
280     Initial 2.6.27 release.
281 gengor 1.251
282     *hardened-sources-2.6.26-r5 (03 Nov 2008)
283    
284     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
285     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
286     +hardened-sources-2.6.26-r5.ebuild:
287     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
288     Clean out some old versions.
289 nixnut 1.250
290     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
291     Stable on ppc
292 gengor 1.249
293     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
294     hardened-sources-2.6.25-r9.ebuild:
295     Stable on amd64/x86.
296 gengor 1.248
297     *hardened-sources-2.6.25-r9 (26 Oct 2008)
298    
299     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
300     +hardened-sources-2.6.25-r9.ebuild:
301     Update to Linux 2.6.25.19
302 nixnut 1.247
303     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
304     Stable on ppc
305 gengor 1.246
306     *hardened-sources-2.6.26-r4 (14 Oct 2008)
307    
308     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
309     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
310     Update to latest grsecurity patch, fixing building of non-modular kernels.
311 gengor 1.245
312     *hardened-sources-2.6.26-r3 (12 Oct 2008)
313    
314     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
315     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
316     +hardened-sources-2.6.26-r3.ebuild:
317     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
318     2.6.26-r1: Removed.
319     2.6.25-r8: Stable amd64/x86.
320 gengor 1.244
321     *hardened-sources-2.6.25-r8 (09 Oct 2008)
322    
323     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
324     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
325     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
326     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
327 nixnut 1.243
328     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
329     Stable on ppc
330 gengor 1.242
331     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
332     hardened-sources-2.6.25-r7.ebuild:
333     Stable amd64/x86.
334 gengor 1.241
335     *hardened-sources-2.6.26-r2 (13 Sep 2008)
336    
337     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
338     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
339     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
340     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
341 gengor 1.240
342     *hardened-sources-2.6.25-r7 (13 Sep 2008)
343    
344     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
345     +hardened-sources-2.6.25-r7.ebuild:
346     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
347 gengor 1.239
348     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
349     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
350     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
351     hardened-sources-2.6.26-r1.ebuild:
352     Update DESCRIPTION and HGPV_URI.
353 gengor 1.238
354     *hardened-sources-2.6.25-r6 (09 Sep 2008)
355    
356     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
357     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
358     2.6.25-r6: Update to Linux 2.6.25.17.
359     2.6.24-r3: Removed.
360 gengor 1.237
361     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
362     hardened-sources-2.6.25-r5.ebuild:
363     Stable on amd64/x86
364 gengor 1.236
365     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
366     Update my email address.
367 nixnut 1.235
368     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
369     stable on ppc
370 battousai 1.234
371     *hardened-sources-2.6.26-r1 (23 Aug 2008)
372     *hardened-sources-2.6.25-r5 (23 Aug 2008)
373    
374     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
375     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
376     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
377     +hardened-sources-2.6.26-r1.ebuild:
378     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
379     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
380     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
381     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
382     (gengor).
383 solar 1.233
384     *hardened-sources-2.6.26 (18 Aug 2008)
385     *hardened-sources-2.6.25-r4 (18 Aug 2008)
386    
387     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
388     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
389     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
390     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
391     2.6.25-r2: Removed.
392 tove 1.232
393     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
394     Remove phreak from metadata.xml (#96398)
395 solar 1.231
396     *hardened-sources-2.6.25-r3 (31 Jul 2008)
397    
398     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
399     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
400     +hardened-sources-2.6.25-r3.ebuild:
401     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
402     fixes, including security bug #231750.
403 nixnut 1.230
404     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
405     Stable on ppc
406 solar 1.229
407     *hardened-sources-2.6.25-r2 (05 Jul 2008)
408    
409     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
410     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
411     +hardened-sources-2.6.25-r2.ebuild:
412     2.6.23-r4: Stable x86/amd64
413     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
414     2.6.23-r{11,12}: Removed due to multiple vulns.
415     (gengor & kerframil)
416 nixnut 1.228
417     04 Jul 2008; nixnut <nixnut@gentoo.org>
418     hardened-sources-2.6.23-r13.ebuild:
419     Stable on ppc
420 solar 1.227
421     *hardened-sources-2.6.25-r1 (30 Jun 2008)
422    
423     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
424     +hardened-sources-2.6.25-r1.ebuild:
425     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
426     grsecurity release. 2.6.23-r13: x86/amd64 stable
427 solar 1.226
428     *hardened-sources-2.6.25 (17 Jun 2008)
429     *hardened-sources-2.6.24-r3 (17 Jun 2008)
430     *hardened-sources-2.6.23-r13 (17 Jun 2008)
431    
432     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
433     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
434     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
435     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
436     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
437     2.6.25: Initial 2.6.25 release.
438 solar 1.225
439     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
440     - fasttrack to stable x86/amd64
441 swegener 1.224
442     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
443     Fix broken digest for linux-2.6.24.tar.bz2.
444 solar 1.223
445     *hardened-sources-2.6.24-r2 (11 May 2008)
446     *hardened-sources-2.6.23-r12 (11 May 2008)
447    
448     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
449     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
450     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
451     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
452     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
453     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
454     security bugs 219901, 220691, 220975, 220979, 221123. New
455     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
456     should be removed as far as I'm concerned, everything else remove due to
457     vulnerable to numerous security bugs or brokeness.
458 nixnut 1.222
459     10 May 2008; nixnut <nixnut@gentoo.org>
460     hardened-sources-2.6.23-r11.ebuild:
461     Stable on ppc
462 solar 1.221
463     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
464     - -r11 stable on x86/amd64
465 solar 1.220
466     *hardened-sources-2.6.23-r11 (01 May 2008)
467    
468     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
469     - version bump to fix ulgy linux bugs
470 phreak 1.219
471     *hardened-sources-2.6.24-r1 (30 Apr 2008)
472    
473     30 Apr 2008; Christian Heim <phreak@gentoo.org>
474     +hardened-sources-2.6.24-r1.ebuild:
475     Revision bump (thanks to Kerin and Gordon, again), pulling
476     genpatches-2.6.24-7, solving #219089. Additionally contains further security
477     fixes plus some minor updates.
478 phreak 1.218
479     *hardened-sources-2.6.23-r10 (30 Apr 2008)
480    
481     30 Apr 2008; Christian Heim <phreak@gentoo.org>
482     +hardened-sources-2.6.23-r10.ebuild:
483     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
484     Additional contains "various other fixes".
485 phreak 1.217
486     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
487     Update the longdescription in metadata, thanks to Gordon Malm.
488 nixnut 1.216
489     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
490     Stable on ppc wrt bug #213255
491 solar 1.215
492     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
493     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
494     - stable on x86/amd64 per request. Removed obsolete ebuilds
495 phreak 1.214
496     *hardened-sources-2.6.24 (07 Apr 2008)
497    
498     07 Apr 2008; Christian Heim <phreak@gentoo.org>
499     +hardened-sources-2.6.24.ebuild:
500     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
501     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
502     for the many contributions and their continued effort in #216612) based on
503     2.6.24 and genpatches-2.6.24-5.
504    
505     The current ebuild/patchset contains these things:
506     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
507     * Introduces bespoke server and workstation oriented security levels
508     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
509 phreak 1.213
510     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
511     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
512     maintaining it).
513 phreak 1.212
514     24 Mar 2008; Christian Heim <phreak@gentoo.org>
515     hardened-sources-2.4.35-r2.ebuild:
516     Fixing SRC_URI for 2.4.35-r2.
517 phreak 1.211
518     *hardened-sources-2.6.23-r9 (22 Mar 2008)
519    
520     22 Mar 2008; Christian Heim <phreak@gentoo.org>
521     +hardened-sources-2.6.23-r9.ebuild:
522     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
523     * Change the default GIDs for some grsecurity options
524     * Revamp the Hardened [Gentoo] security level and make it the default level
525     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
526     * Fix a recursive lock -- call to capable() within ptrace_attach()
527     * Fix bug that allows audit and iscsi operations to be controlled via netlink
528 solar 1.210
529     *hardened-sources-2.6.23-r8 (27 Feb 2008)
530    
531     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
532     - version bump from Kerin Millar bug 210026
533 solar 1.209
534     17 Feb 2008; <solar@gentoo.org> metadata.xml,
535     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
536     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
537     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
538     - stable on x86 and remove old ebuilds
539 solar 1.207
540     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
541 solar 1.208 - stable on amd64 per request of amd64 lead
542 solar 1.206
543     *hardened-sources-2.6.23-r7 (11 Feb 2008)
544    
545     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
546     - version bump from kerin.millar
547     Changes:
548    
549     * Bump to genpatches-base-2.6.23-9
550     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
551     * Disables COMPAT_VDSO in x86/defconfig
552     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
553 phreak 1.205
554     25 Jan 2008; Christian Heim <phreak@gentoo.org>
555     -hardened-sources-2.6.22-r8.ebuild:
556     Cleaning up old versions.
557 phreak 1.204
558     *hardened-sources-2.6.23-r6 (25 Jan 2008)
559    
560     25 Jan 2008; Christian Heim <phreak@gentoo.org>
561     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
562     Revision bump, pulling in the latest genpatches.
563 phreak 1.203
564     *hardened-sources-2.6.23-r5 (24 Dec 2007)
565    
566     24 Dec 2007; Christian Heim <phreak@gentoo.org>
567     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
568     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
569     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
570     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
571 phreak 1.202
572     24 Dec 2007; Christian Heim <phreak@gentoo.org>
573     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
574     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
575     -hardened-sources-2.6.23-r3.ebuild:
576     Cleaning out some unused, old versions.
577 phreak 1.201
578     24 Dec 2007; Christian Heim <phreak@gentoo.org>
579     hardened-sources-2.6.23-r4.ebuild:
580     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
581     in the tree for long, but there isn't much of a difference between this and
582     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
583 phreak 1.200
584     *hardened-sources-2.6.23-r4 (23 Dec 2007)
585    
586     23 Dec 2007; Christian Heim <phreak@gentoo.org>
587     +hardened-sources-2.6.23-r4.ebuild:
588     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
589 phreak 1.199
590     *hardened-sources-2.6.23-r3 (04 Dec 2007)
591    
592     04 Dec 2007; Christian Heim <phreak@gentoo.org>
593     +hardened-sources-2.6.23-r3.ebuild:
594     Revision bump, pulling in 2.6.23.9.
595 phreak 1.198
596     *hardened-sources-2.6.23-r2 (25 Nov 2007)
597    
598     25 Nov 2007; Christian Heim <phreak@gentoo.org>
599     +hardened-sources-2.6.23-r2.ebuild:
600     Updated patchset, thanks to solar.
601 phreak 1.197
602     *hardened-sources-2.6.23-r1 (31 Oct 2007)
603    
604     31 Oct 2007; Christian Heim <phreak@gentoo.org>
605     +hardened-sources-2.6.23-r1.ebuild:
606     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
607 solar 1.196
608     29 Oct 2007; <solar@gentoo.org> metadata.xml:
609     - update metadata.xml
610 phreak 1.195
611     25 Oct 2007; Christian Heim <phreak@gentoo.org>
612     hardened-sources-2.6.22-r8.ebuild:
613     Marking 2.6.22-r8 stable on amd64 and x86.
614 phreak 1.194
615     21 Oct 2007; Christian Heim <phreak@gentoo.org>
616     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
617     -hardened-sources-2.6.21-r4.ebuild:
618     Removing old ebuilds.
619 phreak 1.193
620     *hardened-sources-2.4.35-r2 (21 Oct 2007)
621    
622     21 Oct 2007; Christian Heim <phreak@gentoo.org>
623     +hardened-sources-2.4.35-r2.ebuild:
624     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
625     patches.
626 phreak 1.192
627     *hardened-sources-2.6.22-r8 (21 Oct 2007)
628    
629     21 Oct 2007; Christian Heim <phreak@gentoo.org>
630     +hardened-sources-2.6.22-r8.ebuild:
631     Yet another new patch, hopefully fixing the remaining issues we had w/
632     2.6.22. Candidate for stabling.
633 phreak 1.191
634     *hardened-sources-2.6.23 (13 Oct 2007)
635    
636     13 Oct 2007; Christian Heim <phreak@gentoo.org>
637     +hardened-sources-2.6.23.ebuild:
638     Initial hardened-sources-2.6.23. If people still have problems w/ bug
639     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
640 phreak 1.190
641     11 Oct 2007; Christian Heim <phreak@gentoo.org>
642     hardened-sources-2.6.20-r10.ebuild:
643     Pulling in yet another new genpatches version, fixing the PWC bug for real.
644 phreak 1.189
645     04 Oct 2007; Christian Heim <phreak@gentoo.org>
646     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
647     Removing old versions.
648 phreak 1.188
649     *hardened-sources-2.6.22-r7 (01 Oct 2007)
650    
651     01 Oct 2007; Christian Heim <phreak@gentoo.org>
652     +hardened-sources-2.6.22-r7.ebuild:
653     Revision bump, pulling in a newer patch. Should fix #194276.
654 phreak 1.187
655     30 Sep 2007; Christian Heim <phreak@gentoo.org>
656     hardened-sources-2.6.20-r10.ebuild:
657     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
658     Mike Doty).
659 phreak 1.186
660     *hardened-sources-2.6.22-r6 (26 Sep 2007)
661    
662     26 Sep 2007; Christian Heim <phreak@gentoo.org>
663     +hardened-sources-2.6.22-r6.ebuild:
664     Revision bump, grabbing up till Linux 2.6.22.9.
665 phreak 1.185
666     24 Sep 2007; Christian Heim <phreak@gentoo.org>
667     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
668     Cleaning up further.
669 phreak 1.184
670     *hardened-sources-2.6.20-r10 (24 Sep 2007)
671    
672     24 Sep 2007; Christian Heim <phreak@gentoo.org>
673     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
674     +hardened-sources-2.6.20-r10.ebuild:
675     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
676     revisions.
677 phreak 1.183
678     *hardened-sources-2.6.22-r5 (22 Sep 2007)
679    
680     22 Sep 2007; Christian Heim <phreak@gentoo.org>
681     +hardened-sources-2.6.22-r5.ebuild:
682     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
683 phreak 1.182
684     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
685     Removing johnm from metadata.xml (see #186467 for reference).
686 phreak 1.181
687     *hardened-sources-2.6.22-r4 (17 Sep 2007)
688    
689     17 Sep 2007; Christian Heim <phreak@gentoo.org>
690     +hardened-sources-2.6.22-r4.ebuild:
691     Revision bump, hopefully fixing all those weird PAX failures.
692 phreak 1.180
693     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
694     Updating the metadata.xml.
695 phreak 1.179
696     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
697     Removing tocharian from metadata due to his retirement (see #71718 for
698     reference).
699 phreak 1.178
700     *hardened-sources-2.6.20-r9 (30 Aug 2007)
701    
702     30 Aug 2007; Christian Heim <phreak@gentoo.org>
703     +hardened-sources-2.6.20-r9.ebuild:
704     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
705 phreak 1.177
706     29 Aug 2007; Christian Heim <phreak@gentoo.org>
707     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
708     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
709     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
710     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
711     -hardened-sources-2.6.22-r2.ebuild:
712     Removing some redundant versions.
713 phreak 1.176
714     *hardened-sources-2.4.35-r1 (29 Aug 2007)
715    
716     29 Aug 2007; Christian Heim <phreak@gentoo.org>
717     +hardened-sources-2.4.35-r1.ebuild:
718     Revision bump, new grsecurity patch.
719 phreak 1.175
720     *hardened-sources-2.6.20-r8 (26 Aug 2007)
721    
722     26 Aug 2007; Christian Heim <phreak@gentoo.org>
723     +hardened-sources-2.6.20-r8.ebuild:
724     Revision bump for Linux 2.6.20.17.
725 phreak 1.174
726     *hardened-sources-2.6.22-r3 (22 Aug 2007)
727    
728     22 Aug 2007; Christian Heim <phreak@gentoo.org>
729     +hardened-sources-2.6.22-r3.ebuild:
730     Revision bump for Linux 2.6.22.4.
731 phreak 1.173
732     16 Aug 2007; Christian Heim <phreak@gentoo.org>
733     hardened-sources-2.6.22-r2.ebuild:
734     Updated patchset, to fix the alignment against 2.6.22.3.
735 phreak 1.172
736     *hardened-sources-2.6.22-r2 (16 Aug 2007)
737    
738     16 Aug 2007; Christian Heim <phreak@gentoo.org>
739     +hardened-sources-2.6.22-r2.ebuild:
740     Revision bump for Linux 2.6.22.3.
741 phreak 1.171
742     *hardened-sources-2.4.35 (16 Aug 2007)
743    
744     16 Aug 2007; Christian Heim <phreak@gentoo.org>
745     +hardened-sources-2.4.35.ebuild:
746     Version bump, initial version for Linux 2.4.35.
747 phreak 1.170
748     *hardened-sources-2.6.21-r4 (16 Aug 2007)
749    
750     16 Aug 2007; Christian Heim <phreak@gentoo.org>
751     +hardened-sources-2.6.21-r4.ebuild:
752     Revision bump for Linux 2.6.21.6.
753 phreak 1.169
754     *hardened-sources-2.6.20-r7 (16 Aug 2007)
755    
756     16 Aug 2007; Christian Heim <phreak@gentoo.org>
757     +hardened-sources-2.6.20-r7.ebuild:
758     Revision bump for Linux 2.6.20.16.
759 phreak 1.168
760     *hardened-sources-2.6.22-r1 (13 Aug 2007)
761    
762     13 Aug 2007; Christian Heim <phreak@gentoo.org>
763     +hardened-sources-2.6.22-r1.ebuild:
764     Yet another revision bump.
765 phreak 1.167
766     *hardened-sources-2.6.22 (10 Aug 2007)
767    
768     10 Aug 2007; Christian Heim <phreak@gentoo.org>
769     +hardened-sources-2.6.22.ebuild:
770     Initial release for 2.6.22. If you are using hardened-sources on a desktop
771     machine (P4 or newer), be aware you might need to disable
772     CONFIG_PAX_PAGEEXEC.
773 phreak 1.166
774     04 Aug 2007; Christian Heim <phreak@gentoo.org>
775     hardened-sources-2.6.20-r6.ebuild:
776     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
777     2.6.20.15.
778 phreak 1.165
779     10 Jul 2007; Christian Heim <phreak@gentoo.org>
780     hardened-sources-2.6.20-r5.ebuild:
781     Marking hardened-sources-2.6.20-r5 stable on ppc.
782 phreak 1.164
783     10 Jul 2007; Christian Heim <phreak@gentoo.org>
784     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
785     Cleanup.
786 phreak 1.163
787     *hardened-sources-2.6.20-r6 (08 Jul 2007)
788    
789     08 Jul 2007; Christian Heim <phreak@gentoo.org>
790     +hardened-sources-2.6.20-r6.ebuild:
791     Revision bump, grabbing yet another stable release.
792 phreak 1.162
793     17 Jun 2007; Christian Heim <phreak@gentoo.org>
794     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
795     -hardened-sources-2.6.21-r2.ebuild:
796     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
797     alpha stable KEYWORD by mistake.
798 phreak 1.161
799     17 Jun 2007; Christian Heim <phreak@gentoo.org>
800     hardened-sources-2.6.20-r5.ebuild:
801     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
802     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
803 phreak 1.160
804     *hardened-sources-2.6.21-r3 (12 Jun 2007)
805    
806     12 Jun 2007; Christian Heim <phreak@gentoo.org>
807     +hardened-sources-2.6.21-r3.ebuild:
808     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
809     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
810     love.
811 phreak 1.159
812     *hardened-sources-2.6.20-r5 (11 Jun 2007)
813    
814     11 Jun 2007; Christian Heim <phreak@gentoo.org>
815     +hardened-sources-2.6.20-r5.ebuild:
816     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
817     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
818     love.
819 pappy 1.158
820     *hardened-sources-2.4.34.5 (11 Jun 2007)
821    
822     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
823     +hardened-sources-2.4.34.5.ebuild:
824     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
825 phreak 1.157
826     30 May 2007; Christian Heim <phreak@gentoo.org>
827     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
828     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
829     stale ebuild(s).
830 phreak 1.156
831     30 May 2007; Christian Heim <phreak@gentoo.org>
832     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
833     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
834     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
835     Doing some cleanups, remove stale ebuilds.
836 phreak 1.155
837     26 May 2007; Christian Heim <phreak@gentoo.org>
838     hardened-sources-2.6.21-r2.ebuild:
839     Fixing the grsecurity patch, had one '};' too much.
840 phreak 1.154
841     *hardened-sources-2.6.21-r2 (26 May 2007)
842    
843     26 May 2007; Christian Heim <phreak@gentoo.org>
844     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
845     +hardened-sources-2.6.21-r2.ebuild:
846     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
847     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
848 phreak 1.153
849     *hardened-sources-2.6.20-r4 (26 May 2007)
850    
851     26 May 2007; Christian Heim <phreak@gentoo.org>
852     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
853     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
854 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
855 phreak 1.152
856     15 May 2007; Christian Heim <phreak@gentoo.org>
857     hardened-sources-2.6.20-r3.ebuild:
858     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
859     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
860     grsecurity patch fail in that exact same hunk.
861 phreak 1.151
862     *hardened-sources-2.6.20-r3 (15 May 2007)
863    
864     15 May 2007; Christian Heim <phreak@gentoo.org>
865     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
866     Revision bump, incorporating Linux 2.6.20.11.
867    
868     *hardened-sources-2.6.21-r1 (11 May 2007)
869    
870     11 May 2007; Christian Heim <phreak@gentoo.org>
871     +hardened-sources-2.6.21-r1.ebuild:
872     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
873     mentioned in #177234.
874 kevquinn 1.150
875     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
876     files/digest-hardened-sources-2.6.21, Manifest:
877     Fix Manifest/digest for linux-2.6.21.tar.bz2
878 phreak 1.149
879     06 May 2007; Christian Heim <phreak@gentoo.org>
880     hardened-sources-2.6.21.ebuild:
881     Bumping the hardened-patches version, needed for the fix for #177234.
882 phreak 1.148
883     *hardened-sources-2.6.21 (02 May 2007)
884    
885     02 May 2007; Christian Heim <phreak@gentoo.org>
886     +hardened-sources-2.6.21.ebuild:
887     Version bump, Linux 2.6.21-hardened.
888 phreak 1.147
889     29 Apr 2007; Christian Heim <phreak@gentoo.org>
890     hardened-sources-2.6.20-r2.ebuild:
891     Adding ~ia64 on Ned's request.
892 phreak 1.146
893     29 Apr 2007; Christian Heim <phreak@gentoo.org>
894     hardened-sources-2.6.20-r2.ebuild:
895     Fixing the included grsecurity patch, wasn't alligning due to the Index:
896     header line(s).
897 phreak 1.145
898     29 Apr 2007; Christian Heim <phreak@gentoo.org>
899     hardened-sources-2.6.20-r2.ebuild:
900     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
901 armin76 1.144
902     *hardened-sources-2.6.20-r2 (10 Apr 2007)
903    
904     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
905     +hardened-sources-2.6.20-r2.ebuild:
906     Version bump, on behalf of phreak
907 phreak 1.143
908     *hardened-sources-2.6.20-r1 (04 Apr 2007)
909    
910     04 Apr 2007; Christian Heim <phreak@gentoo.org>
911     +hardened-sources-2.6.20-r1.ebuild:
912     Revision bump, grabbing a newer grsecurity snapshot.
913 phreak 1.142
914     *hardened-sources-2.6.20 (25 Mar 2007)
915    
916     25 Mar 2007; Christian Heim <phreak@gentoo.org>
917     +hardened-sources-2.6.20.ebuild:
918     Finally a hardened-sources version for 2.6.20; many people have been waiting
919     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
920     testbox.
921 chainsaw 1.141
922     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
923     hardened-sources-2.6.18-r6.ebuild:
924     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
925 phreak 1.140
926     *hardened-sources-2.6.18-r6 (16 Mar 2007)
927    
928     16 Mar 2007; Christian Heim <phreak@gentoo.org>
929     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
930     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
931     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
932     supposed to be.
933 phreak 1.139
934     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
935     Fixing the Manifest, the previous one was broken (as in still had the
936     deleted ebuild in it).
937 phreak 1.138
938     06 Mar 2007; Christian Heim <phreak@gentoo.org>
939     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
940     +hardened-sources-2.6.18-r5.ebuild:
941     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
942     Linux 2.6.18.8. Also cleaning up the older version.
943    
944     *hardened-sources-2.6.18-r5 (06 Mar 2007)
945    
946     06 Mar 2007; Christian Heim <phreak@gentoo.org>
947     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
948     +hardened-sources-2.6.18-r5.ebuild:
949     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
950     Linux 2.6.18.8. Also cleaning up the older version.
951 phreak 1.137
952     24 Feb 2007; Christian Heim <phreak@gentoo.org>
953     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
954     -hardened-sources-2.6.19-r5.ebuild:
955     Removing some of the old version, that didn't work.
956 phreak 1.136
957     *hardened-sources-2.6.19-r6 (12 Feb 2007)
958    
959     12 Feb 2007; Christian Heim <phreak@gentoo.org>
960     +hardened-sources-2.6.19-r6.ebuild:
961     Revision bump, including a new grsec version fixing #166235.
962 pappy 1.134
963     *hardened-sources-2.4.34 (24 Jan 2007)
964    
965     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
966 pappy 1.135 Manifest:
967     updating Manifest with checksums of new tarball and ebuild
968    
969     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
970 pappy 1.134 +hardened-sources-2.4.34.ebuild:
971     I added new hardened sources 2.4 update, this is a critical path
972     security bugfix - all users of h-s are strongly advised
973     to update their existing hardened sources to this version.
974     It contains a fix for a kernel vulnerability that is pertaining
975     to the PaX changes to virtual memory management, possibly leading
976     to a local kernel exploit ... see grsecurity.net forums and homepage
977 phreak 1.133
978     23 Jan 2007; Christian Heim <phreak@gentoo.org>
979     files/digest-hardened-sources-2.6.19-r5, Manifest:
980     Fixing the patch-tarball digest.
981 phreak 1.132
982     *hardened-sources-2.6.19-r5 (23 Jan 2007)
983    
984     23 Jan 2007; Christian Heim <phreak@gentoo.org>
985     +hardened-sources-2.6.19-r5.ebuild:
986     Revision bump, closing the recently discovered PaX expand_stack()
987     vulnerability.
988 phreak 1.131
989     *hardened-sources-2.6.19-r4 (14 Jan 2007)
990    
991     14 Jan 2007; Christian Heim <phreak@gentoo.org>
992     +hardened-sources-2.6.19-r4.ebuild:
993     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
994     dropping the randomized PID feature.
995 opfer 1.130
996     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
997     hardened-sources-2.4.33.4.ebuild:
998     stable x86, bug #161171
999 phreak 1.129
1000     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1001    
1002     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1003     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1004     Revision bump for bug #157186 and #158786.
1005 phreak 1.128
1006     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1007    
1008     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1009     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1010     Revision bump for bug #157186.
1011 phreak 1.127
1012     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1013    
1014     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1015     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1016     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1017 phreak 1.126
1018     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1019     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1020     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1021     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1022     hardened-sources-2.6.19-r1.ebuild:
1023     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1024     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1025 pappy 1.125
1026     *hardened-sources-2.4.33.4 (17 Dec 2006)
1027    
1028     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1029     +hardened-sources-2.4.33.4.ebuild:
1030     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1031     and quilting
1032 phreak 1.124
1033     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1034    
1035     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1036     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1037     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1038     for reporting).
1039 phreak 1.123
1040     *hardened-sources-2.6.19 (13 Dec 2006)
1041    
1042     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1043     +hardened-sources-2.6.19.ebuild:
1044     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1045     Brad for providing that prompt update.
1046 phreak 1.122
1047     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1048    
1049     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1050     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1051     +hardened-sources-2.6.18-r3.ebuild:
1052     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1053     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1054 phreak 1.121
1055     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1056     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1057 nixnut 1.120
1058     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1059     Stable on ppc wrt bug 157356
1060 opfer 1.119
1061     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1062     hardened-sources-2.6.18.ebuild:
1063     stable x86, bug #157356
1064 phreak 1.118
1065     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1066    
1067     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1068     +hardened-sources-2.6.18-r2.ebuild:
1069     Revision bump, including 2.6.18.5 (via genpatches) and
1070     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1071     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1072     redesign.
1073 phreak 1.117
1074     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1075     hardened-sources-2.6.18.ebuild:
1076     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1077     of Mike Doty).
1078 phreak 1.116
1079     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1080    
1081     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1082     +hardened-sources-2.6.18-r1.ebuild:
1083     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1084 phreak 1.115
1085     *hardened-sources-2.6.18 (11 Nov 2006)
1086    
1087     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1088     +hardened-sources-2.6.18.ebuild:
1089     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1090 solar 1.114
1091     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1092     - mark amd64 stable also. bug #151877
1093 solar 1.113
1094     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1095     - mark 2.6.17-r1 stable
1096 phreak 1.112
1097     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1098     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1099     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1100 phreak 1.111
1101     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1102    
1103     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1104     +hardened-sources-2.6.17-r1.ebuild:
1105     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1106     grsecurity patch.
1107 phreak 1.110
1108     *hardened-sources-2.6.17 (17 Aug 2006)
1109    
1110     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1111     +hardened-sources-2.6.17.ebuild:
1112     Bumping the hardened-sources-2.6 series to 2.6.17, using
1113     genpatches-2.6.17-6.base.
1114 solar 1.109
1115     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1116     - stable on x86 and amd64
1117 solar 1.108
1118     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1119    
1120     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1121     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1122     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1123     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1124     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1125     crusty ebuilds
1126 johnm 1.107
1127     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1128     hardened-sources-2.6.16-r10.ebuild:
1129     marking stable on x86 and amd64
1130 solar 1.106
1131     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1132     - 2.4.32-r6 stable on x86. RSBAC state unknown
1133 kang 1.105
1134     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1135    
1136     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1137     +hardened-sources-2.4.32-r7.ebuild:
1138     Bump PaX for RSBAC to test-17
1139 johnm 1.104
1140     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1141    
1142     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1143     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1144     hardened-sources-2.6.16 bump to latest -base.
1145 solar 1.103
1146     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1147    
1148     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1149     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1150     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1151     sysctl controlable resource logging
1152 johnm 1.102
1153     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1154    
1155     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1156     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1157     push new 2.6.16 release in preparation for stable
1158 solar 1.101
1159     22 May 2006; <solar@gentoo.org> :
1160     - redigest bug 134002
1161 kang 1.100
1162     *hardened-sources-2.4.32-r5 (16 May 2006)
1163    
1164     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1165     +hardened-sources-2.4.32-r5.ebuild:
1166     Fixes rsbac common patching (new patch in new -r5 patchset)
1167 solar 1.99
1168     *hardened-sources-2.4.32-r4 (13 May 2006)
1169    
1170     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1171     +hardened-sources-2.4.32-r4.ebuild:
1172     - security bumps
1173 johnm 1.98
1174     *hardened-sources-2.6.16-r6 (03 May 2006)
1175    
1176     03 May 2006; John Mylchreest <johnm@gentoo.org>
1177     +hardened-sources-2.6.16-r6.ebuild:
1178     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1179 johnm 1.97
1180     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1181     hardened-sources-2.6.14-r8.ebuild:
1182     fix x86_64 build problem, this will delay the digest issue again for a short
1183     while but it will sort itself out
1184 johnm 1.96
1185     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1186     hardened-sources-2.6.14-r8.ebuild:
1187     bump hardened patchset
1188 antarus 1.94
1189     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1190     files/digest-hardened-sources-2.4.32-r2,
1191     files/digest-hardened-sources-2.4.32-r3,
1192     files/digest-hardened-sources-2.6.14-r8, Manifest:
1193     Fixing duff SHA256 digests: Bug # 131293
1194 johnm 1.93
1195 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1196    
1197     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1198     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1199     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1200     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1201     cleanup of old uneccessary sources
1202    
1203 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1204     fix digest
1205 johnm 1.92
1206     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1207    
1208     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1209     +hardened-sources-2.6.14-r8.ebuild:
1210     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1211 johnm 1.91
1212     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1213     Turning on gpg-signing again, and recomitting
1214 johnm 1.90
1215     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1216    
1217     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1218     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1219     +hardened-sources-2.6.16-r4.ebuild:
1220     Fix numerous security vulns
1221 solar 1.89
1222     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1223    
1224     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1225     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1226     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1227     - security bump for bug #112791. Removed old ebuilds
1228 johnm 1.88
1229     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1230    
1231     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1232     +hardened-sources-2.6.16-r3.ebuild:
1233     Removing silly localversion which I missed
1234 johnm 1.87
1235     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1236    
1237     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1238     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1239     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1240 johnm 1.86
1241     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1242    
1243     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1244     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1245     +hardened-sources-2.6.16-r2.ebuild:
1246     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1247     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1248 johnm 1.85
1249     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1250    
1251     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1252     +hardened-sources-2.6.16-r1.ebuild:
1253     Bumping to include ppc build fix and 2.6.16.3
1254 tsunam 1.84
1255     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1256     hardened-sources-2.6.14-r6.ebuild:
1257     Stable on x86; bug #127718
1258 johnm 1.83
1259     *hardened-sources-2.6.16 (31 Mar 2006)
1260    
1261     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1262     +hardened-sources-2.6.16.ebuild:
1263     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1264     2.6.16.1
1265 cryos 1.82
1266     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1267     hardened-sources-2.6.14-r6.ebuild:
1268     Stable on amd64, bug 127718.
1269 nixnut 1.81
1270     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1271     Stable on ppc. Bug #127718
1272 johnm 1.80
1273     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1274     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1275     -hardened-sources-2.6.14-r4.ebuild:
1276     Cleanup.
1277 johnm 1.79
1278     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1279    
1280     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1281     +hardened-sources-2.6.14-r6.ebuild:
1282     Fixes grsec policy recreation bug and adds a
1283     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1284 solar 1.78
1285     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1286     - stable on x86
1287 hansmi 1.77
1288     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1289     hardened-sources-2.6.14-r5.ebuild:
1290     Stable on ppc.
1291 johnm 1.76
1292     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1293    
1294     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1295     +hardened-sources-2.6.14-r5.ebuild:
1296     fixing every known exploit
1297 solar 1.75
1298     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1299    
1300     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1301     +hardened-sources-2.4.32-r2.ebuild:
1302     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1303 solar 1.74
1304     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1305    
1306     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1307     - version bump for new genpatches which fix up a few sec holes
1308 solar 1.73
1309     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1310    
1311     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1312     - revision bump to add misc vital linux kernel security patches.
1313 johnm 1.72
1314     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1315    
1316     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1317     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1318     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1319 johnm 1.71
1320     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1321     hardened-sources-2.6.14-r2.ebuild:
1322     making x86 & amd64 stable following testing.
1323 johnm 1.70
1324     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1325    
1326     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1327     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1328     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1329     network hooks.
1330 johnm 1.69
1331     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1332     hardened-sources-2.6.14-r1.ebuild:
1333     bumping to stable early for sec fix on x86 & amd64
1334 johnm 1.68
1335     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1336    
1337     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1338     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1339     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1340 solar 1.67
1341     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1342     - stable on x86 security bug #114227 CAN-2005-3257
1343 kang 1.66
1344     *hardened-sources-2.4.32 (19 Nov 2005)
1345    
1346     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1347     +hardened-sources-2.4.32.ebuild:
1348     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1349     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1350     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1351     rsbac >> /etc/portage/package.use)
1352 johnm 1.65
1353     *hardened-sources-2.6.14 (14 Nov 2005)
1354    
1355     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1356     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1357     Bumping 2.6 series to 2.6.14.2
1358 johnm 1.64
1359     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1360    
1361     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1362     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1363     +hardened-sources-2.6.13-r2.ebuild:
1364     Fixes minor build error in ppc.
1365 johnm 1.63
1366     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1367    
1368     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1369     +hardened-sources-2.6.13-r1.ebuild:
1370     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1371     2.6.13.4, fixes some major amd64 stability problems.
1372 johnm 1.62
1373     *hardened-sources-2.6.13 (16 Sep 2005)
1374    
1375     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1376     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1377     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1378     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1379     users should test this thoroughly.
1380 solar 1.61
1381     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1382     - stable on x86
1383 johnm 1.60
1384     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1385    
1386     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1387     +hardened-sources-2.6.11-r15.ebuild:
1388     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1389     grsec redefining curr_ip struct.
1390 solar 1.59
1391     *hardened-sources-2.4.31 (20 Jun 2005)
1392    
1393     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1394     initial import of 2.4.31 tree
1395 johnm 1.58
1396     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1397    
1398     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1399     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1400     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1401     naming scheme to abide by genpatches
1402 johnm 1.57
1403     *hardened-sources-2.6.11-r13 (18 May 2005)
1404    
1405     18 May 2005; John Mylchreest <johnm@gentoo.org>
1406     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1407     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1408     target. sorry about that. Fixes bug #93022
1409 johnm 1.56
1410     *hardened-sources-2.6.11-r12 (17 May 2005)
1411    
1412     17 May 2005; John Mylchreest <johnm@gentoo.org>
1413     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1414     +hardened-sources-2.6.11-r12.ebuild:
1415     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1416     merges in genpatches-base
1417 johnm 1.55
1418     *hardened-sources-2.6.11-r12 (17 May 2005)
1419    
1420     17 May 2005; John Mylchreest <johnm@gentoo.org>
1421     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1422     +hardened-sources-2.6.11-r12.ebuild:
1423     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1424     merges in genpatches-base
1425 solar 1.54
1426     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1427     -files/2.4.27-cmdline-race.patch,
1428     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1429     -files/2.4.28-grsec-binfmt_a.out.patch,
1430     -files/2.4.28-grsec-cmdline-race.patch,
1431     -files/2.4.28-selinux-binfmt_a.out.patch,
1432     -files/2.4.28-selinux-cmdline-race.patch,
1433     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1434     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1435     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1436     cleanup..
1437 solar 1.53
1438     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1439    
1440     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1441     - disable aout by default
1442 solar 1.52
1443     *hardened-sources-2.4.30 (18 Apr 2005)
1444    
1445     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1446     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1447     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1448     use
1449 tocharian 1.50
1450 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1451    
1452     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1453     +hardened-sources-2.4.29.ebuild:
1454     New hardened-patches-2.4-29.0 patchball.
1455     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1456    
1457     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1458    
1459     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1460     +hardened-sources-2.4.28-r5.ebuild:
1461     Added a fix for a PaX vulnerability.
1462    
1463     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1464 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1465     Stable on x86
1466 solar 1.49
1467     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1468     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1469     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1470     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1471     - fixed/added RDEPEND= in all kernel-2 ebuilds
1472 tocharian 1.48
1473     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1474    
1475     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1476     +hardened-sources-2.4.28-r4.ebuild:
1477     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1478     backport of neighbour hash updates.
1479 tocharian 1.47
1480     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1481     hardened-sources-2.4.28-r3.ebuild:
1482     Stable on x86
1483 tseng 1.46
1484     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1485    
1486     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1487     +hardened-sources-2.6.10-r3.ebuild:
1488     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1489     in 2005.0
1490 tocharian 1.45
1491     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1492     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1493     hardened-sources-2.4.28-r2.ebuild:
1494     Mark stable on x86
1495 tocharian 1.44
1496     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1497    
1498     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1499     +hardened-sources-2.4.28-r3.ebuild:
1500     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1501 tocharian 1.43
1502     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1503     hardened-sources-2.4.28.ebuild:
1504     Mark stable on x86.
1505 tocharian 1.42
1506     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1507    
1508     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1509     +hardened-sources-2.4.28-r2.ebuild:
1510     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1511     Mazinger for grsecurity patches as well.
1512 plasmaroo 1.41
1513     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1514    
1515     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1516     Security bump. Thank tocharian for rolling a new patchset...
1517 solar 1.40
1518     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1519     +files/2.4.28-grsec-cmdline-race.patch,
1520     +files/2.4.28-selinux-binfmt_a.out.patch,
1521     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1522     - Round up remaining security patches that appear to be missing in 2.4.28. -
1523     PaX standalone updated to current. hgpv=28.1
1524 solar 1.39
1525     *hardened-sources-2.4.28 (28 Nov 2004)
1526    
1527     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1528     security bump. Thank tocharian for rolling a new patchset
1529 scox 1.31
1530 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1531    
1532     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1533     +hardened-sources-2.4.27-r3.ebuild:
1534     Applies the new 2.4-27.2 patchball which updates
1535     GRSecurity to the 2.0.1 version.
1536    
1537 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1538    
1539     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1540     +hardened-sources-2.4.27-r2.ebuild:
1541     Version bump.
1542     This version uses the new 2.4-27.1 patchball which updates
1543     both the SELinux PaX hooks patch and the SELinux headers.
1544    
1545 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1546    
1547     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1548     +hardened-sources-2.4.27-r1.ebuild,
1549     -hardened-sources-2.4.27.ebuild,
1550     +files/2.4.27-cmdline-race.patch:
1551     Version bump, fix for cmdline race. See bug #59905.
1552    
1553     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1554    
1555     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1556     +hardened-sources-2.4.26-r6.ebuild,
1557     -hardened-sources-2.4.26-r5.ebuild,
1558     -hardened-sources-2.4.26-r4.ebuild,
1559     +files/2.4.26-cmdline-race.patch:
1560     Version bump, fix for cmdline race. See bug #59905.
1561    
1562 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1563    
1564     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1565     +hardened-sources-2.4.27.ebuild,
1566     +files/2.4.27-CAN-2004-0394.patch:
1567     Ported the patchball to the 2.4.27 kernel version.
1568    
1569 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1570    
1571     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1572     +hardened-sources-2.4.26-r5.ebuild:
1573 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1574 scox 1.34 It adds the following features:
1575     - Squashfs
1576     - Ebtables
1577     - Netdev random (core+drivers)
1578     - Watchdog Timer (WDT) fix.
1579    
1580 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1581    
1582     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1583     +hardened-sources-2.4.26-r4.ebuild,
1584     +files/2.4.26-CAN-2004-0415.patch,
1585     -hardened-sources-2.4.26-3:
1586     Version bump, fix for CAN 0415, see bug #59378.
1587    
1588 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1589    
1590     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1591     +hardened-sources-2.4.26-r3.ebuild,
1592     +files/2.4.26-CAN-2004-0497.patch,
1593     -hardened-sources-2.4.26-r2.ebuild:
1594     Version bump, fixed CAN 0497, see bug #56171.
1595    
1596 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1597    
1598     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1599 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1600 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1601     +files/2.4.26-CAN-2004-0535.patch,
1602     -hardened-sources-2.4.26-r1.ebuild:
1603     Fixes for both CAN 0495 and 0535, see bug #54976
1604 pvdabeel 1.27
1605 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1606     hardened-sources-2.4.26-r1.ebuild:
1607     QA - fix use invocation
1608 scox 1.28
1609     *hardened-sources-2.4.26-r1 (22 June 2004)
1610    
1611     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1612     +hardened-sources-2.4.26-r1.ebuild,
1613     +files/2.4.26-CAN-2004-0394.patch,
1614     +files/2.4.26-signal-race.patch,
1615     -hardened-sources-2.4.26.ebuild,
1616     -hardened-sources-2.4.24-r3.ebuild:
1617     Version bump for the CAN-2004-0394 issue and bug #53804
1618     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1619    
1620    
1621 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1622     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1623     Masked hardened-sources-2.4.26.ebuild broken for ppc
1624    
1625     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1626     hardened-sources-2.4.24-r3.ebuild:
1627     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1628 plasmaroo 1.25
1629 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1630    
1631     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1632     +hardened-sources-2.4.26.ebuild:
1633     Updated hardened-sources for the 2.4.26 kernel
1634     Removed broken components, updated almost everything.
1635    
1636 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1637    
1638     17 Apr 2004; <plasmaroo@gentoo.org>
1639     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1640     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1641     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1642     +hardened-sources-2.4.24-r3.ebuild:
1643     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1644     vulnerabilities. Old revisions removed.
1645 plasmaroo 1.24
1646     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1647    
1648     15 Apr 2004; <plasmaroo@gentoo.org>
1649     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1650     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1651     Version bump for the CAN-2004-0109 issue; bug #47881.
1652 aliz 1.23
1653     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1654     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1655     Add eutils to inherit.
1656 plasmaroo 1.22
1657     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1658    
1659     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1660     files/hardened-sources-2.4.24.munmap.patch:
1661     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1662 scox 1.19
1663 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1664 scox 1.26
1665 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1666     hardened-sources-2.4.24.ebuild:
1667     Version bump, updated most of the components.
1668     This release includes the following:
1669    
1670     - Hardened security
1671     - Netfilter patch-o-matic 20031219
1672     - FreeSWAN 2.04 & x509 1.4.8
1673     - EVMS 2.2.2
1674     - XFS 1.3.1
1675     - cryptoloop jari
1676     - grsecurity 2.0-rc4
1677     - SELinux
1678     - PaX 200402060000
1679     - PaX Obscurity 200308302223
1680     - Others...
1681    
1682     Neither -ck nor systrace are included anymore.
1683    
1684 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1685    
1686     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1687     hardened-sources-2.4.22-r2.ebuild:
1688 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1689 scox 1.19
1690     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1691 iggy 1.17
1692     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1693 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1694 iggy 1.16
1695     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1696 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1697     Version bump for the 'do_brk' vulnerability.
1698 iggy 1.15
1699     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1700     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1701     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1702     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1703 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1704 frogger 1.14
1705     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1706     hardened-sources-2.4.22.ebuild:
1707 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1708     components. These are no longer handled in the kernel
1709     so this code was not necessary.
1710 frogger 1.13
1711     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1712     New 2.4.22 based hardened-sources thanks to
1713     Phil West <p.west@computer.org>.
1714    
1715     These sources include:
1716 plasmaroo 1.18 - New SELinux API
1717     - Updated CK-base
1718     - Updated GRSec
1719     - Systrace
1720     - SuperFreeS/WAN 1.99.8
1721     - Propolice kernel build support
1722     - EVMS
1723     - Other various security related patches
1724 frogger 1.11
1725 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1726    
1727     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1728     Updated hardened-sources based on the 2.4.21 Linux kernel.
1729     This includes updates to most major components such as:
1730 plasmaroo 1.18 - ck-base-0306300059
1731     - selinux-2.4-2003071106
1732     - grsecurity-2.0-rc1
1733     - Updated IPTables patch-o-matic
1734     - Updated SuperFreeS/WAN
1735    
1736 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1737     updated patch set ready for the 2.4.21 based kernel.
1738    
1739 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1740     Initial import of hardened-sources-2.4.20-r4. This revision
1741     includes only a few changes, but one of these is an important
1742     security fix. It is recommended all users of hardened-sources
1743     upgrade to this release.
1744 plasmaroo 1.18
1745 frogger 1.11 - ioperm bug fix
1746     - fixed compilation failure when building without GRSec
1747 plasmaroo 1.18
1748 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1749     due to time constraints, but is planned for inclusion in the near
1750     future.
1751 msterret 1.10
1752     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1753    
1754     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1755     hardened-sources-2.4.20-r3.ebuild:
1756 plasmaroo 1.18 Add Header...
1757 frogger 1.9
1758     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1759     hardened-sources-2.4.20-r3.ebuild:
1760     Removed warnings from ebuild. This kernel should be safe to
1761     use at this point.
1762 frogger 1.8
1763     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1764    
1765     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1766     hardened-sources-2.4.20-r3.ebuild:
1767     New revision. Includes the following changes over -r2:
1768 plasmaroo 1.18
1769 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1770     - Super FreeS/WAN 1.99.7rc2
1771     - PaX for the LSM/SELinux branch
1772     - GRSecurity 2.0-pre4 (role based access control)
1773     - Systrace 1.3
1774     - EXT3 fixes
1775     - EVMS 2.0.1
1776     - GCC 3.1+ compile optimizations
1777     - ProPolice kernel build support
1778     - Hashing table security fixes
1779 frogger 1.3
1780     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1781 frogger 1.7
1782     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1783     Initial import of hardened-sources-r2. This new
1784     ebuild includes many new performance and security
1785     related patches. As in -r1, it will patch in
1786     LSM/SELinux if "selinux" is in USE, otherwise it
1787     will patch in GRSecurity. The following patches
1788     are included in this revision:
1789 plasmaroo 1.18
1790 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1791     (pulled from the base CK patch)
1792     - ptrace exploit patch for the LSM kernel
1793     (the GRSec patch already fixes this)
1794     - LSM 2.4-2003040709
1795     - SELinux 2.4-2003040709
1796     - Systrace v1.2
1797     - IPTables patch-o-matic base patches - 20030107
1798     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1799     - Super FreeS/WAN 1.99.6.1
1800     - GRSecurity 1.9.9g
1801     - MPPE
1802     - EXT3 data journal fix
1803     - CIPE 1.5.4
1804 frogger 1.6
1805     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1806     hardened-sources-2.4.20-r1.ebuild, manifest:
1807 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1808 frogger 1.5
1809     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1810     hardened-sources-2.4.20-r1.ebuild:
1811     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1812     is patched in instead. Ptrace patches for selinux have also been added. In
1813     either case, systrace support will be patched in as well.
1814 frogger 1.3
1815     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1816     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1817 plasmaroo 1.18 Revision bump for new sources.
1818 frogger 1.4
1819 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1820 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1821 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1822 method 1.1
1823 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1824    
1825 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1826     hardened-sources-2.4.20.ebuild:
1827 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20