/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.321 - (hide annotations) (download)
Tue Jul 13 10:18:56 2010 UTC (3 years, 9 months ago) by blueness
Branch: MAIN
Changes since 1.320: +7 -1 lines
Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
(Portage version: 2.1.8.3/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.321 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.320 2010/07/13 10:13:26 blueness Exp $
4    
5     *hardened-sources-2.6.34 (13 Jul 2010)
6    
7     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
8     +hardened-sources-2.6.34.ebuild:
9     Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
10 blueness 1.320
11     *hardened-sources-2.6.32-r11 (13 Jul 2010)
12    
13     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
14     +hardened-sources-2.6.32-r11.ebuild:
15     New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
16 chainsaw 1.319
17     06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
18     Marked stable on AMD64 as requested by Anthony G. Basile
19     <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
20     on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
21 blueness 1.318
22     *hardened-sources-2.6.32-r10 (30 Jun 2010)
23    
24     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
25     +hardened-sources-2.6.32-r10.ebuild:
26     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
27 blueness 1.317
28     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
29     Added myself to the metadata.xml
30 chainsaw 1.316
31     *hardened-sources-2.6.32-r9 (11 Jun 2010)
32    
33     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
34     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
35 chainsaw 1.315
36     *hardened-sources-2.6.32-r8 (01 Jun 2010)
37    
38     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
39     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
40 chainsaw 1.314
41     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
42     Update SRC_URI to point to mirror network now that the distfile has
43     propagated.
44 chainsaw 1.313
45     *hardened-sources-2.6.32-r7 (26 May 2010)
46    
47     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
48     metadata.xml:
49     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
50     Summers.
51 robbat2 1.312
52     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
53     Update Manifest for deblob support in kernel-2 eclass.
54 nixnut 1.311
55     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
56     ppc stable
57 gengor 1.310
58     29 May 2009; Gordon Malm <gengor@gentoo.org>
59     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
60     Stable amd64/x86 and remove old.
61 gengor 1.309
62     *hardened-sources-2.6.29 (25 May 2009)
63    
64     25 May 2009; Gordon Malm <gengor@gentoo.org>
65     +hardened-sources-2.6.29.ebuild:
66     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
67     release candidates.
68 gengor 1.308
69     *hardened-sources-2.6.28-r9 (25 May 2009)
70    
71     25 May 2009; Gordon Malm <gengor@gentoo.org>
72     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
73     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
74 gengor 1.307
75     *hardened-sources-2.6.28-r8 (18 May 2009)
76    
77     18 May 2009; Gordon Malm <gengor@gentoo.org>
78     +hardened-sources-2.6.28-r8.ebuild:
79     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
80     and #262862 among others.
81 gengor 1.306
82     01 May 2009; Gordon Malm <gengor@gentoo.org>
83     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
84     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
85     Remove unnecessary mirror://gentoo from SRC_URI.
86 nixnut 1.305
87     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
88     ppc stable
89 gengor 1.304
90     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
91     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
92     Stable amd64/x86 and remove old.
93 gengor 1.303
94     *hardened-sources-2.6.28-r7 (27 Mar 2009)
95    
96     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
97     +hardened-sources-2.6.28-r7.ebuild:
98     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
99 gengor 1.302
100     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
101     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
102     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
103     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
104     Stable amd64/x86 and remove old versions.
105 nixnut 1.301
106     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
107     ppc stable
108 gengor 1.300
109     *hardened-sources-2.6.28-r6 (21 Mar 2009)
110    
111     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
112     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
113     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
114 gengor 1.299
115     *hardened-sources-2.6.28-r5 (20 Mar 2009)
116    
117     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
118     +hardened-sources-2.6.28-r5.ebuild:
119     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
120 gengor 1.298
121     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
122     hardened-sources-2.6.28-r4.ebuild:
123     Stable amd64/x86.
124 gengor 1.297
125     *hardened-sources-2.6.28-r4 (18 Mar 2009)
126    
127     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
128     +hardened-sources-2.6.28-r4.ebuild:
129     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
130     compilation with CPA_DEBUG and more.
131 gengor 1.296
132     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
133     hardened-sources-2.6.28-r3.ebuild:
134     Quick stable amd64/x86.
135 gengor 1.295
136     *hardened-sources-2.6.28-r3 (15 Mar 2009)
137    
138     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
139     +hardened-sources-2.6.28-r3.ebuild:
140     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
141 nixnut 1.294
142     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
143     ppc stable
144 gengor 1.293
145     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
146     hardened-sources-2.6.28-r2.ebuild:
147     Stable amd64/x86.
148 gengor 1.292
149     *hardened-sources-2.6.28-r2 (11 Mar 2009)
150    
151     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
152     +hardened-sources-2.6.28-r2.ebuild:
153     Version bump bringing in latest grsecurity patch.
154 gengor 1.291
155     *hardened-sources-2.6.28-r1 (09 Mar 2009)
156    
157     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
158     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
159     Version bump and remove old.
160 nixnut 1.290
161     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
162     ppc stable
163 gengor 1.289
164     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
165     hardened-sources-2.6.27-r8.ebuild:
166     Remove amd64 testing keyword, bug 256226.
167 gengor 1.288
168     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
169     hardened-sources-2.6.27-r8.ebuild:
170     Revert amd64 stable, bug #256226.
171 gengor 1.287
172     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
173     hardened-sources-2.6.27-r8.ebuild:
174     Stable on amd64/x86.
175 gengor 1.286
176     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
177     -hardened-sources-2.6.27-r6.ebuild:
178     Remove old 2.6.27 release.
179 gengor 1.285
180     *hardened-sources-2.6.27-r8 (24 Feb 2009)
181    
182     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
183     +hardened-sources-2.6.27-r8.ebuild:
184     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
185     and probably more.
186 nixnut 1.284
187     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
188     ppc stable
189 gengor 1.283
190     *hardened-sources-2.6.28 (25 Jan 2009)
191    
192     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
193     +hardened-sources-2.6.28.ebuild:
194     Initial 2.6.28 release.
195 gengor 1.282
196     *hardened-sources-2.6.27-r7 (25 Jan 2009)
197    
198     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
199     +hardened-sources-2.6.27-r7.ebuild:
200     Bump to Linux 2.6.27.13.
201 gengor 1.281
202     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
203     hardened-sources-2.6.26-r9.ebuild:
204     Stable amd64/x86.
205 gengor 1.280
206     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
207     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
208     -hardened-sources-2.6.27-r5.ebuild:
209     Remove problem versions.
210 gengor 1.279
211     *hardened-sources-2.6.27-r6 (24 Jan 2009)
212    
213     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
214     +hardened-sources-2.6.27-r6.ebuild:
215     Revert PaX test29 to test30 changes. Fixes bug 256226.
216 gengor 1.277
217     *hardened-sources-2.6.27-r5 (24 Jan 2009)
218    
219     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
220     +hardened-sources-2.6.27-r5.ebuild:
221 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
222 gengor 1.277 254843.
223 gengor 1.276
224     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
225     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
226     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
227     Remove problem versions.
228 nixnut 1.275
229     23 Jan 2009; nixnut <nixnut@gentoo.org>
230     hardened-sources-2.6.25-r13.ebuild:
231     ppc stable
232 gengor 1.274
233     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
234     hardened-sources-2.6.25-r13.ebuild:
235     Fasttrack stable amd64/x86.
236 gengor 1.273
237     *hardened-sources-2.6.26-r9 (21 Jan 2009)
238    
239     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
240     +hardened-sources-2.6.26-r9.ebuild:
241 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
242 gengor 1.272
243     *hardened-sources-2.6.25-r13 (20 Jan 2009)
244    
245     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
246     +hardened-sources-2.6.25-r13.ebuild:
247 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
248 nixnut 1.271
249     20 Jan 2009; nixnut <nixnut@gentoo.org>
250     hardened-sources-2.6.25-r12.ebuild:
251     ppc stable
252 gengor 1.270
253     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
254     hardened-sources-2.6.25-r12.ebuild:
255     Stable amd64/x86.
256 gengor 1.269
257     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
258     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
259     -hardened-sources-2.6.27-r2.ebuild:
260     Clean out old versions.
261 gengor 1.268
262     *hardened-sources-2.6.27-r4 (14 Jan 2009)
263     *hardened-sources-2.6.26-r8 (14 Jan 2009)
264     *hardened-sources-2.6.25-r12 (14 Jan 2009)
265    
266     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
267     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
268     +hardened-sources-2.6.27-r4.ebuild:
269     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
270     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
271     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
272     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
273 nixnut 1.267
274     15 Dec 2008; nixnut <nixnut@gentoo.org>
275     hardened-sources-2.6.25-r11.ebuild:
276     Stable on ppc
277 gengor 1.266
278     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
279     hardened-sources-2.6.25-r11.ebuild:
280     Stable amd64/x86.
281 gengor 1.265
282     *hardened-sources-2.6.27-r3 (07 Dec 2008)
283    
284     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
285     +hardened-sources-2.6.27-r3.ebuild:
286     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
287     Fixes bug #248754, #249729 and #246607.
288 gengor 1.264
289     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
290     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
291     Remove old versions.
292 gengor 1.262
293     *hardened-sources-2.6.26-r7 (03 Dec 2008)
294     *hardened-sources-2.6.25-r11 (03 Dec 2008)
295    
296 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
297     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
298 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
299     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
300     Both include many backports from 2.6.27.{6,7} -stable releases.
301 gengor 1.261
302     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
303     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
304     Remove versions broken on ARCHes != x86/amd64.
305 gengor 1.260
306     *hardened-sources-2.6.27-r2 (24 Nov 2008)
307    
308     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
309     +hardened-sources-2.6.27-r2.ebuild:
310     Bump to Linux 2.6.27.7 and latest grsecurity patch.
311 gengor 1.259
312     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
313     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
314     Remove old versions.
315 gengor 1.258
316     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
317     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
318     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
319 nixnut 1.257
320     16 Nov 2008; nixnut <nixnut@gentoo.org>
321     hardened-sources-2.6.25-r10.ebuild:
322     Stable on ppc
323 gengor 1.256
324     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
325     hardened-sources-2.6.25-r10.ebuild:
326     Stable amd64/x86.
327 gengor 1.255
328     *hardened-sources-2.6.26-r6 (12 Nov 2008)
329    
330     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
331     +hardened-sources-2.6.26-r6.ebuild:
332     Bump to Linux 2.6.26.8 and fix security bug #245650.
333 gengor 1.254
334     *hardened-sources-2.6.25-r10 (12 Nov 2008)
335    
336     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
337     +hardened-sources-2.6.25-r10.ebuild:
338     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
339 gengor 1.253
340     *hardened-sources-2.6.27-r1 (09 Nov 2008)
341    
342     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
343     +hardened-sources-2.6.27-r1.ebuild:
344     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
345 gengor 1.252
346     *hardened-sources-2.6.27 (04 Nov 2008)
347    
348     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
349     +hardened-sources-2.6.27.ebuild:
350     Initial 2.6.27 release.
351 gengor 1.251
352     *hardened-sources-2.6.26-r5 (03 Nov 2008)
353    
354     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
355     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
356     +hardened-sources-2.6.26-r5.ebuild:
357     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
358     Clean out some old versions.
359 nixnut 1.250
360     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
361     Stable on ppc
362 gengor 1.249
363     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
364     hardened-sources-2.6.25-r9.ebuild:
365     Stable on amd64/x86.
366 gengor 1.248
367     *hardened-sources-2.6.25-r9 (26 Oct 2008)
368    
369     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
370     +hardened-sources-2.6.25-r9.ebuild:
371     Update to Linux 2.6.25.19
372 nixnut 1.247
373     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
374     Stable on ppc
375 gengor 1.246
376     *hardened-sources-2.6.26-r4 (14 Oct 2008)
377    
378     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
379     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
380     Update to latest grsecurity patch, fixing building of non-modular kernels.
381 gengor 1.245
382     *hardened-sources-2.6.26-r3 (12 Oct 2008)
383    
384     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
385     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
386     +hardened-sources-2.6.26-r3.ebuild:
387     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
388     2.6.26-r1: Removed.
389     2.6.25-r8: Stable amd64/x86.
390 gengor 1.244
391     *hardened-sources-2.6.25-r8 (09 Oct 2008)
392    
393     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
394     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
395     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
396     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
397 nixnut 1.243
398     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
399     Stable on ppc
400 gengor 1.242
401     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
402     hardened-sources-2.6.25-r7.ebuild:
403     Stable amd64/x86.
404 gengor 1.241
405     *hardened-sources-2.6.26-r2 (13 Sep 2008)
406    
407     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
408     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
409     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
410     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
411 gengor 1.240
412     *hardened-sources-2.6.25-r7 (13 Sep 2008)
413    
414     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
415     +hardened-sources-2.6.25-r7.ebuild:
416     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
417 gengor 1.239
418     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
419     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
420     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
421     hardened-sources-2.6.26-r1.ebuild:
422     Update DESCRIPTION and HGPV_URI.
423 gengor 1.238
424     *hardened-sources-2.6.25-r6 (09 Sep 2008)
425    
426     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
427     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
428     2.6.25-r6: Update to Linux 2.6.25.17.
429     2.6.24-r3: Removed.
430 gengor 1.237
431     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
432     hardened-sources-2.6.25-r5.ebuild:
433     Stable on amd64/x86
434 gengor 1.236
435     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
436     Update my email address.
437 nixnut 1.235
438     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
439     stable on ppc
440 battousai 1.234
441     *hardened-sources-2.6.26-r1 (23 Aug 2008)
442     *hardened-sources-2.6.25-r5 (23 Aug 2008)
443    
444     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
445     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
446     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
447     +hardened-sources-2.6.26-r1.ebuild:
448     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
449     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
450     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
451     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
452     (gengor).
453 solar 1.233
454     *hardened-sources-2.6.26 (18 Aug 2008)
455     *hardened-sources-2.6.25-r4 (18 Aug 2008)
456    
457     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
458     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
459     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
460     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
461     2.6.25-r2: Removed.
462 tove 1.232
463     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
464     Remove phreak from metadata.xml (#96398)
465 solar 1.231
466     *hardened-sources-2.6.25-r3 (31 Jul 2008)
467    
468     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
469     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
470     +hardened-sources-2.6.25-r3.ebuild:
471     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
472     fixes, including security bug #231750.
473 nixnut 1.230
474     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
475     Stable on ppc
476 solar 1.229
477     *hardened-sources-2.6.25-r2 (05 Jul 2008)
478    
479     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
480     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
481     +hardened-sources-2.6.25-r2.ebuild:
482     2.6.23-r4: Stable x86/amd64
483     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
484     2.6.23-r{11,12}: Removed due to multiple vulns.
485     (gengor & kerframil)
486 nixnut 1.228
487     04 Jul 2008; nixnut <nixnut@gentoo.org>
488     hardened-sources-2.6.23-r13.ebuild:
489     Stable on ppc
490 solar 1.227
491     *hardened-sources-2.6.25-r1 (30 Jun 2008)
492    
493     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
494     +hardened-sources-2.6.25-r1.ebuild:
495     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
496     grsecurity release. 2.6.23-r13: x86/amd64 stable
497 solar 1.226
498     *hardened-sources-2.6.25 (17 Jun 2008)
499     *hardened-sources-2.6.24-r3 (17 Jun 2008)
500     *hardened-sources-2.6.23-r13 (17 Jun 2008)
501    
502     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
503     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
504     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
505     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
506     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
507     2.6.25: Initial 2.6.25 release.
508 solar 1.225
509     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
510     - fasttrack to stable x86/amd64
511 swegener 1.224
512     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
513     Fix broken digest for linux-2.6.24.tar.bz2.
514 solar 1.223
515     *hardened-sources-2.6.24-r2 (11 May 2008)
516     *hardened-sources-2.6.23-r12 (11 May 2008)
517    
518     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
519     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
520     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
521     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
522     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
523     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
524     security bugs 219901, 220691, 220975, 220979, 221123. New
525     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
526     should be removed as far as I'm concerned, everything else remove due to
527     vulnerable to numerous security bugs or brokeness.
528 nixnut 1.222
529     10 May 2008; nixnut <nixnut@gentoo.org>
530     hardened-sources-2.6.23-r11.ebuild:
531     Stable on ppc
532 solar 1.221
533     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
534     - -r11 stable on x86/amd64
535 solar 1.220
536     *hardened-sources-2.6.23-r11 (01 May 2008)
537    
538     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
539     - version bump to fix ulgy linux bugs
540 phreak 1.219
541     *hardened-sources-2.6.24-r1 (30 Apr 2008)
542    
543     30 Apr 2008; Christian Heim <phreak@gentoo.org>
544     +hardened-sources-2.6.24-r1.ebuild:
545     Revision bump (thanks to Kerin and Gordon, again), pulling
546     genpatches-2.6.24-7, solving #219089. Additionally contains further security
547     fixes plus some minor updates.
548 phreak 1.218
549     *hardened-sources-2.6.23-r10 (30 Apr 2008)
550    
551     30 Apr 2008; Christian Heim <phreak@gentoo.org>
552     +hardened-sources-2.6.23-r10.ebuild:
553     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
554     Additional contains "various other fixes".
555 phreak 1.217
556     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
557     Update the longdescription in metadata, thanks to Gordon Malm.
558 nixnut 1.216
559     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
560     Stable on ppc wrt bug #213255
561 solar 1.215
562     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
563     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
564     - stable on x86/amd64 per request. Removed obsolete ebuilds
565 phreak 1.214
566     *hardened-sources-2.6.24 (07 Apr 2008)
567    
568     07 Apr 2008; Christian Heim <phreak@gentoo.org>
569     +hardened-sources-2.6.24.ebuild:
570     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
571     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
572     for the many contributions and their continued effort in #216612) based on
573     2.6.24 and genpatches-2.6.24-5.
574    
575     The current ebuild/patchset contains these things:
576     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
577     * Introduces bespoke server and workstation oriented security levels
578     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
579 phreak 1.213
580     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
581     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
582     maintaining it).
583 phreak 1.212
584     24 Mar 2008; Christian Heim <phreak@gentoo.org>
585     hardened-sources-2.4.35-r2.ebuild:
586     Fixing SRC_URI for 2.4.35-r2.
587 phreak 1.211
588     *hardened-sources-2.6.23-r9 (22 Mar 2008)
589    
590     22 Mar 2008; Christian Heim <phreak@gentoo.org>
591     +hardened-sources-2.6.23-r9.ebuild:
592     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
593     * Change the default GIDs for some grsecurity options
594     * Revamp the Hardened [Gentoo] security level and make it the default level
595     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
596     * Fix a recursive lock -- call to capable() within ptrace_attach()
597     * Fix bug that allows audit and iscsi operations to be controlled via netlink
598 solar 1.210
599     *hardened-sources-2.6.23-r8 (27 Feb 2008)
600    
601     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
602     - version bump from Kerin Millar bug 210026
603 solar 1.209
604     17 Feb 2008; <solar@gentoo.org> metadata.xml,
605     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
606     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
607     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
608     - stable on x86 and remove old ebuilds
609 solar 1.207
610     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
611 solar 1.208 - stable on amd64 per request of amd64 lead
612 solar 1.206
613     *hardened-sources-2.6.23-r7 (11 Feb 2008)
614    
615     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
616     - version bump from kerin.millar
617     Changes:
618    
619     * Bump to genpatches-base-2.6.23-9
620     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
621     * Disables COMPAT_VDSO in x86/defconfig
622     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
623 phreak 1.205
624     25 Jan 2008; Christian Heim <phreak@gentoo.org>
625     -hardened-sources-2.6.22-r8.ebuild:
626     Cleaning up old versions.
627 phreak 1.204
628     *hardened-sources-2.6.23-r6 (25 Jan 2008)
629    
630     25 Jan 2008; Christian Heim <phreak@gentoo.org>
631     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
632     Revision bump, pulling in the latest genpatches.
633 phreak 1.203
634     *hardened-sources-2.6.23-r5 (24 Dec 2007)
635    
636     24 Dec 2007; Christian Heim <phreak@gentoo.org>
637     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
638     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
639     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
640     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
641 phreak 1.202
642     24 Dec 2007; Christian Heim <phreak@gentoo.org>
643     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
644     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
645     -hardened-sources-2.6.23-r3.ebuild:
646     Cleaning out some unused, old versions.
647 phreak 1.201
648     24 Dec 2007; Christian Heim <phreak@gentoo.org>
649     hardened-sources-2.6.23-r4.ebuild:
650     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
651     in the tree for long, but there isn't much of a difference between this and
652     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
653 phreak 1.200
654     *hardened-sources-2.6.23-r4 (23 Dec 2007)
655    
656     23 Dec 2007; Christian Heim <phreak@gentoo.org>
657     +hardened-sources-2.6.23-r4.ebuild:
658     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
659 phreak 1.199
660     *hardened-sources-2.6.23-r3 (04 Dec 2007)
661    
662     04 Dec 2007; Christian Heim <phreak@gentoo.org>
663     +hardened-sources-2.6.23-r3.ebuild:
664     Revision bump, pulling in 2.6.23.9.
665 phreak 1.198
666     *hardened-sources-2.6.23-r2 (25 Nov 2007)
667    
668     25 Nov 2007; Christian Heim <phreak@gentoo.org>
669     +hardened-sources-2.6.23-r2.ebuild:
670     Updated patchset, thanks to solar.
671 phreak 1.197
672     *hardened-sources-2.6.23-r1 (31 Oct 2007)
673    
674     31 Oct 2007; Christian Heim <phreak@gentoo.org>
675     +hardened-sources-2.6.23-r1.ebuild:
676     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
677 solar 1.196
678     29 Oct 2007; <solar@gentoo.org> metadata.xml:
679     - update metadata.xml
680 phreak 1.195
681     25 Oct 2007; Christian Heim <phreak@gentoo.org>
682     hardened-sources-2.6.22-r8.ebuild:
683     Marking 2.6.22-r8 stable on amd64 and x86.
684 phreak 1.194
685     21 Oct 2007; Christian Heim <phreak@gentoo.org>
686     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
687     -hardened-sources-2.6.21-r4.ebuild:
688     Removing old ebuilds.
689 phreak 1.193
690     *hardened-sources-2.4.35-r2 (21 Oct 2007)
691    
692     21 Oct 2007; Christian Heim <phreak@gentoo.org>
693     +hardened-sources-2.4.35-r2.ebuild:
694     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
695     patches.
696 phreak 1.192
697     *hardened-sources-2.6.22-r8 (21 Oct 2007)
698    
699     21 Oct 2007; Christian Heim <phreak@gentoo.org>
700     +hardened-sources-2.6.22-r8.ebuild:
701     Yet another new patch, hopefully fixing the remaining issues we had w/
702     2.6.22. Candidate for stabling.
703 phreak 1.191
704     *hardened-sources-2.6.23 (13 Oct 2007)
705    
706     13 Oct 2007; Christian Heim <phreak@gentoo.org>
707     +hardened-sources-2.6.23.ebuild:
708     Initial hardened-sources-2.6.23. If people still have problems w/ bug
709     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
710 phreak 1.190
711     11 Oct 2007; Christian Heim <phreak@gentoo.org>
712     hardened-sources-2.6.20-r10.ebuild:
713     Pulling in yet another new genpatches version, fixing the PWC bug for real.
714 phreak 1.189
715     04 Oct 2007; Christian Heim <phreak@gentoo.org>
716     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
717     Removing old versions.
718 phreak 1.188
719     *hardened-sources-2.6.22-r7 (01 Oct 2007)
720    
721     01 Oct 2007; Christian Heim <phreak@gentoo.org>
722     +hardened-sources-2.6.22-r7.ebuild:
723     Revision bump, pulling in a newer patch. Should fix #194276.
724 phreak 1.187
725     30 Sep 2007; Christian Heim <phreak@gentoo.org>
726     hardened-sources-2.6.20-r10.ebuild:
727     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
728     Mike Doty).
729 phreak 1.186
730     *hardened-sources-2.6.22-r6 (26 Sep 2007)
731    
732     26 Sep 2007; Christian Heim <phreak@gentoo.org>
733     +hardened-sources-2.6.22-r6.ebuild:
734     Revision bump, grabbing up till Linux 2.6.22.9.
735 phreak 1.185
736     24 Sep 2007; Christian Heim <phreak@gentoo.org>
737     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
738     Cleaning up further.
739 phreak 1.184
740     *hardened-sources-2.6.20-r10 (24 Sep 2007)
741    
742     24 Sep 2007; Christian Heim <phreak@gentoo.org>
743     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
744     +hardened-sources-2.6.20-r10.ebuild:
745     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
746     revisions.
747 phreak 1.183
748     *hardened-sources-2.6.22-r5 (22 Sep 2007)
749    
750     22 Sep 2007; Christian Heim <phreak@gentoo.org>
751     +hardened-sources-2.6.22-r5.ebuild:
752     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
753 phreak 1.182
754     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
755     Removing johnm from metadata.xml (see #186467 for reference).
756 phreak 1.181
757     *hardened-sources-2.6.22-r4 (17 Sep 2007)
758    
759     17 Sep 2007; Christian Heim <phreak@gentoo.org>
760     +hardened-sources-2.6.22-r4.ebuild:
761     Revision bump, hopefully fixing all those weird PAX failures.
762 phreak 1.180
763     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
764     Updating the metadata.xml.
765 phreak 1.179
766     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
767     Removing tocharian from metadata due to his retirement (see #71718 for
768     reference).
769 phreak 1.178
770     *hardened-sources-2.6.20-r9 (30 Aug 2007)
771    
772     30 Aug 2007; Christian Heim <phreak@gentoo.org>
773     +hardened-sources-2.6.20-r9.ebuild:
774     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
775 phreak 1.177
776     29 Aug 2007; Christian Heim <phreak@gentoo.org>
777     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
778     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
779     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
780     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
781     -hardened-sources-2.6.22-r2.ebuild:
782     Removing some redundant versions.
783 phreak 1.176
784     *hardened-sources-2.4.35-r1 (29 Aug 2007)
785    
786     29 Aug 2007; Christian Heim <phreak@gentoo.org>
787     +hardened-sources-2.4.35-r1.ebuild:
788     Revision bump, new grsecurity patch.
789 phreak 1.175
790     *hardened-sources-2.6.20-r8 (26 Aug 2007)
791    
792     26 Aug 2007; Christian Heim <phreak@gentoo.org>
793     +hardened-sources-2.6.20-r8.ebuild:
794     Revision bump for Linux 2.6.20.17.
795 phreak 1.174
796     *hardened-sources-2.6.22-r3 (22 Aug 2007)
797    
798     22 Aug 2007; Christian Heim <phreak@gentoo.org>
799     +hardened-sources-2.6.22-r3.ebuild:
800     Revision bump for Linux 2.6.22.4.
801 phreak 1.173
802     16 Aug 2007; Christian Heim <phreak@gentoo.org>
803     hardened-sources-2.6.22-r2.ebuild:
804     Updated patchset, to fix the alignment against 2.6.22.3.
805 phreak 1.172
806     *hardened-sources-2.6.22-r2 (16 Aug 2007)
807    
808     16 Aug 2007; Christian Heim <phreak@gentoo.org>
809     +hardened-sources-2.6.22-r2.ebuild:
810     Revision bump for Linux 2.6.22.3.
811 phreak 1.171
812     *hardened-sources-2.4.35 (16 Aug 2007)
813    
814     16 Aug 2007; Christian Heim <phreak@gentoo.org>
815     +hardened-sources-2.4.35.ebuild:
816     Version bump, initial version for Linux 2.4.35.
817 phreak 1.170
818     *hardened-sources-2.6.21-r4 (16 Aug 2007)
819    
820     16 Aug 2007; Christian Heim <phreak@gentoo.org>
821     +hardened-sources-2.6.21-r4.ebuild:
822     Revision bump for Linux 2.6.21.6.
823 phreak 1.169
824     *hardened-sources-2.6.20-r7 (16 Aug 2007)
825    
826     16 Aug 2007; Christian Heim <phreak@gentoo.org>
827     +hardened-sources-2.6.20-r7.ebuild:
828     Revision bump for Linux 2.6.20.16.
829 phreak 1.168
830     *hardened-sources-2.6.22-r1 (13 Aug 2007)
831    
832     13 Aug 2007; Christian Heim <phreak@gentoo.org>
833     +hardened-sources-2.6.22-r1.ebuild:
834     Yet another revision bump.
835 phreak 1.167
836     *hardened-sources-2.6.22 (10 Aug 2007)
837    
838     10 Aug 2007; Christian Heim <phreak@gentoo.org>
839     +hardened-sources-2.6.22.ebuild:
840     Initial release for 2.6.22. If you are using hardened-sources on a desktop
841     machine (P4 or newer), be aware you might need to disable
842     CONFIG_PAX_PAGEEXEC.
843 phreak 1.166
844     04 Aug 2007; Christian Heim <phreak@gentoo.org>
845     hardened-sources-2.6.20-r6.ebuild:
846     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
847     2.6.20.15.
848 phreak 1.165
849     10 Jul 2007; Christian Heim <phreak@gentoo.org>
850     hardened-sources-2.6.20-r5.ebuild:
851     Marking hardened-sources-2.6.20-r5 stable on ppc.
852 phreak 1.164
853     10 Jul 2007; Christian Heim <phreak@gentoo.org>
854     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
855     Cleanup.
856 phreak 1.163
857     *hardened-sources-2.6.20-r6 (08 Jul 2007)
858    
859     08 Jul 2007; Christian Heim <phreak@gentoo.org>
860     +hardened-sources-2.6.20-r6.ebuild:
861     Revision bump, grabbing yet another stable release.
862 phreak 1.162
863     17 Jun 2007; Christian Heim <phreak@gentoo.org>
864     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
865     -hardened-sources-2.6.21-r2.ebuild:
866     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
867     alpha stable KEYWORD by mistake.
868 phreak 1.161
869     17 Jun 2007; Christian Heim <phreak@gentoo.org>
870     hardened-sources-2.6.20-r5.ebuild:
871     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
872     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
873 phreak 1.160
874     *hardened-sources-2.6.21-r3 (12 Jun 2007)
875    
876     12 Jun 2007; Christian Heim <phreak@gentoo.org>
877     +hardened-sources-2.6.21-r3.ebuild:
878     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
879     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
880     love.
881 phreak 1.159
882     *hardened-sources-2.6.20-r5 (11 Jun 2007)
883    
884     11 Jun 2007; Christian Heim <phreak@gentoo.org>
885     +hardened-sources-2.6.20-r5.ebuild:
886     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
887     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
888     love.
889 pappy 1.158
890     *hardened-sources-2.4.34.5 (11 Jun 2007)
891    
892     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
893     +hardened-sources-2.4.34.5.ebuild:
894     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
895 phreak 1.157
896     30 May 2007; Christian Heim <phreak@gentoo.org>
897     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
898     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
899     stale ebuild(s).
900 phreak 1.156
901     30 May 2007; Christian Heim <phreak@gentoo.org>
902     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
903     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
904     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
905     Doing some cleanups, remove stale ebuilds.
906 phreak 1.155
907     26 May 2007; Christian Heim <phreak@gentoo.org>
908     hardened-sources-2.6.21-r2.ebuild:
909     Fixing the grsecurity patch, had one '};' too much.
910 phreak 1.154
911     *hardened-sources-2.6.21-r2 (26 May 2007)
912    
913     26 May 2007; Christian Heim <phreak@gentoo.org>
914     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
915     +hardened-sources-2.6.21-r2.ebuild:
916     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
917     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
918 phreak 1.153
919     *hardened-sources-2.6.20-r4 (26 May 2007)
920    
921     26 May 2007; Christian Heim <phreak@gentoo.org>
922     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
923     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
924 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
925 phreak 1.152
926     15 May 2007; Christian Heim <phreak@gentoo.org>
927     hardened-sources-2.6.20-r3.ebuild:
928     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
929     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
930     grsecurity patch fail in that exact same hunk.
931 phreak 1.151
932     *hardened-sources-2.6.20-r3 (15 May 2007)
933    
934     15 May 2007; Christian Heim <phreak@gentoo.org>
935     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
936     Revision bump, incorporating Linux 2.6.20.11.
937    
938     *hardened-sources-2.6.21-r1 (11 May 2007)
939    
940     11 May 2007; Christian Heim <phreak@gentoo.org>
941     +hardened-sources-2.6.21-r1.ebuild:
942     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
943     mentioned in #177234.
944 kevquinn 1.150
945     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
946     files/digest-hardened-sources-2.6.21, Manifest:
947     Fix Manifest/digest for linux-2.6.21.tar.bz2
948 phreak 1.149
949     06 May 2007; Christian Heim <phreak@gentoo.org>
950     hardened-sources-2.6.21.ebuild:
951     Bumping the hardened-patches version, needed for the fix for #177234.
952 phreak 1.148
953     *hardened-sources-2.6.21 (02 May 2007)
954    
955     02 May 2007; Christian Heim <phreak@gentoo.org>
956     +hardened-sources-2.6.21.ebuild:
957     Version bump, Linux 2.6.21-hardened.
958 phreak 1.147
959     29 Apr 2007; Christian Heim <phreak@gentoo.org>
960     hardened-sources-2.6.20-r2.ebuild:
961     Adding ~ia64 on Ned's request.
962 phreak 1.146
963     29 Apr 2007; Christian Heim <phreak@gentoo.org>
964     hardened-sources-2.6.20-r2.ebuild:
965     Fixing the included grsecurity patch, wasn't alligning due to the Index:
966     header line(s).
967 phreak 1.145
968     29 Apr 2007; Christian Heim <phreak@gentoo.org>
969     hardened-sources-2.6.20-r2.ebuild:
970     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
971 armin76 1.144
972     *hardened-sources-2.6.20-r2 (10 Apr 2007)
973    
974     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
975     +hardened-sources-2.6.20-r2.ebuild:
976     Version bump, on behalf of phreak
977 phreak 1.143
978     *hardened-sources-2.6.20-r1 (04 Apr 2007)
979    
980     04 Apr 2007; Christian Heim <phreak@gentoo.org>
981     +hardened-sources-2.6.20-r1.ebuild:
982     Revision bump, grabbing a newer grsecurity snapshot.
983 phreak 1.142
984     *hardened-sources-2.6.20 (25 Mar 2007)
985    
986     25 Mar 2007; Christian Heim <phreak@gentoo.org>
987     +hardened-sources-2.6.20.ebuild:
988     Finally a hardened-sources version for 2.6.20; many people have been waiting
989     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
990     testbox.
991 chainsaw 1.141
992     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
993     hardened-sources-2.6.18-r6.ebuild:
994     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
995 phreak 1.140
996     *hardened-sources-2.6.18-r6 (16 Mar 2007)
997    
998     16 Mar 2007; Christian Heim <phreak@gentoo.org>
999     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1000     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1001     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1002     supposed to be.
1003 phreak 1.139
1004     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1005     Fixing the Manifest, the previous one was broken (as in still had the
1006     deleted ebuild in it).
1007 phreak 1.138
1008     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1009     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1010     +hardened-sources-2.6.18-r5.ebuild:
1011     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1012     Linux 2.6.18.8. Also cleaning up the older version.
1013    
1014     *hardened-sources-2.6.18-r5 (06 Mar 2007)
1015    
1016     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1017     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1018     +hardened-sources-2.6.18-r5.ebuild:
1019     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1020     Linux 2.6.18.8. Also cleaning up the older version.
1021 phreak 1.137
1022     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1023     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1024     -hardened-sources-2.6.19-r5.ebuild:
1025     Removing some of the old version, that didn't work.
1026 phreak 1.136
1027     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1028    
1029     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1030     +hardened-sources-2.6.19-r6.ebuild:
1031     Revision bump, including a new grsec version fixing #166235.
1032 pappy 1.134
1033     *hardened-sources-2.4.34 (24 Jan 2007)
1034    
1035     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1036 pappy 1.135 Manifest:
1037     updating Manifest with checksums of new tarball and ebuild
1038    
1039     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1040 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1041     I added new hardened sources 2.4 update, this is a critical path
1042     security bugfix - all users of h-s are strongly advised
1043     to update their existing hardened sources to this version.
1044     It contains a fix for a kernel vulnerability that is pertaining
1045     to the PaX changes to virtual memory management, possibly leading
1046     to a local kernel exploit ... see grsecurity.net forums and homepage
1047 phreak 1.133
1048     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1049     files/digest-hardened-sources-2.6.19-r5, Manifest:
1050     Fixing the patch-tarball digest.
1051 phreak 1.132
1052     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1053    
1054     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1055     +hardened-sources-2.6.19-r5.ebuild:
1056     Revision bump, closing the recently discovered PaX expand_stack()
1057     vulnerability.
1058 phreak 1.131
1059     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1060    
1061     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1062     +hardened-sources-2.6.19-r4.ebuild:
1063     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1064     dropping the randomized PID feature.
1065 opfer 1.130
1066     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1067     hardened-sources-2.4.33.4.ebuild:
1068     stable x86, bug #161171
1069 phreak 1.129
1070     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1071    
1072     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1073     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1074     Revision bump for bug #157186 and #158786.
1075 phreak 1.128
1076     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1077    
1078     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1079     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1080     Revision bump for bug #157186.
1081 phreak 1.127
1082     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1083    
1084     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1085     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1086     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1087 phreak 1.126
1088     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1089     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1090     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1091     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1092     hardened-sources-2.6.19-r1.ebuild:
1093     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1094     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1095 pappy 1.125
1096     *hardened-sources-2.4.33.4 (17 Dec 2006)
1097    
1098     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1099     +hardened-sources-2.4.33.4.ebuild:
1100     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1101     and quilting
1102 phreak 1.124
1103     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1104    
1105     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1106     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1107     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1108     for reporting).
1109 phreak 1.123
1110     *hardened-sources-2.6.19 (13 Dec 2006)
1111    
1112     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1113     +hardened-sources-2.6.19.ebuild:
1114     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1115     Brad for providing that prompt update.
1116 phreak 1.122
1117     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1118    
1119     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1120     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1121     +hardened-sources-2.6.18-r3.ebuild:
1122     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1123     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1124 phreak 1.121
1125     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1126     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1127 nixnut 1.120
1128     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1129     Stable on ppc wrt bug 157356
1130 opfer 1.119
1131     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1132     hardened-sources-2.6.18.ebuild:
1133     stable x86, bug #157356
1134 phreak 1.118
1135     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1136    
1137     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1138     +hardened-sources-2.6.18-r2.ebuild:
1139     Revision bump, including 2.6.18.5 (via genpatches) and
1140     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1141     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1142     redesign.
1143 phreak 1.117
1144     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1145     hardened-sources-2.6.18.ebuild:
1146     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1147     of Mike Doty).
1148 phreak 1.116
1149     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1150    
1151     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1152     +hardened-sources-2.6.18-r1.ebuild:
1153     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1154 phreak 1.115
1155     *hardened-sources-2.6.18 (11 Nov 2006)
1156    
1157     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1158     +hardened-sources-2.6.18.ebuild:
1159     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1160 solar 1.114
1161     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1162     - mark amd64 stable also. bug #151877
1163 solar 1.113
1164     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1165     - mark 2.6.17-r1 stable
1166 phreak 1.112
1167     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1168     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1169     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1170 phreak 1.111
1171     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1172    
1173     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1174     +hardened-sources-2.6.17-r1.ebuild:
1175     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1176     grsecurity patch.
1177 phreak 1.110
1178     *hardened-sources-2.6.17 (17 Aug 2006)
1179    
1180     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1181     +hardened-sources-2.6.17.ebuild:
1182     Bumping the hardened-sources-2.6 series to 2.6.17, using
1183     genpatches-2.6.17-6.base.
1184 solar 1.109
1185     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1186     - stable on x86 and amd64
1187 solar 1.108
1188     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1189    
1190     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1191     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1192     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1193     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1194     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1195     crusty ebuilds
1196 johnm 1.107
1197     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1198     hardened-sources-2.6.16-r10.ebuild:
1199     marking stable on x86 and amd64
1200 solar 1.106
1201     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1202     - 2.4.32-r6 stable on x86. RSBAC state unknown
1203 kang 1.105
1204     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1205    
1206     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1207     +hardened-sources-2.4.32-r7.ebuild:
1208     Bump PaX for RSBAC to test-17
1209 johnm 1.104
1210     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1211    
1212     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1213     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1214     hardened-sources-2.6.16 bump to latest -base.
1215 solar 1.103
1216     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1217    
1218     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1219     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1220     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1221     sysctl controlable resource logging
1222 johnm 1.102
1223     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1224    
1225     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1226     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1227     push new 2.6.16 release in preparation for stable
1228 solar 1.101
1229     22 May 2006; <solar@gentoo.org> :
1230     - redigest bug 134002
1231 kang 1.100
1232     *hardened-sources-2.4.32-r5 (16 May 2006)
1233    
1234     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1235     +hardened-sources-2.4.32-r5.ebuild:
1236     Fixes rsbac common patching (new patch in new -r5 patchset)
1237 solar 1.99
1238     *hardened-sources-2.4.32-r4 (13 May 2006)
1239    
1240     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1241     +hardened-sources-2.4.32-r4.ebuild:
1242     - security bumps
1243 johnm 1.98
1244     *hardened-sources-2.6.16-r6 (03 May 2006)
1245    
1246     03 May 2006; John Mylchreest <johnm@gentoo.org>
1247     +hardened-sources-2.6.16-r6.ebuild:
1248     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1249 johnm 1.97
1250     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1251     hardened-sources-2.6.14-r8.ebuild:
1252     fix x86_64 build problem, this will delay the digest issue again for a short
1253     while but it will sort itself out
1254 johnm 1.96
1255     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1256     hardened-sources-2.6.14-r8.ebuild:
1257     bump hardened patchset
1258 antarus 1.94
1259     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1260     files/digest-hardened-sources-2.4.32-r2,
1261     files/digest-hardened-sources-2.4.32-r3,
1262     files/digest-hardened-sources-2.6.14-r8, Manifest:
1263     Fixing duff SHA256 digests: Bug # 131293
1264 johnm 1.93
1265 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1266    
1267     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1268     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1269     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1270     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1271     cleanup of old uneccessary sources
1272    
1273 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1274     fix digest
1275 johnm 1.92
1276     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1277    
1278     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1279     +hardened-sources-2.6.14-r8.ebuild:
1280     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1281 johnm 1.91
1282     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1283     Turning on gpg-signing again, and recomitting
1284 johnm 1.90
1285     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1286    
1287     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1288     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1289     +hardened-sources-2.6.16-r4.ebuild:
1290     Fix numerous security vulns
1291 solar 1.89
1292     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1293    
1294     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1295     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1296     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1297     - security bump for bug #112791. Removed old ebuilds
1298 johnm 1.88
1299     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1300    
1301     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1302     +hardened-sources-2.6.16-r3.ebuild:
1303     Removing silly localversion which I missed
1304 johnm 1.87
1305     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1306    
1307     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1308     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1309     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1310 johnm 1.86
1311     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1312    
1313     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1314     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1315     +hardened-sources-2.6.16-r2.ebuild:
1316     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1317     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1318 johnm 1.85
1319     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1320    
1321     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1322     +hardened-sources-2.6.16-r1.ebuild:
1323     Bumping to include ppc build fix and 2.6.16.3
1324 tsunam 1.84
1325     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1326     hardened-sources-2.6.14-r6.ebuild:
1327     Stable on x86; bug #127718
1328 johnm 1.83
1329     *hardened-sources-2.6.16 (31 Mar 2006)
1330    
1331     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1332     +hardened-sources-2.6.16.ebuild:
1333     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1334     2.6.16.1
1335 cryos 1.82
1336     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1337     hardened-sources-2.6.14-r6.ebuild:
1338     Stable on amd64, bug 127718.
1339 nixnut 1.81
1340     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1341     Stable on ppc. Bug #127718
1342 johnm 1.80
1343     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1344     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1345     -hardened-sources-2.6.14-r4.ebuild:
1346     Cleanup.
1347 johnm 1.79
1348     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1349    
1350     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1351     +hardened-sources-2.6.14-r6.ebuild:
1352     Fixes grsec policy recreation bug and adds a
1353     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1354 solar 1.78
1355     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1356     - stable on x86
1357 hansmi 1.77
1358     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1359     hardened-sources-2.6.14-r5.ebuild:
1360     Stable on ppc.
1361 johnm 1.76
1362     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1363    
1364     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1365     +hardened-sources-2.6.14-r5.ebuild:
1366     fixing every known exploit
1367 solar 1.75
1368     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1369    
1370     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1371     +hardened-sources-2.4.32-r2.ebuild:
1372     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1373 solar 1.74
1374     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1375    
1376     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1377     - version bump for new genpatches which fix up a few sec holes
1378 solar 1.73
1379     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1380    
1381     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1382     - revision bump to add misc vital linux kernel security patches.
1383 johnm 1.72
1384     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1385    
1386     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1387     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1388     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1389 johnm 1.71
1390     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1391     hardened-sources-2.6.14-r2.ebuild:
1392     making x86 & amd64 stable following testing.
1393 johnm 1.70
1394     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1395    
1396     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1397     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1398     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1399     network hooks.
1400 johnm 1.69
1401     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1402     hardened-sources-2.6.14-r1.ebuild:
1403     bumping to stable early for sec fix on x86 & amd64
1404 johnm 1.68
1405     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1406    
1407     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1408     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1409     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1410 solar 1.67
1411     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1412     - stable on x86 security bug #114227 CAN-2005-3257
1413 kang 1.66
1414     *hardened-sources-2.4.32 (19 Nov 2005)
1415    
1416     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1417     +hardened-sources-2.4.32.ebuild:
1418     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1419     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1420     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1421     rsbac >> /etc/portage/package.use)
1422 johnm 1.65
1423     *hardened-sources-2.6.14 (14 Nov 2005)
1424    
1425     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1426     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1427     Bumping 2.6 series to 2.6.14.2
1428 johnm 1.64
1429     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1430    
1431     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1432     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1433     +hardened-sources-2.6.13-r2.ebuild:
1434     Fixes minor build error in ppc.
1435 johnm 1.63
1436     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1437    
1438     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1439     +hardened-sources-2.6.13-r1.ebuild:
1440     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1441     2.6.13.4, fixes some major amd64 stability problems.
1442 johnm 1.62
1443     *hardened-sources-2.6.13 (16 Sep 2005)
1444    
1445     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1446     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1447     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1448     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1449     users should test this thoroughly.
1450 solar 1.61
1451     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1452     - stable on x86
1453 johnm 1.60
1454     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1455    
1456     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1457     +hardened-sources-2.6.11-r15.ebuild:
1458     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1459     grsec redefining curr_ip struct.
1460 solar 1.59
1461     *hardened-sources-2.4.31 (20 Jun 2005)
1462    
1463     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1464     initial import of 2.4.31 tree
1465 johnm 1.58
1466     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1467    
1468     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1469     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1470     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1471     naming scheme to abide by genpatches
1472 johnm 1.57
1473     *hardened-sources-2.6.11-r13 (18 May 2005)
1474    
1475     18 May 2005; John Mylchreest <johnm@gentoo.org>
1476     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1477     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1478     target. sorry about that. Fixes bug #93022
1479 johnm 1.56
1480     *hardened-sources-2.6.11-r12 (17 May 2005)
1481    
1482     17 May 2005; John Mylchreest <johnm@gentoo.org>
1483     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1484     +hardened-sources-2.6.11-r12.ebuild:
1485     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1486     merges in genpatches-base
1487 johnm 1.55
1488     *hardened-sources-2.6.11-r12 (17 May 2005)
1489    
1490     17 May 2005; John Mylchreest <johnm@gentoo.org>
1491     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1492     +hardened-sources-2.6.11-r12.ebuild:
1493     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1494     merges in genpatches-base
1495 solar 1.54
1496     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1497     -files/2.4.27-cmdline-race.patch,
1498     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1499     -files/2.4.28-grsec-binfmt_a.out.patch,
1500     -files/2.4.28-grsec-cmdline-race.patch,
1501     -files/2.4.28-selinux-binfmt_a.out.patch,
1502     -files/2.4.28-selinux-cmdline-race.patch,
1503     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1504     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1505     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1506     cleanup..
1507 solar 1.53
1508     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1509    
1510     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1511     - disable aout by default
1512 solar 1.52
1513     *hardened-sources-2.4.30 (18 Apr 2005)
1514    
1515     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1516     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1517     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1518     use
1519 tocharian 1.50
1520 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1521    
1522     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1523     +hardened-sources-2.4.29.ebuild:
1524     New hardened-patches-2.4-29.0 patchball.
1525     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1526    
1527     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1528    
1529     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1530     +hardened-sources-2.4.28-r5.ebuild:
1531     Added a fix for a PaX vulnerability.
1532    
1533     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1534 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1535     Stable on x86
1536 solar 1.49
1537     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1538     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1539     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1540     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1541     - fixed/added RDEPEND= in all kernel-2 ebuilds
1542 tocharian 1.48
1543     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1544    
1545     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1546     +hardened-sources-2.4.28-r4.ebuild:
1547     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1548     backport of neighbour hash updates.
1549 tocharian 1.47
1550     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1551     hardened-sources-2.4.28-r3.ebuild:
1552     Stable on x86
1553 tseng 1.46
1554     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1555    
1556     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1557     +hardened-sources-2.6.10-r3.ebuild:
1558     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1559     in 2005.0
1560 tocharian 1.45
1561     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1562     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1563     hardened-sources-2.4.28-r2.ebuild:
1564     Mark stable on x86
1565 tocharian 1.44
1566     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1567    
1568     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1569     +hardened-sources-2.4.28-r3.ebuild:
1570     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1571 tocharian 1.43
1572     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1573     hardened-sources-2.4.28.ebuild:
1574     Mark stable on x86.
1575 tocharian 1.42
1576     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1577    
1578     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1579     +hardened-sources-2.4.28-r2.ebuild:
1580     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1581     Mazinger for grsecurity patches as well.
1582 plasmaroo 1.41
1583     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1584    
1585     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1586     Security bump. Thank tocharian for rolling a new patchset...
1587 solar 1.40
1588     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1589     +files/2.4.28-grsec-cmdline-race.patch,
1590     +files/2.4.28-selinux-binfmt_a.out.patch,
1591     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1592     - Round up remaining security patches that appear to be missing in 2.4.28. -
1593     PaX standalone updated to current. hgpv=28.1
1594 solar 1.39
1595     *hardened-sources-2.4.28 (28 Nov 2004)
1596    
1597     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1598     security bump. Thank tocharian for rolling a new patchset
1599 scox 1.31
1600 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1601    
1602     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1603     +hardened-sources-2.4.27-r3.ebuild:
1604     Applies the new 2.4-27.2 patchball which updates
1605     GRSecurity to the 2.0.1 version.
1606    
1607 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1608    
1609     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1610     +hardened-sources-2.4.27-r2.ebuild:
1611     Version bump.
1612     This version uses the new 2.4-27.1 patchball which updates
1613     both the SELinux PaX hooks patch and the SELinux headers.
1614    
1615 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1616    
1617     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1618     +hardened-sources-2.4.27-r1.ebuild,
1619     -hardened-sources-2.4.27.ebuild,
1620     +files/2.4.27-cmdline-race.patch:
1621     Version bump, fix for cmdline race. See bug #59905.
1622    
1623     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1624    
1625     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1626     +hardened-sources-2.4.26-r6.ebuild,
1627     -hardened-sources-2.4.26-r5.ebuild,
1628     -hardened-sources-2.4.26-r4.ebuild,
1629     +files/2.4.26-cmdline-race.patch:
1630     Version bump, fix for cmdline race. See bug #59905.
1631    
1632 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1633    
1634     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1635     +hardened-sources-2.4.27.ebuild,
1636     +files/2.4.27-CAN-2004-0394.patch:
1637     Ported the patchball to the 2.4.27 kernel version.
1638    
1639 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1640    
1641     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1642     +hardened-sources-2.4.26-r5.ebuild:
1643 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1644 scox 1.34 It adds the following features:
1645     - Squashfs
1646     - Ebtables
1647     - Netdev random (core+drivers)
1648     - Watchdog Timer (WDT) fix.
1649    
1650 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1651    
1652     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1653     +hardened-sources-2.4.26-r4.ebuild,
1654     +files/2.4.26-CAN-2004-0415.patch,
1655     -hardened-sources-2.4.26-3:
1656     Version bump, fix for CAN 0415, see bug #59378.
1657    
1658 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1659    
1660     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1661     +hardened-sources-2.4.26-r3.ebuild,
1662     +files/2.4.26-CAN-2004-0497.patch,
1663     -hardened-sources-2.4.26-r2.ebuild:
1664     Version bump, fixed CAN 0497, see bug #56171.
1665    
1666 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1667    
1668     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1669 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1670 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1671     +files/2.4.26-CAN-2004-0535.patch,
1672     -hardened-sources-2.4.26-r1.ebuild:
1673     Fixes for both CAN 0495 and 0535, see bug #54976
1674 pvdabeel 1.27
1675 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1676     hardened-sources-2.4.26-r1.ebuild:
1677     QA - fix use invocation
1678 scox 1.28
1679     *hardened-sources-2.4.26-r1 (22 June 2004)
1680    
1681     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1682     +hardened-sources-2.4.26-r1.ebuild,
1683     +files/2.4.26-CAN-2004-0394.patch,
1684     +files/2.4.26-signal-race.patch,
1685     -hardened-sources-2.4.26.ebuild,
1686     -hardened-sources-2.4.24-r3.ebuild:
1687     Version bump for the CAN-2004-0394 issue and bug #53804
1688     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1689    
1690    
1691 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1692     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1693     Masked hardened-sources-2.4.26.ebuild broken for ppc
1694    
1695     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1696     hardened-sources-2.4.24-r3.ebuild:
1697     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1698 plasmaroo 1.25
1699 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1700    
1701     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1702     +hardened-sources-2.4.26.ebuild:
1703     Updated hardened-sources for the 2.4.26 kernel
1704     Removed broken components, updated almost everything.
1705    
1706 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1707    
1708     17 Apr 2004; <plasmaroo@gentoo.org>
1709     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1710     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1711     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1712     +hardened-sources-2.4.24-r3.ebuild:
1713     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1714     vulnerabilities. Old revisions removed.
1715 plasmaroo 1.24
1716     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1717    
1718     15 Apr 2004; <plasmaroo@gentoo.org>
1719     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1720     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1721     Version bump for the CAN-2004-0109 issue; bug #47881.
1722 aliz 1.23
1723     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1724     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1725     Add eutils to inherit.
1726 plasmaroo 1.22
1727     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1728    
1729     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1730     files/hardened-sources-2.4.24.munmap.patch:
1731     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1732 scox 1.19
1733 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1734 scox 1.26
1735 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1736     hardened-sources-2.4.24.ebuild:
1737     Version bump, updated most of the components.
1738     This release includes the following:
1739    
1740     - Hardened security
1741     - Netfilter patch-o-matic 20031219
1742     - FreeSWAN 2.04 & x509 1.4.8
1743     - EVMS 2.2.2
1744     - XFS 1.3.1
1745     - cryptoloop jari
1746     - grsecurity 2.0-rc4
1747     - SELinux
1748     - PaX 200402060000
1749     - PaX Obscurity 200308302223
1750     - Others...
1751    
1752     Neither -ck nor systrace are included anymore.
1753    
1754 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1755    
1756     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1757     hardened-sources-2.4.22-r2.ebuild:
1758 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1759 scox 1.19
1760     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1761 iggy 1.17
1762     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1763 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1764 iggy 1.16
1765     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1766 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1767     Version bump for the 'do_brk' vulnerability.
1768 iggy 1.15
1769     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1770     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1771     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1772     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1773 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1774 frogger 1.14
1775     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1776     hardened-sources-2.4.22.ebuild:
1777 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1778     components. These are no longer handled in the kernel
1779     so this code was not necessary.
1780 frogger 1.13
1781     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1782     New 2.4.22 based hardened-sources thanks to
1783     Phil West <p.west@computer.org>.
1784    
1785     These sources include:
1786 plasmaroo 1.18 - New SELinux API
1787     - Updated CK-base
1788     - Updated GRSec
1789     - Systrace
1790     - SuperFreeS/WAN 1.99.8
1791     - Propolice kernel build support
1792     - EVMS
1793     - Other various security related patches
1794 frogger 1.11
1795 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1796    
1797     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1798     Updated hardened-sources based on the 2.4.21 Linux kernel.
1799     This includes updates to most major components such as:
1800 plasmaroo 1.18 - ck-base-0306300059
1801     - selinux-2.4-2003071106
1802     - grsecurity-2.0-rc1
1803     - Updated IPTables patch-o-matic
1804     - Updated SuperFreeS/WAN
1805    
1806 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1807     updated patch set ready for the 2.4.21 based kernel.
1808    
1809 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1810     Initial import of hardened-sources-2.4.20-r4. This revision
1811     includes only a few changes, but one of these is an important
1812     security fix. It is recommended all users of hardened-sources
1813     upgrade to this release.
1814 plasmaroo 1.18
1815 frogger 1.11 - ioperm bug fix
1816     - fixed compilation failure when building without GRSec
1817 plasmaroo 1.18
1818 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1819     due to time constraints, but is planned for inclusion in the near
1820     future.
1821 msterret 1.10
1822     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1823    
1824     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1825     hardened-sources-2.4.20-r3.ebuild:
1826 plasmaroo 1.18 Add Header...
1827 frogger 1.9
1828     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1829     hardened-sources-2.4.20-r3.ebuild:
1830     Removed warnings from ebuild. This kernel should be safe to
1831     use at this point.
1832 frogger 1.8
1833     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1834    
1835     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1836     hardened-sources-2.4.20-r3.ebuild:
1837     New revision. Includes the following changes over -r2:
1838 plasmaroo 1.18
1839 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1840     - Super FreeS/WAN 1.99.7rc2
1841     - PaX for the LSM/SELinux branch
1842     - GRSecurity 2.0-pre4 (role based access control)
1843     - Systrace 1.3
1844     - EXT3 fixes
1845     - EVMS 2.0.1
1846     - GCC 3.1+ compile optimizations
1847     - ProPolice kernel build support
1848     - Hashing table security fixes
1849 frogger 1.3
1850     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1851 frogger 1.7
1852     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1853     Initial import of hardened-sources-r2. This new
1854     ebuild includes many new performance and security
1855     related patches. As in -r1, it will patch in
1856     LSM/SELinux if "selinux" is in USE, otherwise it
1857     will patch in GRSecurity. The following patches
1858     are included in this revision:
1859 plasmaroo 1.18
1860 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1861     (pulled from the base CK patch)
1862     - ptrace exploit patch for the LSM kernel
1863     (the GRSec patch already fixes this)
1864     - LSM 2.4-2003040709
1865     - SELinux 2.4-2003040709
1866     - Systrace v1.2
1867     - IPTables patch-o-matic base patches - 20030107
1868     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1869     - Super FreeS/WAN 1.99.6.1
1870     - GRSecurity 1.9.9g
1871     - MPPE
1872     - EXT3 data journal fix
1873     - CIPE 1.5.4
1874 frogger 1.6
1875     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1876     hardened-sources-2.4.20-r1.ebuild, manifest:
1877 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1878 frogger 1.5
1879     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1880     hardened-sources-2.4.20-r1.ebuild:
1881     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1882     is patched in instead. Ptrace patches for selinux have also been added. In
1883     either case, systrace support will be patched in as well.
1884 frogger 1.3
1885     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1886     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1887 plasmaroo 1.18 Revision bump for new sources.
1888 frogger 1.4
1889 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1890 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1891 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1892 method 1.1
1893 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1894    
1895 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1896     hardened-sources-2.4.20.ebuild:
1897 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20