/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.316 - (hide annotations) (download)
Fri Jun 11 23:27:40 2010 UTC (4 years, 1 month ago) by chainsaw
Branch: MAIN
Changes since 1.315: +6 -1 lines
New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
(Portage version: 2.2_rc67/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 chainsaw 1.316 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.315 2010/06/01 15:28:09 chainsaw Exp $
4    
5     *hardened-sources-2.6.32-r9 (11 Jun 2010)
6    
7     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
8     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
9 chainsaw 1.315
10     *hardened-sources-2.6.32-r8 (01 Jun 2010)
11    
12     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
13     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
14 chainsaw 1.314
15     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
16     Update SRC_URI to point to mirror network now that the distfile has
17     propagated.
18 chainsaw 1.313
19     *hardened-sources-2.6.32-r7 (26 May 2010)
20    
21     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
22     metadata.xml:
23     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
24     Summers.
25 robbat2 1.312
26     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
27     Update Manifest for deblob support in kernel-2 eclass.
28 nixnut 1.311
29     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
30     ppc stable
31 gengor 1.310
32     29 May 2009; Gordon Malm <gengor@gentoo.org>
33     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
34     Stable amd64/x86 and remove old.
35 gengor 1.309
36     *hardened-sources-2.6.29 (25 May 2009)
37    
38     25 May 2009; Gordon Malm <gengor@gentoo.org>
39     +hardened-sources-2.6.29.ebuild:
40     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
41     release candidates.
42 gengor 1.308
43     *hardened-sources-2.6.28-r9 (25 May 2009)
44    
45     25 May 2009; Gordon Malm <gengor@gentoo.org>
46     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
47     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
48 gengor 1.307
49     *hardened-sources-2.6.28-r8 (18 May 2009)
50    
51     18 May 2009; Gordon Malm <gengor@gentoo.org>
52     +hardened-sources-2.6.28-r8.ebuild:
53     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
54     and #262862 among others.
55 gengor 1.306
56     01 May 2009; Gordon Malm <gengor@gentoo.org>
57     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
58     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
59     Remove unnecessary mirror://gentoo from SRC_URI.
60 nixnut 1.305
61     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
62     ppc stable
63 gengor 1.304
64     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
65     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
66     Stable amd64/x86 and remove old.
67 gengor 1.303
68     *hardened-sources-2.6.28-r7 (27 Mar 2009)
69    
70     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
71     +hardened-sources-2.6.28-r7.ebuild:
72     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
73 gengor 1.302
74     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
75     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
76     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
77     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
78     Stable amd64/x86 and remove old versions.
79 nixnut 1.301
80     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
81     ppc stable
82 gengor 1.300
83     *hardened-sources-2.6.28-r6 (21 Mar 2009)
84    
85     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
86     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
87     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
88 gengor 1.299
89     *hardened-sources-2.6.28-r5 (20 Mar 2009)
90    
91     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
92     +hardened-sources-2.6.28-r5.ebuild:
93     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
94 gengor 1.298
95     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
96     hardened-sources-2.6.28-r4.ebuild:
97     Stable amd64/x86.
98 gengor 1.297
99     *hardened-sources-2.6.28-r4 (18 Mar 2009)
100    
101     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
102     +hardened-sources-2.6.28-r4.ebuild:
103     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
104     compilation with CPA_DEBUG and more.
105 gengor 1.296
106     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
107     hardened-sources-2.6.28-r3.ebuild:
108     Quick stable amd64/x86.
109 gengor 1.295
110     *hardened-sources-2.6.28-r3 (15 Mar 2009)
111    
112     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
113     +hardened-sources-2.6.28-r3.ebuild:
114     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
115 nixnut 1.294
116     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
117     ppc stable
118 gengor 1.293
119     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
120     hardened-sources-2.6.28-r2.ebuild:
121     Stable amd64/x86.
122 gengor 1.292
123     *hardened-sources-2.6.28-r2 (11 Mar 2009)
124    
125     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
126     +hardened-sources-2.6.28-r2.ebuild:
127     Version bump bringing in latest grsecurity patch.
128 gengor 1.291
129     *hardened-sources-2.6.28-r1 (09 Mar 2009)
130    
131     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
132     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
133     Version bump and remove old.
134 nixnut 1.290
135     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
136     ppc stable
137 gengor 1.289
138     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
139     hardened-sources-2.6.27-r8.ebuild:
140     Remove amd64 testing keyword, bug 256226.
141 gengor 1.288
142     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
143     hardened-sources-2.6.27-r8.ebuild:
144     Revert amd64 stable, bug #256226.
145 gengor 1.287
146     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
147     hardened-sources-2.6.27-r8.ebuild:
148     Stable on amd64/x86.
149 gengor 1.286
150     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
151     -hardened-sources-2.6.27-r6.ebuild:
152     Remove old 2.6.27 release.
153 gengor 1.285
154     *hardened-sources-2.6.27-r8 (24 Feb 2009)
155    
156     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
157     +hardened-sources-2.6.27-r8.ebuild:
158     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
159     and probably more.
160 nixnut 1.284
161     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
162     ppc stable
163 gengor 1.283
164     *hardened-sources-2.6.28 (25 Jan 2009)
165    
166     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
167     +hardened-sources-2.6.28.ebuild:
168     Initial 2.6.28 release.
169 gengor 1.282
170     *hardened-sources-2.6.27-r7 (25 Jan 2009)
171    
172     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
173     +hardened-sources-2.6.27-r7.ebuild:
174     Bump to Linux 2.6.27.13.
175 gengor 1.281
176     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
177     hardened-sources-2.6.26-r9.ebuild:
178     Stable amd64/x86.
179 gengor 1.280
180     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
181     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
182     -hardened-sources-2.6.27-r5.ebuild:
183     Remove problem versions.
184 gengor 1.279
185     *hardened-sources-2.6.27-r6 (24 Jan 2009)
186    
187     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
188     +hardened-sources-2.6.27-r6.ebuild:
189     Revert PaX test29 to test30 changes. Fixes bug 256226.
190 gengor 1.277
191     *hardened-sources-2.6.27-r5 (24 Jan 2009)
192    
193     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
194     +hardened-sources-2.6.27-r5.ebuild:
195 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
196 gengor 1.277 254843.
197 gengor 1.276
198     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
199     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
200     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
201     Remove problem versions.
202 nixnut 1.275
203     23 Jan 2009; nixnut <nixnut@gentoo.org>
204     hardened-sources-2.6.25-r13.ebuild:
205     ppc stable
206 gengor 1.274
207     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
208     hardened-sources-2.6.25-r13.ebuild:
209     Fasttrack stable amd64/x86.
210 gengor 1.273
211     *hardened-sources-2.6.26-r9 (21 Jan 2009)
212    
213     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
214     +hardened-sources-2.6.26-r9.ebuild:
215 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
216 gengor 1.272
217     *hardened-sources-2.6.25-r13 (20 Jan 2009)
218    
219     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
220     +hardened-sources-2.6.25-r13.ebuild:
221 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
222 nixnut 1.271
223     20 Jan 2009; nixnut <nixnut@gentoo.org>
224     hardened-sources-2.6.25-r12.ebuild:
225     ppc stable
226 gengor 1.270
227     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
228     hardened-sources-2.6.25-r12.ebuild:
229     Stable amd64/x86.
230 gengor 1.269
231     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
232     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
233     -hardened-sources-2.6.27-r2.ebuild:
234     Clean out old versions.
235 gengor 1.268
236     *hardened-sources-2.6.27-r4 (14 Jan 2009)
237     *hardened-sources-2.6.26-r8 (14 Jan 2009)
238     *hardened-sources-2.6.25-r12 (14 Jan 2009)
239    
240     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
241     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
242     +hardened-sources-2.6.27-r4.ebuild:
243     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
244     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
245     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
246     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
247 nixnut 1.267
248     15 Dec 2008; nixnut <nixnut@gentoo.org>
249     hardened-sources-2.6.25-r11.ebuild:
250     Stable on ppc
251 gengor 1.266
252     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
253     hardened-sources-2.6.25-r11.ebuild:
254     Stable amd64/x86.
255 gengor 1.265
256     *hardened-sources-2.6.27-r3 (07 Dec 2008)
257    
258     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
259     +hardened-sources-2.6.27-r3.ebuild:
260     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
261     Fixes bug #248754, #249729 and #246607.
262 gengor 1.264
263     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
264     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
265     Remove old versions.
266 gengor 1.262
267     *hardened-sources-2.6.26-r7 (03 Dec 2008)
268     *hardened-sources-2.6.25-r11 (03 Dec 2008)
269    
270 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
271     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
272 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
273     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
274     Both include many backports from 2.6.27.{6,7} -stable releases.
275 gengor 1.261
276     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
277     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
278     Remove versions broken on ARCHes != x86/amd64.
279 gengor 1.260
280     *hardened-sources-2.6.27-r2 (24 Nov 2008)
281    
282     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
283     +hardened-sources-2.6.27-r2.ebuild:
284     Bump to Linux 2.6.27.7 and latest grsecurity patch.
285 gengor 1.259
286     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
287     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
288     Remove old versions.
289 gengor 1.258
290     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
291     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
292     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
293 nixnut 1.257
294     16 Nov 2008; nixnut <nixnut@gentoo.org>
295     hardened-sources-2.6.25-r10.ebuild:
296     Stable on ppc
297 gengor 1.256
298     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
299     hardened-sources-2.6.25-r10.ebuild:
300     Stable amd64/x86.
301 gengor 1.255
302     *hardened-sources-2.6.26-r6 (12 Nov 2008)
303    
304     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
305     +hardened-sources-2.6.26-r6.ebuild:
306     Bump to Linux 2.6.26.8 and fix security bug #245650.
307 gengor 1.254
308     *hardened-sources-2.6.25-r10 (12 Nov 2008)
309    
310     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
311     +hardened-sources-2.6.25-r10.ebuild:
312     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
313 gengor 1.253
314     *hardened-sources-2.6.27-r1 (09 Nov 2008)
315    
316     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
317     +hardened-sources-2.6.27-r1.ebuild:
318     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
319 gengor 1.252
320     *hardened-sources-2.6.27 (04 Nov 2008)
321    
322     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
323     +hardened-sources-2.6.27.ebuild:
324     Initial 2.6.27 release.
325 gengor 1.251
326     *hardened-sources-2.6.26-r5 (03 Nov 2008)
327    
328     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
329     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
330     +hardened-sources-2.6.26-r5.ebuild:
331     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
332     Clean out some old versions.
333 nixnut 1.250
334     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
335     Stable on ppc
336 gengor 1.249
337     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
338     hardened-sources-2.6.25-r9.ebuild:
339     Stable on amd64/x86.
340 gengor 1.248
341     *hardened-sources-2.6.25-r9 (26 Oct 2008)
342    
343     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
344     +hardened-sources-2.6.25-r9.ebuild:
345     Update to Linux 2.6.25.19
346 nixnut 1.247
347     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
348     Stable on ppc
349 gengor 1.246
350     *hardened-sources-2.6.26-r4 (14 Oct 2008)
351    
352     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
353     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
354     Update to latest grsecurity patch, fixing building of non-modular kernels.
355 gengor 1.245
356     *hardened-sources-2.6.26-r3 (12 Oct 2008)
357    
358     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
359     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
360     +hardened-sources-2.6.26-r3.ebuild:
361     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
362     2.6.26-r1: Removed.
363     2.6.25-r8: Stable amd64/x86.
364 gengor 1.244
365     *hardened-sources-2.6.25-r8 (09 Oct 2008)
366    
367     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
368     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
369     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
370     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
371 nixnut 1.243
372     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
373     Stable on ppc
374 gengor 1.242
375     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
376     hardened-sources-2.6.25-r7.ebuild:
377     Stable amd64/x86.
378 gengor 1.241
379     *hardened-sources-2.6.26-r2 (13 Sep 2008)
380    
381     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
382     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
383     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
384     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
385 gengor 1.240
386     *hardened-sources-2.6.25-r7 (13 Sep 2008)
387    
388     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
389     +hardened-sources-2.6.25-r7.ebuild:
390     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
391 gengor 1.239
392     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
393     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
394     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
395     hardened-sources-2.6.26-r1.ebuild:
396     Update DESCRIPTION and HGPV_URI.
397 gengor 1.238
398     *hardened-sources-2.6.25-r6 (09 Sep 2008)
399    
400     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
401     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
402     2.6.25-r6: Update to Linux 2.6.25.17.
403     2.6.24-r3: Removed.
404 gengor 1.237
405     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
406     hardened-sources-2.6.25-r5.ebuild:
407     Stable on amd64/x86
408 gengor 1.236
409     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
410     Update my email address.
411 nixnut 1.235
412     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
413     stable on ppc
414 battousai 1.234
415     *hardened-sources-2.6.26-r1 (23 Aug 2008)
416     *hardened-sources-2.6.25-r5 (23 Aug 2008)
417    
418     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
419     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
420     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
421     +hardened-sources-2.6.26-r1.ebuild:
422     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
423     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
424     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
425     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
426     (gengor).
427 solar 1.233
428     *hardened-sources-2.6.26 (18 Aug 2008)
429     *hardened-sources-2.6.25-r4 (18 Aug 2008)
430    
431     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
432     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
433     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
434     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
435     2.6.25-r2: Removed.
436 tove 1.232
437     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
438     Remove phreak from metadata.xml (#96398)
439 solar 1.231
440     *hardened-sources-2.6.25-r3 (31 Jul 2008)
441    
442     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
443     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
444     +hardened-sources-2.6.25-r3.ebuild:
445     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
446     fixes, including security bug #231750.
447 nixnut 1.230
448     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
449     Stable on ppc
450 solar 1.229
451     *hardened-sources-2.6.25-r2 (05 Jul 2008)
452    
453     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
454     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
455     +hardened-sources-2.6.25-r2.ebuild:
456     2.6.23-r4: Stable x86/amd64
457     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
458     2.6.23-r{11,12}: Removed due to multiple vulns.
459     (gengor & kerframil)
460 nixnut 1.228
461     04 Jul 2008; nixnut <nixnut@gentoo.org>
462     hardened-sources-2.6.23-r13.ebuild:
463     Stable on ppc
464 solar 1.227
465     *hardened-sources-2.6.25-r1 (30 Jun 2008)
466    
467     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
468     +hardened-sources-2.6.25-r1.ebuild:
469     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
470     grsecurity release. 2.6.23-r13: x86/amd64 stable
471 solar 1.226
472     *hardened-sources-2.6.25 (17 Jun 2008)
473     *hardened-sources-2.6.24-r3 (17 Jun 2008)
474     *hardened-sources-2.6.23-r13 (17 Jun 2008)
475    
476     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
477     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
478     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
479     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
480     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
481     2.6.25: Initial 2.6.25 release.
482 solar 1.225
483     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
484     - fasttrack to stable x86/amd64
485 swegener 1.224
486     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
487     Fix broken digest for linux-2.6.24.tar.bz2.
488 solar 1.223
489     *hardened-sources-2.6.24-r2 (11 May 2008)
490     *hardened-sources-2.6.23-r12 (11 May 2008)
491    
492     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
493     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
494     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
495     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
496     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
497     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
498     security bugs 219901, 220691, 220975, 220979, 221123. New
499     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
500     should be removed as far as I'm concerned, everything else remove due to
501     vulnerable to numerous security bugs or brokeness.
502 nixnut 1.222
503     10 May 2008; nixnut <nixnut@gentoo.org>
504     hardened-sources-2.6.23-r11.ebuild:
505     Stable on ppc
506 solar 1.221
507     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
508     - -r11 stable on x86/amd64
509 solar 1.220
510     *hardened-sources-2.6.23-r11 (01 May 2008)
511    
512     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
513     - version bump to fix ulgy linux bugs
514 phreak 1.219
515     *hardened-sources-2.6.24-r1 (30 Apr 2008)
516    
517     30 Apr 2008; Christian Heim <phreak@gentoo.org>
518     +hardened-sources-2.6.24-r1.ebuild:
519     Revision bump (thanks to Kerin and Gordon, again), pulling
520     genpatches-2.6.24-7, solving #219089. Additionally contains further security
521     fixes plus some minor updates.
522 phreak 1.218
523     *hardened-sources-2.6.23-r10 (30 Apr 2008)
524    
525     30 Apr 2008; Christian Heim <phreak@gentoo.org>
526     +hardened-sources-2.6.23-r10.ebuild:
527     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
528     Additional contains "various other fixes".
529 phreak 1.217
530     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
531     Update the longdescription in metadata, thanks to Gordon Malm.
532 nixnut 1.216
533     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
534     Stable on ppc wrt bug #213255
535 solar 1.215
536     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
537     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
538     - stable on x86/amd64 per request. Removed obsolete ebuilds
539 phreak 1.214
540     *hardened-sources-2.6.24 (07 Apr 2008)
541    
542     07 Apr 2008; Christian Heim <phreak@gentoo.org>
543     +hardened-sources-2.6.24.ebuild:
544     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
545     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
546     for the many contributions and their continued effort in #216612) based on
547     2.6.24 and genpatches-2.6.24-5.
548    
549     The current ebuild/patchset contains these things:
550     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
551     * Introduces bespoke server and workstation oriented security levels
552     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
553 phreak 1.213
554     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
555     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
556     maintaining it).
557 phreak 1.212
558     24 Mar 2008; Christian Heim <phreak@gentoo.org>
559     hardened-sources-2.4.35-r2.ebuild:
560     Fixing SRC_URI for 2.4.35-r2.
561 phreak 1.211
562     *hardened-sources-2.6.23-r9 (22 Mar 2008)
563    
564     22 Mar 2008; Christian Heim <phreak@gentoo.org>
565     +hardened-sources-2.6.23-r9.ebuild:
566     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
567     * Change the default GIDs for some grsecurity options
568     * Revamp the Hardened [Gentoo] security level and make it the default level
569     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
570     * Fix a recursive lock -- call to capable() within ptrace_attach()
571     * Fix bug that allows audit and iscsi operations to be controlled via netlink
572 solar 1.210
573     *hardened-sources-2.6.23-r8 (27 Feb 2008)
574    
575     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
576     - version bump from Kerin Millar bug 210026
577 solar 1.209
578     17 Feb 2008; <solar@gentoo.org> metadata.xml,
579     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
580     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
581     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
582     - stable on x86 and remove old ebuilds
583 solar 1.207
584     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
585 solar 1.208 - stable on amd64 per request of amd64 lead
586 solar 1.206
587     *hardened-sources-2.6.23-r7 (11 Feb 2008)
588    
589     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
590     - version bump from kerin.millar
591     Changes:
592    
593     * Bump to genpatches-base-2.6.23-9
594     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
595     * Disables COMPAT_VDSO in x86/defconfig
596     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
597 phreak 1.205
598     25 Jan 2008; Christian Heim <phreak@gentoo.org>
599     -hardened-sources-2.6.22-r8.ebuild:
600     Cleaning up old versions.
601 phreak 1.204
602     *hardened-sources-2.6.23-r6 (25 Jan 2008)
603    
604     25 Jan 2008; Christian Heim <phreak@gentoo.org>
605     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
606     Revision bump, pulling in the latest genpatches.
607 phreak 1.203
608     *hardened-sources-2.6.23-r5 (24 Dec 2007)
609    
610     24 Dec 2007; Christian Heim <phreak@gentoo.org>
611     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
612     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
613     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
614     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
615 phreak 1.202
616     24 Dec 2007; Christian Heim <phreak@gentoo.org>
617     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
618     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
619     -hardened-sources-2.6.23-r3.ebuild:
620     Cleaning out some unused, old versions.
621 phreak 1.201
622     24 Dec 2007; Christian Heim <phreak@gentoo.org>
623     hardened-sources-2.6.23-r4.ebuild:
624     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
625     in the tree for long, but there isn't much of a difference between this and
626     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
627 phreak 1.200
628     *hardened-sources-2.6.23-r4 (23 Dec 2007)
629    
630     23 Dec 2007; Christian Heim <phreak@gentoo.org>
631     +hardened-sources-2.6.23-r4.ebuild:
632     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
633 phreak 1.199
634     *hardened-sources-2.6.23-r3 (04 Dec 2007)
635    
636     04 Dec 2007; Christian Heim <phreak@gentoo.org>
637     +hardened-sources-2.6.23-r3.ebuild:
638     Revision bump, pulling in 2.6.23.9.
639 phreak 1.198
640     *hardened-sources-2.6.23-r2 (25 Nov 2007)
641    
642     25 Nov 2007; Christian Heim <phreak@gentoo.org>
643     +hardened-sources-2.6.23-r2.ebuild:
644     Updated patchset, thanks to solar.
645 phreak 1.197
646     *hardened-sources-2.6.23-r1 (31 Oct 2007)
647    
648     31 Oct 2007; Christian Heim <phreak@gentoo.org>
649     +hardened-sources-2.6.23-r1.ebuild:
650     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
651 solar 1.196
652     29 Oct 2007; <solar@gentoo.org> metadata.xml:
653     - update metadata.xml
654 phreak 1.195
655     25 Oct 2007; Christian Heim <phreak@gentoo.org>
656     hardened-sources-2.6.22-r8.ebuild:
657     Marking 2.6.22-r8 stable on amd64 and x86.
658 phreak 1.194
659     21 Oct 2007; Christian Heim <phreak@gentoo.org>
660     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
661     -hardened-sources-2.6.21-r4.ebuild:
662     Removing old ebuilds.
663 phreak 1.193
664     *hardened-sources-2.4.35-r2 (21 Oct 2007)
665    
666     21 Oct 2007; Christian Heim <phreak@gentoo.org>
667     +hardened-sources-2.4.35-r2.ebuild:
668     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
669     patches.
670 phreak 1.192
671     *hardened-sources-2.6.22-r8 (21 Oct 2007)
672    
673     21 Oct 2007; Christian Heim <phreak@gentoo.org>
674     +hardened-sources-2.6.22-r8.ebuild:
675     Yet another new patch, hopefully fixing the remaining issues we had w/
676     2.6.22. Candidate for stabling.
677 phreak 1.191
678     *hardened-sources-2.6.23 (13 Oct 2007)
679    
680     13 Oct 2007; Christian Heim <phreak@gentoo.org>
681     +hardened-sources-2.6.23.ebuild:
682     Initial hardened-sources-2.6.23. If people still have problems w/ bug
683     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
684 phreak 1.190
685     11 Oct 2007; Christian Heim <phreak@gentoo.org>
686     hardened-sources-2.6.20-r10.ebuild:
687     Pulling in yet another new genpatches version, fixing the PWC bug for real.
688 phreak 1.189
689     04 Oct 2007; Christian Heim <phreak@gentoo.org>
690     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
691     Removing old versions.
692 phreak 1.188
693     *hardened-sources-2.6.22-r7 (01 Oct 2007)
694    
695     01 Oct 2007; Christian Heim <phreak@gentoo.org>
696     +hardened-sources-2.6.22-r7.ebuild:
697     Revision bump, pulling in a newer patch. Should fix #194276.
698 phreak 1.187
699     30 Sep 2007; Christian Heim <phreak@gentoo.org>
700     hardened-sources-2.6.20-r10.ebuild:
701     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
702     Mike Doty).
703 phreak 1.186
704     *hardened-sources-2.6.22-r6 (26 Sep 2007)
705    
706     26 Sep 2007; Christian Heim <phreak@gentoo.org>
707     +hardened-sources-2.6.22-r6.ebuild:
708     Revision bump, grabbing up till Linux 2.6.22.9.
709 phreak 1.185
710     24 Sep 2007; Christian Heim <phreak@gentoo.org>
711     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
712     Cleaning up further.
713 phreak 1.184
714     *hardened-sources-2.6.20-r10 (24 Sep 2007)
715    
716     24 Sep 2007; Christian Heim <phreak@gentoo.org>
717     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
718     +hardened-sources-2.6.20-r10.ebuild:
719     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
720     revisions.
721 phreak 1.183
722     *hardened-sources-2.6.22-r5 (22 Sep 2007)
723    
724     22 Sep 2007; Christian Heim <phreak@gentoo.org>
725     +hardened-sources-2.6.22-r5.ebuild:
726     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
727 phreak 1.182
728     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
729     Removing johnm from metadata.xml (see #186467 for reference).
730 phreak 1.181
731     *hardened-sources-2.6.22-r4 (17 Sep 2007)
732    
733     17 Sep 2007; Christian Heim <phreak@gentoo.org>
734     +hardened-sources-2.6.22-r4.ebuild:
735     Revision bump, hopefully fixing all those weird PAX failures.
736 phreak 1.180
737     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
738     Updating the metadata.xml.
739 phreak 1.179
740     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
741     Removing tocharian from metadata due to his retirement (see #71718 for
742     reference).
743 phreak 1.178
744     *hardened-sources-2.6.20-r9 (30 Aug 2007)
745    
746     30 Aug 2007; Christian Heim <phreak@gentoo.org>
747     +hardened-sources-2.6.20-r9.ebuild:
748     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
749 phreak 1.177
750     29 Aug 2007; Christian Heim <phreak@gentoo.org>
751     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
752     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
753     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
754     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
755     -hardened-sources-2.6.22-r2.ebuild:
756     Removing some redundant versions.
757 phreak 1.176
758     *hardened-sources-2.4.35-r1 (29 Aug 2007)
759    
760     29 Aug 2007; Christian Heim <phreak@gentoo.org>
761     +hardened-sources-2.4.35-r1.ebuild:
762     Revision bump, new grsecurity patch.
763 phreak 1.175
764     *hardened-sources-2.6.20-r8 (26 Aug 2007)
765    
766     26 Aug 2007; Christian Heim <phreak@gentoo.org>
767     +hardened-sources-2.6.20-r8.ebuild:
768     Revision bump for Linux 2.6.20.17.
769 phreak 1.174
770     *hardened-sources-2.6.22-r3 (22 Aug 2007)
771    
772     22 Aug 2007; Christian Heim <phreak@gentoo.org>
773     +hardened-sources-2.6.22-r3.ebuild:
774     Revision bump for Linux 2.6.22.4.
775 phreak 1.173
776     16 Aug 2007; Christian Heim <phreak@gentoo.org>
777     hardened-sources-2.6.22-r2.ebuild:
778     Updated patchset, to fix the alignment against 2.6.22.3.
779 phreak 1.172
780     *hardened-sources-2.6.22-r2 (16 Aug 2007)
781    
782     16 Aug 2007; Christian Heim <phreak@gentoo.org>
783     +hardened-sources-2.6.22-r2.ebuild:
784     Revision bump for Linux 2.6.22.3.
785 phreak 1.171
786     *hardened-sources-2.4.35 (16 Aug 2007)
787    
788     16 Aug 2007; Christian Heim <phreak@gentoo.org>
789     +hardened-sources-2.4.35.ebuild:
790     Version bump, initial version for Linux 2.4.35.
791 phreak 1.170
792     *hardened-sources-2.6.21-r4 (16 Aug 2007)
793    
794     16 Aug 2007; Christian Heim <phreak@gentoo.org>
795     +hardened-sources-2.6.21-r4.ebuild:
796     Revision bump for Linux 2.6.21.6.
797 phreak 1.169
798     *hardened-sources-2.6.20-r7 (16 Aug 2007)
799    
800     16 Aug 2007; Christian Heim <phreak@gentoo.org>
801     +hardened-sources-2.6.20-r7.ebuild:
802     Revision bump for Linux 2.6.20.16.
803 phreak 1.168
804     *hardened-sources-2.6.22-r1 (13 Aug 2007)
805    
806     13 Aug 2007; Christian Heim <phreak@gentoo.org>
807     +hardened-sources-2.6.22-r1.ebuild:
808     Yet another revision bump.
809 phreak 1.167
810     *hardened-sources-2.6.22 (10 Aug 2007)
811    
812     10 Aug 2007; Christian Heim <phreak@gentoo.org>
813     +hardened-sources-2.6.22.ebuild:
814     Initial release for 2.6.22. If you are using hardened-sources on a desktop
815     machine (P4 or newer), be aware you might need to disable
816     CONFIG_PAX_PAGEEXEC.
817 phreak 1.166
818     04 Aug 2007; Christian Heim <phreak@gentoo.org>
819     hardened-sources-2.6.20-r6.ebuild:
820     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
821     2.6.20.15.
822 phreak 1.165
823     10 Jul 2007; Christian Heim <phreak@gentoo.org>
824     hardened-sources-2.6.20-r5.ebuild:
825     Marking hardened-sources-2.6.20-r5 stable on ppc.
826 phreak 1.164
827     10 Jul 2007; Christian Heim <phreak@gentoo.org>
828     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
829     Cleanup.
830 phreak 1.163
831     *hardened-sources-2.6.20-r6 (08 Jul 2007)
832    
833     08 Jul 2007; Christian Heim <phreak@gentoo.org>
834     +hardened-sources-2.6.20-r6.ebuild:
835     Revision bump, grabbing yet another stable release.
836 phreak 1.162
837     17 Jun 2007; Christian Heim <phreak@gentoo.org>
838     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
839     -hardened-sources-2.6.21-r2.ebuild:
840     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
841     alpha stable KEYWORD by mistake.
842 phreak 1.161
843     17 Jun 2007; Christian Heim <phreak@gentoo.org>
844     hardened-sources-2.6.20-r5.ebuild:
845     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
846     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
847 phreak 1.160
848     *hardened-sources-2.6.21-r3 (12 Jun 2007)
849    
850     12 Jun 2007; Christian Heim <phreak@gentoo.org>
851     +hardened-sources-2.6.21-r3.ebuild:
852     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
853     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
854     love.
855 phreak 1.159
856     *hardened-sources-2.6.20-r5 (11 Jun 2007)
857    
858     11 Jun 2007; Christian Heim <phreak@gentoo.org>
859     +hardened-sources-2.6.20-r5.ebuild:
860     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
861     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
862     love.
863 pappy 1.158
864     *hardened-sources-2.4.34.5 (11 Jun 2007)
865    
866     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
867     +hardened-sources-2.4.34.5.ebuild:
868     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
869 phreak 1.157
870     30 May 2007; Christian Heim <phreak@gentoo.org>
871     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
872     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
873     stale ebuild(s).
874 phreak 1.156
875     30 May 2007; Christian Heim <phreak@gentoo.org>
876     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
877     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
878     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
879     Doing some cleanups, remove stale ebuilds.
880 phreak 1.155
881     26 May 2007; Christian Heim <phreak@gentoo.org>
882     hardened-sources-2.6.21-r2.ebuild:
883     Fixing the grsecurity patch, had one '};' too much.
884 phreak 1.154
885     *hardened-sources-2.6.21-r2 (26 May 2007)
886    
887     26 May 2007; Christian Heim <phreak@gentoo.org>
888     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
889     +hardened-sources-2.6.21-r2.ebuild:
890     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
891     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
892 phreak 1.153
893     *hardened-sources-2.6.20-r4 (26 May 2007)
894    
895     26 May 2007; Christian Heim <phreak@gentoo.org>
896     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
897     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
898 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
899 phreak 1.152
900     15 May 2007; Christian Heim <phreak@gentoo.org>
901     hardened-sources-2.6.20-r3.ebuild:
902     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
903     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
904     grsecurity patch fail in that exact same hunk.
905 phreak 1.151
906     *hardened-sources-2.6.20-r3 (15 May 2007)
907    
908     15 May 2007; Christian Heim <phreak@gentoo.org>
909     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
910     Revision bump, incorporating Linux 2.6.20.11.
911    
912     *hardened-sources-2.6.21-r1 (11 May 2007)
913    
914     11 May 2007; Christian Heim <phreak@gentoo.org>
915     +hardened-sources-2.6.21-r1.ebuild:
916     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
917     mentioned in #177234.
918 kevquinn 1.150
919     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
920     files/digest-hardened-sources-2.6.21, Manifest:
921     Fix Manifest/digest for linux-2.6.21.tar.bz2
922 phreak 1.149
923     06 May 2007; Christian Heim <phreak@gentoo.org>
924     hardened-sources-2.6.21.ebuild:
925     Bumping the hardened-patches version, needed for the fix for #177234.
926 phreak 1.148
927     *hardened-sources-2.6.21 (02 May 2007)
928    
929     02 May 2007; Christian Heim <phreak@gentoo.org>
930     +hardened-sources-2.6.21.ebuild:
931     Version bump, Linux 2.6.21-hardened.
932 phreak 1.147
933     29 Apr 2007; Christian Heim <phreak@gentoo.org>
934     hardened-sources-2.6.20-r2.ebuild:
935     Adding ~ia64 on Ned's request.
936 phreak 1.146
937     29 Apr 2007; Christian Heim <phreak@gentoo.org>
938     hardened-sources-2.6.20-r2.ebuild:
939     Fixing the included grsecurity patch, wasn't alligning due to the Index:
940     header line(s).
941 phreak 1.145
942     29 Apr 2007; Christian Heim <phreak@gentoo.org>
943     hardened-sources-2.6.20-r2.ebuild:
944     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
945 armin76 1.144
946     *hardened-sources-2.6.20-r2 (10 Apr 2007)
947    
948     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
949     +hardened-sources-2.6.20-r2.ebuild:
950     Version bump, on behalf of phreak
951 phreak 1.143
952     *hardened-sources-2.6.20-r1 (04 Apr 2007)
953    
954     04 Apr 2007; Christian Heim <phreak@gentoo.org>
955     +hardened-sources-2.6.20-r1.ebuild:
956     Revision bump, grabbing a newer grsecurity snapshot.
957 phreak 1.142
958     *hardened-sources-2.6.20 (25 Mar 2007)
959    
960     25 Mar 2007; Christian Heim <phreak@gentoo.org>
961     +hardened-sources-2.6.20.ebuild:
962     Finally a hardened-sources version for 2.6.20; many people have been waiting
963     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
964     testbox.
965 chainsaw 1.141
966     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
967     hardened-sources-2.6.18-r6.ebuild:
968     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
969 phreak 1.140
970     *hardened-sources-2.6.18-r6 (16 Mar 2007)
971    
972     16 Mar 2007; Christian Heim <phreak@gentoo.org>
973     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
974     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
975     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
976     supposed to be.
977 phreak 1.139
978     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
979     Fixing the Manifest, the previous one was broken (as in still had the
980     deleted ebuild in it).
981 phreak 1.138
982     06 Mar 2007; Christian Heim <phreak@gentoo.org>
983     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
984     +hardened-sources-2.6.18-r5.ebuild:
985     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
986     Linux 2.6.18.8. Also cleaning up the older version.
987    
988     *hardened-sources-2.6.18-r5 (06 Mar 2007)
989    
990     06 Mar 2007; Christian Heim <phreak@gentoo.org>
991     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
992     +hardened-sources-2.6.18-r5.ebuild:
993     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
994     Linux 2.6.18.8. Also cleaning up the older version.
995 phreak 1.137
996     24 Feb 2007; Christian Heim <phreak@gentoo.org>
997     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
998     -hardened-sources-2.6.19-r5.ebuild:
999     Removing some of the old version, that didn't work.
1000 phreak 1.136
1001     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1002    
1003     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1004     +hardened-sources-2.6.19-r6.ebuild:
1005     Revision bump, including a new grsec version fixing #166235.
1006 pappy 1.134
1007     *hardened-sources-2.4.34 (24 Jan 2007)
1008    
1009     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1010 pappy 1.135 Manifest:
1011     updating Manifest with checksums of new tarball and ebuild
1012    
1013     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1014 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1015     I added new hardened sources 2.4 update, this is a critical path
1016     security bugfix - all users of h-s are strongly advised
1017     to update their existing hardened sources to this version.
1018     It contains a fix for a kernel vulnerability that is pertaining
1019     to the PaX changes to virtual memory management, possibly leading
1020     to a local kernel exploit ... see grsecurity.net forums and homepage
1021 phreak 1.133
1022     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1023     files/digest-hardened-sources-2.6.19-r5, Manifest:
1024     Fixing the patch-tarball digest.
1025 phreak 1.132
1026     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1027    
1028     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1029     +hardened-sources-2.6.19-r5.ebuild:
1030     Revision bump, closing the recently discovered PaX expand_stack()
1031     vulnerability.
1032 phreak 1.131
1033     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1034    
1035     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1036     +hardened-sources-2.6.19-r4.ebuild:
1037     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1038     dropping the randomized PID feature.
1039 opfer 1.130
1040     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1041     hardened-sources-2.4.33.4.ebuild:
1042     stable x86, bug #161171
1043 phreak 1.129
1044     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1045    
1046     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1047     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1048     Revision bump for bug #157186 and #158786.
1049 phreak 1.128
1050     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1051    
1052     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1053     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1054     Revision bump for bug #157186.
1055 phreak 1.127
1056     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1057    
1058     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1059     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1060     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1061 phreak 1.126
1062     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1063     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1064     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1065     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1066     hardened-sources-2.6.19-r1.ebuild:
1067     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1068     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1069 pappy 1.125
1070     *hardened-sources-2.4.33.4 (17 Dec 2006)
1071    
1072     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1073     +hardened-sources-2.4.33.4.ebuild:
1074     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1075     and quilting
1076 phreak 1.124
1077     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1078    
1079     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1080     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1081     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1082     for reporting).
1083 phreak 1.123
1084     *hardened-sources-2.6.19 (13 Dec 2006)
1085    
1086     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1087     +hardened-sources-2.6.19.ebuild:
1088     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1089     Brad for providing that prompt update.
1090 phreak 1.122
1091     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1092    
1093     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1094     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1095     +hardened-sources-2.6.18-r3.ebuild:
1096     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1097     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1098 phreak 1.121
1099     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1100     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1101 nixnut 1.120
1102     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1103     Stable on ppc wrt bug 157356
1104 opfer 1.119
1105     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1106     hardened-sources-2.6.18.ebuild:
1107     stable x86, bug #157356
1108 phreak 1.118
1109     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1110    
1111     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1112     +hardened-sources-2.6.18-r2.ebuild:
1113     Revision bump, including 2.6.18.5 (via genpatches) and
1114     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1115     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1116     redesign.
1117 phreak 1.117
1118     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1119     hardened-sources-2.6.18.ebuild:
1120     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1121     of Mike Doty).
1122 phreak 1.116
1123     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1124    
1125     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1126     +hardened-sources-2.6.18-r1.ebuild:
1127     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1128 phreak 1.115
1129     *hardened-sources-2.6.18 (11 Nov 2006)
1130    
1131     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1132     +hardened-sources-2.6.18.ebuild:
1133     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1134 solar 1.114
1135     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1136     - mark amd64 stable also. bug #151877
1137 solar 1.113
1138     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1139     - mark 2.6.17-r1 stable
1140 phreak 1.112
1141     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1142     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1143     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1144 phreak 1.111
1145     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1146    
1147     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1148     +hardened-sources-2.6.17-r1.ebuild:
1149     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1150     grsecurity patch.
1151 phreak 1.110
1152     *hardened-sources-2.6.17 (17 Aug 2006)
1153    
1154     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1155     +hardened-sources-2.6.17.ebuild:
1156     Bumping the hardened-sources-2.6 series to 2.6.17, using
1157     genpatches-2.6.17-6.base.
1158 solar 1.109
1159     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1160     - stable on x86 and amd64
1161 solar 1.108
1162     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1163    
1164     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1165     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1166     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1167     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1168     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1169     crusty ebuilds
1170 johnm 1.107
1171     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1172     hardened-sources-2.6.16-r10.ebuild:
1173     marking stable on x86 and amd64
1174 solar 1.106
1175     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1176     - 2.4.32-r6 stable on x86. RSBAC state unknown
1177 kang 1.105
1178     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1179    
1180     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1181     +hardened-sources-2.4.32-r7.ebuild:
1182     Bump PaX for RSBAC to test-17
1183 johnm 1.104
1184     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1185    
1186     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1187     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1188     hardened-sources-2.6.16 bump to latest -base.
1189 solar 1.103
1190     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1191    
1192     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1193     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1194     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1195     sysctl controlable resource logging
1196 johnm 1.102
1197     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1198    
1199     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1200     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1201     push new 2.6.16 release in preparation for stable
1202 solar 1.101
1203     22 May 2006; <solar@gentoo.org> :
1204     - redigest bug 134002
1205 kang 1.100
1206     *hardened-sources-2.4.32-r5 (16 May 2006)
1207    
1208     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1209     +hardened-sources-2.4.32-r5.ebuild:
1210     Fixes rsbac common patching (new patch in new -r5 patchset)
1211 solar 1.99
1212     *hardened-sources-2.4.32-r4 (13 May 2006)
1213    
1214     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1215     +hardened-sources-2.4.32-r4.ebuild:
1216     - security bumps
1217 johnm 1.98
1218     *hardened-sources-2.6.16-r6 (03 May 2006)
1219    
1220     03 May 2006; John Mylchreest <johnm@gentoo.org>
1221     +hardened-sources-2.6.16-r6.ebuild:
1222     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1223 johnm 1.97
1224     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1225     hardened-sources-2.6.14-r8.ebuild:
1226     fix x86_64 build problem, this will delay the digest issue again for a short
1227     while but it will sort itself out
1228 johnm 1.96
1229     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1230     hardened-sources-2.6.14-r8.ebuild:
1231     bump hardened patchset
1232 antarus 1.94
1233     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1234     files/digest-hardened-sources-2.4.32-r2,
1235     files/digest-hardened-sources-2.4.32-r3,
1236     files/digest-hardened-sources-2.6.14-r8, Manifest:
1237     Fixing duff SHA256 digests: Bug # 131293
1238 johnm 1.93
1239 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1240    
1241     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1242     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1243     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1244     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1245     cleanup of old uneccessary sources
1246    
1247 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1248     fix digest
1249 johnm 1.92
1250     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1251    
1252     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1253     +hardened-sources-2.6.14-r8.ebuild:
1254     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1255 johnm 1.91
1256     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1257     Turning on gpg-signing again, and recomitting
1258 johnm 1.90
1259     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1260    
1261     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1262     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1263     +hardened-sources-2.6.16-r4.ebuild:
1264     Fix numerous security vulns
1265 solar 1.89
1266     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1267    
1268     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1269     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1270     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1271     - security bump for bug #112791. Removed old ebuilds
1272 johnm 1.88
1273     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1274    
1275     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1276     +hardened-sources-2.6.16-r3.ebuild:
1277     Removing silly localversion which I missed
1278 johnm 1.87
1279     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1280    
1281     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1282     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1283     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1284 johnm 1.86
1285     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1286    
1287     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1288     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1289     +hardened-sources-2.6.16-r2.ebuild:
1290     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1291     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1292 johnm 1.85
1293     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1294    
1295     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1296     +hardened-sources-2.6.16-r1.ebuild:
1297     Bumping to include ppc build fix and 2.6.16.3
1298 tsunam 1.84
1299     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1300     hardened-sources-2.6.14-r6.ebuild:
1301     Stable on x86; bug #127718
1302 johnm 1.83
1303     *hardened-sources-2.6.16 (31 Mar 2006)
1304    
1305     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1306     +hardened-sources-2.6.16.ebuild:
1307     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1308     2.6.16.1
1309 cryos 1.82
1310     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1311     hardened-sources-2.6.14-r6.ebuild:
1312     Stable on amd64, bug 127718.
1313 nixnut 1.81
1314     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1315     Stable on ppc. Bug #127718
1316 johnm 1.80
1317     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1318     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1319     -hardened-sources-2.6.14-r4.ebuild:
1320     Cleanup.
1321 johnm 1.79
1322     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1323    
1324     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1325     +hardened-sources-2.6.14-r6.ebuild:
1326     Fixes grsec policy recreation bug and adds a
1327     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1328 solar 1.78
1329     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1330     - stable on x86
1331 hansmi 1.77
1332     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1333     hardened-sources-2.6.14-r5.ebuild:
1334     Stable on ppc.
1335 johnm 1.76
1336     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1337    
1338     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1339     +hardened-sources-2.6.14-r5.ebuild:
1340     fixing every known exploit
1341 solar 1.75
1342     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1343    
1344     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1345     +hardened-sources-2.4.32-r2.ebuild:
1346     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1347 solar 1.74
1348     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1349    
1350     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1351     - version bump for new genpatches which fix up a few sec holes
1352 solar 1.73
1353     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1354    
1355     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1356     - revision bump to add misc vital linux kernel security patches.
1357 johnm 1.72
1358     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1359    
1360     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1361     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1362     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1363 johnm 1.71
1364     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1365     hardened-sources-2.6.14-r2.ebuild:
1366     making x86 & amd64 stable following testing.
1367 johnm 1.70
1368     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1369    
1370     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1371     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1372     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1373     network hooks.
1374 johnm 1.69
1375     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1376     hardened-sources-2.6.14-r1.ebuild:
1377     bumping to stable early for sec fix on x86 & amd64
1378 johnm 1.68
1379     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1380    
1381     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1382     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1383     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1384 solar 1.67
1385     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1386     - stable on x86 security bug #114227 CAN-2005-3257
1387 kang 1.66
1388     *hardened-sources-2.4.32 (19 Nov 2005)
1389    
1390     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1391     +hardened-sources-2.4.32.ebuild:
1392     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1393     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1394     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1395     rsbac >> /etc/portage/package.use)
1396 johnm 1.65
1397     *hardened-sources-2.6.14 (14 Nov 2005)
1398    
1399     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1400     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1401     Bumping 2.6 series to 2.6.14.2
1402 johnm 1.64
1403     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1404    
1405     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1406     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1407     +hardened-sources-2.6.13-r2.ebuild:
1408     Fixes minor build error in ppc.
1409 johnm 1.63
1410     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1411    
1412     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1413     +hardened-sources-2.6.13-r1.ebuild:
1414     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1415     2.6.13.4, fixes some major amd64 stability problems.
1416 johnm 1.62
1417     *hardened-sources-2.6.13 (16 Sep 2005)
1418    
1419     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1420     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1421     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1422     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1423     users should test this thoroughly.
1424 solar 1.61
1425     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1426     - stable on x86
1427 johnm 1.60
1428     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1429    
1430     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1431     +hardened-sources-2.6.11-r15.ebuild:
1432     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1433     grsec redefining curr_ip struct.
1434 solar 1.59
1435     *hardened-sources-2.4.31 (20 Jun 2005)
1436    
1437     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1438     initial import of 2.4.31 tree
1439 johnm 1.58
1440     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1441    
1442     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1443     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1444     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1445     naming scheme to abide by genpatches
1446 johnm 1.57
1447     *hardened-sources-2.6.11-r13 (18 May 2005)
1448    
1449     18 May 2005; John Mylchreest <johnm@gentoo.org>
1450     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1451     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1452     target. sorry about that. Fixes bug #93022
1453 johnm 1.56
1454     *hardened-sources-2.6.11-r12 (17 May 2005)
1455    
1456     17 May 2005; John Mylchreest <johnm@gentoo.org>
1457     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1458     +hardened-sources-2.6.11-r12.ebuild:
1459     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1460     merges in genpatches-base
1461 johnm 1.55
1462     *hardened-sources-2.6.11-r12 (17 May 2005)
1463    
1464     17 May 2005; John Mylchreest <johnm@gentoo.org>
1465     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1466     +hardened-sources-2.6.11-r12.ebuild:
1467     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1468     merges in genpatches-base
1469 solar 1.54
1470     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1471     -files/2.4.27-cmdline-race.patch,
1472     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1473     -files/2.4.28-grsec-binfmt_a.out.patch,
1474     -files/2.4.28-grsec-cmdline-race.patch,
1475     -files/2.4.28-selinux-binfmt_a.out.patch,
1476     -files/2.4.28-selinux-cmdline-race.patch,
1477     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1478     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1479     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1480     cleanup..
1481 solar 1.53
1482     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1483    
1484     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1485     - disable aout by default
1486 solar 1.52
1487     *hardened-sources-2.4.30 (18 Apr 2005)
1488    
1489     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1490     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1491     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1492     use
1493 tocharian 1.50
1494 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1495    
1496     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1497     +hardened-sources-2.4.29.ebuild:
1498     New hardened-patches-2.4-29.0 patchball.
1499     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1500    
1501     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1502    
1503     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1504     +hardened-sources-2.4.28-r5.ebuild:
1505     Added a fix for a PaX vulnerability.
1506    
1507     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1508 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1509     Stable on x86
1510 solar 1.49
1511     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1512     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1513     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1514     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1515     - fixed/added RDEPEND= in all kernel-2 ebuilds
1516 tocharian 1.48
1517     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1518    
1519     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1520     +hardened-sources-2.4.28-r4.ebuild:
1521     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1522     backport of neighbour hash updates.
1523 tocharian 1.47
1524     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1525     hardened-sources-2.4.28-r3.ebuild:
1526     Stable on x86
1527 tseng 1.46
1528     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1529    
1530     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1531     +hardened-sources-2.6.10-r3.ebuild:
1532     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1533     in 2005.0
1534 tocharian 1.45
1535     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1536     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1537     hardened-sources-2.4.28-r2.ebuild:
1538     Mark stable on x86
1539 tocharian 1.44
1540     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1541    
1542     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1543     +hardened-sources-2.4.28-r3.ebuild:
1544     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1545 tocharian 1.43
1546     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1547     hardened-sources-2.4.28.ebuild:
1548     Mark stable on x86.
1549 tocharian 1.42
1550     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1551    
1552     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1553     +hardened-sources-2.4.28-r2.ebuild:
1554     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1555     Mazinger for grsecurity patches as well.
1556 plasmaroo 1.41
1557     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1558    
1559     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1560     Security bump. Thank tocharian for rolling a new patchset...
1561 solar 1.40
1562     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1563     +files/2.4.28-grsec-cmdline-race.patch,
1564     +files/2.4.28-selinux-binfmt_a.out.patch,
1565     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1566     - Round up remaining security patches that appear to be missing in 2.4.28. -
1567     PaX standalone updated to current. hgpv=28.1
1568 solar 1.39
1569     *hardened-sources-2.4.28 (28 Nov 2004)
1570    
1571     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1572     security bump. Thank tocharian for rolling a new patchset
1573 scox 1.31
1574 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1575    
1576     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1577     +hardened-sources-2.4.27-r3.ebuild:
1578     Applies the new 2.4-27.2 patchball which updates
1579     GRSecurity to the 2.0.1 version.
1580    
1581 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1582    
1583     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1584     +hardened-sources-2.4.27-r2.ebuild:
1585     Version bump.
1586     This version uses the new 2.4-27.1 patchball which updates
1587     both the SELinux PaX hooks patch and the SELinux headers.
1588    
1589 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1590    
1591     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1592     +hardened-sources-2.4.27-r1.ebuild,
1593     -hardened-sources-2.4.27.ebuild,
1594     +files/2.4.27-cmdline-race.patch:
1595     Version bump, fix for cmdline race. See bug #59905.
1596    
1597     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1598    
1599     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1600     +hardened-sources-2.4.26-r6.ebuild,
1601     -hardened-sources-2.4.26-r5.ebuild,
1602     -hardened-sources-2.4.26-r4.ebuild,
1603     +files/2.4.26-cmdline-race.patch:
1604     Version bump, fix for cmdline race. See bug #59905.
1605    
1606 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1607    
1608     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1609     +hardened-sources-2.4.27.ebuild,
1610     +files/2.4.27-CAN-2004-0394.patch:
1611     Ported the patchball to the 2.4.27 kernel version.
1612    
1613 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1614    
1615     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1616     +hardened-sources-2.4.26-r5.ebuild:
1617 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1618 scox 1.34 It adds the following features:
1619     - Squashfs
1620     - Ebtables
1621     - Netdev random (core+drivers)
1622     - Watchdog Timer (WDT) fix.
1623    
1624 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1625    
1626     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1627     +hardened-sources-2.4.26-r4.ebuild,
1628     +files/2.4.26-CAN-2004-0415.patch,
1629     -hardened-sources-2.4.26-3:
1630     Version bump, fix for CAN 0415, see bug #59378.
1631    
1632 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1633    
1634     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1635     +hardened-sources-2.4.26-r3.ebuild,
1636     +files/2.4.26-CAN-2004-0497.patch,
1637     -hardened-sources-2.4.26-r2.ebuild:
1638     Version bump, fixed CAN 0497, see bug #56171.
1639    
1640 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1641    
1642     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1643 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1644 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1645     +files/2.4.26-CAN-2004-0535.patch,
1646     -hardened-sources-2.4.26-r1.ebuild:
1647     Fixes for both CAN 0495 and 0535, see bug #54976
1648 pvdabeel 1.27
1649 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1650     hardened-sources-2.4.26-r1.ebuild:
1651     QA - fix use invocation
1652 scox 1.28
1653     *hardened-sources-2.4.26-r1 (22 June 2004)
1654    
1655     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1656     +hardened-sources-2.4.26-r1.ebuild,
1657     +files/2.4.26-CAN-2004-0394.patch,
1658     +files/2.4.26-signal-race.patch,
1659     -hardened-sources-2.4.26.ebuild,
1660     -hardened-sources-2.4.24-r3.ebuild:
1661     Version bump for the CAN-2004-0394 issue and bug #53804
1662     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1663    
1664    
1665 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1666     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1667     Masked hardened-sources-2.4.26.ebuild broken for ppc
1668    
1669     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1670     hardened-sources-2.4.24-r3.ebuild:
1671     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1672 plasmaroo 1.25
1673 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1674    
1675     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1676     +hardened-sources-2.4.26.ebuild:
1677     Updated hardened-sources for the 2.4.26 kernel
1678     Removed broken components, updated almost everything.
1679    
1680 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1681    
1682     17 Apr 2004; <plasmaroo@gentoo.org>
1683     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1684     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1685     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1686     +hardened-sources-2.4.24-r3.ebuild:
1687     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1688     vulnerabilities. Old revisions removed.
1689 plasmaroo 1.24
1690     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1691    
1692     15 Apr 2004; <plasmaroo@gentoo.org>
1693     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1694     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1695     Version bump for the CAN-2004-0109 issue; bug #47881.
1696 aliz 1.23
1697     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1698     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1699     Add eutils to inherit.
1700 plasmaroo 1.22
1701     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1702    
1703     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1704     files/hardened-sources-2.4.24.munmap.patch:
1705     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1706 scox 1.19
1707 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1708 scox 1.26
1709 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1710     hardened-sources-2.4.24.ebuild:
1711     Version bump, updated most of the components.
1712     This release includes the following:
1713    
1714     - Hardened security
1715     - Netfilter patch-o-matic 20031219
1716     - FreeSWAN 2.04 & x509 1.4.8
1717     - EVMS 2.2.2
1718     - XFS 1.3.1
1719     - cryptoloop jari
1720     - grsecurity 2.0-rc4
1721     - SELinux
1722     - PaX 200402060000
1723     - PaX Obscurity 200308302223
1724     - Others...
1725    
1726     Neither -ck nor systrace are included anymore.
1727    
1728 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1729    
1730     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1731     hardened-sources-2.4.22-r2.ebuild:
1732 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1733 scox 1.19
1734     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1735 iggy 1.17
1736     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1737 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1738 iggy 1.16
1739     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1740 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1741     Version bump for the 'do_brk' vulnerability.
1742 iggy 1.15
1743     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1744     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1745     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1746     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1747 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1748 frogger 1.14
1749     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1750     hardened-sources-2.4.22.ebuild:
1751 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1752     components. These are no longer handled in the kernel
1753     so this code was not necessary.
1754 frogger 1.13
1755     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1756     New 2.4.22 based hardened-sources thanks to
1757     Phil West <p.west@computer.org>.
1758    
1759     These sources include:
1760 plasmaroo 1.18 - New SELinux API
1761     - Updated CK-base
1762     - Updated GRSec
1763     - Systrace
1764     - SuperFreeS/WAN 1.99.8
1765     - Propolice kernel build support
1766     - EVMS
1767     - Other various security related patches
1768 frogger 1.11
1769 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1770    
1771     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1772     Updated hardened-sources based on the 2.4.21 Linux kernel.
1773     This includes updates to most major components such as:
1774 plasmaroo 1.18 - ck-base-0306300059
1775     - selinux-2.4-2003071106
1776     - grsecurity-2.0-rc1
1777     - Updated IPTables patch-o-matic
1778     - Updated SuperFreeS/WAN
1779    
1780 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1781     updated patch set ready for the 2.4.21 based kernel.
1782    
1783 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1784     Initial import of hardened-sources-2.4.20-r4. This revision
1785     includes only a few changes, but one of these is an important
1786     security fix. It is recommended all users of hardened-sources
1787     upgrade to this release.
1788 plasmaroo 1.18
1789 frogger 1.11 - ioperm bug fix
1790     - fixed compilation failure when building without GRSec
1791 plasmaroo 1.18
1792 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1793     due to time constraints, but is planned for inclusion in the near
1794     future.
1795 msterret 1.10
1796     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1797    
1798     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1799     hardened-sources-2.4.20-r3.ebuild:
1800 plasmaroo 1.18 Add Header...
1801 frogger 1.9
1802     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1803     hardened-sources-2.4.20-r3.ebuild:
1804     Removed warnings from ebuild. This kernel should be safe to
1805     use at this point.
1806 frogger 1.8
1807     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1808    
1809     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1810     hardened-sources-2.4.20-r3.ebuild:
1811     New revision. Includes the following changes over -r2:
1812 plasmaroo 1.18
1813 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1814     - Super FreeS/WAN 1.99.7rc2
1815     - PaX for the LSM/SELinux branch
1816     - GRSecurity 2.0-pre4 (role based access control)
1817     - Systrace 1.3
1818     - EXT3 fixes
1819     - EVMS 2.0.1
1820     - GCC 3.1+ compile optimizations
1821     - ProPolice kernel build support
1822     - Hashing table security fixes
1823 frogger 1.3
1824     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1825 frogger 1.7
1826     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1827     Initial import of hardened-sources-r2. This new
1828     ebuild includes many new performance and security
1829     related patches. As in -r1, it will patch in
1830     LSM/SELinux if "selinux" is in USE, otherwise it
1831     will patch in GRSecurity. The following patches
1832     are included in this revision:
1833 plasmaroo 1.18
1834 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1835     (pulled from the base CK patch)
1836     - ptrace exploit patch for the LSM kernel
1837     (the GRSec patch already fixes this)
1838     - LSM 2.4-2003040709
1839     - SELinux 2.4-2003040709
1840     - Systrace v1.2
1841     - IPTables patch-o-matic base patches - 20030107
1842     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1843     - Super FreeS/WAN 1.99.6.1
1844     - GRSecurity 1.9.9g
1845     - MPPE
1846     - EXT3 data journal fix
1847     - CIPE 1.5.4
1848 frogger 1.6
1849     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1850     hardened-sources-2.4.20-r1.ebuild, manifest:
1851 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1852 frogger 1.5
1853     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1854     hardened-sources-2.4.20-r1.ebuild:
1855     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1856     is patched in instead. Ptrace patches for selinux have also been added. In
1857     either case, systrace support will be patched in as well.
1858 frogger 1.3
1859     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1860     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1861 plasmaroo 1.18 Revision bump for new sources.
1862 frogger 1.4
1863 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1864 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1865 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1866 method 1.1
1867 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1868    
1869 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1870     hardened-sources-2.4.20.ebuild:
1871 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20