/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.313 - (hide annotations) (download)
Wed May 26 16:24:53 2010 UTC (4 years, 2 months ago) by chainsaw
Branch: MAIN
Changes since 1.312: +8 -1 lines
New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew Summers.
(Portage version: 2.1.8.3/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 chainsaw 1.313 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.312 2010/04/26 07:38:26 robbat2 Exp $
4    
5     *hardened-sources-2.6.32-r7 (26 May 2010)
6    
7     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
8     metadata.xml:
9     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
10     Summers.
11 robbat2 1.312
12     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
13     Update Manifest for deblob support in kernel-2 eclass.
14 nixnut 1.311
15     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
16     ppc stable
17 gengor 1.310
18     29 May 2009; Gordon Malm <gengor@gentoo.org>
19     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
20     Stable amd64/x86 and remove old.
21 gengor 1.309
22     *hardened-sources-2.6.29 (25 May 2009)
23    
24     25 May 2009; Gordon Malm <gengor@gentoo.org>
25     +hardened-sources-2.6.29.ebuild:
26     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
27     release candidates.
28 gengor 1.308
29     *hardened-sources-2.6.28-r9 (25 May 2009)
30    
31     25 May 2009; Gordon Malm <gengor@gentoo.org>
32     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
33     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
34 gengor 1.307
35     *hardened-sources-2.6.28-r8 (18 May 2009)
36    
37     18 May 2009; Gordon Malm <gengor@gentoo.org>
38     +hardened-sources-2.6.28-r8.ebuild:
39     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
40     and #262862 among others.
41 gengor 1.306
42     01 May 2009; Gordon Malm <gengor@gentoo.org>
43     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
44     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
45     Remove unnecessary mirror://gentoo from SRC_URI.
46 nixnut 1.305
47     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
48     ppc stable
49 gengor 1.304
50     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
51     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
52     Stable amd64/x86 and remove old.
53 gengor 1.303
54     *hardened-sources-2.6.28-r7 (27 Mar 2009)
55    
56     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
57     +hardened-sources-2.6.28-r7.ebuild:
58     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
59 gengor 1.302
60     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
61     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
62     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
63     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
64     Stable amd64/x86 and remove old versions.
65 nixnut 1.301
66     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
67     ppc stable
68 gengor 1.300
69     *hardened-sources-2.6.28-r6 (21 Mar 2009)
70    
71     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
72     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
73     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
74 gengor 1.299
75     *hardened-sources-2.6.28-r5 (20 Mar 2009)
76    
77     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
78     +hardened-sources-2.6.28-r5.ebuild:
79     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
80 gengor 1.298
81     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
82     hardened-sources-2.6.28-r4.ebuild:
83     Stable amd64/x86.
84 gengor 1.297
85     *hardened-sources-2.6.28-r4 (18 Mar 2009)
86    
87     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
88     +hardened-sources-2.6.28-r4.ebuild:
89     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
90     compilation with CPA_DEBUG and more.
91 gengor 1.296
92     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
93     hardened-sources-2.6.28-r3.ebuild:
94     Quick stable amd64/x86.
95 gengor 1.295
96     *hardened-sources-2.6.28-r3 (15 Mar 2009)
97    
98     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
99     +hardened-sources-2.6.28-r3.ebuild:
100     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
101 nixnut 1.294
102     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
103     ppc stable
104 gengor 1.293
105     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
106     hardened-sources-2.6.28-r2.ebuild:
107     Stable amd64/x86.
108 gengor 1.292
109     *hardened-sources-2.6.28-r2 (11 Mar 2009)
110    
111     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
112     +hardened-sources-2.6.28-r2.ebuild:
113     Version bump bringing in latest grsecurity patch.
114 gengor 1.291
115     *hardened-sources-2.6.28-r1 (09 Mar 2009)
116    
117     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
118     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
119     Version bump and remove old.
120 nixnut 1.290
121     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
122     ppc stable
123 gengor 1.289
124     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
125     hardened-sources-2.6.27-r8.ebuild:
126     Remove amd64 testing keyword, bug 256226.
127 gengor 1.288
128     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
129     hardened-sources-2.6.27-r8.ebuild:
130     Revert amd64 stable, bug #256226.
131 gengor 1.287
132     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
133     hardened-sources-2.6.27-r8.ebuild:
134     Stable on amd64/x86.
135 gengor 1.286
136     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
137     -hardened-sources-2.6.27-r6.ebuild:
138     Remove old 2.6.27 release.
139 gengor 1.285
140     *hardened-sources-2.6.27-r8 (24 Feb 2009)
141    
142     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
143     +hardened-sources-2.6.27-r8.ebuild:
144     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
145     and probably more.
146 nixnut 1.284
147     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
148     ppc stable
149 gengor 1.283
150     *hardened-sources-2.6.28 (25 Jan 2009)
151    
152     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
153     +hardened-sources-2.6.28.ebuild:
154     Initial 2.6.28 release.
155 gengor 1.282
156     *hardened-sources-2.6.27-r7 (25 Jan 2009)
157    
158     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
159     +hardened-sources-2.6.27-r7.ebuild:
160     Bump to Linux 2.6.27.13.
161 gengor 1.281
162     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
163     hardened-sources-2.6.26-r9.ebuild:
164     Stable amd64/x86.
165 gengor 1.280
166     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
167     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
168     -hardened-sources-2.6.27-r5.ebuild:
169     Remove problem versions.
170 gengor 1.279
171     *hardened-sources-2.6.27-r6 (24 Jan 2009)
172    
173     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
174     +hardened-sources-2.6.27-r6.ebuild:
175     Revert PaX test29 to test30 changes. Fixes bug 256226.
176 gengor 1.277
177     *hardened-sources-2.6.27-r5 (24 Jan 2009)
178    
179     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
180     +hardened-sources-2.6.27-r5.ebuild:
181 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
182 gengor 1.277 254843.
183 gengor 1.276
184     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
185     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
186     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
187     Remove problem versions.
188 nixnut 1.275
189     23 Jan 2009; nixnut <nixnut@gentoo.org>
190     hardened-sources-2.6.25-r13.ebuild:
191     ppc stable
192 gengor 1.274
193     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
194     hardened-sources-2.6.25-r13.ebuild:
195     Fasttrack stable amd64/x86.
196 gengor 1.273
197     *hardened-sources-2.6.26-r9 (21 Jan 2009)
198    
199     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
200     +hardened-sources-2.6.26-r9.ebuild:
201 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
202 gengor 1.272
203     *hardened-sources-2.6.25-r13 (20 Jan 2009)
204    
205     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
206     +hardened-sources-2.6.25-r13.ebuild:
207 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
208 nixnut 1.271
209     20 Jan 2009; nixnut <nixnut@gentoo.org>
210     hardened-sources-2.6.25-r12.ebuild:
211     ppc stable
212 gengor 1.270
213     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
214     hardened-sources-2.6.25-r12.ebuild:
215     Stable amd64/x86.
216 gengor 1.269
217     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
218     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
219     -hardened-sources-2.6.27-r2.ebuild:
220     Clean out old versions.
221 gengor 1.268
222     *hardened-sources-2.6.27-r4 (14 Jan 2009)
223     *hardened-sources-2.6.26-r8 (14 Jan 2009)
224     *hardened-sources-2.6.25-r12 (14 Jan 2009)
225    
226     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
227     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
228     +hardened-sources-2.6.27-r4.ebuild:
229     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
230     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
231     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
232     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
233 nixnut 1.267
234     15 Dec 2008; nixnut <nixnut@gentoo.org>
235     hardened-sources-2.6.25-r11.ebuild:
236     Stable on ppc
237 gengor 1.266
238     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
239     hardened-sources-2.6.25-r11.ebuild:
240     Stable amd64/x86.
241 gengor 1.265
242     *hardened-sources-2.6.27-r3 (07 Dec 2008)
243    
244     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
245     +hardened-sources-2.6.27-r3.ebuild:
246     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
247     Fixes bug #248754, #249729 and #246607.
248 gengor 1.264
249     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
250     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
251     Remove old versions.
252 gengor 1.262
253     *hardened-sources-2.6.26-r7 (03 Dec 2008)
254     *hardened-sources-2.6.25-r11 (03 Dec 2008)
255    
256 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
257     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
258 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
259     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
260     Both include many backports from 2.6.27.{6,7} -stable releases.
261 gengor 1.261
262     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
263     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
264     Remove versions broken on ARCHes != x86/amd64.
265 gengor 1.260
266     *hardened-sources-2.6.27-r2 (24 Nov 2008)
267    
268     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
269     +hardened-sources-2.6.27-r2.ebuild:
270     Bump to Linux 2.6.27.7 and latest grsecurity patch.
271 gengor 1.259
272     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
273     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
274     Remove old versions.
275 gengor 1.258
276     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
277     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
278     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
279 nixnut 1.257
280     16 Nov 2008; nixnut <nixnut@gentoo.org>
281     hardened-sources-2.6.25-r10.ebuild:
282     Stable on ppc
283 gengor 1.256
284     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
285     hardened-sources-2.6.25-r10.ebuild:
286     Stable amd64/x86.
287 gengor 1.255
288     *hardened-sources-2.6.26-r6 (12 Nov 2008)
289    
290     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
291     +hardened-sources-2.6.26-r6.ebuild:
292     Bump to Linux 2.6.26.8 and fix security bug #245650.
293 gengor 1.254
294     *hardened-sources-2.6.25-r10 (12 Nov 2008)
295    
296     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
297     +hardened-sources-2.6.25-r10.ebuild:
298     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
299 gengor 1.253
300     *hardened-sources-2.6.27-r1 (09 Nov 2008)
301    
302     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
303     +hardened-sources-2.6.27-r1.ebuild:
304     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
305 gengor 1.252
306     *hardened-sources-2.6.27 (04 Nov 2008)
307    
308     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
309     +hardened-sources-2.6.27.ebuild:
310     Initial 2.6.27 release.
311 gengor 1.251
312     *hardened-sources-2.6.26-r5 (03 Nov 2008)
313    
314     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
315     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
316     +hardened-sources-2.6.26-r5.ebuild:
317     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
318     Clean out some old versions.
319 nixnut 1.250
320     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
321     Stable on ppc
322 gengor 1.249
323     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
324     hardened-sources-2.6.25-r9.ebuild:
325     Stable on amd64/x86.
326 gengor 1.248
327     *hardened-sources-2.6.25-r9 (26 Oct 2008)
328    
329     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
330     +hardened-sources-2.6.25-r9.ebuild:
331     Update to Linux 2.6.25.19
332 nixnut 1.247
333     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
334     Stable on ppc
335 gengor 1.246
336     *hardened-sources-2.6.26-r4 (14 Oct 2008)
337    
338     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
339     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
340     Update to latest grsecurity patch, fixing building of non-modular kernels.
341 gengor 1.245
342     *hardened-sources-2.6.26-r3 (12 Oct 2008)
343    
344     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
345     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
346     +hardened-sources-2.6.26-r3.ebuild:
347     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
348     2.6.26-r1: Removed.
349     2.6.25-r8: Stable amd64/x86.
350 gengor 1.244
351     *hardened-sources-2.6.25-r8 (09 Oct 2008)
352    
353     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
354     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
355     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
356     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
357 nixnut 1.243
358     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
359     Stable on ppc
360 gengor 1.242
361     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
362     hardened-sources-2.6.25-r7.ebuild:
363     Stable amd64/x86.
364 gengor 1.241
365     *hardened-sources-2.6.26-r2 (13 Sep 2008)
366    
367     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
368     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
369     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
370     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
371 gengor 1.240
372     *hardened-sources-2.6.25-r7 (13 Sep 2008)
373    
374     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
375     +hardened-sources-2.6.25-r7.ebuild:
376     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
377 gengor 1.239
378     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
379     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
380     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
381     hardened-sources-2.6.26-r1.ebuild:
382     Update DESCRIPTION and HGPV_URI.
383 gengor 1.238
384     *hardened-sources-2.6.25-r6 (09 Sep 2008)
385    
386     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
387     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
388     2.6.25-r6: Update to Linux 2.6.25.17.
389     2.6.24-r3: Removed.
390 gengor 1.237
391     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
392     hardened-sources-2.6.25-r5.ebuild:
393     Stable on amd64/x86
394 gengor 1.236
395     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
396     Update my email address.
397 nixnut 1.235
398     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
399     stable on ppc
400 battousai 1.234
401     *hardened-sources-2.6.26-r1 (23 Aug 2008)
402     *hardened-sources-2.6.25-r5 (23 Aug 2008)
403    
404     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
405     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
406     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
407     +hardened-sources-2.6.26-r1.ebuild:
408     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
409     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
410     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
411     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
412     (gengor).
413 solar 1.233
414     *hardened-sources-2.6.26 (18 Aug 2008)
415     *hardened-sources-2.6.25-r4 (18 Aug 2008)
416    
417     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
418     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
419     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
420     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
421     2.6.25-r2: Removed.
422 tove 1.232
423     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
424     Remove phreak from metadata.xml (#96398)
425 solar 1.231
426     *hardened-sources-2.6.25-r3 (31 Jul 2008)
427    
428     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
429     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
430     +hardened-sources-2.6.25-r3.ebuild:
431     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
432     fixes, including security bug #231750.
433 nixnut 1.230
434     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
435     Stable on ppc
436 solar 1.229
437     *hardened-sources-2.6.25-r2 (05 Jul 2008)
438    
439     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
440     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
441     +hardened-sources-2.6.25-r2.ebuild:
442     2.6.23-r4: Stable x86/amd64
443     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
444     2.6.23-r{11,12}: Removed due to multiple vulns.
445     (gengor & kerframil)
446 nixnut 1.228
447     04 Jul 2008; nixnut <nixnut@gentoo.org>
448     hardened-sources-2.6.23-r13.ebuild:
449     Stable on ppc
450 solar 1.227
451     *hardened-sources-2.6.25-r1 (30 Jun 2008)
452    
453     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
454     +hardened-sources-2.6.25-r1.ebuild:
455     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
456     grsecurity release. 2.6.23-r13: x86/amd64 stable
457 solar 1.226
458     *hardened-sources-2.6.25 (17 Jun 2008)
459     *hardened-sources-2.6.24-r3 (17 Jun 2008)
460     *hardened-sources-2.6.23-r13 (17 Jun 2008)
461    
462     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
463     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
464     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
465     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
466     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
467     2.6.25: Initial 2.6.25 release.
468 solar 1.225
469     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
470     - fasttrack to stable x86/amd64
471 swegener 1.224
472     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
473     Fix broken digest for linux-2.6.24.tar.bz2.
474 solar 1.223
475     *hardened-sources-2.6.24-r2 (11 May 2008)
476     *hardened-sources-2.6.23-r12 (11 May 2008)
477    
478     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
479     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
480     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
481     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
482     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
483     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
484     security bugs 219901, 220691, 220975, 220979, 221123. New
485     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
486     should be removed as far as I'm concerned, everything else remove due to
487     vulnerable to numerous security bugs or brokeness.
488 nixnut 1.222
489     10 May 2008; nixnut <nixnut@gentoo.org>
490     hardened-sources-2.6.23-r11.ebuild:
491     Stable on ppc
492 solar 1.221
493     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
494     - -r11 stable on x86/amd64
495 solar 1.220
496     *hardened-sources-2.6.23-r11 (01 May 2008)
497    
498     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
499     - version bump to fix ulgy linux bugs
500 phreak 1.219
501     *hardened-sources-2.6.24-r1 (30 Apr 2008)
502    
503     30 Apr 2008; Christian Heim <phreak@gentoo.org>
504     +hardened-sources-2.6.24-r1.ebuild:
505     Revision bump (thanks to Kerin and Gordon, again), pulling
506     genpatches-2.6.24-7, solving #219089. Additionally contains further security
507     fixes plus some minor updates.
508 phreak 1.218
509     *hardened-sources-2.6.23-r10 (30 Apr 2008)
510    
511     30 Apr 2008; Christian Heim <phreak@gentoo.org>
512     +hardened-sources-2.6.23-r10.ebuild:
513     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
514     Additional contains "various other fixes".
515 phreak 1.217
516     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
517     Update the longdescription in metadata, thanks to Gordon Malm.
518 nixnut 1.216
519     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
520     Stable on ppc wrt bug #213255
521 solar 1.215
522     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
523     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
524     - stable on x86/amd64 per request. Removed obsolete ebuilds
525 phreak 1.214
526     *hardened-sources-2.6.24 (07 Apr 2008)
527    
528     07 Apr 2008; Christian Heim <phreak@gentoo.org>
529     +hardened-sources-2.6.24.ebuild:
530     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
531     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
532     for the many contributions and their continued effort in #216612) based on
533     2.6.24 and genpatches-2.6.24-5.
534    
535     The current ebuild/patchset contains these things:
536     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
537     * Introduces bespoke server and workstation oriented security levels
538     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
539 phreak 1.213
540     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
541     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
542     maintaining it).
543 phreak 1.212
544     24 Mar 2008; Christian Heim <phreak@gentoo.org>
545     hardened-sources-2.4.35-r2.ebuild:
546     Fixing SRC_URI for 2.4.35-r2.
547 phreak 1.211
548     *hardened-sources-2.6.23-r9 (22 Mar 2008)
549    
550     22 Mar 2008; Christian Heim <phreak@gentoo.org>
551     +hardened-sources-2.6.23-r9.ebuild:
552     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
553     * Change the default GIDs for some grsecurity options
554     * Revamp the Hardened [Gentoo] security level and make it the default level
555     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
556     * Fix a recursive lock -- call to capable() within ptrace_attach()
557     * Fix bug that allows audit and iscsi operations to be controlled via netlink
558 solar 1.210
559     *hardened-sources-2.6.23-r8 (27 Feb 2008)
560    
561     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
562     - version bump from Kerin Millar bug 210026
563 solar 1.209
564     17 Feb 2008; <solar@gentoo.org> metadata.xml,
565     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
566     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
567     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
568     - stable on x86 and remove old ebuilds
569 solar 1.207
570     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
571 solar 1.208 - stable on amd64 per request of amd64 lead
572 solar 1.206
573     *hardened-sources-2.6.23-r7 (11 Feb 2008)
574    
575     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
576     - version bump from kerin.millar
577     Changes:
578    
579     * Bump to genpatches-base-2.6.23-9
580     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
581     * Disables COMPAT_VDSO in x86/defconfig
582     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
583 phreak 1.205
584     25 Jan 2008; Christian Heim <phreak@gentoo.org>
585     -hardened-sources-2.6.22-r8.ebuild:
586     Cleaning up old versions.
587 phreak 1.204
588     *hardened-sources-2.6.23-r6 (25 Jan 2008)
589    
590     25 Jan 2008; Christian Heim <phreak@gentoo.org>
591     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
592     Revision bump, pulling in the latest genpatches.
593 phreak 1.203
594     *hardened-sources-2.6.23-r5 (24 Dec 2007)
595    
596     24 Dec 2007; Christian Heim <phreak@gentoo.org>
597     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
598     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
599     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
600     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
601 phreak 1.202
602     24 Dec 2007; Christian Heim <phreak@gentoo.org>
603     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
604     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
605     -hardened-sources-2.6.23-r3.ebuild:
606     Cleaning out some unused, old versions.
607 phreak 1.201
608     24 Dec 2007; Christian Heim <phreak@gentoo.org>
609     hardened-sources-2.6.23-r4.ebuild:
610     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
611     in the tree for long, but there isn't much of a difference between this and
612     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
613 phreak 1.200
614     *hardened-sources-2.6.23-r4 (23 Dec 2007)
615    
616     23 Dec 2007; Christian Heim <phreak@gentoo.org>
617     +hardened-sources-2.6.23-r4.ebuild:
618     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
619 phreak 1.199
620     *hardened-sources-2.6.23-r3 (04 Dec 2007)
621    
622     04 Dec 2007; Christian Heim <phreak@gentoo.org>
623     +hardened-sources-2.6.23-r3.ebuild:
624     Revision bump, pulling in 2.6.23.9.
625 phreak 1.198
626     *hardened-sources-2.6.23-r2 (25 Nov 2007)
627    
628     25 Nov 2007; Christian Heim <phreak@gentoo.org>
629     +hardened-sources-2.6.23-r2.ebuild:
630     Updated patchset, thanks to solar.
631 phreak 1.197
632     *hardened-sources-2.6.23-r1 (31 Oct 2007)
633    
634     31 Oct 2007; Christian Heim <phreak@gentoo.org>
635     +hardened-sources-2.6.23-r1.ebuild:
636     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
637 solar 1.196
638     29 Oct 2007; <solar@gentoo.org> metadata.xml:
639     - update metadata.xml
640 phreak 1.195
641     25 Oct 2007; Christian Heim <phreak@gentoo.org>
642     hardened-sources-2.6.22-r8.ebuild:
643     Marking 2.6.22-r8 stable on amd64 and x86.
644 phreak 1.194
645     21 Oct 2007; Christian Heim <phreak@gentoo.org>
646     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
647     -hardened-sources-2.6.21-r4.ebuild:
648     Removing old ebuilds.
649 phreak 1.193
650     *hardened-sources-2.4.35-r2 (21 Oct 2007)
651    
652     21 Oct 2007; Christian Heim <phreak@gentoo.org>
653     +hardened-sources-2.4.35-r2.ebuild:
654     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
655     patches.
656 phreak 1.192
657     *hardened-sources-2.6.22-r8 (21 Oct 2007)
658    
659     21 Oct 2007; Christian Heim <phreak@gentoo.org>
660     +hardened-sources-2.6.22-r8.ebuild:
661     Yet another new patch, hopefully fixing the remaining issues we had w/
662     2.6.22. Candidate for stabling.
663 phreak 1.191
664     *hardened-sources-2.6.23 (13 Oct 2007)
665    
666     13 Oct 2007; Christian Heim <phreak@gentoo.org>
667     +hardened-sources-2.6.23.ebuild:
668     Initial hardened-sources-2.6.23. If people still have problems w/ bug
669     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
670 phreak 1.190
671     11 Oct 2007; Christian Heim <phreak@gentoo.org>
672     hardened-sources-2.6.20-r10.ebuild:
673     Pulling in yet another new genpatches version, fixing the PWC bug for real.
674 phreak 1.189
675     04 Oct 2007; Christian Heim <phreak@gentoo.org>
676     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
677     Removing old versions.
678 phreak 1.188
679     *hardened-sources-2.6.22-r7 (01 Oct 2007)
680    
681     01 Oct 2007; Christian Heim <phreak@gentoo.org>
682     +hardened-sources-2.6.22-r7.ebuild:
683     Revision bump, pulling in a newer patch. Should fix #194276.
684 phreak 1.187
685     30 Sep 2007; Christian Heim <phreak@gentoo.org>
686     hardened-sources-2.6.20-r10.ebuild:
687     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
688     Mike Doty).
689 phreak 1.186
690     *hardened-sources-2.6.22-r6 (26 Sep 2007)
691    
692     26 Sep 2007; Christian Heim <phreak@gentoo.org>
693     +hardened-sources-2.6.22-r6.ebuild:
694     Revision bump, grabbing up till Linux 2.6.22.9.
695 phreak 1.185
696     24 Sep 2007; Christian Heim <phreak@gentoo.org>
697     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
698     Cleaning up further.
699 phreak 1.184
700     *hardened-sources-2.6.20-r10 (24 Sep 2007)
701    
702     24 Sep 2007; Christian Heim <phreak@gentoo.org>
703     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
704     +hardened-sources-2.6.20-r10.ebuild:
705     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
706     revisions.
707 phreak 1.183
708     *hardened-sources-2.6.22-r5 (22 Sep 2007)
709    
710     22 Sep 2007; Christian Heim <phreak@gentoo.org>
711     +hardened-sources-2.6.22-r5.ebuild:
712     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
713 phreak 1.182
714     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
715     Removing johnm from metadata.xml (see #186467 for reference).
716 phreak 1.181
717     *hardened-sources-2.6.22-r4 (17 Sep 2007)
718    
719     17 Sep 2007; Christian Heim <phreak@gentoo.org>
720     +hardened-sources-2.6.22-r4.ebuild:
721     Revision bump, hopefully fixing all those weird PAX failures.
722 phreak 1.180
723     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
724     Updating the metadata.xml.
725 phreak 1.179
726     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
727     Removing tocharian from metadata due to his retirement (see #71718 for
728     reference).
729 phreak 1.178
730     *hardened-sources-2.6.20-r9 (30 Aug 2007)
731    
732     30 Aug 2007; Christian Heim <phreak@gentoo.org>
733     +hardened-sources-2.6.20-r9.ebuild:
734     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
735 phreak 1.177
736     29 Aug 2007; Christian Heim <phreak@gentoo.org>
737     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
738     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
739     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
740     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
741     -hardened-sources-2.6.22-r2.ebuild:
742     Removing some redundant versions.
743 phreak 1.176
744     *hardened-sources-2.4.35-r1 (29 Aug 2007)
745    
746     29 Aug 2007; Christian Heim <phreak@gentoo.org>
747     +hardened-sources-2.4.35-r1.ebuild:
748     Revision bump, new grsecurity patch.
749 phreak 1.175
750     *hardened-sources-2.6.20-r8 (26 Aug 2007)
751    
752     26 Aug 2007; Christian Heim <phreak@gentoo.org>
753     +hardened-sources-2.6.20-r8.ebuild:
754     Revision bump for Linux 2.6.20.17.
755 phreak 1.174
756     *hardened-sources-2.6.22-r3 (22 Aug 2007)
757    
758     22 Aug 2007; Christian Heim <phreak@gentoo.org>
759     +hardened-sources-2.6.22-r3.ebuild:
760     Revision bump for Linux 2.6.22.4.
761 phreak 1.173
762     16 Aug 2007; Christian Heim <phreak@gentoo.org>
763     hardened-sources-2.6.22-r2.ebuild:
764     Updated patchset, to fix the alignment against 2.6.22.3.
765 phreak 1.172
766     *hardened-sources-2.6.22-r2 (16 Aug 2007)
767    
768     16 Aug 2007; Christian Heim <phreak@gentoo.org>
769     +hardened-sources-2.6.22-r2.ebuild:
770     Revision bump for Linux 2.6.22.3.
771 phreak 1.171
772     *hardened-sources-2.4.35 (16 Aug 2007)
773    
774     16 Aug 2007; Christian Heim <phreak@gentoo.org>
775     +hardened-sources-2.4.35.ebuild:
776     Version bump, initial version for Linux 2.4.35.
777 phreak 1.170
778     *hardened-sources-2.6.21-r4 (16 Aug 2007)
779    
780     16 Aug 2007; Christian Heim <phreak@gentoo.org>
781     +hardened-sources-2.6.21-r4.ebuild:
782     Revision bump for Linux 2.6.21.6.
783 phreak 1.169
784     *hardened-sources-2.6.20-r7 (16 Aug 2007)
785    
786     16 Aug 2007; Christian Heim <phreak@gentoo.org>
787     +hardened-sources-2.6.20-r7.ebuild:
788     Revision bump for Linux 2.6.20.16.
789 phreak 1.168
790     *hardened-sources-2.6.22-r1 (13 Aug 2007)
791    
792     13 Aug 2007; Christian Heim <phreak@gentoo.org>
793     +hardened-sources-2.6.22-r1.ebuild:
794     Yet another revision bump.
795 phreak 1.167
796     *hardened-sources-2.6.22 (10 Aug 2007)
797    
798     10 Aug 2007; Christian Heim <phreak@gentoo.org>
799     +hardened-sources-2.6.22.ebuild:
800     Initial release for 2.6.22. If you are using hardened-sources on a desktop
801     machine (P4 or newer), be aware you might need to disable
802     CONFIG_PAX_PAGEEXEC.
803 phreak 1.166
804     04 Aug 2007; Christian Heim <phreak@gentoo.org>
805     hardened-sources-2.6.20-r6.ebuild:
806     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
807     2.6.20.15.
808 phreak 1.165
809     10 Jul 2007; Christian Heim <phreak@gentoo.org>
810     hardened-sources-2.6.20-r5.ebuild:
811     Marking hardened-sources-2.6.20-r5 stable on ppc.
812 phreak 1.164
813     10 Jul 2007; Christian Heim <phreak@gentoo.org>
814     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
815     Cleanup.
816 phreak 1.163
817     *hardened-sources-2.6.20-r6 (08 Jul 2007)
818    
819     08 Jul 2007; Christian Heim <phreak@gentoo.org>
820     +hardened-sources-2.6.20-r6.ebuild:
821     Revision bump, grabbing yet another stable release.
822 phreak 1.162
823     17 Jun 2007; Christian Heim <phreak@gentoo.org>
824     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
825     -hardened-sources-2.6.21-r2.ebuild:
826     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
827     alpha stable KEYWORD by mistake.
828 phreak 1.161
829     17 Jun 2007; Christian Heim <phreak@gentoo.org>
830     hardened-sources-2.6.20-r5.ebuild:
831     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
832     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
833 phreak 1.160
834     *hardened-sources-2.6.21-r3 (12 Jun 2007)
835    
836     12 Jun 2007; Christian Heim <phreak@gentoo.org>
837     +hardened-sources-2.6.21-r3.ebuild:
838     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
839     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
840     love.
841 phreak 1.159
842     *hardened-sources-2.6.20-r5 (11 Jun 2007)
843    
844     11 Jun 2007; Christian Heim <phreak@gentoo.org>
845     +hardened-sources-2.6.20-r5.ebuild:
846     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
847     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
848     love.
849 pappy 1.158
850     *hardened-sources-2.4.34.5 (11 Jun 2007)
851    
852     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
853     +hardened-sources-2.4.34.5.ebuild:
854     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
855 phreak 1.157
856     30 May 2007; Christian Heim <phreak@gentoo.org>
857     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
858     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
859     stale ebuild(s).
860 phreak 1.156
861     30 May 2007; Christian Heim <phreak@gentoo.org>
862     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
863     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
864     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
865     Doing some cleanups, remove stale ebuilds.
866 phreak 1.155
867     26 May 2007; Christian Heim <phreak@gentoo.org>
868     hardened-sources-2.6.21-r2.ebuild:
869     Fixing the grsecurity patch, had one '};' too much.
870 phreak 1.154
871     *hardened-sources-2.6.21-r2 (26 May 2007)
872    
873     26 May 2007; Christian Heim <phreak@gentoo.org>
874     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
875     +hardened-sources-2.6.21-r2.ebuild:
876     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
877     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
878 phreak 1.153
879     *hardened-sources-2.6.20-r4 (26 May 2007)
880    
881     26 May 2007; Christian Heim <phreak@gentoo.org>
882     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
883     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
884 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
885 phreak 1.152
886     15 May 2007; Christian Heim <phreak@gentoo.org>
887     hardened-sources-2.6.20-r3.ebuild:
888     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
889     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
890     grsecurity patch fail in that exact same hunk.
891 phreak 1.151
892     *hardened-sources-2.6.20-r3 (15 May 2007)
893    
894     15 May 2007; Christian Heim <phreak@gentoo.org>
895     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
896     Revision bump, incorporating Linux 2.6.20.11.
897    
898     *hardened-sources-2.6.21-r1 (11 May 2007)
899    
900     11 May 2007; Christian Heim <phreak@gentoo.org>
901     +hardened-sources-2.6.21-r1.ebuild:
902     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
903     mentioned in #177234.
904 kevquinn 1.150
905     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
906     files/digest-hardened-sources-2.6.21, Manifest:
907     Fix Manifest/digest for linux-2.6.21.tar.bz2
908 phreak 1.149
909     06 May 2007; Christian Heim <phreak@gentoo.org>
910     hardened-sources-2.6.21.ebuild:
911     Bumping the hardened-patches version, needed for the fix for #177234.
912 phreak 1.148
913     *hardened-sources-2.6.21 (02 May 2007)
914    
915     02 May 2007; Christian Heim <phreak@gentoo.org>
916     +hardened-sources-2.6.21.ebuild:
917     Version bump, Linux 2.6.21-hardened.
918 phreak 1.147
919     29 Apr 2007; Christian Heim <phreak@gentoo.org>
920     hardened-sources-2.6.20-r2.ebuild:
921     Adding ~ia64 on Ned's request.
922 phreak 1.146
923     29 Apr 2007; Christian Heim <phreak@gentoo.org>
924     hardened-sources-2.6.20-r2.ebuild:
925     Fixing the included grsecurity patch, wasn't alligning due to the Index:
926     header line(s).
927 phreak 1.145
928     29 Apr 2007; Christian Heim <phreak@gentoo.org>
929     hardened-sources-2.6.20-r2.ebuild:
930     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
931 armin76 1.144
932     *hardened-sources-2.6.20-r2 (10 Apr 2007)
933    
934     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
935     +hardened-sources-2.6.20-r2.ebuild:
936     Version bump, on behalf of phreak
937 phreak 1.143
938     *hardened-sources-2.6.20-r1 (04 Apr 2007)
939    
940     04 Apr 2007; Christian Heim <phreak@gentoo.org>
941     +hardened-sources-2.6.20-r1.ebuild:
942     Revision bump, grabbing a newer grsecurity snapshot.
943 phreak 1.142
944     *hardened-sources-2.6.20 (25 Mar 2007)
945    
946     25 Mar 2007; Christian Heim <phreak@gentoo.org>
947     +hardened-sources-2.6.20.ebuild:
948     Finally a hardened-sources version for 2.6.20; many people have been waiting
949     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
950     testbox.
951 chainsaw 1.141
952     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
953     hardened-sources-2.6.18-r6.ebuild:
954     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
955 phreak 1.140
956     *hardened-sources-2.6.18-r6 (16 Mar 2007)
957    
958     16 Mar 2007; Christian Heim <phreak@gentoo.org>
959     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
960     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
961     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
962     supposed to be.
963 phreak 1.139
964     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
965     Fixing the Manifest, the previous one was broken (as in still had the
966     deleted ebuild in it).
967 phreak 1.138
968     06 Mar 2007; Christian Heim <phreak@gentoo.org>
969     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
970     +hardened-sources-2.6.18-r5.ebuild:
971     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
972     Linux 2.6.18.8. Also cleaning up the older version.
973    
974     *hardened-sources-2.6.18-r5 (06 Mar 2007)
975    
976     06 Mar 2007; Christian Heim <phreak@gentoo.org>
977     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
978     +hardened-sources-2.6.18-r5.ebuild:
979     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
980     Linux 2.6.18.8. Also cleaning up the older version.
981 phreak 1.137
982     24 Feb 2007; Christian Heim <phreak@gentoo.org>
983     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
984     -hardened-sources-2.6.19-r5.ebuild:
985     Removing some of the old version, that didn't work.
986 phreak 1.136
987     *hardened-sources-2.6.19-r6 (12 Feb 2007)
988    
989     12 Feb 2007; Christian Heim <phreak@gentoo.org>
990     +hardened-sources-2.6.19-r6.ebuild:
991     Revision bump, including a new grsec version fixing #166235.
992 pappy 1.134
993     *hardened-sources-2.4.34 (24 Jan 2007)
994    
995     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
996 pappy 1.135 Manifest:
997     updating Manifest with checksums of new tarball and ebuild
998    
999     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1000 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1001     I added new hardened sources 2.4 update, this is a critical path
1002     security bugfix - all users of h-s are strongly advised
1003     to update their existing hardened sources to this version.
1004     It contains a fix for a kernel vulnerability that is pertaining
1005     to the PaX changes to virtual memory management, possibly leading
1006     to a local kernel exploit ... see grsecurity.net forums and homepage
1007 phreak 1.133
1008     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1009     files/digest-hardened-sources-2.6.19-r5, Manifest:
1010     Fixing the patch-tarball digest.
1011 phreak 1.132
1012     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1013    
1014     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1015     +hardened-sources-2.6.19-r5.ebuild:
1016     Revision bump, closing the recently discovered PaX expand_stack()
1017     vulnerability.
1018 phreak 1.131
1019     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1020    
1021     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1022     +hardened-sources-2.6.19-r4.ebuild:
1023     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1024     dropping the randomized PID feature.
1025 opfer 1.130
1026     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1027     hardened-sources-2.4.33.4.ebuild:
1028     stable x86, bug #161171
1029 phreak 1.129
1030     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1031    
1032     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1033     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1034     Revision bump for bug #157186 and #158786.
1035 phreak 1.128
1036     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1037    
1038     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1039     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1040     Revision bump for bug #157186.
1041 phreak 1.127
1042     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1043    
1044     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1045     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1046     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1047 phreak 1.126
1048     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1049     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1050     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1051     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1052     hardened-sources-2.6.19-r1.ebuild:
1053     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1054     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1055 pappy 1.125
1056     *hardened-sources-2.4.33.4 (17 Dec 2006)
1057    
1058     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1059     +hardened-sources-2.4.33.4.ebuild:
1060     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1061     and quilting
1062 phreak 1.124
1063     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1064    
1065     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1066     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1067     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1068     for reporting).
1069 phreak 1.123
1070     *hardened-sources-2.6.19 (13 Dec 2006)
1071    
1072     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1073     +hardened-sources-2.6.19.ebuild:
1074     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1075     Brad for providing that prompt update.
1076 phreak 1.122
1077     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1078    
1079     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1080     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1081     +hardened-sources-2.6.18-r3.ebuild:
1082     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1083     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1084 phreak 1.121
1085     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1086     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1087 nixnut 1.120
1088     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1089     Stable on ppc wrt bug 157356
1090 opfer 1.119
1091     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1092     hardened-sources-2.6.18.ebuild:
1093     stable x86, bug #157356
1094 phreak 1.118
1095     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1096    
1097     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1098     +hardened-sources-2.6.18-r2.ebuild:
1099     Revision bump, including 2.6.18.5 (via genpatches) and
1100     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1101     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1102     redesign.
1103 phreak 1.117
1104     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1105     hardened-sources-2.6.18.ebuild:
1106     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1107     of Mike Doty).
1108 phreak 1.116
1109     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1110    
1111     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1112     +hardened-sources-2.6.18-r1.ebuild:
1113     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1114 phreak 1.115
1115     *hardened-sources-2.6.18 (11 Nov 2006)
1116    
1117     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1118     +hardened-sources-2.6.18.ebuild:
1119     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1120 solar 1.114
1121     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1122     - mark amd64 stable also. bug #151877
1123 solar 1.113
1124     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1125     - mark 2.6.17-r1 stable
1126 phreak 1.112
1127     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1128     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1129     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1130 phreak 1.111
1131     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1132    
1133     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1134     +hardened-sources-2.6.17-r1.ebuild:
1135     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1136     grsecurity patch.
1137 phreak 1.110
1138     *hardened-sources-2.6.17 (17 Aug 2006)
1139    
1140     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1141     +hardened-sources-2.6.17.ebuild:
1142     Bumping the hardened-sources-2.6 series to 2.6.17, using
1143     genpatches-2.6.17-6.base.
1144 solar 1.109
1145     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1146     - stable on x86 and amd64
1147 solar 1.108
1148     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1149    
1150     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1151     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1152     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1153     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1154     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1155     crusty ebuilds
1156 johnm 1.107
1157     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1158     hardened-sources-2.6.16-r10.ebuild:
1159     marking stable on x86 and amd64
1160 solar 1.106
1161     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1162     - 2.4.32-r6 stable on x86. RSBAC state unknown
1163 kang 1.105
1164     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1165    
1166     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1167     +hardened-sources-2.4.32-r7.ebuild:
1168     Bump PaX for RSBAC to test-17
1169 johnm 1.104
1170     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1171    
1172     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1173     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1174     hardened-sources-2.6.16 bump to latest -base.
1175 solar 1.103
1176     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1177    
1178     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1179     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1180     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1181     sysctl controlable resource logging
1182 johnm 1.102
1183     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1184    
1185     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1186     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1187     push new 2.6.16 release in preparation for stable
1188 solar 1.101
1189     22 May 2006; <solar@gentoo.org> :
1190     - redigest bug 134002
1191 kang 1.100
1192     *hardened-sources-2.4.32-r5 (16 May 2006)
1193    
1194     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1195     +hardened-sources-2.4.32-r5.ebuild:
1196     Fixes rsbac common patching (new patch in new -r5 patchset)
1197 solar 1.99
1198     *hardened-sources-2.4.32-r4 (13 May 2006)
1199    
1200     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1201     +hardened-sources-2.4.32-r4.ebuild:
1202     - security bumps
1203 johnm 1.98
1204     *hardened-sources-2.6.16-r6 (03 May 2006)
1205    
1206     03 May 2006; John Mylchreest <johnm@gentoo.org>
1207     +hardened-sources-2.6.16-r6.ebuild:
1208     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1209 johnm 1.97
1210     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1211     hardened-sources-2.6.14-r8.ebuild:
1212     fix x86_64 build problem, this will delay the digest issue again for a short
1213     while but it will sort itself out
1214 johnm 1.96
1215     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1216     hardened-sources-2.6.14-r8.ebuild:
1217     bump hardened patchset
1218 antarus 1.94
1219     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1220     files/digest-hardened-sources-2.4.32-r2,
1221     files/digest-hardened-sources-2.4.32-r3,
1222     files/digest-hardened-sources-2.6.14-r8, Manifest:
1223     Fixing duff SHA256 digests: Bug # 131293
1224 johnm 1.93
1225 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1226    
1227     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1228     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1229     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1230     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1231     cleanup of old uneccessary sources
1232    
1233 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1234     fix digest
1235 johnm 1.92
1236     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1237    
1238     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1239     +hardened-sources-2.6.14-r8.ebuild:
1240     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1241 johnm 1.91
1242     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1243     Turning on gpg-signing again, and recomitting
1244 johnm 1.90
1245     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1246    
1247     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1248     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1249     +hardened-sources-2.6.16-r4.ebuild:
1250     Fix numerous security vulns
1251 solar 1.89
1252     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1253    
1254     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1255     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1256     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1257     - security bump for bug #112791. Removed old ebuilds
1258 johnm 1.88
1259     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1260    
1261     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1262     +hardened-sources-2.6.16-r3.ebuild:
1263     Removing silly localversion which I missed
1264 johnm 1.87
1265     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1266    
1267     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1268     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1269     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1270 johnm 1.86
1271     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1272    
1273     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1274     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1275     +hardened-sources-2.6.16-r2.ebuild:
1276     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1277     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1278 johnm 1.85
1279     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1280    
1281     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1282     +hardened-sources-2.6.16-r1.ebuild:
1283     Bumping to include ppc build fix and 2.6.16.3
1284 tsunam 1.84
1285     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1286     hardened-sources-2.6.14-r6.ebuild:
1287     Stable on x86; bug #127718
1288 johnm 1.83
1289     *hardened-sources-2.6.16 (31 Mar 2006)
1290    
1291     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1292     +hardened-sources-2.6.16.ebuild:
1293     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1294     2.6.16.1
1295 cryos 1.82
1296     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1297     hardened-sources-2.6.14-r6.ebuild:
1298     Stable on amd64, bug 127718.
1299 nixnut 1.81
1300     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1301     Stable on ppc. Bug #127718
1302 johnm 1.80
1303     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1304     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1305     -hardened-sources-2.6.14-r4.ebuild:
1306     Cleanup.
1307 johnm 1.79
1308     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1309    
1310     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1311     +hardened-sources-2.6.14-r6.ebuild:
1312     Fixes grsec policy recreation bug and adds a
1313     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1314 solar 1.78
1315     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1316     - stable on x86
1317 hansmi 1.77
1318     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1319     hardened-sources-2.6.14-r5.ebuild:
1320     Stable on ppc.
1321 johnm 1.76
1322     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1323    
1324     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1325     +hardened-sources-2.6.14-r5.ebuild:
1326     fixing every known exploit
1327 solar 1.75
1328     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1329    
1330     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1331     +hardened-sources-2.4.32-r2.ebuild:
1332     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1333 solar 1.74
1334     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1335    
1336     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1337     - version bump for new genpatches which fix up a few sec holes
1338 solar 1.73
1339     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1340    
1341     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1342     - revision bump to add misc vital linux kernel security patches.
1343 johnm 1.72
1344     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1345    
1346     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1347     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1348     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1349 johnm 1.71
1350     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1351     hardened-sources-2.6.14-r2.ebuild:
1352     making x86 & amd64 stable following testing.
1353 johnm 1.70
1354     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1355    
1356     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1357     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1358     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1359     network hooks.
1360 johnm 1.69
1361     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1362     hardened-sources-2.6.14-r1.ebuild:
1363     bumping to stable early for sec fix on x86 & amd64
1364 johnm 1.68
1365     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1366    
1367     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1368     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1369     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1370 solar 1.67
1371     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1372     - stable on x86 security bug #114227 CAN-2005-3257
1373 kang 1.66
1374     *hardened-sources-2.4.32 (19 Nov 2005)
1375    
1376     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1377     +hardened-sources-2.4.32.ebuild:
1378     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1379     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1380     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1381     rsbac >> /etc/portage/package.use)
1382 johnm 1.65
1383     *hardened-sources-2.6.14 (14 Nov 2005)
1384    
1385     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1386     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1387     Bumping 2.6 series to 2.6.14.2
1388 johnm 1.64
1389     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1390    
1391     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1392     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1393     +hardened-sources-2.6.13-r2.ebuild:
1394     Fixes minor build error in ppc.
1395 johnm 1.63
1396     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1397    
1398     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1399     +hardened-sources-2.6.13-r1.ebuild:
1400     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1401     2.6.13.4, fixes some major amd64 stability problems.
1402 johnm 1.62
1403     *hardened-sources-2.6.13 (16 Sep 2005)
1404    
1405     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1406     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1407     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1408     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1409     users should test this thoroughly.
1410 solar 1.61
1411     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1412     - stable on x86
1413 johnm 1.60
1414     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1415    
1416     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1417     +hardened-sources-2.6.11-r15.ebuild:
1418     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1419     grsec redefining curr_ip struct.
1420 solar 1.59
1421     *hardened-sources-2.4.31 (20 Jun 2005)
1422    
1423     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1424     initial import of 2.4.31 tree
1425 johnm 1.58
1426     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1427    
1428     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1429     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1430     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1431     naming scheme to abide by genpatches
1432 johnm 1.57
1433     *hardened-sources-2.6.11-r13 (18 May 2005)
1434    
1435     18 May 2005; John Mylchreest <johnm@gentoo.org>
1436     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1437     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1438     target. sorry about that. Fixes bug #93022
1439 johnm 1.56
1440     *hardened-sources-2.6.11-r12 (17 May 2005)
1441    
1442     17 May 2005; John Mylchreest <johnm@gentoo.org>
1443     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1444     +hardened-sources-2.6.11-r12.ebuild:
1445     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1446     merges in genpatches-base
1447 johnm 1.55
1448     *hardened-sources-2.6.11-r12 (17 May 2005)
1449    
1450     17 May 2005; John Mylchreest <johnm@gentoo.org>
1451     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1452     +hardened-sources-2.6.11-r12.ebuild:
1453     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1454     merges in genpatches-base
1455 solar 1.54
1456     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1457     -files/2.4.27-cmdline-race.patch,
1458     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1459     -files/2.4.28-grsec-binfmt_a.out.patch,
1460     -files/2.4.28-grsec-cmdline-race.patch,
1461     -files/2.4.28-selinux-binfmt_a.out.patch,
1462     -files/2.4.28-selinux-cmdline-race.patch,
1463     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1464     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1465     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1466     cleanup..
1467 solar 1.53
1468     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1469    
1470     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1471     - disable aout by default
1472 solar 1.52
1473     *hardened-sources-2.4.30 (18 Apr 2005)
1474    
1475     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1476     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1477     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1478     use
1479 tocharian 1.50
1480 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1481    
1482     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1483     +hardened-sources-2.4.29.ebuild:
1484     New hardened-patches-2.4-29.0 patchball.
1485     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1486    
1487     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1488    
1489     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1490     +hardened-sources-2.4.28-r5.ebuild:
1491     Added a fix for a PaX vulnerability.
1492    
1493     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1494 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1495     Stable on x86
1496 solar 1.49
1497     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1498     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1499     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1500     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1501     - fixed/added RDEPEND= in all kernel-2 ebuilds
1502 tocharian 1.48
1503     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1504    
1505     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1506     +hardened-sources-2.4.28-r4.ebuild:
1507     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1508     backport of neighbour hash updates.
1509 tocharian 1.47
1510     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1511     hardened-sources-2.4.28-r3.ebuild:
1512     Stable on x86
1513 tseng 1.46
1514     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1515    
1516     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1517     +hardened-sources-2.6.10-r3.ebuild:
1518     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1519     in 2005.0
1520 tocharian 1.45
1521     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1522     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1523     hardened-sources-2.4.28-r2.ebuild:
1524     Mark stable on x86
1525 tocharian 1.44
1526     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1527    
1528     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1529     +hardened-sources-2.4.28-r3.ebuild:
1530     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1531 tocharian 1.43
1532     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1533     hardened-sources-2.4.28.ebuild:
1534     Mark stable on x86.
1535 tocharian 1.42
1536     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1537    
1538     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1539     +hardened-sources-2.4.28-r2.ebuild:
1540     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1541     Mazinger for grsecurity patches as well.
1542 plasmaroo 1.41
1543     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1544    
1545     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1546     Security bump. Thank tocharian for rolling a new patchset...
1547 solar 1.40
1548     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1549     +files/2.4.28-grsec-cmdline-race.patch,
1550     +files/2.4.28-selinux-binfmt_a.out.patch,
1551     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1552     - Round up remaining security patches that appear to be missing in 2.4.28. -
1553     PaX standalone updated to current. hgpv=28.1
1554 solar 1.39
1555     *hardened-sources-2.4.28 (28 Nov 2004)
1556    
1557     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1558     security bump. Thank tocharian for rolling a new patchset
1559 scox 1.31
1560 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1561    
1562     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1563     +hardened-sources-2.4.27-r3.ebuild:
1564     Applies the new 2.4-27.2 patchball which updates
1565     GRSecurity to the 2.0.1 version.
1566    
1567 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1568    
1569     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1570     +hardened-sources-2.4.27-r2.ebuild:
1571     Version bump.
1572     This version uses the new 2.4-27.1 patchball which updates
1573     both the SELinux PaX hooks patch and the SELinux headers.
1574    
1575 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1576    
1577     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1578     +hardened-sources-2.4.27-r1.ebuild,
1579     -hardened-sources-2.4.27.ebuild,
1580     +files/2.4.27-cmdline-race.patch:
1581     Version bump, fix for cmdline race. See bug #59905.
1582    
1583     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1584    
1585     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1586     +hardened-sources-2.4.26-r6.ebuild,
1587     -hardened-sources-2.4.26-r5.ebuild,
1588     -hardened-sources-2.4.26-r4.ebuild,
1589     +files/2.4.26-cmdline-race.patch:
1590     Version bump, fix for cmdline race. See bug #59905.
1591    
1592 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1593    
1594     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1595     +hardened-sources-2.4.27.ebuild,
1596     +files/2.4.27-CAN-2004-0394.patch:
1597     Ported the patchball to the 2.4.27 kernel version.
1598    
1599 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1600    
1601     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1602     +hardened-sources-2.4.26-r5.ebuild:
1603 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1604 scox 1.34 It adds the following features:
1605     - Squashfs
1606     - Ebtables
1607     - Netdev random (core+drivers)
1608     - Watchdog Timer (WDT) fix.
1609    
1610 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1611    
1612     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1613     +hardened-sources-2.4.26-r4.ebuild,
1614     +files/2.4.26-CAN-2004-0415.patch,
1615     -hardened-sources-2.4.26-3:
1616     Version bump, fix for CAN 0415, see bug #59378.
1617    
1618 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1619    
1620     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1621     +hardened-sources-2.4.26-r3.ebuild,
1622     +files/2.4.26-CAN-2004-0497.patch,
1623     -hardened-sources-2.4.26-r2.ebuild:
1624     Version bump, fixed CAN 0497, see bug #56171.
1625    
1626 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1627    
1628     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1629 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1630 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1631     +files/2.4.26-CAN-2004-0535.patch,
1632     -hardened-sources-2.4.26-r1.ebuild:
1633     Fixes for both CAN 0495 and 0535, see bug #54976
1634 pvdabeel 1.27
1635 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1636     hardened-sources-2.4.26-r1.ebuild:
1637     QA - fix use invocation
1638 scox 1.28
1639     *hardened-sources-2.4.26-r1 (22 June 2004)
1640    
1641     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1642     +hardened-sources-2.4.26-r1.ebuild,
1643     +files/2.4.26-CAN-2004-0394.patch,
1644     +files/2.4.26-signal-race.patch,
1645     -hardened-sources-2.4.26.ebuild,
1646     -hardened-sources-2.4.24-r3.ebuild:
1647     Version bump for the CAN-2004-0394 issue and bug #53804
1648     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1649    
1650    
1651 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1652     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1653     Masked hardened-sources-2.4.26.ebuild broken for ppc
1654    
1655     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1656     hardened-sources-2.4.24-r3.ebuild:
1657     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1658 plasmaroo 1.25
1659 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1660    
1661     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1662     +hardened-sources-2.4.26.ebuild:
1663     Updated hardened-sources for the 2.4.26 kernel
1664     Removed broken components, updated almost everything.
1665    
1666 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1667    
1668     17 Apr 2004; <plasmaroo@gentoo.org>
1669     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1670     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1671     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1672     +hardened-sources-2.4.24-r3.ebuild:
1673     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1674     vulnerabilities. Old revisions removed.
1675 plasmaroo 1.24
1676     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1677    
1678     15 Apr 2004; <plasmaroo@gentoo.org>
1679     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1680     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1681     Version bump for the CAN-2004-0109 issue; bug #47881.
1682 aliz 1.23
1683     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1684     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1685     Add eutils to inherit.
1686 plasmaroo 1.22
1687     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1688    
1689     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1690     files/hardened-sources-2.4.24.munmap.patch:
1691     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1692 scox 1.19
1693 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1694 scox 1.26
1695 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1696     hardened-sources-2.4.24.ebuild:
1697     Version bump, updated most of the components.
1698     This release includes the following:
1699    
1700     - Hardened security
1701     - Netfilter patch-o-matic 20031219
1702     - FreeSWAN 2.04 & x509 1.4.8
1703     - EVMS 2.2.2
1704     - XFS 1.3.1
1705     - cryptoloop jari
1706     - grsecurity 2.0-rc4
1707     - SELinux
1708     - PaX 200402060000
1709     - PaX Obscurity 200308302223
1710     - Others...
1711    
1712     Neither -ck nor systrace are included anymore.
1713    
1714 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1715    
1716     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1717     hardened-sources-2.4.22-r2.ebuild:
1718 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1719 scox 1.19
1720     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1721 iggy 1.17
1722     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1723 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1724 iggy 1.16
1725     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1726 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1727     Version bump for the 'do_brk' vulnerability.
1728 iggy 1.15
1729     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1730     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1731     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1732     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1733 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1734 frogger 1.14
1735     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1736     hardened-sources-2.4.22.ebuild:
1737 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1738     components. These are no longer handled in the kernel
1739     so this code was not necessary.
1740 frogger 1.13
1741     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1742     New 2.4.22 based hardened-sources thanks to
1743     Phil West <p.west@computer.org>.
1744    
1745     These sources include:
1746 plasmaroo 1.18 - New SELinux API
1747     - Updated CK-base
1748     - Updated GRSec
1749     - Systrace
1750     - SuperFreeS/WAN 1.99.8
1751     - Propolice kernel build support
1752     - EVMS
1753     - Other various security related patches
1754 frogger 1.11
1755 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1756    
1757     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1758     Updated hardened-sources based on the 2.4.21 Linux kernel.
1759     This includes updates to most major components such as:
1760 plasmaroo 1.18 - ck-base-0306300059
1761     - selinux-2.4-2003071106
1762     - grsecurity-2.0-rc1
1763     - Updated IPTables patch-o-matic
1764     - Updated SuperFreeS/WAN
1765    
1766 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1767     updated patch set ready for the 2.4.21 based kernel.
1768    
1769 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1770     Initial import of hardened-sources-2.4.20-r4. This revision
1771     includes only a few changes, but one of these is an important
1772     security fix. It is recommended all users of hardened-sources
1773     upgrade to this release.
1774 plasmaroo 1.18
1775 frogger 1.11 - ioperm bug fix
1776     - fixed compilation failure when building without GRSec
1777 plasmaroo 1.18
1778 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1779     due to time constraints, but is planned for inclusion in the near
1780     future.
1781 msterret 1.10
1782     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1783    
1784     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1785     hardened-sources-2.4.20-r3.ebuild:
1786 plasmaroo 1.18 Add Header...
1787 frogger 1.9
1788     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1789     hardened-sources-2.4.20-r3.ebuild:
1790     Removed warnings from ebuild. This kernel should be safe to
1791     use at this point.
1792 frogger 1.8
1793     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1794    
1795     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1796     hardened-sources-2.4.20-r3.ebuild:
1797     New revision. Includes the following changes over -r2:
1798 plasmaroo 1.18
1799 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1800     - Super FreeS/WAN 1.99.7rc2
1801     - PaX for the LSM/SELinux branch
1802     - GRSecurity 2.0-pre4 (role based access control)
1803     - Systrace 1.3
1804     - EXT3 fixes
1805     - EVMS 2.0.1
1806     - GCC 3.1+ compile optimizations
1807     - ProPolice kernel build support
1808     - Hashing table security fixes
1809 frogger 1.3
1810     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1811 frogger 1.7
1812     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1813     Initial import of hardened-sources-r2. This new
1814     ebuild includes many new performance and security
1815     related patches. As in -r1, it will patch in
1816     LSM/SELinux if "selinux" is in USE, otherwise it
1817     will patch in GRSecurity. The following patches
1818     are included in this revision:
1819 plasmaroo 1.18
1820 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1821     (pulled from the base CK patch)
1822     - ptrace exploit patch for the LSM kernel
1823     (the GRSec patch already fixes this)
1824     - LSM 2.4-2003040709
1825     - SELinux 2.4-2003040709
1826     - Systrace v1.2
1827     - IPTables patch-o-matic base patches - 20030107
1828     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1829     - Super FreeS/WAN 1.99.6.1
1830     - GRSecurity 1.9.9g
1831     - MPPE
1832     - EXT3 data journal fix
1833     - CIPE 1.5.4
1834 frogger 1.6
1835     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1836     hardened-sources-2.4.20-r1.ebuild, manifest:
1837 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1838 frogger 1.5
1839     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1840     hardened-sources-2.4.20-r1.ebuild:
1841     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1842     is patched in instead. Ptrace patches for selinux have also been added. In
1843     either case, systrace support will be patched in as well.
1844 frogger 1.3
1845     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1846     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1847 plasmaroo 1.18 Revision bump for new sources.
1848 frogger 1.4
1849 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1850 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1851 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1852 method 1.1
1853 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1854    
1855 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1856     hardened-sources-2.4.20.ebuild:
1857 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20