/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.318 - (hide annotations) (download)
Wed Jun 30 16:37:15 2010 UTC (4 years, 3 months ago) by blueness
Branch: MAIN
Changes since 1.317: +7 -1 lines
New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
(Portage version: 2.1.8.3/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.318 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.317 2010/06/29 19:22:09 blueness Exp $
4    
5     *hardened-sources-2.6.32-r10 (30 Jun 2010)
6    
7     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
8     +hardened-sources-2.6.32-r10.ebuild:
9     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
10 blueness 1.317
11     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
12     Added myself to the metadata.xml
13 chainsaw 1.316
14     *hardened-sources-2.6.32-r9 (11 Jun 2010)
15    
16     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
17     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
18 chainsaw 1.315
19     *hardened-sources-2.6.32-r8 (01 Jun 2010)
20    
21     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
22     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
23 chainsaw 1.314
24     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
25     Update SRC_URI to point to mirror network now that the distfile has
26     propagated.
27 chainsaw 1.313
28     *hardened-sources-2.6.32-r7 (26 May 2010)
29    
30     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
31     metadata.xml:
32     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
33     Summers.
34 robbat2 1.312
35     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
36     Update Manifest for deblob support in kernel-2 eclass.
37 nixnut 1.311
38     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
39     ppc stable
40 gengor 1.310
41     29 May 2009; Gordon Malm <gengor@gentoo.org>
42     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
43     Stable amd64/x86 and remove old.
44 gengor 1.309
45     *hardened-sources-2.6.29 (25 May 2009)
46    
47     25 May 2009; Gordon Malm <gengor@gentoo.org>
48     +hardened-sources-2.6.29.ebuild:
49     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
50     release candidates.
51 gengor 1.308
52     *hardened-sources-2.6.28-r9 (25 May 2009)
53    
54     25 May 2009; Gordon Malm <gengor@gentoo.org>
55     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
56     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
57 gengor 1.307
58     *hardened-sources-2.6.28-r8 (18 May 2009)
59    
60     18 May 2009; Gordon Malm <gengor@gentoo.org>
61     +hardened-sources-2.6.28-r8.ebuild:
62     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
63     and #262862 among others.
64 gengor 1.306
65     01 May 2009; Gordon Malm <gengor@gentoo.org>
66     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
67     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
68     Remove unnecessary mirror://gentoo from SRC_URI.
69 nixnut 1.305
70     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
71     ppc stable
72 gengor 1.304
73     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
74     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
75     Stable amd64/x86 and remove old.
76 gengor 1.303
77     *hardened-sources-2.6.28-r7 (27 Mar 2009)
78    
79     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
80     +hardened-sources-2.6.28-r7.ebuild:
81     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
82 gengor 1.302
83     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
84     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
85     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
86     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
87     Stable amd64/x86 and remove old versions.
88 nixnut 1.301
89     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
90     ppc stable
91 gengor 1.300
92     *hardened-sources-2.6.28-r6 (21 Mar 2009)
93    
94     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
95     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
96     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
97 gengor 1.299
98     *hardened-sources-2.6.28-r5 (20 Mar 2009)
99    
100     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
101     +hardened-sources-2.6.28-r5.ebuild:
102     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
103 gengor 1.298
104     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
105     hardened-sources-2.6.28-r4.ebuild:
106     Stable amd64/x86.
107 gengor 1.297
108     *hardened-sources-2.6.28-r4 (18 Mar 2009)
109    
110     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
111     +hardened-sources-2.6.28-r4.ebuild:
112     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
113     compilation with CPA_DEBUG and more.
114 gengor 1.296
115     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
116     hardened-sources-2.6.28-r3.ebuild:
117     Quick stable amd64/x86.
118 gengor 1.295
119     *hardened-sources-2.6.28-r3 (15 Mar 2009)
120    
121     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
122     +hardened-sources-2.6.28-r3.ebuild:
123     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
124 nixnut 1.294
125     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
126     ppc stable
127 gengor 1.293
128     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
129     hardened-sources-2.6.28-r2.ebuild:
130     Stable amd64/x86.
131 gengor 1.292
132     *hardened-sources-2.6.28-r2 (11 Mar 2009)
133    
134     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
135     +hardened-sources-2.6.28-r2.ebuild:
136     Version bump bringing in latest grsecurity patch.
137 gengor 1.291
138     *hardened-sources-2.6.28-r1 (09 Mar 2009)
139    
140     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
141     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
142     Version bump and remove old.
143 nixnut 1.290
144     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
145     ppc stable
146 gengor 1.289
147     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
148     hardened-sources-2.6.27-r8.ebuild:
149     Remove amd64 testing keyword, bug 256226.
150 gengor 1.288
151     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
152     hardened-sources-2.6.27-r8.ebuild:
153     Revert amd64 stable, bug #256226.
154 gengor 1.287
155     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
156     hardened-sources-2.6.27-r8.ebuild:
157     Stable on amd64/x86.
158 gengor 1.286
159     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
160     -hardened-sources-2.6.27-r6.ebuild:
161     Remove old 2.6.27 release.
162 gengor 1.285
163     *hardened-sources-2.6.27-r8 (24 Feb 2009)
164    
165     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
166     +hardened-sources-2.6.27-r8.ebuild:
167     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
168     and probably more.
169 nixnut 1.284
170     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
171     ppc stable
172 gengor 1.283
173     *hardened-sources-2.6.28 (25 Jan 2009)
174    
175     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
176     +hardened-sources-2.6.28.ebuild:
177     Initial 2.6.28 release.
178 gengor 1.282
179     *hardened-sources-2.6.27-r7 (25 Jan 2009)
180    
181     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
182     +hardened-sources-2.6.27-r7.ebuild:
183     Bump to Linux 2.6.27.13.
184 gengor 1.281
185     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
186     hardened-sources-2.6.26-r9.ebuild:
187     Stable amd64/x86.
188 gengor 1.280
189     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
190     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
191     -hardened-sources-2.6.27-r5.ebuild:
192     Remove problem versions.
193 gengor 1.279
194     *hardened-sources-2.6.27-r6 (24 Jan 2009)
195    
196     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
197     +hardened-sources-2.6.27-r6.ebuild:
198     Revert PaX test29 to test30 changes. Fixes bug 256226.
199 gengor 1.277
200     *hardened-sources-2.6.27-r5 (24 Jan 2009)
201    
202     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
203     +hardened-sources-2.6.27-r5.ebuild:
204 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
205 gengor 1.277 254843.
206 gengor 1.276
207     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
208     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
209     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
210     Remove problem versions.
211 nixnut 1.275
212     23 Jan 2009; nixnut <nixnut@gentoo.org>
213     hardened-sources-2.6.25-r13.ebuild:
214     ppc stable
215 gengor 1.274
216     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
217     hardened-sources-2.6.25-r13.ebuild:
218     Fasttrack stable amd64/x86.
219 gengor 1.273
220     *hardened-sources-2.6.26-r9 (21 Jan 2009)
221    
222     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
223     +hardened-sources-2.6.26-r9.ebuild:
224 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
225 gengor 1.272
226     *hardened-sources-2.6.25-r13 (20 Jan 2009)
227    
228     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
229     +hardened-sources-2.6.25-r13.ebuild:
230 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
231 nixnut 1.271
232     20 Jan 2009; nixnut <nixnut@gentoo.org>
233     hardened-sources-2.6.25-r12.ebuild:
234     ppc stable
235 gengor 1.270
236     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
237     hardened-sources-2.6.25-r12.ebuild:
238     Stable amd64/x86.
239 gengor 1.269
240     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
241     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
242     -hardened-sources-2.6.27-r2.ebuild:
243     Clean out old versions.
244 gengor 1.268
245     *hardened-sources-2.6.27-r4 (14 Jan 2009)
246     *hardened-sources-2.6.26-r8 (14 Jan 2009)
247     *hardened-sources-2.6.25-r12 (14 Jan 2009)
248    
249     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
250     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
251     +hardened-sources-2.6.27-r4.ebuild:
252     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
253     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
254     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
255     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
256 nixnut 1.267
257     15 Dec 2008; nixnut <nixnut@gentoo.org>
258     hardened-sources-2.6.25-r11.ebuild:
259     Stable on ppc
260 gengor 1.266
261     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
262     hardened-sources-2.6.25-r11.ebuild:
263     Stable amd64/x86.
264 gengor 1.265
265     *hardened-sources-2.6.27-r3 (07 Dec 2008)
266    
267     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
268     +hardened-sources-2.6.27-r3.ebuild:
269     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
270     Fixes bug #248754, #249729 and #246607.
271 gengor 1.264
272     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
273     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
274     Remove old versions.
275 gengor 1.262
276     *hardened-sources-2.6.26-r7 (03 Dec 2008)
277     *hardened-sources-2.6.25-r11 (03 Dec 2008)
278    
279 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
280     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
281 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
282     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
283     Both include many backports from 2.6.27.{6,7} -stable releases.
284 gengor 1.261
285     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
286     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
287     Remove versions broken on ARCHes != x86/amd64.
288 gengor 1.260
289     *hardened-sources-2.6.27-r2 (24 Nov 2008)
290    
291     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
292     +hardened-sources-2.6.27-r2.ebuild:
293     Bump to Linux 2.6.27.7 and latest grsecurity patch.
294 gengor 1.259
295     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
296     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
297     Remove old versions.
298 gengor 1.258
299     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
300     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
301     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
302 nixnut 1.257
303     16 Nov 2008; nixnut <nixnut@gentoo.org>
304     hardened-sources-2.6.25-r10.ebuild:
305     Stable on ppc
306 gengor 1.256
307     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
308     hardened-sources-2.6.25-r10.ebuild:
309     Stable amd64/x86.
310 gengor 1.255
311     *hardened-sources-2.6.26-r6 (12 Nov 2008)
312    
313     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
314     +hardened-sources-2.6.26-r6.ebuild:
315     Bump to Linux 2.6.26.8 and fix security bug #245650.
316 gengor 1.254
317     *hardened-sources-2.6.25-r10 (12 Nov 2008)
318    
319     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
320     +hardened-sources-2.6.25-r10.ebuild:
321     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
322 gengor 1.253
323     *hardened-sources-2.6.27-r1 (09 Nov 2008)
324    
325     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
326     +hardened-sources-2.6.27-r1.ebuild:
327     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
328 gengor 1.252
329     *hardened-sources-2.6.27 (04 Nov 2008)
330    
331     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
332     +hardened-sources-2.6.27.ebuild:
333     Initial 2.6.27 release.
334 gengor 1.251
335     *hardened-sources-2.6.26-r5 (03 Nov 2008)
336    
337     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
338     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
339     +hardened-sources-2.6.26-r5.ebuild:
340     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
341     Clean out some old versions.
342 nixnut 1.250
343     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
344     Stable on ppc
345 gengor 1.249
346     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
347     hardened-sources-2.6.25-r9.ebuild:
348     Stable on amd64/x86.
349 gengor 1.248
350     *hardened-sources-2.6.25-r9 (26 Oct 2008)
351    
352     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
353     +hardened-sources-2.6.25-r9.ebuild:
354     Update to Linux 2.6.25.19
355 nixnut 1.247
356     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
357     Stable on ppc
358 gengor 1.246
359     *hardened-sources-2.6.26-r4 (14 Oct 2008)
360    
361     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
362     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
363     Update to latest grsecurity patch, fixing building of non-modular kernels.
364 gengor 1.245
365     *hardened-sources-2.6.26-r3 (12 Oct 2008)
366    
367     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
368     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
369     +hardened-sources-2.6.26-r3.ebuild:
370     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
371     2.6.26-r1: Removed.
372     2.6.25-r8: Stable amd64/x86.
373 gengor 1.244
374     *hardened-sources-2.6.25-r8 (09 Oct 2008)
375    
376     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
377     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
378     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
379     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
380 nixnut 1.243
381     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
382     Stable on ppc
383 gengor 1.242
384     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
385     hardened-sources-2.6.25-r7.ebuild:
386     Stable amd64/x86.
387 gengor 1.241
388     *hardened-sources-2.6.26-r2 (13 Sep 2008)
389    
390     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
391     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
392     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
393     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
394 gengor 1.240
395     *hardened-sources-2.6.25-r7 (13 Sep 2008)
396    
397     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
398     +hardened-sources-2.6.25-r7.ebuild:
399     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
400 gengor 1.239
401     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
402     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
403     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
404     hardened-sources-2.6.26-r1.ebuild:
405     Update DESCRIPTION and HGPV_URI.
406 gengor 1.238
407     *hardened-sources-2.6.25-r6 (09 Sep 2008)
408    
409     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
410     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
411     2.6.25-r6: Update to Linux 2.6.25.17.
412     2.6.24-r3: Removed.
413 gengor 1.237
414     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
415     hardened-sources-2.6.25-r5.ebuild:
416     Stable on amd64/x86
417 gengor 1.236
418     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
419     Update my email address.
420 nixnut 1.235
421     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
422     stable on ppc
423 battousai 1.234
424     *hardened-sources-2.6.26-r1 (23 Aug 2008)
425     *hardened-sources-2.6.25-r5 (23 Aug 2008)
426    
427     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
428     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
429     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
430     +hardened-sources-2.6.26-r1.ebuild:
431     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
432     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
433     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
434     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
435     (gengor).
436 solar 1.233
437     *hardened-sources-2.6.26 (18 Aug 2008)
438     *hardened-sources-2.6.25-r4 (18 Aug 2008)
439    
440     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
441     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
442     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
443     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
444     2.6.25-r2: Removed.
445 tove 1.232
446     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
447     Remove phreak from metadata.xml (#96398)
448 solar 1.231
449     *hardened-sources-2.6.25-r3 (31 Jul 2008)
450    
451     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
452     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
453     +hardened-sources-2.6.25-r3.ebuild:
454     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
455     fixes, including security bug #231750.
456 nixnut 1.230
457     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
458     Stable on ppc
459 solar 1.229
460     *hardened-sources-2.6.25-r2 (05 Jul 2008)
461    
462     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
463     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
464     +hardened-sources-2.6.25-r2.ebuild:
465     2.6.23-r4: Stable x86/amd64
466     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
467     2.6.23-r{11,12}: Removed due to multiple vulns.
468     (gengor & kerframil)
469 nixnut 1.228
470     04 Jul 2008; nixnut <nixnut@gentoo.org>
471     hardened-sources-2.6.23-r13.ebuild:
472     Stable on ppc
473 solar 1.227
474     *hardened-sources-2.6.25-r1 (30 Jun 2008)
475    
476     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
477     +hardened-sources-2.6.25-r1.ebuild:
478     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
479     grsecurity release. 2.6.23-r13: x86/amd64 stable
480 solar 1.226
481     *hardened-sources-2.6.25 (17 Jun 2008)
482     *hardened-sources-2.6.24-r3 (17 Jun 2008)
483     *hardened-sources-2.6.23-r13 (17 Jun 2008)
484    
485     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
486     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
487     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
488     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
489     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
490     2.6.25: Initial 2.6.25 release.
491 solar 1.225
492     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
493     - fasttrack to stable x86/amd64
494 swegener 1.224
495     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
496     Fix broken digest for linux-2.6.24.tar.bz2.
497 solar 1.223
498     *hardened-sources-2.6.24-r2 (11 May 2008)
499     *hardened-sources-2.6.23-r12 (11 May 2008)
500    
501     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
502     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
503     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
504     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
505     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
506     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
507     security bugs 219901, 220691, 220975, 220979, 221123. New
508     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
509     should be removed as far as I'm concerned, everything else remove due to
510     vulnerable to numerous security bugs or brokeness.
511 nixnut 1.222
512     10 May 2008; nixnut <nixnut@gentoo.org>
513     hardened-sources-2.6.23-r11.ebuild:
514     Stable on ppc
515 solar 1.221
516     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
517     - -r11 stable on x86/amd64
518 solar 1.220
519     *hardened-sources-2.6.23-r11 (01 May 2008)
520    
521     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
522     - version bump to fix ulgy linux bugs
523 phreak 1.219
524     *hardened-sources-2.6.24-r1 (30 Apr 2008)
525    
526     30 Apr 2008; Christian Heim <phreak@gentoo.org>
527     +hardened-sources-2.6.24-r1.ebuild:
528     Revision bump (thanks to Kerin and Gordon, again), pulling
529     genpatches-2.6.24-7, solving #219089. Additionally contains further security
530     fixes plus some minor updates.
531 phreak 1.218
532     *hardened-sources-2.6.23-r10 (30 Apr 2008)
533    
534     30 Apr 2008; Christian Heim <phreak@gentoo.org>
535     +hardened-sources-2.6.23-r10.ebuild:
536     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
537     Additional contains "various other fixes".
538 phreak 1.217
539     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
540     Update the longdescription in metadata, thanks to Gordon Malm.
541 nixnut 1.216
542     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
543     Stable on ppc wrt bug #213255
544 solar 1.215
545     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
546     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
547     - stable on x86/amd64 per request. Removed obsolete ebuilds
548 phreak 1.214
549     *hardened-sources-2.6.24 (07 Apr 2008)
550    
551     07 Apr 2008; Christian Heim <phreak@gentoo.org>
552     +hardened-sources-2.6.24.ebuild:
553     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
554     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
555     for the many contributions and their continued effort in #216612) based on
556     2.6.24 and genpatches-2.6.24-5.
557    
558     The current ebuild/patchset contains these things:
559     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
560     * Introduces bespoke server and workstation oriented security levels
561     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
562 phreak 1.213
563     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
564     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
565     maintaining it).
566 phreak 1.212
567     24 Mar 2008; Christian Heim <phreak@gentoo.org>
568     hardened-sources-2.4.35-r2.ebuild:
569     Fixing SRC_URI for 2.4.35-r2.
570 phreak 1.211
571     *hardened-sources-2.6.23-r9 (22 Mar 2008)
572    
573     22 Mar 2008; Christian Heim <phreak@gentoo.org>
574     +hardened-sources-2.6.23-r9.ebuild:
575     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
576     * Change the default GIDs for some grsecurity options
577     * Revamp the Hardened [Gentoo] security level and make it the default level
578     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
579     * Fix a recursive lock -- call to capable() within ptrace_attach()
580     * Fix bug that allows audit and iscsi operations to be controlled via netlink
581 solar 1.210
582     *hardened-sources-2.6.23-r8 (27 Feb 2008)
583    
584     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
585     - version bump from Kerin Millar bug 210026
586 solar 1.209
587     17 Feb 2008; <solar@gentoo.org> metadata.xml,
588     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
589     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
590     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
591     - stable on x86 and remove old ebuilds
592 solar 1.207
593     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
594 solar 1.208 - stable on amd64 per request of amd64 lead
595 solar 1.206
596     *hardened-sources-2.6.23-r7 (11 Feb 2008)
597    
598     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
599     - version bump from kerin.millar
600     Changes:
601    
602     * Bump to genpatches-base-2.6.23-9
603     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
604     * Disables COMPAT_VDSO in x86/defconfig
605     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
606 phreak 1.205
607     25 Jan 2008; Christian Heim <phreak@gentoo.org>
608     -hardened-sources-2.6.22-r8.ebuild:
609     Cleaning up old versions.
610 phreak 1.204
611     *hardened-sources-2.6.23-r6 (25 Jan 2008)
612    
613     25 Jan 2008; Christian Heim <phreak@gentoo.org>
614     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
615     Revision bump, pulling in the latest genpatches.
616 phreak 1.203
617     *hardened-sources-2.6.23-r5 (24 Dec 2007)
618    
619     24 Dec 2007; Christian Heim <phreak@gentoo.org>
620     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
621     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
622     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
623     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
624 phreak 1.202
625     24 Dec 2007; Christian Heim <phreak@gentoo.org>
626     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
627     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
628     -hardened-sources-2.6.23-r3.ebuild:
629     Cleaning out some unused, old versions.
630 phreak 1.201
631     24 Dec 2007; Christian Heim <phreak@gentoo.org>
632     hardened-sources-2.6.23-r4.ebuild:
633     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
634     in the tree for long, but there isn't much of a difference between this and
635     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
636 phreak 1.200
637     *hardened-sources-2.6.23-r4 (23 Dec 2007)
638    
639     23 Dec 2007; Christian Heim <phreak@gentoo.org>
640     +hardened-sources-2.6.23-r4.ebuild:
641     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
642 phreak 1.199
643     *hardened-sources-2.6.23-r3 (04 Dec 2007)
644    
645     04 Dec 2007; Christian Heim <phreak@gentoo.org>
646     +hardened-sources-2.6.23-r3.ebuild:
647     Revision bump, pulling in 2.6.23.9.
648 phreak 1.198
649     *hardened-sources-2.6.23-r2 (25 Nov 2007)
650    
651     25 Nov 2007; Christian Heim <phreak@gentoo.org>
652     +hardened-sources-2.6.23-r2.ebuild:
653     Updated patchset, thanks to solar.
654 phreak 1.197
655     *hardened-sources-2.6.23-r1 (31 Oct 2007)
656    
657     31 Oct 2007; Christian Heim <phreak@gentoo.org>
658     +hardened-sources-2.6.23-r1.ebuild:
659     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
660 solar 1.196
661     29 Oct 2007; <solar@gentoo.org> metadata.xml:
662     - update metadata.xml
663 phreak 1.195
664     25 Oct 2007; Christian Heim <phreak@gentoo.org>
665     hardened-sources-2.6.22-r8.ebuild:
666     Marking 2.6.22-r8 stable on amd64 and x86.
667 phreak 1.194
668     21 Oct 2007; Christian Heim <phreak@gentoo.org>
669     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
670     -hardened-sources-2.6.21-r4.ebuild:
671     Removing old ebuilds.
672 phreak 1.193
673     *hardened-sources-2.4.35-r2 (21 Oct 2007)
674    
675     21 Oct 2007; Christian Heim <phreak@gentoo.org>
676     +hardened-sources-2.4.35-r2.ebuild:
677     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
678     patches.
679 phreak 1.192
680     *hardened-sources-2.6.22-r8 (21 Oct 2007)
681    
682     21 Oct 2007; Christian Heim <phreak@gentoo.org>
683     +hardened-sources-2.6.22-r8.ebuild:
684     Yet another new patch, hopefully fixing the remaining issues we had w/
685     2.6.22. Candidate for stabling.
686 phreak 1.191
687     *hardened-sources-2.6.23 (13 Oct 2007)
688    
689     13 Oct 2007; Christian Heim <phreak@gentoo.org>
690     +hardened-sources-2.6.23.ebuild:
691     Initial hardened-sources-2.6.23. If people still have problems w/ bug
692     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
693 phreak 1.190
694     11 Oct 2007; Christian Heim <phreak@gentoo.org>
695     hardened-sources-2.6.20-r10.ebuild:
696     Pulling in yet another new genpatches version, fixing the PWC bug for real.
697 phreak 1.189
698     04 Oct 2007; Christian Heim <phreak@gentoo.org>
699     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
700     Removing old versions.
701 phreak 1.188
702     *hardened-sources-2.6.22-r7 (01 Oct 2007)
703    
704     01 Oct 2007; Christian Heim <phreak@gentoo.org>
705     +hardened-sources-2.6.22-r7.ebuild:
706     Revision bump, pulling in a newer patch. Should fix #194276.
707 phreak 1.187
708     30 Sep 2007; Christian Heim <phreak@gentoo.org>
709     hardened-sources-2.6.20-r10.ebuild:
710     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
711     Mike Doty).
712 phreak 1.186
713     *hardened-sources-2.6.22-r6 (26 Sep 2007)
714    
715     26 Sep 2007; Christian Heim <phreak@gentoo.org>
716     +hardened-sources-2.6.22-r6.ebuild:
717     Revision bump, grabbing up till Linux 2.6.22.9.
718 phreak 1.185
719     24 Sep 2007; Christian Heim <phreak@gentoo.org>
720     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
721     Cleaning up further.
722 phreak 1.184
723     *hardened-sources-2.6.20-r10 (24 Sep 2007)
724    
725     24 Sep 2007; Christian Heim <phreak@gentoo.org>
726     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
727     +hardened-sources-2.6.20-r10.ebuild:
728     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
729     revisions.
730 phreak 1.183
731     *hardened-sources-2.6.22-r5 (22 Sep 2007)
732    
733     22 Sep 2007; Christian Heim <phreak@gentoo.org>
734     +hardened-sources-2.6.22-r5.ebuild:
735     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
736 phreak 1.182
737     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
738     Removing johnm from metadata.xml (see #186467 for reference).
739 phreak 1.181
740     *hardened-sources-2.6.22-r4 (17 Sep 2007)
741    
742     17 Sep 2007; Christian Heim <phreak@gentoo.org>
743     +hardened-sources-2.6.22-r4.ebuild:
744     Revision bump, hopefully fixing all those weird PAX failures.
745 phreak 1.180
746     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
747     Updating the metadata.xml.
748 phreak 1.179
749     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
750     Removing tocharian from metadata due to his retirement (see #71718 for
751     reference).
752 phreak 1.178
753     *hardened-sources-2.6.20-r9 (30 Aug 2007)
754    
755     30 Aug 2007; Christian Heim <phreak@gentoo.org>
756     +hardened-sources-2.6.20-r9.ebuild:
757     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
758 phreak 1.177
759     29 Aug 2007; Christian Heim <phreak@gentoo.org>
760     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
761     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
762     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
763     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
764     -hardened-sources-2.6.22-r2.ebuild:
765     Removing some redundant versions.
766 phreak 1.176
767     *hardened-sources-2.4.35-r1 (29 Aug 2007)
768    
769     29 Aug 2007; Christian Heim <phreak@gentoo.org>
770     +hardened-sources-2.4.35-r1.ebuild:
771     Revision bump, new grsecurity patch.
772 phreak 1.175
773     *hardened-sources-2.6.20-r8 (26 Aug 2007)
774    
775     26 Aug 2007; Christian Heim <phreak@gentoo.org>
776     +hardened-sources-2.6.20-r8.ebuild:
777     Revision bump for Linux 2.6.20.17.
778 phreak 1.174
779     *hardened-sources-2.6.22-r3 (22 Aug 2007)
780    
781     22 Aug 2007; Christian Heim <phreak@gentoo.org>
782     +hardened-sources-2.6.22-r3.ebuild:
783     Revision bump for Linux 2.6.22.4.
784 phreak 1.173
785     16 Aug 2007; Christian Heim <phreak@gentoo.org>
786     hardened-sources-2.6.22-r2.ebuild:
787     Updated patchset, to fix the alignment against 2.6.22.3.
788 phreak 1.172
789     *hardened-sources-2.6.22-r2 (16 Aug 2007)
790    
791     16 Aug 2007; Christian Heim <phreak@gentoo.org>
792     +hardened-sources-2.6.22-r2.ebuild:
793     Revision bump for Linux 2.6.22.3.
794 phreak 1.171
795     *hardened-sources-2.4.35 (16 Aug 2007)
796    
797     16 Aug 2007; Christian Heim <phreak@gentoo.org>
798     +hardened-sources-2.4.35.ebuild:
799     Version bump, initial version for Linux 2.4.35.
800 phreak 1.170
801     *hardened-sources-2.6.21-r4 (16 Aug 2007)
802    
803     16 Aug 2007; Christian Heim <phreak@gentoo.org>
804     +hardened-sources-2.6.21-r4.ebuild:
805     Revision bump for Linux 2.6.21.6.
806 phreak 1.169
807     *hardened-sources-2.6.20-r7 (16 Aug 2007)
808    
809     16 Aug 2007; Christian Heim <phreak@gentoo.org>
810     +hardened-sources-2.6.20-r7.ebuild:
811     Revision bump for Linux 2.6.20.16.
812 phreak 1.168
813     *hardened-sources-2.6.22-r1 (13 Aug 2007)
814    
815     13 Aug 2007; Christian Heim <phreak@gentoo.org>
816     +hardened-sources-2.6.22-r1.ebuild:
817     Yet another revision bump.
818 phreak 1.167
819     *hardened-sources-2.6.22 (10 Aug 2007)
820    
821     10 Aug 2007; Christian Heim <phreak@gentoo.org>
822     +hardened-sources-2.6.22.ebuild:
823     Initial release for 2.6.22. If you are using hardened-sources on a desktop
824     machine (P4 or newer), be aware you might need to disable
825     CONFIG_PAX_PAGEEXEC.
826 phreak 1.166
827     04 Aug 2007; Christian Heim <phreak@gentoo.org>
828     hardened-sources-2.6.20-r6.ebuild:
829     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
830     2.6.20.15.
831 phreak 1.165
832     10 Jul 2007; Christian Heim <phreak@gentoo.org>
833     hardened-sources-2.6.20-r5.ebuild:
834     Marking hardened-sources-2.6.20-r5 stable on ppc.
835 phreak 1.164
836     10 Jul 2007; Christian Heim <phreak@gentoo.org>
837     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
838     Cleanup.
839 phreak 1.163
840     *hardened-sources-2.6.20-r6 (08 Jul 2007)
841    
842     08 Jul 2007; Christian Heim <phreak@gentoo.org>
843     +hardened-sources-2.6.20-r6.ebuild:
844     Revision bump, grabbing yet another stable release.
845 phreak 1.162
846     17 Jun 2007; Christian Heim <phreak@gentoo.org>
847     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
848     -hardened-sources-2.6.21-r2.ebuild:
849     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
850     alpha stable KEYWORD by mistake.
851 phreak 1.161
852     17 Jun 2007; Christian Heim <phreak@gentoo.org>
853     hardened-sources-2.6.20-r5.ebuild:
854     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
855     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
856 phreak 1.160
857     *hardened-sources-2.6.21-r3 (12 Jun 2007)
858    
859     12 Jun 2007; Christian Heim <phreak@gentoo.org>
860     +hardened-sources-2.6.21-r3.ebuild:
861     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
862     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
863     love.
864 phreak 1.159
865     *hardened-sources-2.6.20-r5 (11 Jun 2007)
866    
867     11 Jun 2007; Christian Heim <phreak@gentoo.org>
868     +hardened-sources-2.6.20-r5.ebuild:
869     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
870     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
871     love.
872 pappy 1.158
873     *hardened-sources-2.4.34.5 (11 Jun 2007)
874    
875     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
876     +hardened-sources-2.4.34.5.ebuild:
877     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
878 phreak 1.157
879     30 May 2007; Christian Heim <phreak@gentoo.org>
880     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
881     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
882     stale ebuild(s).
883 phreak 1.156
884     30 May 2007; Christian Heim <phreak@gentoo.org>
885     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
886     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
887     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
888     Doing some cleanups, remove stale ebuilds.
889 phreak 1.155
890     26 May 2007; Christian Heim <phreak@gentoo.org>
891     hardened-sources-2.6.21-r2.ebuild:
892     Fixing the grsecurity patch, had one '};' too much.
893 phreak 1.154
894     *hardened-sources-2.6.21-r2 (26 May 2007)
895    
896     26 May 2007; Christian Heim <phreak@gentoo.org>
897     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
898     +hardened-sources-2.6.21-r2.ebuild:
899     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
900     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
901 phreak 1.153
902     *hardened-sources-2.6.20-r4 (26 May 2007)
903    
904     26 May 2007; Christian Heim <phreak@gentoo.org>
905     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
906     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
907 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
908 phreak 1.152
909     15 May 2007; Christian Heim <phreak@gentoo.org>
910     hardened-sources-2.6.20-r3.ebuild:
911     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
912     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
913     grsecurity patch fail in that exact same hunk.
914 phreak 1.151
915     *hardened-sources-2.6.20-r3 (15 May 2007)
916    
917     15 May 2007; Christian Heim <phreak@gentoo.org>
918     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
919     Revision bump, incorporating Linux 2.6.20.11.
920    
921     *hardened-sources-2.6.21-r1 (11 May 2007)
922    
923     11 May 2007; Christian Heim <phreak@gentoo.org>
924     +hardened-sources-2.6.21-r1.ebuild:
925     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
926     mentioned in #177234.
927 kevquinn 1.150
928     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
929     files/digest-hardened-sources-2.6.21, Manifest:
930     Fix Manifest/digest for linux-2.6.21.tar.bz2
931 phreak 1.149
932     06 May 2007; Christian Heim <phreak@gentoo.org>
933     hardened-sources-2.6.21.ebuild:
934     Bumping the hardened-patches version, needed for the fix for #177234.
935 phreak 1.148
936     *hardened-sources-2.6.21 (02 May 2007)
937    
938     02 May 2007; Christian Heim <phreak@gentoo.org>
939     +hardened-sources-2.6.21.ebuild:
940     Version bump, Linux 2.6.21-hardened.
941 phreak 1.147
942     29 Apr 2007; Christian Heim <phreak@gentoo.org>
943     hardened-sources-2.6.20-r2.ebuild:
944     Adding ~ia64 on Ned's request.
945 phreak 1.146
946     29 Apr 2007; Christian Heim <phreak@gentoo.org>
947     hardened-sources-2.6.20-r2.ebuild:
948     Fixing the included grsecurity patch, wasn't alligning due to the Index:
949     header line(s).
950 phreak 1.145
951     29 Apr 2007; Christian Heim <phreak@gentoo.org>
952     hardened-sources-2.6.20-r2.ebuild:
953     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
954 armin76 1.144
955     *hardened-sources-2.6.20-r2 (10 Apr 2007)
956    
957     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
958     +hardened-sources-2.6.20-r2.ebuild:
959     Version bump, on behalf of phreak
960 phreak 1.143
961     *hardened-sources-2.6.20-r1 (04 Apr 2007)
962    
963     04 Apr 2007; Christian Heim <phreak@gentoo.org>
964     +hardened-sources-2.6.20-r1.ebuild:
965     Revision bump, grabbing a newer grsecurity snapshot.
966 phreak 1.142
967     *hardened-sources-2.6.20 (25 Mar 2007)
968    
969     25 Mar 2007; Christian Heim <phreak@gentoo.org>
970     +hardened-sources-2.6.20.ebuild:
971     Finally a hardened-sources version for 2.6.20; many people have been waiting
972     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
973     testbox.
974 chainsaw 1.141
975     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
976     hardened-sources-2.6.18-r6.ebuild:
977     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
978 phreak 1.140
979     *hardened-sources-2.6.18-r6 (16 Mar 2007)
980    
981     16 Mar 2007; Christian Heim <phreak@gentoo.org>
982     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
983     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
984     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
985     supposed to be.
986 phreak 1.139
987     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
988     Fixing the Manifest, the previous one was broken (as in still had the
989     deleted ebuild in it).
990 phreak 1.138
991     06 Mar 2007; Christian Heim <phreak@gentoo.org>
992     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
993     +hardened-sources-2.6.18-r5.ebuild:
994     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
995     Linux 2.6.18.8. Also cleaning up the older version.
996    
997     *hardened-sources-2.6.18-r5 (06 Mar 2007)
998    
999     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1000     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1001     +hardened-sources-2.6.18-r5.ebuild:
1002     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1003     Linux 2.6.18.8. Also cleaning up the older version.
1004 phreak 1.137
1005     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1006     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1007     -hardened-sources-2.6.19-r5.ebuild:
1008     Removing some of the old version, that didn't work.
1009 phreak 1.136
1010     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1011    
1012     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1013     +hardened-sources-2.6.19-r6.ebuild:
1014     Revision bump, including a new grsec version fixing #166235.
1015 pappy 1.134
1016     *hardened-sources-2.4.34 (24 Jan 2007)
1017    
1018     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1019 pappy 1.135 Manifest:
1020     updating Manifest with checksums of new tarball and ebuild
1021    
1022     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1023 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1024     I added new hardened sources 2.4 update, this is a critical path
1025     security bugfix - all users of h-s are strongly advised
1026     to update their existing hardened sources to this version.
1027     It contains a fix for a kernel vulnerability that is pertaining
1028     to the PaX changes to virtual memory management, possibly leading
1029     to a local kernel exploit ... see grsecurity.net forums and homepage
1030 phreak 1.133
1031     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1032     files/digest-hardened-sources-2.6.19-r5, Manifest:
1033     Fixing the patch-tarball digest.
1034 phreak 1.132
1035     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1036    
1037     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1038     +hardened-sources-2.6.19-r5.ebuild:
1039     Revision bump, closing the recently discovered PaX expand_stack()
1040     vulnerability.
1041 phreak 1.131
1042     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1043    
1044     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1045     +hardened-sources-2.6.19-r4.ebuild:
1046     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1047     dropping the randomized PID feature.
1048 opfer 1.130
1049     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1050     hardened-sources-2.4.33.4.ebuild:
1051     stable x86, bug #161171
1052 phreak 1.129
1053     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1054    
1055     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1056     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1057     Revision bump for bug #157186 and #158786.
1058 phreak 1.128
1059     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1060    
1061     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1062     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1063     Revision bump for bug #157186.
1064 phreak 1.127
1065     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1066    
1067     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1068     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1069     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1070 phreak 1.126
1071     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1072     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1073     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1074     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1075     hardened-sources-2.6.19-r1.ebuild:
1076     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1077     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1078 pappy 1.125
1079     *hardened-sources-2.4.33.4 (17 Dec 2006)
1080    
1081     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1082     +hardened-sources-2.4.33.4.ebuild:
1083     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1084     and quilting
1085 phreak 1.124
1086     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1087    
1088     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1089     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1090     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1091     for reporting).
1092 phreak 1.123
1093     *hardened-sources-2.6.19 (13 Dec 2006)
1094    
1095     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1096     +hardened-sources-2.6.19.ebuild:
1097     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1098     Brad for providing that prompt update.
1099 phreak 1.122
1100     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1101    
1102     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1103     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1104     +hardened-sources-2.6.18-r3.ebuild:
1105     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1106     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1107 phreak 1.121
1108     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1109     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1110 nixnut 1.120
1111     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1112     Stable on ppc wrt bug 157356
1113 opfer 1.119
1114     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1115     hardened-sources-2.6.18.ebuild:
1116     stable x86, bug #157356
1117 phreak 1.118
1118     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1119    
1120     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1121     +hardened-sources-2.6.18-r2.ebuild:
1122     Revision bump, including 2.6.18.5 (via genpatches) and
1123     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1124     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1125     redesign.
1126 phreak 1.117
1127     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1128     hardened-sources-2.6.18.ebuild:
1129     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1130     of Mike Doty).
1131 phreak 1.116
1132     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1133    
1134     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1135     +hardened-sources-2.6.18-r1.ebuild:
1136     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1137 phreak 1.115
1138     *hardened-sources-2.6.18 (11 Nov 2006)
1139    
1140     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1141     +hardened-sources-2.6.18.ebuild:
1142     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1143 solar 1.114
1144     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1145     - mark amd64 stable also. bug #151877
1146 solar 1.113
1147     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1148     - mark 2.6.17-r1 stable
1149 phreak 1.112
1150     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1151     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1152     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1153 phreak 1.111
1154     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1155    
1156     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1157     +hardened-sources-2.6.17-r1.ebuild:
1158     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1159     grsecurity patch.
1160 phreak 1.110
1161     *hardened-sources-2.6.17 (17 Aug 2006)
1162    
1163     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1164     +hardened-sources-2.6.17.ebuild:
1165     Bumping the hardened-sources-2.6 series to 2.6.17, using
1166     genpatches-2.6.17-6.base.
1167 solar 1.109
1168     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1169     - stable on x86 and amd64
1170 solar 1.108
1171     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1172    
1173     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1174     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1175     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1176     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1177     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1178     crusty ebuilds
1179 johnm 1.107
1180     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1181     hardened-sources-2.6.16-r10.ebuild:
1182     marking stable on x86 and amd64
1183 solar 1.106
1184     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1185     - 2.4.32-r6 stable on x86. RSBAC state unknown
1186 kang 1.105
1187     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1188    
1189     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1190     +hardened-sources-2.4.32-r7.ebuild:
1191     Bump PaX for RSBAC to test-17
1192 johnm 1.104
1193     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1194    
1195     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1196     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1197     hardened-sources-2.6.16 bump to latest -base.
1198 solar 1.103
1199     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1200    
1201     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1202     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1203     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1204     sysctl controlable resource logging
1205 johnm 1.102
1206     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1207    
1208     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1209     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1210     push new 2.6.16 release in preparation for stable
1211 solar 1.101
1212     22 May 2006; <solar@gentoo.org> :
1213     - redigest bug 134002
1214 kang 1.100
1215     *hardened-sources-2.4.32-r5 (16 May 2006)
1216    
1217     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1218     +hardened-sources-2.4.32-r5.ebuild:
1219     Fixes rsbac common patching (new patch in new -r5 patchset)
1220 solar 1.99
1221     *hardened-sources-2.4.32-r4 (13 May 2006)
1222    
1223     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1224     +hardened-sources-2.4.32-r4.ebuild:
1225     - security bumps
1226 johnm 1.98
1227     *hardened-sources-2.6.16-r6 (03 May 2006)
1228    
1229     03 May 2006; John Mylchreest <johnm@gentoo.org>
1230     +hardened-sources-2.6.16-r6.ebuild:
1231     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1232 johnm 1.97
1233     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1234     hardened-sources-2.6.14-r8.ebuild:
1235     fix x86_64 build problem, this will delay the digest issue again for a short
1236     while but it will sort itself out
1237 johnm 1.96
1238     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1239     hardened-sources-2.6.14-r8.ebuild:
1240     bump hardened patchset
1241 antarus 1.94
1242     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1243     files/digest-hardened-sources-2.4.32-r2,
1244     files/digest-hardened-sources-2.4.32-r3,
1245     files/digest-hardened-sources-2.6.14-r8, Manifest:
1246     Fixing duff SHA256 digests: Bug # 131293
1247 johnm 1.93
1248 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1249    
1250     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1251     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1252     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1253     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1254     cleanup of old uneccessary sources
1255    
1256 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1257     fix digest
1258 johnm 1.92
1259     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1260    
1261     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1262     +hardened-sources-2.6.14-r8.ebuild:
1263     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1264 johnm 1.91
1265     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1266     Turning on gpg-signing again, and recomitting
1267 johnm 1.90
1268     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1269    
1270     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1271     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1272     +hardened-sources-2.6.16-r4.ebuild:
1273     Fix numerous security vulns
1274 solar 1.89
1275     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1276    
1277     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1278     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1279     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1280     - security bump for bug #112791. Removed old ebuilds
1281 johnm 1.88
1282     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1283    
1284     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1285     +hardened-sources-2.6.16-r3.ebuild:
1286     Removing silly localversion which I missed
1287 johnm 1.87
1288     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1289    
1290     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1291     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1292     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1293 johnm 1.86
1294     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1295    
1296     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1297     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1298     +hardened-sources-2.6.16-r2.ebuild:
1299     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1300     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1301 johnm 1.85
1302     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1303    
1304     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1305     +hardened-sources-2.6.16-r1.ebuild:
1306     Bumping to include ppc build fix and 2.6.16.3
1307 tsunam 1.84
1308     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1309     hardened-sources-2.6.14-r6.ebuild:
1310     Stable on x86; bug #127718
1311 johnm 1.83
1312     *hardened-sources-2.6.16 (31 Mar 2006)
1313    
1314     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1315     +hardened-sources-2.6.16.ebuild:
1316     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1317     2.6.16.1
1318 cryos 1.82
1319     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1320     hardened-sources-2.6.14-r6.ebuild:
1321     Stable on amd64, bug 127718.
1322 nixnut 1.81
1323     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1324     Stable on ppc. Bug #127718
1325 johnm 1.80
1326     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1327     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1328     -hardened-sources-2.6.14-r4.ebuild:
1329     Cleanup.
1330 johnm 1.79
1331     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1332    
1333     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1334     +hardened-sources-2.6.14-r6.ebuild:
1335     Fixes grsec policy recreation bug and adds a
1336     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1337 solar 1.78
1338     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1339     - stable on x86
1340 hansmi 1.77
1341     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1342     hardened-sources-2.6.14-r5.ebuild:
1343     Stable on ppc.
1344 johnm 1.76
1345     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1346    
1347     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1348     +hardened-sources-2.6.14-r5.ebuild:
1349     fixing every known exploit
1350 solar 1.75
1351     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1352    
1353     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1354     +hardened-sources-2.4.32-r2.ebuild:
1355     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1356 solar 1.74
1357     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1358    
1359     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1360     - version bump for new genpatches which fix up a few sec holes
1361 solar 1.73
1362     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1363    
1364     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1365     - revision bump to add misc vital linux kernel security patches.
1366 johnm 1.72
1367     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1368    
1369     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1370     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1371     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1372 johnm 1.71
1373     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1374     hardened-sources-2.6.14-r2.ebuild:
1375     making x86 & amd64 stable following testing.
1376 johnm 1.70
1377     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1378    
1379     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1380     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1381     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1382     network hooks.
1383 johnm 1.69
1384     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1385     hardened-sources-2.6.14-r1.ebuild:
1386     bumping to stable early for sec fix on x86 & amd64
1387 johnm 1.68
1388     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1389    
1390     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1391     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1392     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1393 solar 1.67
1394     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1395     - stable on x86 security bug #114227 CAN-2005-3257
1396 kang 1.66
1397     *hardened-sources-2.4.32 (19 Nov 2005)
1398    
1399     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1400     +hardened-sources-2.4.32.ebuild:
1401     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1402     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1403     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1404     rsbac >> /etc/portage/package.use)
1405 johnm 1.65
1406     *hardened-sources-2.6.14 (14 Nov 2005)
1407    
1408     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1409     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1410     Bumping 2.6 series to 2.6.14.2
1411 johnm 1.64
1412     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1413    
1414     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1415     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1416     +hardened-sources-2.6.13-r2.ebuild:
1417     Fixes minor build error in ppc.
1418 johnm 1.63
1419     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1420    
1421     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1422     +hardened-sources-2.6.13-r1.ebuild:
1423     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1424     2.6.13.4, fixes some major amd64 stability problems.
1425 johnm 1.62
1426     *hardened-sources-2.6.13 (16 Sep 2005)
1427    
1428     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1429     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1430     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1431     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1432     users should test this thoroughly.
1433 solar 1.61
1434     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1435     - stable on x86
1436 johnm 1.60
1437     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1438    
1439     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1440     +hardened-sources-2.6.11-r15.ebuild:
1441     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1442     grsec redefining curr_ip struct.
1443 solar 1.59
1444     *hardened-sources-2.4.31 (20 Jun 2005)
1445    
1446     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1447     initial import of 2.4.31 tree
1448 johnm 1.58
1449     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1450    
1451     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1452     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1453     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1454     naming scheme to abide by genpatches
1455 johnm 1.57
1456     *hardened-sources-2.6.11-r13 (18 May 2005)
1457    
1458     18 May 2005; John Mylchreest <johnm@gentoo.org>
1459     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1460     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1461     target. sorry about that. Fixes bug #93022
1462 johnm 1.56
1463     *hardened-sources-2.6.11-r12 (17 May 2005)
1464    
1465     17 May 2005; John Mylchreest <johnm@gentoo.org>
1466     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1467     +hardened-sources-2.6.11-r12.ebuild:
1468     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1469     merges in genpatches-base
1470 johnm 1.55
1471     *hardened-sources-2.6.11-r12 (17 May 2005)
1472    
1473     17 May 2005; John Mylchreest <johnm@gentoo.org>
1474     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1475     +hardened-sources-2.6.11-r12.ebuild:
1476     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1477     merges in genpatches-base
1478 solar 1.54
1479     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1480     -files/2.4.27-cmdline-race.patch,
1481     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1482     -files/2.4.28-grsec-binfmt_a.out.patch,
1483     -files/2.4.28-grsec-cmdline-race.patch,
1484     -files/2.4.28-selinux-binfmt_a.out.patch,
1485     -files/2.4.28-selinux-cmdline-race.patch,
1486     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1487     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1488     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1489     cleanup..
1490 solar 1.53
1491     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1492    
1493     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1494     - disable aout by default
1495 solar 1.52
1496     *hardened-sources-2.4.30 (18 Apr 2005)
1497    
1498     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1499     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1500     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1501     use
1502 tocharian 1.50
1503 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1504    
1505     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1506     +hardened-sources-2.4.29.ebuild:
1507     New hardened-patches-2.4-29.0 patchball.
1508     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1509    
1510     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1511    
1512     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1513     +hardened-sources-2.4.28-r5.ebuild:
1514     Added a fix for a PaX vulnerability.
1515    
1516     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1517 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1518     Stable on x86
1519 solar 1.49
1520     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1521     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1522     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1523     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1524     - fixed/added RDEPEND= in all kernel-2 ebuilds
1525 tocharian 1.48
1526     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1527    
1528     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1529     +hardened-sources-2.4.28-r4.ebuild:
1530     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1531     backport of neighbour hash updates.
1532 tocharian 1.47
1533     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1534     hardened-sources-2.4.28-r3.ebuild:
1535     Stable on x86
1536 tseng 1.46
1537     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1538    
1539     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1540     +hardened-sources-2.6.10-r3.ebuild:
1541     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1542     in 2005.0
1543 tocharian 1.45
1544     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1545     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1546     hardened-sources-2.4.28-r2.ebuild:
1547     Mark stable on x86
1548 tocharian 1.44
1549     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1550    
1551     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1552     +hardened-sources-2.4.28-r3.ebuild:
1553     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1554 tocharian 1.43
1555     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1556     hardened-sources-2.4.28.ebuild:
1557     Mark stable on x86.
1558 tocharian 1.42
1559     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1560    
1561     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1562     +hardened-sources-2.4.28-r2.ebuild:
1563     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1564     Mazinger for grsecurity patches as well.
1565 plasmaroo 1.41
1566     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1567    
1568     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1569     Security bump. Thank tocharian for rolling a new patchset...
1570 solar 1.40
1571     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1572     +files/2.4.28-grsec-cmdline-race.patch,
1573     +files/2.4.28-selinux-binfmt_a.out.patch,
1574     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1575     - Round up remaining security patches that appear to be missing in 2.4.28. -
1576     PaX standalone updated to current. hgpv=28.1
1577 solar 1.39
1578     *hardened-sources-2.4.28 (28 Nov 2004)
1579    
1580     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1581     security bump. Thank tocharian for rolling a new patchset
1582 scox 1.31
1583 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1584    
1585     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1586     +hardened-sources-2.4.27-r3.ebuild:
1587     Applies the new 2.4-27.2 patchball which updates
1588     GRSecurity to the 2.0.1 version.
1589    
1590 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1591    
1592     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1593     +hardened-sources-2.4.27-r2.ebuild:
1594     Version bump.
1595     This version uses the new 2.4-27.1 patchball which updates
1596     both the SELinux PaX hooks patch and the SELinux headers.
1597    
1598 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1599    
1600     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1601     +hardened-sources-2.4.27-r1.ebuild,
1602     -hardened-sources-2.4.27.ebuild,
1603     +files/2.4.27-cmdline-race.patch:
1604     Version bump, fix for cmdline race. See bug #59905.
1605    
1606     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1607    
1608     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1609     +hardened-sources-2.4.26-r6.ebuild,
1610     -hardened-sources-2.4.26-r5.ebuild,
1611     -hardened-sources-2.4.26-r4.ebuild,
1612     +files/2.4.26-cmdline-race.patch:
1613     Version bump, fix for cmdline race. See bug #59905.
1614    
1615 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1616    
1617     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1618     +hardened-sources-2.4.27.ebuild,
1619     +files/2.4.27-CAN-2004-0394.patch:
1620     Ported the patchball to the 2.4.27 kernel version.
1621    
1622 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1623    
1624     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1625     +hardened-sources-2.4.26-r5.ebuild:
1626 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1627 scox 1.34 It adds the following features:
1628     - Squashfs
1629     - Ebtables
1630     - Netdev random (core+drivers)
1631     - Watchdog Timer (WDT) fix.
1632    
1633 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1634    
1635     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1636     +hardened-sources-2.4.26-r4.ebuild,
1637     +files/2.4.26-CAN-2004-0415.patch,
1638     -hardened-sources-2.4.26-3:
1639     Version bump, fix for CAN 0415, see bug #59378.
1640    
1641 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1642    
1643     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1644     +hardened-sources-2.4.26-r3.ebuild,
1645     +files/2.4.26-CAN-2004-0497.patch,
1646     -hardened-sources-2.4.26-r2.ebuild:
1647     Version bump, fixed CAN 0497, see bug #56171.
1648    
1649 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1650    
1651     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1652 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1653 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1654     +files/2.4.26-CAN-2004-0535.patch,
1655     -hardened-sources-2.4.26-r1.ebuild:
1656     Fixes for both CAN 0495 and 0535, see bug #54976
1657 pvdabeel 1.27
1658 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1659     hardened-sources-2.4.26-r1.ebuild:
1660     QA - fix use invocation
1661 scox 1.28
1662     *hardened-sources-2.4.26-r1 (22 June 2004)
1663    
1664     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1665     +hardened-sources-2.4.26-r1.ebuild,
1666     +files/2.4.26-CAN-2004-0394.patch,
1667     +files/2.4.26-signal-race.patch,
1668     -hardened-sources-2.4.26.ebuild,
1669     -hardened-sources-2.4.24-r3.ebuild:
1670     Version bump for the CAN-2004-0394 issue and bug #53804
1671     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1672    
1673    
1674 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1675     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1676     Masked hardened-sources-2.4.26.ebuild broken for ppc
1677    
1678     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1679     hardened-sources-2.4.24-r3.ebuild:
1680     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1681 plasmaroo 1.25
1682 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1683    
1684     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1685     +hardened-sources-2.4.26.ebuild:
1686     Updated hardened-sources for the 2.4.26 kernel
1687     Removed broken components, updated almost everything.
1688    
1689 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1690    
1691     17 Apr 2004; <plasmaroo@gentoo.org>
1692     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1693     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1694     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1695     +hardened-sources-2.4.24-r3.ebuild:
1696     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1697     vulnerabilities. Old revisions removed.
1698 plasmaroo 1.24
1699     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1700    
1701     15 Apr 2004; <plasmaroo@gentoo.org>
1702     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1703     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1704     Version bump for the CAN-2004-0109 issue; bug #47881.
1705 aliz 1.23
1706     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1707     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1708     Add eutils to inherit.
1709 plasmaroo 1.22
1710     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1711    
1712     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1713     files/hardened-sources-2.4.24.munmap.patch:
1714     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1715 scox 1.19
1716 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1717 scox 1.26
1718 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1719     hardened-sources-2.4.24.ebuild:
1720     Version bump, updated most of the components.
1721     This release includes the following:
1722    
1723     - Hardened security
1724     - Netfilter patch-o-matic 20031219
1725     - FreeSWAN 2.04 & x509 1.4.8
1726     - EVMS 2.2.2
1727     - XFS 1.3.1
1728     - cryptoloop jari
1729     - grsecurity 2.0-rc4
1730     - SELinux
1731     - PaX 200402060000
1732     - PaX Obscurity 200308302223
1733     - Others...
1734    
1735     Neither -ck nor systrace are included anymore.
1736    
1737 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1738    
1739     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1740     hardened-sources-2.4.22-r2.ebuild:
1741 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1742 scox 1.19
1743     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1744 iggy 1.17
1745     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1746 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1747 iggy 1.16
1748     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1749 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1750     Version bump for the 'do_brk' vulnerability.
1751 iggy 1.15
1752     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1753     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1754     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1755     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1756 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1757 frogger 1.14
1758     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1759     hardened-sources-2.4.22.ebuild:
1760 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1761     components. These are no longer handled in the kernel
1762     so this code was not necessary.
1763 frogger 1.13
1764     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1765     New 2.4.22 based hardened-sources thanks to
1766     Phil West <p.west@computer.org>.
1767    
1768     These sources include:
1769 plasmaroo 1.18 - New SELinux API
1770     - Updated CK-base
1771     - Updated GRSec
1772     - Systrace
1773     - SuperFreeS/WAN 1.99.8
1774     - Propolice kernel build support
1775     - EVMS
1776     - Other various security related patches
1777 frogger 1.11
1778 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1779    
1780     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1781     Updated hardened-sources based on the 2.4.21 Linux kernel.
1782     This includes updates to most major components such as:
1783 plasmaroo 1.18 - ck-base-0306300059
1784     - selinux-2.4-2003071106
1785     - grsecurity-2.0-rc1
1786     - Updated IPTables patch-o-matic
1787     - Updated SuperFreeS/WAN
1788    
1789 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1790     updated patch set ready for the 2.4.21 based kernel.
1791    
1792 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1793     Initial import of hardened-sources-2.4.20-r4. This revision
1794     includes only a few changes, but one of these is an important
1795     security fix. It is recommended all users of hardened-sources
1796     upgrade to this release.
1797 plasmaroo 1.18
1798 frogger 1.11 - ioperm bug fix
1799     - fixed compilation failure when building without GRSec
1800 plasmaroo 1.18
1801 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1802     due to time constraints, but is planned for inclusion in the near
1803     future.
1804 msterret 1.10
1805     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1806    
1807     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1808     hardened-sources-2.4.20-r3.ebuild:
1809 plasmaroo 1.18 Add Header...
1810 frogger 1.9
1811     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1812     hardened-sources-2.4.20-r3.ebuild:
1813     Removed warnings from ebuild. This kernel should be safe to
1814     use at this point.
1815 frogger 1.8
1816     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1817    
1818     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1819     hardened-sources-2.4.20-r3.ebuild:
1820     New revision. Includes the following changes over -r2:
1821 plasmaroo 1.18
1822 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1823     - Super FreeS/WAN 1.99.7rc2
1824     - PaX for the LSM/SELinux branch
1825     - GRSecurity 2.0-pre4 (role based access control)
1826     - Systrace 1.3
1827     - EXT3 fixes
1828     - EVMS 2.0.1
1829     - GCC 3.1+ compile optimizations
1830     - ProPolice kernel build support
1831     - Hashing table security fixes
1832 frogger 1.3
1833     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1834 frogger 1.7
1835     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1836     Initial import of hardened-sources-r2. This new
1837     ebuild includes many new performance and security
1838     related patches. As in -r1, it will patch in
1839     LSM/SELinux if "selinux" is in USE, otherwise it
1840     will patch in GRSecurity. The following patches
1841     are included in this revision:
1842 plasmaroo 1.18
1843 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1844     (pulled from the base CK patch)
1845     - ptrace exploit patch for the LSM kernel
1846     (the GRSec patch already fixes this)
1847     - LSM 2.4-2003040709
1848     - SELinux 2.4-2003040709
1849     - Systrace v1.2
1850     - IPTables patch-o-matic base patches - 20030107
1851     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1852     - Super FreeS/WAN 1.99.6.1
1853     - GRSecurity 1.9.9g
1854     - MPPE
1855     - EXT3 data journal fix
1856     - CIPE 1.5.4
1857 frogger 1.6
1858     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1859     hardened-sources-2.4.20-r1.ebuild, manifest:
1860 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1861 frogger 1.5
1862     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1863     hardened-sources-2.4.20-r1.ebuild:
1864     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1865     is patched in instead. Ptrace patches for selinux have also been added. In
1866     either case, systrace support will be patched in as well.
1867 frogger 1.3
1868     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1869     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1870 plasmaroo 1.18 Revision bump for new sources.
1871 frogger 1.4
1872 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1873 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1874 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1875 method 1.1
1876 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1877    
1878 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1879     hardened-sources-2.4.20.ebuild:
1880 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20