/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.309 - (hide annotations) (download)
Mon May 25 04:36:12 2009 UTC (5 years, 7 months ago) by gengor
Branch: MAIN
Changes since 1.308: +8 -1 lines
Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing release candidates.
(Portage version: 2.1.6.11/cvs/Linux i686)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 gengor 1.268 # Copyright 2000-2009 Gentoo Foundation; Distributed under the GPL v2
3 gengor 1.309 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.308 2009/05/25 02:31:57 gengor Exp $
4    
5     *hardened-sources-2.6.29 (25 May 2009)
6    
7     25 May 2009; Gordon Malm <gengor@gentoo.org>
8     +hardened-sources-2.6.29.ebuild:
9     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
10     release candidates.
11 gengor 1.308
12     *hardened-sources-2.6.28-r9 (25 May 2009)
13    
14     25 May 2009; Gordon Malm <gengor@gentoo.org>
15     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
16     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
17 gengor 1.307
18     *hardened-sources-2.6.28-r8 (18 May 2009)
19    
20     18 May 2009; Gordon Malm <gengor@gentoo.org>
21     +hardened-sources-2.6.28-r8.ebuild:
22     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
23     and #262862 among others.
24 gengor 1.306
25     01 May 2009; Gordon Malm <gengor@gentoo.org>
26     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
27     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
28     Remove unnecessary mirror://gentoo from SRC_URI.
29 nixnut 1.305
30     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
31     ppc stable
32 gengor 1.304
33     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
34     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
35     Stable amd64/x86 and remove old.
36 gengor 1.303
37     *hardened-sources-2.6.28-r7 (27 Mar 2009)
38    
39     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
40     +hardened-sources-2.6.28-r7.ebuild:
41     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
42 gengor 1.302
43     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
44     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
45     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
46     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
47     Stable amd64/x86 and remove old versions.
48 nixnut 1.301
49     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
50     ppc stable
51 gengor 1.300
52     *hardened-sources-2.6.28-r6 (21 Mar 2009)
53    
54     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
55     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
56     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
57 gengor 1.299
58     *hardened-sources-2.6.28-r5 (20 Mar 2009)
59    
60     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
61     +hardened-sources-2.6.28-r5.ebuild:
62     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
63 gengor 1.298
64     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
65     hardened-sources-2.6.28-r4.ebuild:
66     Stable amd64/x86.
67 gengor 1.297
68     *hardened-sources-2.6.28-r4 (18 Mar 2009)
69    
70     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
71     +hardened-sources-2.6.28-r4.ebuild:
72     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
73     compilation with CPA_DEBUG and more.
74 gengor 1.296
75     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
76     hardened-sources-2.6.28-r3.ebuild:
77     Quick stable amd64/x86.
78 gengor 1.295
79     *hardened-sources-2.6.28-r3 (15 Mar 2009)
80    
81     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
82     +hardened-sources-2.6.28-r3.ebuild:
83     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
84 nixnut 1.294
85     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
86     ppc stable
87 gengor 1.293
88     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
89     hardened-sources-2.6.28-r2.ebuild:
90     Stable amd64/x86.
91 gengor 1.292
92     *hardened-sources-2.6.28-r2 (11 Mar 2009)
93    
94     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
95     +hardened-sources-2.6.28-r2.ebuild:
96     Version bump bringing in latest grsecurity patch.
97 gengor 1.291
98     *hardened-sources-2.6.28-r1 (09 Mar 2009)
99    
100     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
101     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
102     Version bump and remove old.
103 nixnut 1.290
104     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
105     ppc stable
106 gengor 1.289
107     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
108     hardened-sources-2.6.27-r8.ebuild:
109     Remove amd64 testing keyword, bug 256226.
110 gengor 1.288
111     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
112     hardened-sources-2.6.27-r8.ebuild:
113     Revert amd64 stable, bug #256226.
114 gengor 1.287
115     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
116     hardened-sources-2.6.27-r8.ebuild:
117     Stable on amd64/x86.
118 gengor 1.286
119     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
120     -hardened-sources-2.6.27-r6.ebuild:
121     Remove old 2.6.27 release.
122 gengor 1.285
123     *hardened-sources-2.6.27-r8 (24 Feb 2009)
124    
125     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
126     +hardened-sources-2.6.27-r8.ebuild:
127     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
128     and probably more.
129 nixnut 1.284
130     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
131     ppc stable
132 gengor 1.283
133     *hardened-sources-2.6.28 (25 Jan 2009)
134    
135     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
136     +hardened-sources-2.6.28.ebuild:
137     Initial 2.6.28 release.
138 gengor 1.282
139     *hardened-sources-2.6.27-r7 (25 Jan 2009)
140    
141     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
142     +hardened-sources-2.6.27-r7.ebuild:
143     Bump to Linux 2.6.27.13.
144 gengor 1.281
145     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
146     hardened-sources-2.6.26-r9.ebuild:
147     Stable amd64/x86.
148 gengor 1.280
149     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
150     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
151     -hardened-sources-2.6.27-r5.ebuild:
152     Remove problem versions.
153 gengor 1.279
154     *hardened-sources-2.6.27-r6 (24 Jan 2009)
155    
156     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
157     +hardened-sources-2.6.27-r6.ebuild:
158     Revert PaX test29 to test30 changes. Fixes bug 256226.
159 gengor 1.277
160     *hardened-sources-2.6.27-r5 (24 Jan 2009)
161    
162     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
163     +hardened-sources-2.6.27-r5.ebuild:
164 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
165 gengor 1.277 254843.
166 gengor 1.276
167     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
168     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
169     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
170     Remove problem versions.
171 nixnut 1.275
172     23 Jan 2009; nixnut <nixnut@gentoo.org>
173     hardened-sources-2.6.25-r13.ebuild:
174     ppc stable
175 gengor 1.274
176     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
177     hardened-sources-2.6.25-r13.ebuild:
178     Fasttrack stable amd64/x86.
179 gengor 1.273
180     *hardened-sources-2.6.26-r9 (21 Jan 2009)
181    
182     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
183     +hardened-sources-2.6.26-r9.ebuild:
184 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
185 gengor 1.272
186     *hardened-sources-2.6.25-r13 (20 Jan 2009)
187    
188     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
189     +hardened-sources-2.6.25-r13.ebuild:
190 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
191 nixnut 1.271
192     20 Jan 2009; nixnut <nixnut@gentoo.org>
193     hardened-sources-2.6.25-r12.ebuild:
194     ppc stable
195 gengor 1.270
196     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
197     hardened-sources-2.6.25-r12.ebuild:
198     Stable amd64/x86.
199 gengor 1.269
200     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
201     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
202     -hardened-sources-2.6.27-r2.ebuild:
203     Clean out old versions.
204 gengor 1.268
205     *hardened-sources-2.6.27-r4 (14 Jan 2009)
206     *hardened-sources-2.6.26-r8 (14 Jan 2009)
207     *hardened-sources-2.6.25-r12 (14 Jan 2009)
208    
209     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
210     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
211     +hardened-sources-2.6.27-r4.ebuild:
212     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
213     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
214     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
215     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
216 nixnut 1.267
217     15 Dec 2008; nixnut <nixnut@gentoo.org>
218     hardened-sources-2.6.25-r11.ebuild:
219     Stable on ppc
220 gengor 1.266
221     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
222     hardened-sources-2.6.25-r11.ebuild:
223     Stable amd64/x86.
224 gengor 1.265
225     *hardened-sources-2.6.27-r3 (07 Dec 2008)
226    
227     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
228     +hardened-sources-2.6.27-r3.ebuild:
229     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
230     Fixes bug #248754, #249729 and #246607.
231 gengor 1.264
232     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
233     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
234     Remove old versions.
235 gengor 1.262
236     *hardened-sources-2.6.26-r7 (03 Dec 2008)
237     *hardened-sources-2.6.25-r11 (03 Dec 2008)
238    
239 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
240     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
241 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
242     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
243     Both include many backports from 2.6.27.{6,7} -stable releases.
244 gengor 1.261
245     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
246     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
247     Remove versions broken on ARCHes != x86/amd64.
248 gengor 1.260
249     *hardened-sources-2.6.27-r2 (24 Nov 2008)
250    
251     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
252     +hardened-sources-2.6.27-r2.ebuild:
253     Bump to Linux 2.6.27.7 and latest grsecurity patch.
254 gengor 1.259
255     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
256     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
257     Remove old versions.
258 gengor 1.258
259     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
260     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
261     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
262 nixnut 1.257
263     16 Nov 2008; nixnut <nixnut@gentoo.org>
264     hardened-sources-2.6.25-r10.ebuild:
265     Stable on ppc
266 gengor 1.256
267     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
268     hardened-sources-2.6.25-r10.ebuild:
269     Stable amd64/x86.
270 gengor 1.255
271     *hardened-sources-2.6.26-r6 (12 Nov 2008)
272    
273     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
274     +hardened-sources-2.6.26-r6.ebuild:
275     Bump to Linux 2.6.26.8 and fix security bug #245650.
276 gengor 1.254
277     *hardened-sources-2.6.25-r10 (12 Nov 2008)
278    
279     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
280     +hardened-sources-2.6.25-r10.ebuild:
281     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
282 gengor 1.253
283     *hardened-sources-2.6.27-r1 (09 Nov 2008)
284    
285     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
286     +hardened-sources-2.6.27-r1.ebuild:
287     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
288 gengor 1.252
289     *hardened-sources-2.6.27 (04 Nov 2008)
290    
291     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
292     +hardened-sources-2.6.27.ebuild:
293     Initial 2.6.27 release.
294 gengor 1.251
295     *hardened-sources-2.6.26-r5 (03 Nov 2008)
296    
297     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
298     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
299     +hardened-sources-2.6.26-r5.ebuild:
300     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
301     Clean out some old versions.
302 nixnut 1.250
303     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
304     Stable on ppc
305 gengor 1.249
306     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
307     hardened-sources-2.6.25-r9.ebuild:
308     Stable on amd64/x86.
309 gengor 1.248
310     *hardened-sources-2.6.25-r9 (26 Oct 2008)
311    
312     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
313     +hardened-sources-2.6.25-r9.ebuild:
314     Update to Linux 2.6.25.19
315 nixnut 1.247
316     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
317     Stable on ppc
318 gengor 1.246
319     *hardened-sources-2.6.26-r4 (14 Oct 2008)
320    
321     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
322     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
323     Update to latest grsecurity patch, fixing building of non-modular kernels.
324 gengor 1.245
325     *hardened-sources-2.6.26-r3 (12 Oct 2008)
326    
327     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
328     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
329     +hardened-sources-2.6.26-r3.ebuild:
330     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
331     2.6.26-r1: Removed.
332     2.6.25-r8: Stable amd64/x86.
333 gengor 1.244
334     *hardened-sources-2.6.25-r8 (09 Oct 2008)
335    
336     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
337     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
338     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
339     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
340 nixnut 1.243
341     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
342     Stable on ppc
343 gengor 1.242
344     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
345     hardened-sources-2.6.25-r7.ebuild:
346     Stable amd64/x86.
347 gengor 1.241
348     *hardened-sources-2.6.26-r2 (13 Sep 2008)
349    
350     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
351     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
352     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
353     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
354 gengor 1.240
355     *hardened-sources-2.6.25-r7 (13 Sep 2008)
356    
357     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
358     +hardened-sources-2.6.25-r7.ebuild:
359     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
360 gengor 1.239
361     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
362     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
363     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
364     hardened-sources-2.6.26-r1.ebuild:
365     Update DESCRIPTION and HGPV_URI.
366 gengor 1.238
367     *hardened-sources-2.6.25-r6 (09 Sep 2008)
368    
369     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
370     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
371     2.6.25-r6: Update to Linux 2.6.25.17.
372     2.6.24-r3: Removed.
373 gengor 1.237
374     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
375     hardened-sources-2.6.25-r5.ebuild:
376     Stable on amd64/x86
377 gengor 1.236
378     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
379     Update my email address.
380 nixnut 1.235
381     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
382     stable on ppc
383 battousai 1.234
384     *hardened-sources-2.6.26-r1 (23 Aug 2008)
385     *hardened-sources-2.6.25-r5 (23 Aug 2008)
386    
387     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
388     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
389     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
390     +hardened-sources-2.6.26-r1.ebuild:
391     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
392     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
393     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
394     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
395     (gengor).
396 solar 1.233
397     *hardened-sources-2.6.26 (18 Aug 2008)
398     *hardened-sources-2.6.25-r4 (18 Aug 2008)
399    
400     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
401     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
402     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
403     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
404     2.6.25-r2: Removed.
405 tove 1.232
406     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
407     Remove phreak from metadata.xml (#96398)
408 solar 1.231
409     *hardened-sources-2.6.25-r3 (31 Jul 2008)
410    
411     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
412     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
413     +hardened-sources-2.6.25-r3.ebuild:
414     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
415     fixes, including security bug #231750.
416 nixnut 1.230
417     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
418     Stable on ppc
419 solar 1.229
420     *hardened-sources-2.6.25-r2 (05 Jul 2008)
421    
422     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
423     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
424     +hardened-sources-2.6.25-r2.ebuild:
425     2.6.23-r4: Stable x86/amd64
426     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
427     2.6.23-r{11,12}: Removed due to multiple vulns.
428     (gengor & kerframil)
429 nixnut 1.228
430     04 Jul 2008; nixnut <nixnut@gentoo.org>
431     hardened-sources-2.6.23-r13.ebuild:
432     Stable on ppc
433 solar 1.227
434     *hardened-sources-2.6.25-r1 (30 Jun 2008)
435    
436     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
437     +hardened-sources-2.6.25-r1.ebuild:
438     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
439     grsecurity release. 2.6.23-r13: x86/amd64 stable
440 solar 1.226
441     *hardened-sources-2.6.25 (17 Jun 2008)
442     *hardened-sources-2.6.24-r3 (17 Jun 2008)
443     *hardened-sources-2.6.23-r13 (17 Jun 2008)
444    
445     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
446     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
447     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
448     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
449     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
450     2.6.25: Initial 2.6.25 release.
451 solar 1.225
452     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
453     - fasttrack to stable x86/amd64
454 swegener 1.224
455     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
456     Fix broken digest for linux-2.6.24.tar.bz2.
457 solar 1.223
458     *hardened-sources-2.6.24-r2 (11 May 2008)
459     *hardened-sources-2.6.23-r12 (11 May 2008)
460    
461     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
462     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
463     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
464     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
465     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
466     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
467     security bugs 219901, 220691, 220975, 220979, 221123. New
468     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
469     should be removed as far as I'm concerned, everything else remove due to
470     vulnerable to numerous security bugs or brokeness.
471 nixnut 1.222
472     10 May 2008; nixnut <nixnut@gentoo.org>
473     hardened-sources-2.6.23-r11.ebuild:
474     Stable on ppc
475 solar 1.221
476     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
477     - -r11 stable on x86/amd64
478 solar 1.220
479     *hardened-sources-2.6.23-r11 (01 May 2008)
480    
481     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
482     - version bump to fix ulgy linux bugs
483 phreak 1.219
484     *hardened-sources-2.6.24-r1 (30 Apr 2008)
485    
486     30 Apr 2008; Christian Heim <phreak@gentoo.org>
487     +hardened-sources-2.6.24-r1.ebuild:
488     Revision bump (thanks to Kerin and Gordon, again), pulling
489     genpatches-2.6.24-7, solving #219089. Additionally contains further security
490     fixes plus some minor updates.
491 phreak 1.218
492     *hardened-sources-2.6.23-r10 (30 Apr 2008)
493    
494     30 Apr 2008; Christian Heim <phreak@gentoo.org>
495     +hardened-sources-2.6.23-r10.ebuild:
496     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
497     Additional contains "various other fixes".
498 phreak 1.217
499     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
500     Update the longdescription in metadata, thanks to Gordon Malm.
501 nixnut 1.216
502     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
503     Stable on ppc wrt bug #213255
504 solar 1.215
505     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
506     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
507     - stable on x86/amd64 per request. Removed obsolete ebuilds
508 phreak 1.214
509     *hardened-sources-2.6.24 (07 Apr 2008)
510    
511     07 Apr 2008; Christian Heim <phreak@gentoo.org>
512     +hardened-sources-2.6.24.ebuild:
513     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
514     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
515     for the many contributions and their continued effort in #216612) based on
516     2.6.24 and genpatches-2.6.24-5.
517    
518     The current ebuild/patchset contains these things:
519     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
520     * Introduces bespoke server and workstation oriented security levels
521     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
522 phreak 1.213
523     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
524     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
525     maintaining it).
526 phreak 1.212
527     24 Mar 2008; Christian Heim <phreak@gentoo.org>
528     hardened-sources-2.4.35-r2.ebuild:
529     Fixing SRC_URI for 2.4.35-r2.
530 phreak 1.211
531     *hardened-sources-2.6.23-r9 (22 Mar 2008)
532    
533     22 Mar 2008; Christian Heim <phreak@gentoo.org>
534     +hardened-sources-2.6.23-r9.ebuild:
535     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
536     * Change the default GIDs for some grsecurity options
537     * Revamp the Hardened [Gentoo] security level and make it the default level
538     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
539     * Fix a recursive lock -- call to capable() within ptrace_attach()
540     * Fix bug that allows audit and iscsi operations to be controlled via netlink
541 solar 1.210
542     *hardened-sources-2.6.23-r8 (27 Feb 2008)
543    
544     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
545     - version bump from Kerin Millar bug 210026
546 solar 1.209
547     17 Feb 2008; <solar@gentoo.org> metadata.xml,
548     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
549     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
550     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
551     - stable on x86 and remove old ebuilds
552 solar 1.207
553     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
554 solar 1.208 - stable on amd64 per request of amd64 lead
555 solar 1.206
556     *hardened-sources-2.6.23-r7 (11 Feb 2008)
557    
558     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
559     - version bump from kerin.millar
560     Changes:
561    
562     * Bump to genpatches-base-2.6.23-9
563     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
564     * Disables COMPAT_VDSO in x86/defconfig
565     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
566 phreak 1.205
567     25 Jan 2008; Christian Heim <phreak@gentoo.org>
568     -hardened-sources-2.6.22-r8.ebuild:
569     Cleaning up old versions.
570 phreak 1.204
571     *hardened-sources-2.6.23-r6 (25 Jan 2008)
572    
573     25 Jan 2008; Christian Heim <phreak@gentoo.org>
574     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
575     Revision bump, pulling in the latest genpatches.
576 phreak 1.203
577     *hardened-sources-2.6.23-r5 (24 Dec 2007)
578    
579     24 Dec 2007; Christian Heim <phreak@gentoo.org>
580     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
581     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
582     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
583     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
584 phreak 1.202
585     24 Dec 2007; Christian Heim <phreak@gentoo.org>
586     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
587     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
588     -hardened-sources-2.6.23-r3.ebuild:
589     Cleaning out some unused, old versions.
590 phreak 1.201
591     24 Dec 2007; Christian Heim <phreak@gentoo.org>
592     hardened-sources-2.6.23-r4.ebuild:
593     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
594     in the tree for long, but there isn't much of a difference between this and
595     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
596 phreak 1.200
597     *hardened-sources-2.6.23-r4 (23 Dec 2007)
598    
599     23 Dec 2007; Christian Heim <phreak@gentoo.org>
600     +hardened-sources-2.6.23-r4.ebuild:
601     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
602 phreak 1.199
603     *hardened-sources-2.6.23-r3 (04 Dec 2007)
604    
605     04 Dec 2007; Christian Heim <phreak@gentoo.org>
606     +hardened-sources-2.6.23-r3.ebuild:
607     Revision bump, pulling in 2.6.23.9.
608 phreak 1.198
609     *hardened-sources-2.6.23-r2 (25 Nov 2007)
610    
611     25 Nov 2007; Christian Heim <phreak@gentoo.org>
612     +hardened-sources-2.6.23-r2.ebuild:
613     Updated patchset, thanks to solar.
614 phreak 1.197
615     *hardened-sources-2.6.23-r1 (31 Oct 2007)
616    
617     31 Oct 2007; Christian Heim <phreak@gentoo.org>
618     +hardened-sources-2.6.23-r1.ebuild:
619     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
620 solar 1.196
621     29 Oct 2007; <solar@gentoo.org> metadata.xml:
622     - update metadata.xml
623 phreak 1.195
624     25 Oct 2007; Christian Heim <phreak@gentoo.org>
625     hardened-sources-2.6.22-r8.ebuild:
626     Marking 2.6.22-r8 stable on amd64 and x86.
627 phreak 1.194
628     21 Oct 2007; Christian Heim <phreak@gentoo.org>
629     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
630     -hardened-sources-2.6.21-r4.ebuild:
631     Removing old ebuilds.
632 phreak 1.193
633     *hardened-sources-2.4.35-r2 (21 Oct 2007)
634    
635     21 Oct 2007; Christian Heim <phreak@gentoo.org>
636     +hardened-sources-2.4.35-r2.ebuild:
637     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
638     patches.
639 phreak 1.192
640     *hardened-sources-2.6.22-r8 (21 Oct 2007)
641    
642     21 Oct 2007; Christian Heim <phreak@gentoo.org>
643     +hardened-sources-2.6.22-r8.ebuild:
644     Yet another new patch, hopefully fixing the remaining issues we had w/
645     2.6.22. Candidate for stabling.
646 phreak 1.191
647     *hardened-sources-2.6.23 (13 Oct 2007)
648    
649     13 Oct 2007; Christian Heim <phreak@gentoo.org>
650     +hardened-sources-2.6.23.ebuild:
651     Initial hardened-sources-2.6.23. If people still have problems w/ bug
652     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
653 phreak 1.190
654     11 Oct 2007; Christian Heim <phreak@gentoo.org>
655     hardened-sources-2.6.20-r10.ebuild:
656     Pulling in yet another new genpatches version, fixing the PWC bug for real.
657 phreak 1.189
658     04 Oct 2007; Christian Heim <phreak@gentoo.org>
659     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
660     Removing old versions.
661 phreak 1.188
662     *hardened-sources-2.6.22-r7 (01 Oct 2007)
663    
664     01 Oct 2007; Christian Heim <phreak@gentoo.org>
665     +hardened-sources-2.6.22-r7.ebuild:
666     Revision bump, pulling in a newer patch. Should fix #194276.
667 phreak 1.187
668     30 Sep 2007; Christian Heim <phreak@gentoo.org>
669     hardened-sources-2.6.20-r10.ebuild:
670     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
671     Mike Doty).
672 phreak 1.186
673     *hardened-sources-2.6.22-r6 (26 Sep 2007)
674    
675     26 Sep 2007; Christian Heim <phreak@gentoo.org>
676     +hardened-sources-2.6.22-r6.ebuild:
677     Revision bump, grabbing up till Linux 2.6.22.9.
678 phreak 1.185
679     24 Sep 2007; Christian Heim <phreak@gentoo.org>
680     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
681     Cleaning up further.
682 phreak 1.184
683     *hardened-sources-2.6.20-r10 (24 Sep 2007)
684    
685     24 Sep 2007; Christian Heim <phreak@gentoo.org>
686     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
687     +hardened-sources-2.6.20-r10.ebuild:
688     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
689     revisions.
690 phreak 1.183
691     *hardened-sources-2.6.22-r5 (22 Sep 2007)
692    
693     22 Sep 2007; Christian Heim <phreak@gentoo.org>
694     +hardened-sources-2.6.22-r5.ebuild:
695     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
696 phreak 1.182
697     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
698     Removing johnm from metadata.xml (see #186467 for reference).
699 phreak 1.181
700     *hardened-sources-2.6.22-r4 (17 Sep 2007)
701    
702     17 Sep 2007; Christian Heim <phreak@gentoo.org>
703     +hardened-sources-2.6.22-r4.ebuild:
704     Revision bump, hopefully fixing all those weird PAX failures.
705 phreak 1.180
706     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
707     Updating the metadata.xml.
708 phreak 1.179
709     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
710     Removing tocharian from metadata due to his retirement (see #71718 for
711     reference).
712 phreak 1.178
713     *hardened-sources-2.6.20-r9 (30 Aug 2007)
714    
715     30 Aug 2007; Christian Heim <phreak@gentoo.org>
716     +hardened-sources-2.6.20-r9.ebuild:
717     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
718 phreak 1.177
719     29 Aug 2007; Christian Heim <phreak@gentoo.org>
720     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
721     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
722     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
723     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
724     -hardened-sources-2.6.22-r2.ebuild:
725     Removing some redundant versions.
726 phreak 1.176
727     *hardened-sources-2.4.35-r1 (29 Aug 2007)
728    
729     29 Aug 2007; Christian Heim <phreak@gentoo.org>
730     +hardened-sources-2.4.35-r1.ebuild:
731     Revision bump, new grsecurity patch.
732 phreak 1.175
733     *hardened-sources-2.6.20-r8 (26 Aug 2007)
734    
735     26 Aug 2007; Christian Heim <phreak@gentoo.org>
736     +hardened-sources-2.6.20-r8.ebuild:
737     Revision bump for Linux 2.6.20.17.
738 phreak 1.174
739     *hardened-sources-2.6.22-r3 (22 Aug 2007)
740    
741     22 Aug 2007; Christian Heim <phreak@gentoo.org>
742     +hardened-sources-2.6.22-r3.ebuild:
743     Revision bump for Linux 2.6.22.4.
744 phreak 1.173
745     16 Aug 2007; Christian Heim <phreak@gentoo.org>
746     hardened-sources-2.6.22-r2.ebuild:
747     Updated patchset, to fix the alignment against 2.6.22.3.
748 phreak 1.172
749     *hardened-sources-2.6.22-r2 (16 Aug 2007)
750    
751     16 Aug 2007; Christian Heim <phreak@gentoo.org>
752     +hardened-sources-2.6.22-r2.ebuild:
753     Revision bump for Linux 2.6.22.3.
754 phreak 1.171
755     *hardened-sources-2.4.35 (16 Aug 2007)
756    
757     16 Aug 2007; Christian Heim <phreak@gentoo.org>
758     +hardened-sources-2.4.35.ebuild:
759     Version bump, initial version for Linux 2.4.35.
760 phreak 1.170
761     *hardened-sources-2.6.21-r4 (16 Aug 2007)
762    
763     16 Aug 2007; Christian Heim <phreak@gentoo.org>
764     +hardened-sources-2.6.21-r4.ebuild:
765     Revision bump for Linux 2.6.21.6.
766 phreak 1.169
767     *hardened-sources-2.6.20-r7 (16 Aug 2007)
768    
769     16 Aug 2007; Christian Heim <phreak@gentoo.org>
770     +hardened-sources-2.6.20-r7.ebuild:
771     Revision bump for Linux 2.6.20.16.
772 phreak 1.168
773     *hardened-sources-2.6.22-r1 (13 Aug 2007)
774    
775     13 Aug 2007; Christian Heim <phreak@gentoo.org>
776     +hardened-sources-2.6.22-r1.ebuild:
777     Yet another revision bump.
778 phreak 1.167
779     *hardened-sources-2.6.22 (10 Aug 2007)
780    
781     10 Aug 2007; Christian Heim <phreak@gentoo.org>
782     +hardened-sources-2.6.22.ebuild:
783     Initial release for 2.6.22. If you are using hardened-sources on a desktop
784     machine (P4 or newer), be aware you might need to disable
785     CONFIG_PAX_PAGEEXEC.
786 phreak 1.166
787     04 Aug 2007; Christian Heim <phreak@gentoo.org>
788     hardened-sources-2.6.20-r6.ebuild:
789     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
790     2.6.20.15.
791 phreak 1.165
792     10 Jul 2007; Christian Heim <phreak@gentoo.org>
793     hardened-sources-2.6.20-r5.ebuild:
794     Marking hardened-sources-2.6.20-r5 stable on ppc.
795 phreak 1.164
796     10 Jul 2007; Christian Heim <phreak@gentoo.org>
797     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
798     Cleanup.
799 phreak 1.163
800     *hardened-sources-2.6.20-r6 (08 Jul 2007)
801    
802     08 Jul 2007; Christian Heim <phreak@gentoo.org>
803     +hardened-sources-2.6.20-r6.ebuild:
804     Revision bump, grabbing yet another stable release.
805 phreak 1.162
806     17 Jun 2007; Christian Heim <phreak@gentoo.org>
807     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
808     -hardened-sources-2.6.21-r2.ebuild:
809     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
810     alpha stable KEYWORD by mistake.
811 phreak 1.161
812     17 Jun 2007; Christian Heim <phreak@gentoo.org>
813     hardened-sources-2.6.20-r5.ebuild:
814     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
815     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
816 phreak 1.160
817     *hardened-sources-2.6.21-r3 (12 Jun 2007)
818    
819     12 Jun 2007; Christian Heim <phreak@gentoo.org>
820     +hardened-sources-2.6.21-r3.ebuild:
821     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
822     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
823     love.
824 phreak 1.159
825     *hardened-sources-2.6.20-r5 (11 Jun 2007)
826    
827     11 Jun 2007; Christian Heim <phreak@gentoo.org>
828     +hardened-sources-2.6.20-r5.ebuild:
829     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
830     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
831     love.
832 pappy 1.158
833     *hardened-sources-2.4.34.5 (11 Jun 2007)
834    
835     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
836     +hardened-sources-2.4.34.5.ebuild:
837     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
838 phreak 1.157
839     30 May 2007; Christian Heim <phreak@gentoo.org>
840     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
841     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
842     stale ebuild(s).
843 phreak 1.156
844     30 May 2007; Christian Heim <phreak@gentoo.org>
845     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
846     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
847     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
848     Doing some cleanups, remove stale ebuilds.
849 phreak 1.155
850     26 May 2007; Christian Heim <phreak@gentoo.org>
851     hardened-sources-2.6.21-r2.ebuild:
852     Fixing the grsecurity patch, had one '};' too much.
853 phreak 1.154
854     *hardened-sources-2.6.21-r2 (26 May 2007)
855    
856     26 May 2007; Christian Heim <phreak@gentoo.org>
857     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
858     +hardened-sources-2.6.21-r2.ebuild:
859     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
860     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
861 phreak 1.153
862     *hardened-sources-2.6.20-r4 (26 May 2007)
863    
864     26 May 2007; Christian Heim <phreak@gentoo.org>
865     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
866     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
867 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
868 phreak 1.152
869     15 May 2007; Christian Heim <phreak@gentoo.org>
870     hardened-sources-2.6.20-r3.ebuild:
871     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
872     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
873     grsecurity patch fail in that exact same hunk.
874 phreak 1.151
875     *hardened-sources-2.6.20-r3 (15 May 2007)
876    
877     15 May 2007; Christian Heim <phreak@gentoo.org>
878     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
879     Revision bump, incorporating Linux 2.6.20.11.
880    
881     *hardened-sources-2.6.21-r1 (11 May 2007)
882    
883     11 May 2007; Christian Heim <phreak@gentoo.org>
884     +hardened-sources-2.6.21-r1.ebuild:
885     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
886     mentioned in #177234.
887 kevquinn 1.150
888     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
889     files/digest-hardened-sources-2.6.21, Manifest:
890     Fix Manifest/digest for linux-2.6.21.tar.bz2
891 phreak 1.149
892     06 May 2007; Christian Heim <phreak@gentoo.org>
893     hardened-sources-2.6.21.ebuild:
894     Bumping the hardened-patches version, needed for the fix for #177234.
895 phreak 1.148
896     *hardened-sources-2.6.21 (02 May 2007)
897    
898     02 May 2007; Christian Heim <phreak@gentoo.org>
899     +hardened-sources-2.6.21.ebuild:
900     Version bump, Linux 2.6.21-hardened.
901 phreak 1.147
902     29 Apr 2007; Christian Heim <phreak@gentoo.org>
903     hardened-sources-2.6.20-r2.ebuild:
904     Adding ~ia64 on Ned's request.
905 phreak 1.146
906     29 Apr 2007; Christian Heim <phreak@gentoo.org>
907     hardened-sources-2.6.20-r2.ebuild:
908     Fixing the included grsecurity patch, wasn't alligning due to the Index:
909     header line(s).
910 phreak 1.145
911     29 Apr 2007; Christian Heim <phreak@gentoo.org>
912     hardened-sources-2.6.20-r2.ebuild:
913     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
914 armin76 1.144
915     *hardened-sources-2.6.20-r2 (10 Apr 2007)
916    
917     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
918     +hardened-sources-2.6.20-r2.ebuild:
919     Version bump, on behalf of phreak
920 phreak 1.143
921     *hardened-sources-2.6.20-r1 (04 Apr 2007)
922    
923     04 Apr 2007; Christian Heim <phreak@gentoo.org>
924     +hardened-sources-2.6.20-r1.ebuild:
925     Revision bump, grabbing a newer grsecurity snapshot.
926 phreak 1.142
927     *hardened-sources-2.6.20 (25 Mar 2007)
928    
929     25 Mar 2007; Christian Heim <phreak@gentoo.org>
930     +hardened-sources-2.6.20.ebuild:
931     Finally a hardened-sources version for 2.6.20; many people have been waiting
932     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
933     testbox.
934 chainsaw 1.141
935     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
936     hardened-sources-2.6.18-r6.ebuild:
937     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
938 phreak 1.140
939     *hardened-sources-2.6.18-r6 (16 Mar 2007)
940    
941     16 Mar 2007; Christian Heim <phreak@gentoo.org>
942     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
943     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
944     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
945     supposed to be.
946 phreak 1.139
947     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
948     Fixing the Manifest, the previous one was broken (as in still had the
949     deleted ebuild in it).
950 phreak 1.138
951     06 Mar 2007; Christian Heim <phreak@gentoo.org>
952     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
953     +hardened-sources-2.6.18-r5.ebuild:
954     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
955     Linux 2.6.18.8. Also cleaning up the older version.
956    
957     *hardened-sources-2.6.18-r5 (06 Mar 2007)
958    
959     06 Mar 2007; Christian Heim <phreak@gentoo.org>
960     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
961     +hardened-sources-2.6.18-r5.ebuild:
962     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
963     Linux 2.6.18.8. Also cleaning up the older version.
964 phreak 1.137
965     24 Feb 2007; Christian Heim <phreak@gentoo.org>
966     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
967     -hardened-sources-2.6.19-r5.ebuild:
968     Removing some of the old version, that didn't work.
969 phreak 1.136
970     *hardened-sources-2.6.19-r6 (12 Feb 2007)
971    
972     12 Feb 2007; Christian Heim <phreak@gentoo.org>
973     +hardened-sources-2.6.19-r6.ebuild:
974     Revision bump, including a new grsec version fixing #166235.
975 pappy 1.134
976     *hardened-sources-2.4.34 (24 Jan 2007)
977    
978     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
979 pappy 1.135 Manifest:
980     updating Manifest with checksums of new tarball and ebuild
981    
982     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
983 pappy 1.134 +hardened-sources-2.4.34.ebuild:
984     I added new hardened sources 2.4 update, this is a critical path
985     security bugfix - all users of h-s are strongly advised
986     to update their existing hardened sources to this version.
987     It contains a fix for a kernel vulnerability that is pertaining
988     to the PaX changes to virtual memory management, possibly leading
989     to a local kernel exploit ... see grsecurity.net forums and homepage
990 phreak 1.133
991     23 Jan 2007; Christian Heim <phreak@gentoo.org>
992     files/digest-hardened-sources-2.6.19-r5, Manifest:
993     Fixing the patch-tarball digest.
994 phreak 1.132
995     *hardened-sources-2.6.19-r5 (23 Jan 2007)
996    
997     23 Jan 2007; Christian Heim <phreak@gentoo.org>
998     +hardened-sources-2.6.19-r5.ebuild:
999     Revision bump, closing the recently discovered PaX expand_stack()
1000     vulnerability.
1001 phreak 1.131
1002     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1003    
1004     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1005     +hardened-sources-2.6.19-r4.ebuild:
1006     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1007     dropping the randomized PID feature.
1008 opfer 1.130
1009     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1010     hardened-sources-2.4.33.4.ebuild:
1011     stable x86, bug #161171
1012 phreak 1.129
1013     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1014    
1015     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1016     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1017     Revision bump for bug #157186 and #158786.
1018 phreak 1.128
1019     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1020    
1021     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1022     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1023     Revision bump for bug #157186.
1024 phreak 1.127
1025     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1026    
1027     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1028     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1029     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1030 phreak 1.126
1031     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1032     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1033     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1034     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1035     hardened-sources-2.6.19-r1.ebuild:
1036     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1037     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1038 pappy 1.125
1039     *hardened-sources-2.4.33.4 (17 Dec 2006)
1040    
1041     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1042     +hardened-sources-2.4.33.4.ebuild:
1043     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1044     and quilting
1045 phreak 1.124
1046     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1047    
1048     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1049     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1050     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1051     for reporting).
1052 phreak 1.123
1053     *hardened-sources-2.6.19 (13 Dec 2006)
1054    
1055     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1056     +hardened-sources-2.6.19.ebuild:
1057     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1058     Brad for providing that prompt update.
1059 phreak 1.122
1060     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1061    
1062     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1063     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1064     +hardened-sources-2.6.18-r3.ebuild:
1065     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1066     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1067 phreak 1.121
1068     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1069     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1070 nixnut 1.120
1071     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1072     Stable on ppc wrt bug 157356
1073 opfer 1.119
1074     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1075     hardened-sources-2.6.18.ebuild:
1076     stable x86, bug #157356
1077 phreak 1.118
1078     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1079    
1080     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1081     +hardened-sources-2.6.18-r2.ebuild:
1082     Revision bump, including 2.6.18.5 (via genpatches) and
1083     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1084     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1085     redesign.
1086 phreak 1.117
1087     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1088     hardened-sources-2.6.18.ebuild:
1089     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1090     of Mike Doty).
1091 phreak 1.116
1092     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1093    
1094     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1095     +hardened-sources-2.6.18-r1.ebuild:
1096     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1097 phreak 1.115
1098     *hardened-sources-2.6.18 (11 Nov 2006)
1099    
1100     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1101     +hardened-sources-2.6.18.ebuild:
1102     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1103 solar 1.114
1104     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1105     - mark amd64 stable also. bug #151877
1106 solar 1.113
1107     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1108     - mark 2.6.17-r1 stable
1109 phreak 1.112
1110     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1111     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1112     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1113 phreak 1.111
1114     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1115    
1116     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1117     +hardened-sources-2.6.17-r1.ebuild:
1118     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1119     grsecurity patch.
1120 phreak 1.110
1121     *hardened-sources-2.6.17 (17 Aug 2006)
1122    
1123     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1124     +hardened-sources-2.6.17.ebuild:
1125     Bumping the hardened-sources-2.6 series to 2.6.17, using
1126     genpatches-2.6.17-6.base.
1127 solar 1.109
1128     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1129     - stable on x86 and amd64
1130 solar 1.108
1131     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1132    
1133     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1134     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1135     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1136     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1137     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1138     crusty ebuilds
1139 johnm 1.107
1140     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1141     hardened-sources-2.6.16-r10.ebuild:
1142     marking stable on x86 and amd64
1143 solar 1.106
1144     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1145     - 2.4.32-r6 stable on x86. RSBAC state unknown
1146 kang 1.105
1147     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1148    
1149     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1150     +hardened-sources-2.4.32-r7.ebuild:
1151     Bump PaX for RSBAC to test-17
1152 johnm 1.104
1153     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1154    
1155     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1156     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1157     hardened-sources-2.6.16 bump to latest -base.
1158 solar 1.103
1159     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1160    
1161     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1162     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1163     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1164     sysctl controlable resource logging
1165 johnm 1.102
1166     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1167    
1168     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1169     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1170     push new 2.6.16 release in preparation for stable
1171 solar 1.101
1172     22 May 2006; <solar@gentoo.org> :
1173     - redigest bug 134002
1174 kang 1.100
1175     *hardened-sources-2.4.32-r5 (16 May 2006)
1176    
1177     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1178     +hardened-sources-2.4.32-r5.ebuild:
1179     Fixes rsbac common patching (new patch in new -r5 patchset)
1180 solar 1.99
1181     *hardened-sources-2.4.32-r4 (13 May 2006)
1182    
1183     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1184     +hardened-sources-2.4.32-r4.ebuild:
1185     - security bumps
1186 johnm 1.98
1187     *hardened-sources-2.6.16-r6 (03 May 2006)
1188    
1189     03 May 2006; John Mylchreest <johnm@gentoo.org>
1190     +hardened-sources-2.6.16-r6.ebuild:
1191     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1192 johnm 1.97
1193     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1194     hardened-sources-2.6.14-r8.ebuild:
1195     fix x86_64 build problem, this will delay the digest issue again for a short
1196     while but it will sort itself out
1197 johnm 1.96
1198     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1199     hardened-sources-2.6.14-r8.ebuild:
1200     bump hardened patchset
1201 antarus 1.94
1202     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1203     files/digest-hardened-sources-2.4.32-r2,
1204     files/digest-hardened-sources-2.4.32-r3,
1205     files/digest-hardened-sources-2.6.14-r8, Manifest:
1206     Fixing duff SHA256 digests: Bug # 131293
1207 johnm 1.93
1208 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1209    
1210     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1211     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1212     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1213     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1214     cleanup of old uneccessary sources
1215    
1216 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1217     fix digest
1218 johnm 1.92
1219     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1220    
1221     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1222     +hardened-sources-2.6.14-r8.ebuild:
1223     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1224 johnm 1.91
1225     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1226     Turning on gpg-signing again, and recomitting
1227 johnm 1.90
1228     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1229    
1230     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1231     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1232     +hardened-sources-2.6.16-r4.ebuild:
1233     Fix numerous security vulns
1234 solar 1.89
1235     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1236    
1237     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1238     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1239     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1240     - security bump for bug #112791. Removed old ebuilds
1241 johnm 1.88
1242     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1243    
1244     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1245     +hardened-sources-2.6.16-r3.ebuild:
1246     Removing silly localversion which I missed
1247 johnm 1.87
1248     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1249    
1250     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1251     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1252     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1253 johnm 1.86
1254     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1255    
1256     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1257     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1258     +hardened-sources-2.6.16-r2.ebuild:
1259     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1260     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1261 johnm 1.85
1262     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1263    
1264     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1265     +hardened-sources-2.6.16-r1.ebuild:
1266     Bumping to include ppc build fix and 2.6.16.3
1267 tsunam 1.84
1268     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1269     hardened-sources-2.6.14-r6.ebuild:
1270     Stable on x86; bug #127718
1271 johnm 1.83
1272     *hardened-sources-2.6.16 (31 Mar 2006)
1273    
1274     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1275     +hardened-sources-2.6.16.ebuild:
1276     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1277     2.6.16.1
1278 cryos 1.82
1279     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1280     hardened-sources-2.6.14-r6.ebuild:
1281     Stable on amd64, bug 127718.
1282 nixnut 1.81
1283     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1284     Stable on ppc. Bug #127718
1285 johnm 1.80
1286     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1287     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1288     -hardened-sources-2.6.14-r4.ebuild:
1289     Cleanup.
1290 johnm 1.79
1291     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1292    
1293     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1294     +hardened-sources-2.6.14-r6.ebuild:
1295     Fixes grsec policy recreation bug and adds a
1296     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1297 solar 1.78
1298     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1299     - stable on x86
1300 hansmi 1.77
1301     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1302     hardened-sources-2.6.14-r5.ebuild:
1303     Stable on ppc.
1304 johnm 1.76
1305     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1306    
1307     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1308     +hardened-sources-2.6.14-r5.ebuild:
1309     fixing every known exploit
1310 solar 1.75
1311     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1312    
1313     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1314     +hardened-sources-2.4.32-r2.ebuild:
1315     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1316 solar 1.74
1317     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1318    
1319     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1320     - version bump for new genpatches which fix up a few sec holes
1321 solar 1.73
1322     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1323    
1324     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1325     - revision bump to add misc vital linux kernel security patches.
1326 johnm 1.72
1327     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1328    
1329     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1330     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1331     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1332 johnm 1.71
1333     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1334     hardened-sources-2.6.14-r2.ebuild:
1335     making x86 & amd64 stable following testing.
1336 johnm 1.70
1337     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1338    
1339     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1340     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1341     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1342     network hooks.
1343 johnm 1.69
1344     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1345     hardened-sources-2.6.14-r1.ebuild:
1346     bumping to stable early for sec fix on x86 & amd64
1347 johnm 1.68
1348     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1349    
1350     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1351     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1352     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1353 solar 1.67
1354     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1355     - stable on x86 security bug #114227 CAN-2005-3257
1356 kang 1.66
1357     *hardened-sources-2.4.32 (19 Nov 2005)
1358    
1359     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1360     +hardened-sources-2.4.32.ebuild:
1361     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1362     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1363     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1364     rsbac >> /etc/portage/package.use)
1365 johnm 1.65
1366     *hardened-sources-2.6.14 (14 Nov 2005)
1367    
1368     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1369     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1370     Bumping 2.6 series to 2.6.14.2
1371 johnm 1.64
1372     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1373    
1374     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1375     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1376     +hardened-sources-2.6.13-r2.ebuild:
1377     Fixes minor build error in ppc.
1378 johnm 1.63
1379     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1380    
1381     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1382     +hardened-sources-2.6.13-r1.ebuild:
1383     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1384     2.6.13.4, fixes some major amd64 stability problems.
1385 johnm 1.62
1386     *hardened-sources-2.6.13 (16 Sep 2005)
1387    
1388     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1389     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1390     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1391     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1392     users should test this thoroughly.
1393 solar 1.61
1394     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1395     - stable on x86
1396 johnm 1.60
1397     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1398    
1399     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1400     +hardened-sources-2.6.11-r15.ebuild:
1401     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1402     grsec redefining curr_ip struct.
1403 solar 1.59
1404     *hardened-sources-2.4.31 (20 Jun 2005)
1405    
1406     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1407     initial import of 2.4.31 tree
1408 johnm 1.58
1409     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1410    
1411     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1412     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1413     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1414     naming scheme to abide by genpatches
1415 johnm 1.57
1416     *hardened-sources-2.6.11-r13 (18 May 2005)
1417    
1418     18 May 2005; John Mylchreest <johnm@gentoo.org>
1419     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1420     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1421     target. sorry about that. Fixes bug #93022
1422 johnm 1.56
1423     *hardened-sources-2.6.11-r12 (17 May 2005)
1424    
1425     17 May 2005; John Mylchreest <johnm@gentoo.org>
1426     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1427     +hardened-sources-2.6.11-r12.ebuild:
1428     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1429     merges in genpatches-base
1430 johnm 1.55
1431     *hardened-sources-2.6.11-r12 (17 May 2005)
1432    
1433     17 May 2005; John Mylchreest <johnm@gentoo.org>
1434     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1435     +hardened-sources-2.6.11-r12.ebuild:
1436     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1437     merges in genpatches-base
1438 solar 1.54
1439     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1440     -files/2.4.27-cmdline-race.patch,
1441     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1442     -files/2.4.28-grsec-binfmt_a.out.patch,
1443     -files/2.4.28-grsec-cmdline-race.patch,
1444     -files/2.4.28-selinux-binfmt_a.out.patch,
1445     -files/2.4.28-selinux-cmdline-race.patch,
1446     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1447     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1448     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1449     cleanup..
1450 solar 1.53
1451     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1452    
1453     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1454     - disable aout by default
1455 solar 1.52
1456     *hardened-sources-2.4.30 (18 Apr 2005)
1457    
1458     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1459     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1460     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1461     use
1462 tocharian 1.50
1463 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1464    
1465     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1466     +hardened-sources-2.4.29.ebuild:
1467     New hardened-patches-2.4-29.0 patchball.
1468     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1469    
1470     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1471    
1472     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1473     +hardened-sources-2.4.28-r5.ebuild:
1474     Added a fix for a PaX vulnerability.
1475    
1476     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1477 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1478     Stable on x86
1479 solar 1.49
1480     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1481     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1482     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1483     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1484     - fixed/added RDEPEND= in all kernel-2 ebuilds
1485 tocharian 1.48
1486     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1487    
1488     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1489     +hardened-sources-2.4.28-r4.ebuild:
1490     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1491     backport of neighbour hash updates.
1492 tocharian 1.47
1493     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1494     hardened-sources-2.4.28-r3.ebuild:
1495     Stable on x86
1496 tseng 1.46
1497     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1498    
1499     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1500     +hardened-sources-2.6.10-r3.ebuild:
1501     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1502     in 2005.0
1503 tocharian 1.45
1504     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1505     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1506     hardened-sources-2.4.28-r2.ebuild:
1507     Mark stable on x86
1508 tocharian 1.44
1509     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1510    
1511     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1512     +hardened-sources-2.4.28-r3.ebuild:
1513     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1514 tocharian 1.43
1515     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1516     hardened-sources-2.4.28.ebuild:
1517     Mark stable on x86.
1518 tocharian 1.42
1519     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1520    
1521     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1522     +hardened-sources-2.4.28-r2.ebuild:
1523     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1524     Mazinger for grsecurity patches as well.
1525 plasmaroo 1.41
1526     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1527    
1528     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1529     Security bump. Thank tocharian for rolling a new patchset...
1530 solar 1.40
1531     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1532     +files/2.4.28-grsec-cmdline-race.patch,
1533     +files/2.4.28-selinux-binfmt_a.out.patch,
1534     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1535     - Round up remaining security patches that appear to be missing in 2.4.28. -
1536     PaX standalone updated to current. hgpv=28.1
1537 solar 1.39
1538     *hardened-sources-2.4.28 (28 Nov 2004)
1539    
1540     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1541     security bump. Thank tocharian for rolling a new patchset
1542 scox 1.31
1543 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1544    
1545     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1546     +hardened-sources-2.4.27-r3.ebuild:
1547     Applies the new 2.4-27.2 patchball which updates
1548     GRSecurity to the 2.0.1 version.
1549    
1550 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1551    
1552     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1553     +hardened-sources-2.4.27-r2.ebuild:
1554     Version bump.
1555     This version uses the new 2.4-27.1 patchball which updates
1556     both the SELinux PaX hooks patch and the SELinux headers.
1557    
1558 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1559    
1560     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1561     +hardened-sources-2.4.27-r1.ebuild,
1562     -hardened-sources-2.4.27.ebuild,
1563     +files/2.4.27-cmdline-race.patch:
1564     Version bump, fix for cmdline race. See bug #59905.
1565    
1566     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1567    
1568     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1569     +hardened-sources-2.4.26-r6.ebuild,
1570     -hardened-sources-2.4.26-r5.ebuild,
1571     -hardened-sources-2.4.26-r4.ebuild,
1572     +files/2.4.26-cmdline-race.patch:
1573     Version bump, fix for cmdline race. See bug #59905.
1574    
1575 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1576    
1577     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1578     +hardened-sources-2.4.27.ebuild,
1579     +files/2.4.27-CAN-2004-0394.patch:
1580     Ported the patchball to the 2.4.27 kernel version.
1581    
1582 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1583    
1584     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1585     +hardened-sources-2.4.26-r5.ebuild:
1586 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1587 scox 1.34 It adds the following features:
1588     - Squashfs
1589     - Ebtables
1590     - Netdev random (core+drivers)
1591     - Watchdog Timer (WDT) fix.
1592    
1593 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1594    
1595     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1596     +hardened-sources-2.4.26-r4.ebuild,
1597     +files/2.4.26-CAN-2004-0415.patch,
1598     -hardened-sources-2.4.26-3:
1599     Version bump, fix for CAN 0415, see bug #59378.
1600    
1601 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1602    
1603     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1604     +hardened-sources-2.4.26-r3.ebuild,
1605     +files/2.4.26-CAN-2004-0497.patch,
1606     -hardened-sources-2.4.26-r2.ebuild:
1607     Version bump, fixed CAN 0497, see bug #56171.
1608    
1609 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1610    
1611     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1612 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1613 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1614     +files/2.4.26-CAN-2004-0535.patch,
1615     -hardened-sources-2.4.26-r1.ebuild:
1616     Fixes for both CAN 0495 and 0535, see bug #54976
1617 pvdabeel 1.27
1618 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1619     hardened-sources-2.4.26-r1.ebuild:
1620     QA - fix use invocation
1621 scox 1.28
1622     *hardened-sources-2.4.26-r1 (22 June 2004)
1623    
1624     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1625     +hardened-sources-2.4.26-r1.ebuild,
1626     +files/2.4.26-CAN-2004-0394.patch,
1627     +files/2.4.26-signal-race.patch,
1628     -hardened-sources-2.4.26.ebuild,
1629     -hardened-sources-2.4.24-r3.ebuild:
1630     Version bump for the CAN-2004-0394 issue and bug #53804
1631     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1632    
1633    
1634 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1635     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1636     Masked hardened-sources-2.4.26.ebuild broken for ppc
1637    
1638     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1639     hardened-sources-2.4.24-r3.ebuild:
1640     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1641 plasmaroo 1.25
1642 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1643    
1644     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1645     +hardened-sources-2.4.26.ebuild:
1646     Updated hardened-sources for the 2.4.26 kernel
1647     Removed broken components, updated almost everything.
1648    
1649 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1650    
1651     17 Apr 2004; <plasmaroo@gentoo.org>
1652     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1653     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1654     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1655     +hardened-sources-2.4.24-r3.ebuild:
1656     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1657     vulnerabilities. Old revisions removed.
1658 plasmaroo 1.24
1659     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1660    
1661     15 Apr 2004; <plasmaroo@gentoo.org>
1662     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1663     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1664     Version bump for the CAN-2004-0109 issue; bug #47881.
1665 aliz 1.23
1666     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1667     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1668     Add eutils to inherit.
1669 plasmaroo 1.22
1670     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1671    
1672     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1673     files/hardened-sources-2.4.24.munmap.patch:
1674     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1675 scox 1.19
1676 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1677 scox 1.26
1678 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1679     hardened-sources-2.4.24.ebuild:
1680     Version bump, updated most of the components.
1681     This release includes the following:
1682    
1683     - Hardened security
1684     - Netfilter patch-o-matic 20031219
1685     - FreeSWAN 2.04 & x509 1.4.8
1686     - EVMS 2.2.2
1687     - XFS 1.3.1
1688     - cryptoloop jari
1689     - grsecurity 2.0-rc4
1690     - SELinux
1691     - PaX 200402060000
1692     - PaX Obscurity 200308302223
1693     - Others...
1694    
1695     Neither -ck nor systrace are included anymore.
1696    
1697 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1698    
1699     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1700     hardened-sources-2.4.22-r2.ebuild:
1701 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1702 scox 1.19
1703     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1704 iggy 1.17
1705     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1706 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1707 iggy 1.16
1708     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1709 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1710     Version bump for the 'do_brk' vulnerability.
1711 iggy 1.15
1712     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1713     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1714     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1715     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1716 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1717 frogger 1.14
1718     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1719     hardened-sources-2.4.22.ebuild:
1720 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1721     components. These are no longer handled in the kernel
1722     so this code was not necessary.
1723 frogger 1.13
1724     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1725     New 2.4.22 based hardened-sources thanks to
1726     Phil West <p.west@computer.org>.
1727    
1728     These sources include:
1729 plasmaroo 1.18 - New SELinux API
1730     - Updated CK-base
1731     - Updated GRSec
1732     - Systrace
1733     - SuperFreeS/WAN 1.99.8
1734     - Propolice kernel build support
1735     - EVMS
1736     - Other various security related patches
1737 frogger 1.11
1738 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1739    
1740     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1741     Updated hardened-sources based on the 2.4.21 Linux kernel.
1742     This includes updates to most major components such as:
1743 plasmaroo 1.18 - ck-base-0306300059
1744     - selinux-2.4-2003071106
1745     - grsecurity-2.0-rc1
1746     - Updated IPTables patch-o-matic
1747     - Updated SuperFreeS/WAN
1748    
1749 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1750     updated patch set ready for the 2.4.21 based kernel.
1751    
1752 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1753     Initial import of hardened-sources-2.4.20-r4. This revision
1754     includes only a few changes, but one of these is an important
1755     security fix. It is recommended all users of hardened-sources
1756     upgrade to this release.
1757 plasmaroo 1.18
1758 frogger 1.11 - ioperm bug fix
1759     - fixed compilation failure when building without GRSec
1760 plasmaroo 1.18
1761 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1762     due to time constraints, but is planned for inclusion in the near
1763     future.
1764 msterret 1.10
1765     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1766    
1767     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1768     hardened-sources-2.4.20-r3.ebuild:
1769 plasmaroo 1.18 Add Header...
1770 frogger 1.9
1771     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1772     hardened-sources-2.4.20-r3.ebuild:
1773     Removed warnings from ebuild. This kernel should be safe to
1774     use at this point.
1775 frogger 1.8
1776     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1777    
1778     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1779     hardened-sources-2.4.20-r3.ebuild:
1780     New revision. Includes the following changes over -r2:
1781 plasmaroo 1.18
1782 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1783     - Super FreeS/WAN 1.99.7rc2
1784     - PaX for the LSM/SELinux branch
1785     - GRSecurity 2.0-pre4 (role based access control)
1786     - Systrace 1.3
1787     - EXT3 fixes
1788     - EVMS 2.0.1
1789     - GCC 3.1+ compile optimizations
1790     - ProPolice kernel build support
1791     - Hashing table security fixes
1792 frogger 1.3
1793     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1794 frogger 1.7
1795     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1796     Initial import of hardened-sources-r2. This new
1797     ebuild includes many new performance and security
1798     related patches. As in -r1, it will patch in
1799     LSM/SELinux if "selinux" is in USE, otherwise it
1800     will patch in GRSecurity. The following patches
1801     are included in this revision:
1802 plasmaroo 1.18
1803 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1804     (pulled from the base CK patch)
1805     - ptrace exploit patch for the LSM kernel
1806     (the GRSec patch already fixes this)
1807     - LSM 2.4-2003040709
1808     - SELinux 2.4-2003040709
1809     - Systrace v1.2
1810     - IPTables patch-o-matic base patches - 20030107
1811     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1812     - Super FreeS/WAN 1.99.6.1
1813     - GRSecurity 1.9.9g
1814     - MPPE
1815     - EXT3 data journal fix
1816     - CIPE 1.5.4
1817 frogger 1.6
1818     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1819     hardened-sources-2.4.20-r1.ebuild, manifest:
1820 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1821 frogger 1.5
1822     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1823     hardened-sources-2.4.20-r1.ebuild:
1824     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1825     is patched in instead. Ptrace patches for selinux have also been added. In
1826     either case, systrace support will be patched in as well.
1827 frogger 1.3
1828     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1829     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1830 plasmaroo 1.18 Revision bump for new sources.
1831 frogger 1.4
1832 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1833 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1834 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1835 method 1.1
1836 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1837    
1838 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1839     hardened-sources-2.4.20.ebuild:
1840 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20