/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.322 - (hide annotations) (download)
Tue Jul 13 10:38:16 2010 UTC (4 years, 1 month ago) by blueness
Branch: MAIN
Changes since 1.321: +5 -1 lines
Removed for security. Bug #325573
(Portage version: 2.1.8.3/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.322 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.321 2010/07/13 10:18:56 blueness Exp $
4    
5     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
6     -hardened-sources-2.6.32-r7.ebuild:
7     Removed for security. Bug #325573
8 blueness 1.321
9     *hardened-sources-2.6.34 (13 Jul 2010)
10    
11     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
12     +hardened-sources-2.6.34.ebuild:
13     Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
14 blueness 1.320
15     *hardened-sources-2.6.32-r11 (13 Jul 2010)
16    
17     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
18     +hardened-sources-2.6.32-r11.ebuild:
19     New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
20 chainsaw 1.319
21     06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
22     Marked stable on AMD64 as requested by Anthony G. Basile
23     <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
24     on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
25 blueness 1.318
26     *hardened-sources-2.6.32-r10 (30 Jun 2010)
27    
28     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
29     +hardened-sources-2.6.32-r10.ebuild:
30     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
31 blueness 1.317
32     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
33     Added myself to the metadata.xml
34 chainsaw 1.316
35     *hardened-sources-2.6.32-r9 (11 Jun 2010)
36    
37     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
38     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
39 chainsaw 1.315
40     *hardened-sources-2.6.32-r8 (01 Jun 2010)
41    
42     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
43     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
44 chainsaw 1.314
45     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
46     Update SRC_URI to point to mirror network now that the distfile has
47     propagated.
48 chainsaw 1.313
49     *hardened-sources-2.6.32-r7 (26 May 2010)
50    
51     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
52     metadata.xml:
53     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
54     Summers.
55 robbat2 1.312
56     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
57     Update Manifest for deblob support in kernel-2 eclass.
58 nixnut 1.311
59     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
60     ppc stable
61 gengor 1.310
62     29 May 2009; Gordon Malm <gengor@gentoo.org>
63     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
64     Stable amd64/x86 and remove old.
65 gengor 1.309
66     *hardened-sources-2.6.29 (25 May 2009)
67    
68     25 May 2009; Gordon Malm <gengor@gentoo.org>
69     +hardened-sources-2.6.29.ebuild:
70     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
71     release candidates.
72 gengor 1.308
73     *hardened-sources-2.6.28-r9 (25 May 2009)
74    
75     25 May 2009; Gordon Malm <gengor@gentoo.org>
76     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
77     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
78 gengor 1.307
79     *hardened-sources-2.6.28-r8 (18 May 2009)
80    
81     18 May 2009; Gordon Malm <gengor@gentoo.org>
82     +hardened-sources-2.6.28-r8.ebuild:
83     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
84     and #262862 among others.
85 gengor 1.306
86     01 May 2009; Gordon Malm <gengor@gentoo.org>
87     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
88     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
89     Remove unnecessary mirror://gentoo from SRC_URI.
90 nixnut 1.305
91     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
92     ppc stable
93 gengor 1.304
94     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
95     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
96     Stable amd64/x86 and remove old.
97 gengor 1.303
98     *hardened-sources-2.6.28-r7 (27 Mar 2009)
99    
100     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
101     +hardened-sources-2.6.28-r7.ebuild:
102     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
103 gengor 1.302
104     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
105     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
106     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
107     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
108     Stable amd64/x86 and remove old versions.
109 nixnut 1.301
110     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
111     ppc stable
112 gengor 1.300
113     *hardened-sources-2.6.28-r6 (21 Mar 2009)
114    
115     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
116     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
117     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
118 gengor 1.299
119     *hardened-sources-2.6.28-r5 (20 Mar 2009)
120    
121     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
122     +hardened-sources-2.6.28-r5.ebuild:
123     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
124 gengor 1.298
125     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
126     hardened-sources-2.6.28-r4.ebuild:
127     Stable amd64/x86.
128 gengor 1.297
129     *hardened-sources-2.6.28-r4 (18 Mar 2009)
130    
131     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
132     +hardened-sources-2.6.28-r4.ebuild:
133     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
134     compilation with CPA_DEBUG and more.
135 gengor 1.296
136     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
137     hardened-sources-2.6.28-r3.ebuild:
138     Quick stable amd64/x86.
139 gengor 1.295
140     *hardened-sources-2.6.28-r3 (15 Mar 2009)
141    
142     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
143     +hardened-sources-2.6.28-r3.ebuild:
144     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
145 nixnut 1.294
146     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
147     ppc stable
148 gengor 1.293
149     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
150     hardened-sources-2.6.28-r2.ebuild:
151     Stable amd64/x86.
152 gengor 1.292
153     *hardened-sources-2.6.28-r2 (11 Mar 2009)
154    
155     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
156     +hardened-sources-2.6.28-r2.ebuild:
157     Version bump bringing in latest grsecurity patch.
158 gengor 1.291
159     *hardened-sources-2.6.28-r1 (09 Mar 2009)
160    
161     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
162     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
163     Version bump and remove old.
164 nixnut 1.290
165     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
166     ppc stable
167 gengor 1.289
168     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
169     hardened-sources-2.6.27-r8.ebuild:
170     Remove amd64 testing keyword, bug 256226.
171 gengor 1.288
172     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
173     hardened-sources-2.6.27-r8.ebuild:
174     Revert amd64 stable, bug #256226.
175 gengor 1.287
176     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
177     hardened-sources-2.6.27-r8.ebuild:
178     Stable on amd64/x86.
179 gengor 1.286
180     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
181     -hardened-sources-2.6.27-r6.ebuild:
182     Remove old 2.6.27 release.
183 gengor 1.285
184     *hardened-sources-2.6.27-r8 (24 Feb 2009)
185    
186     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
187     +hardened-sources-2.6.27-r8.ebuild:
188     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
189     and probably more.
190 nixnut 1.284
191     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
192     ppc stable
193 gengor 1.283
194     *hardened-sources-2.6.28 (25 Jan 2009)
195    
196     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
197     +hardened-sources-2.6.28.ebuild:
198     Initial 2.6.28 release.
199 gengor 1.282
200     *hardened-sources-2.6.27-r7 (25 Jan 2009)
201    
202     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
203     +hardened-sources-2.6.27-r7.ebuild:
204     Bump to Linux 2.6.27.13.
205 gengor 1.281
206     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
207     hardened-sources-2.6.26-r9.ebuild:
208     Stable amd64/x86.
209 gengor 1.280
210     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
211     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
212     -hardened-sources-2.6.27-r5.ebuild:
213     Remove problem versions.
214 gengor 1.279
215     *hardened-sources-2.6.27-r6 (24 Jan 2009)
216    
217     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
218     +hardened-sources-2.6.27-r6.ebuild:
219     Revert PaX test29 to test30 changes. Fixes bug 256226.
220 gengor 1.277
221     *hardened-sources-2.6.27-r5 (24 Jan 2009)
222    
223     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
224     +hardened-sources-2.6.27-r5.ebuild:
225 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
226 gengor 1.277 254843.
227 gengor 1.276
228     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
229     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
230     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
231     Remove problem versions.
232 nixnut 1.275
233     23 Jan 2009; nixnut <nixnut@gentoo.org>
234     hardened-sources-2.6.25-r13.ebuild:
235     ppc stable
236 gengor 1.274
237     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
238     hardened-sources-2.6.25-r13.ebuild:
239     Fasttrack stable amd64/x86.
240 gengor 1.273
241     *hardened-sources-2.6.26-r9 (21 Jan 2009)
242    
243     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
244     +hardened-sources-2.6.26-r9.ebuild:
245 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
246 gengor 1.272
247     *hardened-sources-2.6.25-r13 (20 Jan 2009)
248    
249     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
250     +hardened-sources-2.6.25-r13.ebuild:
251 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
252 nixnut 1.271
253     20 Jan 2009; nixnut <nixnut@gentoo.org>
254     hardened-sources-2.6.25-r12.ebuild:
255     ppc stable
256 gengor 1.270
257     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
258     hardened-sources-2.6.25-r12.ebuild:
259     Stable amd64/x86.
260 gengor 1.269
261     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
262     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
263     -hardened-sources-2.6.27-r2.ebuild:
264     Clean out old versions.
265 gengor 1.268
266     *hardened-sources-2.6.27-r4 (14 Jan 2009)
267     *hardened-sources-2.6.26-r8 (14 Jan 2009)
268     *hardened-sources-2.6.25-r12 (14 Jan 2009)
269    
270     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
271     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
272     +hardened-sources-2.6.27-r4.ebuild:
273     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
274     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
275     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
276     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
277 nixnut 1.267
278     15 Dec 2008; nixnut <nixnut@gentoo.org>
279     hardened-sources-2.6.25-r11.ebuild:
280     Stable on ppc
281 gengor 1.266
282     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
283     hardened-sources-2.6.25-r11.ebuild:
284     Stable amd64/x86.
285 gengor 1.265
286     *hardened-sources-2.6.27-r3 (07 Dec 2008)
287    
288     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
289     +hardened-sources-2.6.27-r3.ebuild:
290     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
291     Fixes bug #248754, #249729 and #246607.
292 gengor 1.264
293     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
294     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
295     Remove old versions.
296 gengor 1.262
297     *hardened-sources-2.6.26-r7 (03 Dec 2008)
298     *hardened-sources-2.6.25-r11 (03 Dec 2008)
299    
300 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
301     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
302 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
303     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
304     Both include many backports from 2.6.27.{6,7} -stable releases.
305 gengor 1.261
306     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
307     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
308     Remove versions broken on ARCHes != x86/amd64.
309 gengor 1.260
310     *hardened-sources-2.6.27-r2 (24 Nov 2008)
311    
312     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
313     +hardened-sources-2.6.27-r2.ebuild:
314     Bump to Linux 2.6.27.7 and latest grsecurity patch.
315 gengor 1.259
316     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
317     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
318     Remove old versions.
319 gengor 1.258
320     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
321     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
322     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
323 nixnut 1.257
324     16 Nov 2008; nixnut <nixnut@gentoo.org>
325     hardened-sources-2.6.25-r10.ebuild:
326     Stable on ppc
327 gengor 1.256
328     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
329     hardened-sources-2.6.25-r10.ebuild:
330     Stable amd64/x86.
331 gengor 1.255
332     *hardened-sources-2.6.26-r6 (12 Nov 2008)
333    
334     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
335     +hardened-sources-2.6.26-r6.ebuild:
336     Bump to Linux 2.6.26.8 and fix security bug #245650.
337 gengor 1.254
338     *hardened-sources-2.6.25-r10 (12 Nov 2008)
339    
340     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
341     +hardened-sources-2.6.25-r10.ebuild:
342     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
343 gengor 1.253
344     *hardened-sources-2.6.27-r1 (09 Nov 2008)
345    
346     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
347     +hardened-sources-2.6.27-r1.ebuild:
348     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
349 gengor 1.252
350     *hardened-sources-2.6.27 (04 Nov 2008)
351    
352     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
353     +hardened-sources-2.6.27.ebuild:
354     Initial 2.6.27 release.
355 gengor 1.251
356     *hardened-sources-2.6.26-r5 (03 Nov 2008)
357    
358     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
359     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
360     +hardened-sources-2.6.26-r5.ebuild:
361     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
362     Clean out some old versions.
363 nixnut 1.250
364     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
365     Stable on ppc
366 gengor 1.249
367     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
368     hardened-sources-2.6.25-r9.ebuild:
369     Stable on amd64/x86.
370 gengor 1.248
371     *hardened-sources-2.6.25-r9 (26 Oct 2008)
372    
373     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
374     +hardened-sources-2.6.25-r9.ebuild:
375     Update to Linux 2.6.25.19
376 nixnut 1.247
377     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
378     Stable on ppc
379 gengor 1.246
380     *hardened-sources-2.6.26-r4 (14 Oct 2008)
381    
382     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
383     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
384     Update to latest grsecurity patch, fixing building of non-modular kernels.
385 gengor 1.245
386     *hardened-sources-2.6.26-r3 (12 Oct 2008)
387    
388     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
389     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
390     +hardened-sources-2.6.26-r3.ebuild:
391     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
392     2.6.26-r1: Removed.
393     2.6.25-r8: Stable amd64/x86.
394 gengor 1.244
395     *hardened-sources-2.6.25-r8 (09 Oct 2008)
396    
397     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
398     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
399     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
400     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
401 nixnut 1.243
402     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
403     Stable on ppc
404 gengor 1.242
405     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
406     hardened-sources-2.6.25-r7.ebuild:
407     Stable amd64/x86.
408 gengor 1.241
409     *hardened-sources-2.6.26-r2 (13 Sep 2008)
410    
411     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
412     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
413     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
414     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
415 gengor 1.240
416     *hardened-sources-2.6.25-r7 (13 Sep 2008)
417    
418     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
419     +hardened-sources-2.6.25-r7.ebuild:
420     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
421 gengor 1.239
422     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
423     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
424     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
425     hardened-sources-2.6.26-r1.ebuild:
426     Update DESCRIPTION and HGPV_URI.
427 gengor 1.238
428     *hardened-sources-2.6.25-r6 (09 Sep 2008)
429    
430     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
431     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
432     2.6.25-r6: Update to Linux 2.6.25.17.
433     2.6.24-r3: Removed.
434 gengor 1.237
435     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
436     hardened-sources-2.6.25-r5.ebuild:
437     Stable on amd64/x86
438 gengor 1.236
439     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
440     Update my email address.
441 nixnut 1.235
442     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
443     stable on ppc
444 battousai 1.234
445     *hardened-sources-2.6.26-r1 (23 Aug 2008)
446     *hardened-sources-2.6.25-r5 (23 Aug 2008)
447    
448     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
449     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
450     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
451     +hardened-sources-2.6.26-r1.ebuild:
452     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
453     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
454     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
455     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
456     (gengor).
457 solar 1.233
458     *hardened-sources-2.6.26 (18 Aug 2008)
459     *hardened-sources-2.6.25-r4 (18 Aug 2008)
460    
461     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
462     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
463     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
464     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
465     2.6.25-r2: Removed.
466 tove 1.232
467     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
468     Remove phreak from metadata.xml (#96398)
469 solar 1.231
470     *hardened-sources-2.6.25-r3 (31 Jul 2008)
471    
472     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
473     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
474     +hardened-sources-2.6.25-r3.ebuild:
475     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
476     fixes, including security bug #231750.
477 nixnut 1.230
478     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
479     Stable on ppc
480 solar 1.229
481     *hardened-sources-2.6.25-r2 (05 Jul 2008)
482    
483     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
484     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
485     +hardened-sources-2.6.25-r2.ebuild:
486     2.6.23-r4: Stable x86/amd64
487     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
488     2.6.23-r{11,12}: Removed due to multiple vulns.
489     (gengor & kerframil)
490 nixnut 1.228
491     04 Jul 2008; nixnut <nixnut@gentoo.org>
492     hardened-sources-2.6.23-r13.ebuild:
493     Stable on ppc
494 solar 1.227
495     *hardened-sources-2.6.25-r1 (30 Jun 2008)
496    
497     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
498     +hardened-sources-2.6.25-r1.ebuild:
499     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
500     grsecurity release. 2.6.23-r13: x86/amd64 stable
501 solar 1.226
502     *hardened-sources-2.6.25 (17 Jun 2008)
503     *hardened-sources-2.6.24-r3 (17 Jun 2008)
504     *hardened-sources-2.6.23-r13 (17 Jun 2008)
505    
506     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
507     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
508     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
509     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
510     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
511     2.6.25: Initial 2.6.25 release.
512 solar 1.225
513     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
514     - fasttrack to stable x86/amd64
515 swegener 1.224
516     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
517     Fix broken digest for linux-2.6.24.tar.bz2.
518 solar 1.223
519     *hardened-sources-2.6.24-r2 (11 May 2008)
520     *hardened-sources-2.6.23-r12 (11 May 2008)
521    
522     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
523     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
524     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
525     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
526     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
527     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
528     security bugs 219901, 220691, 220975, 220979, 221123. New
529     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
530     should be removed as far as I'm concerned, everything else remove due to
531     vulnerable to numerous security bugs or brokeness.
532 nixnut 1.222
533     10 May 2008; nixnut <nixnut@gentoo.org>
534     hardened-sources-2.6.23-r11.ebuild:
535     Stable on ppc
536 solar 1.221
537     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
538     - -r11 stable on x86/amd64
539 solar 1.220
540     *hardened-sources-2.6.23-r11 (01 May 2008)
541    
542     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
543     - version bump to fix ulgy linux bugs
544 phreak 1.219
545     *hardened-sources-2.6.24-r1 (30 Apr 2008)
546    
547     30 Apr 2008; Christian Heim <phreak@gentoo.org>
548     +hardened-sources-2.6.24-r1.ebuild:
549     Revision bump (thanks to Kerin and Gordon, again), pulling
550     genpatches-2.6.24-7, solving #219089. Additionally contains further security
551     fixes plus some minor updates.
552 phreak 1.218
553     *hardened-sources-2.6.23-r10 (30 Apr 2008)
554    
555     30 Apr 2008; Christian Heim <phreak@gentoo.org>
556     +hardened-sources-2.6.23-r10.ebuild:
557     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
558     Additional contains "various other fixes".
559 phreak 1.217
560     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
561     Update the longdescription in metadata, thanks to Gordon Malm.
562 nixnut 1.216
563     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
564     Stable on ppc wrt bug #213255
565 solar 1.215
566     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
567     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
568     - stable on x86/amd64 per request. Removed obsolete ebuilds
569 phreak 1.214
570     *hardened-sources-2.6.24 (07 Apr 2008)
571    
572     07 Apr 2008; Christian Heim <phreak@gentoo.org>
573     +hardened-sources-2.6.24.ebuild:
574     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
575     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
576     for the many contributions and their continued effort in #216612) based on
577     2.6.24 and genpatches-2.6.24-5.
578    
579     The current ebuild/patchset contains these things:
580     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
581     * Introduces bespoke server and workstation oriented security levels
582     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
583 phreak 1.213
584     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
585     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
586     maintaining it).
587 phreak 1.212
588     24 Mar 2008; Christian Heim <phreak@gentoo.org>
589     hardened-sources-2.4.35-r2.ebuild:
590     Fixing SRC_URI for 2.4.35-r2.
591 phreak 1.211
592     *hardened-sources-2.6.23-r9 (22 Mar 2008)
593    
594     22 Mar 2008; Christian Heim <phreak@gentoo.org>
595     +hardened-sources-2.6.23-r9.ebuild:
596     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
597     * Change the default GIDs for some grsecurity options
598     * Revamp the Hardened [Gentoo] security level and make it the default level
599     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
600     * Fix a recursive lock -- call to capable() within ptrace_attach()
601     * Fix bug that allows audit and iscsi operations to be controlled via netlink
602 solar 1.210
603     *hardened-sources-2.6.23-r8 (27 Feb 2008)
604    
605     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
606     - version bump from Kerin Millar bug 210026
607 solar 1.209
608     17 Feb 2008; <solar@gentoo.org> metadata.xml,
609     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
610     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
611     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
612     - stable on x86 and remove old ebuilds
613 solar 1.207
614     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
615 solar 1.208 - stable on amd64 per request of amd64 lead
616 solar 1.206
617     *hardened-sources-2.6.23-r7 (11 Feb 2008)
618    
619     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
620     - version bump from kerin.millar
621     Changes:
622    
623     * Bump to genpatches-base-2.6.23-9
624     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
625     * Disables COMPAT_VDSO in x86/defconfig
626     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
627 phreak 1.205
628     25 Jan 2008; Christian Heim <phreak@gentoo.org>
629     -hardened-sources-2.6.22-r8.ebuild:
630     Cleaning up old versions.
631 phreak 1.204
632     *hardened-sources-2.6.23-r6 (25 Jan 2008)
633    
634     25 Jan 2008; Christian Heim <phreak@gentoo.org>
635     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
636     Revision bump, pulling in the latest genpatches.
637 phreak 1.203
638     *hardened-sources-2.6.23-r5 (24 Dec 2007)
639    
640     24 Dec 2007; Christian Heim <phreak@gentoo.org>
641     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
642     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
643     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
644     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
645 phreak 1.202
646     24 Dec 2007; Christian Heim <phreak@gentoo.org>
647     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
648     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
649     -hardened-sources-2.6.23-r3.ebuild:
650     Cleaning out some unused, old versions.
651 phreak 1.201
652     24 Dec 2007; Christian Heim <phreak@gentoo.org>
653     hardened-sources-2.6.23-r4.ebuild:
654     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
655     in the tree for long, but there isn't much of a difference between this and
656     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
657 phreak 1.200
658     *hardened-sources-2.6.23-r4 (23 Dec 2007)
659    
660     23 Dec 2007; Christian Heim <phreak@gentoo.org>
661     +hardened-sources-2.6.23-r4.ebuild:
662     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
663 phreak 1.199
664     *hardened-sources-2.6.23-r3 (04 Dec 2007)
665    
666     04 Dec 2007; Christian Heim <phreak@gentoo.org>
667     +hardened-sources-2.6.23-r3.ebuild:
668     Revision bump, pulling in 2.6.23.9.
669 phreak 1.198
670     *hardened-sources-2.6.23-r2 (25 Nov 2007)
671    
672     25 Nov 2007; Christian Heim <phreak@gentoo.org>
673     +hardened-sources-2.6.23-r2.ebuild:
674     Updated patchset, thanks to solar.
675 phreak 1.197
676     *hardened-sources-2.6.23-r1 (31 Oct 2007)
677    
678     31 Oct 2007; Christian Heim <phreak@gentoo.org>
679     +hardened-sources-2.6.23-r1.ebuild:
680     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
681 solar 1.196
682     29 Oct 2007; <solar@gentoo.org> metadata.xml:
683     - update metadata.xml
684 phreak 1.195
685     25 Oct 2007; Christian Heim <phreak@gentoo.org>
686     hardened-sources-2.6.22-r8.ebuild:
687     Marking 2.6.22-r8 stable on amd64 and x86.
688 phreak 1.194
689     21 Oct 2007; Christian Heim <phreak@gentoo.org>
690     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
691     -hardened-sources-2.6.21-r4.ebuild:
692     Removing old ebuilds.
693 phreak 1.193
694     *hardened-sources-2.4.35-r2 (21 Oct 2007)
695    
696     21 Oct 2007; Christian Heim <phreak@gentoo.org>
697     +hardened-sources-2.4.35-r2.ebuild:
698     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
699     patches.
700 phreak 1.192
701     *hardened-sources-2.6.22-r8 (21 Oct 2007)
702    
703     21 Oct 2007; Christian Heim <phreak@gentoo.org>
704     +hardened-sources-2.6.22-r8.ebuild:
705     Yet another new patch, hopefully fixing the remaining issues we had w/
706     2.6.22. Candidate for stabling.
707 phreak 1.191
708     *hardened-sources-2.6.23 (13 Oct 2007)
709    
710     13 Oct 2007; Christian Heim <phreak@gentoo.org>
711     +hardened-sources-2.6.23.ebuild:
712     Initial hardened-sources-2.6.23. If people still have problems w/ bug
713     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
714 phreak 1.190
715     11 Oct 2007; Christian Heim <phreak@gentoo.org>
716     hardened-sources-2.6.20-r10.ebuild:
717     Pulling in yet another new genpatches version, fixing the PWC bug for real.
718 phreak 1.189
719     04 Oct 2007; Christian Heim <phreak@gentoo.org>
720     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
721     Removing old versions.
722 phreak 1.188
723     *hardened-sources-2.6.22-r7 (01 Oct 2007)
724    
725     01 Oct 2007; Christian Heim <phreak@gentoo.org>
726     +hardened-sources-2.6.22-r7.ebuild:
727     Revision bump, pulling in a newer patch. Should fix #194276.
728 phreak 1.187
729     30 Sep 2007; Christian Heim <phreak@gentoo.org>
730     hardened-sources-2.6.20-r10.ebuild:
731     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
732     Mike Doty).
733 phreak 1.186
734     *hardened-sources-2.6.22-r6 (26 Sep 2007)
735    
736     26 Sep 2007; Christian Heim <phreak@gentoo.org>
737     +hardened-sources-2.6.22-r6.ebuild:
738     Revision bump, grabbing up till Linux 2.6.22.9.
739 phreak 1.185
740     24 Sep 2007; Christian Heim <phreak@gentoo.org>
741     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
742     Cleaning up further.
743 phreak 1.184
744     *hardened-sources-2.6.20-r10 (24 Sep 2007)
745    
746     24 Sep 2007; Christian Heim <phreak@gentoo.org>
747     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
748     +hardened-sources-2.6.20-r10.ebuild:
749     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
750     revisions.
751 phreak 1.183
752     *hardened-sources-2.6.22-r5 (22 Sep 2007)
753    
754     22 Sep 2007; Christian Heim <phreak@gentoo.org>
755     +hardened-sources-2.6.22-r5.ebuild:
756     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
757 phreak 1.182
758     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
759     Removing johnm from metadata.xml (see #186467 for reference).
760 phreak 1.181
761     *hardened-sources-2.6.22-r4 (17 Sep 2007)
762    
763     17 Sep 2007; Christian Heim <phreak@gentoo.org>
764     +hardened-sources-2.6.22-r4.ebuild:
765     Revision bump, hopefully fixing all those weird PAX failures.
766 phreak 1.180
767     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
768     Updating the metadata.xml.
769 phreak 1.179
770     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
771     Removing tocharian from metadata due to his retirement (see #71718 for
772     reference).
773 phreak 1.178
774     *hardened-sources-2.6.20-r9 (30 Aug 2007)
775    
776     30 Aug 2007; Christian Heim <phreak@gentoo.org>
777     +hardened-sources-2.6.20-r9.ebuild:
778     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
779 phreak 1.177
780     29 Aug 2007; Christian Heim <phreak@gentoo.org>
781     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
782     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
783     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
784     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
785     -hardened-sources-2.6.22-r2.ebuild:
786     Removing some redundant versions.
787 phreak 1.176
788     *hardened-sources-2.4.35-r1 (29 Aug 2007)
789    
790     29 Aug 2007; Christian Heim <phreak@gentoo.org>
791     +hardened-sources-2.4.35-r1.ebuild:
792     Revision bump, new grsecurity patch.
793 phreak 1.175
794     *hardened-sources-2.6.20-r8 (26 Aug 2007)
795    
796     26 Aug 2007; Christian Heim <phreak@gentoo.org>
797     +hardened-sources-2.6.20-r8.ebuild:
798     Revision bump for Linux 2.6.20.17.
799 phreak 1.174
800     *hardened-sources-2.6.22-r3 (22 Aug 2007)
801    
802     22 Aug 2007; Christian Heim <phreak@gentoo.org>
803     +hardened-sources-2.6.22-r3.ebuild:
804     Revision bump for Linux 2.6.22.4.
805 phreak 1.173
806     16 Aug 2007; Christian Heim <phreak@gentoo.org>
807     hardened-sources-2.6.22-r2.ebuild:
808     Updated patchset, to fix the alignment against 2.6.22.3.
809 phreak 1.172
810     *hardened-sources-2.6.22-r2 (16 Aug 2007)
811    
812     16 Aug 2007; Christian Heim <phreak@gentoo.org>
813     +hardened-sources-2.6.22-r2.ebuild:
814     Revision bump for Linux 2.6.22.3.
815 phreak 1.171
816     *hardened-sources-2.4.35 (16 Aug 2007)
817    
818     16 Aug 2007; Christian Heim <phreak@gentoo.org>
819     +hardened-sources-2.4.35.ebuild:
820     Version bump, initial version for Linux 2.4.35.
821 phreak 1.170
822     *hardened-sources-2.6.21-r4 (16 Aug 2007)
823    
824     16 Aug 2007; Christian Heim <phreak@gentoo.org>
825     +hardened-sources-2.6.21-r4.ebuild:
826     Revision bump for Linux 2.6.21.6.
827 phreak 1.169
828     *hardened-sources-2.6.20-r7 (16 Aug 2007)
829    
830     16 Aug 2007; Christian Heim <phreak@gentoo.org>
831     +hardened-sources-2.6.20-r7.ebuild:
832     Revision bump for Linux 2.6.20.16.
833 phreak 1.168
834     *hardened-sources-2.6.22-r1 (13 Aug 2007)
835    
836     13 Aug 2007; Christian Heim <phreak@gentoo.org>
837     +hardened-sources-2.6.22-r1.ebuild:
838     Yet another revision bump.
839 phreak 1.167
840     *hardened-sources-2.6.22 (10 Aug 2007)
841    
842     10 Aug 2007; Christian Heim <phreak@gentoo.org>
843     +hardened-sources-2.6.22.ebuild:
844     Initial release for 2.6.22. If you are using hardened-sources on a desktop
845     machine (P4 or newer), be aware you might need to disable
846     CONFIG_PAX_PAGEEXEC.
847 phreak 1.166
848     04 Aug 2007; Christian Heim <phreak@gentoo.org>
849     hardened-sources-2.6.20-r6.ebuild:
850     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
851     2.6.20.15.
852 phreak 1.165
853     10 Jul 2007; Christian Heim <phreak@gentoo.org>
854     hardened-sources-2.6.20-r5.ebuild:
855     Marking hardened-sources-2.6.20-r5 stable on ppc.
856 phreak 1.164
857     10 Jul 2007; Christian Heim <phreak@gentoo.org>
858     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
859     Cleanup.
860 phreak 1.163
861     *hardened-sources-2.6.20-r6 (08 Jul 2007)
862    
863     08 Jul 2007; Christian Heim <phreak@gentoo.org>
864     +hardened-sources-2.6.20-r6.ebuild:
865     Revision bump, grabbing yet another stable release.
866 phreak 1.162
867     17 Jun 2007; Christian Heim <phreak@gentoo.org>
868     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
869     -hardened-sources-2.6.21-r2.ebuild:
870     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
871     alpha stable KEYWORD by mistake.
872 phreak 1.161
873     17 Jun 2007; Christian Heim <phreak@gentoo.org>
874     hardened-sources-2.6.20-r5.ebuild:
875     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
876     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
877 phreak 1.160
878     *hardened-sources-2.6.21-r3 (12 Jun 2007)
879    
880     12 Jun 2007; Christian Heim <phreak@gentoo.org>
881     +hardened-sources-2.6.21-r3.ebuild:
882     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
883     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
884     love.
885 phreak 1.159
886     *hardened-sources-2.6.20-r5 (11 Jun 2007)
887    
888     11 Jun 2007; Christian Heim <phreak@gentoo.org>
889     +hardened-sources-2.6.20-r5.ebuild:
890     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
891     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
892     love.
893 pappy 1.158
894     *hardened-sources-2.4.34.5 (11 Jun 2007)
895    
896     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
897     +hardened-sources-2.4.34.5.ebuild:
898     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
899 phreak 1.157
900     30 May 2007; Christian Heim <phreak@gentoo.org>
901     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
902     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
903     stale ebuild(s).
904 phreak 1.156
905     30 May 2007; Christian Heim <phreak@gentoo.org>
906     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
907     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
908     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
909     Doing some cleanups, remove stale ebuilds.
910 phreak 1.155
911     26 May 2007; Christian Heim <phreak@gentoo.org>
912     hardened-sources-2.6.21-r2.ebuild:
913     Fixing the grsecurity patch, had one '};' too much.
914 phreak 1.154
915     *hardened-sources-2.6.21-r2 (26 May 2007)
916    
917     26 May 2007; Christian Heim <phreak@gentoo.org>
918     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
919     +hardened-sources-2.6.21-r2.ebuild:
920     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
921     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
922 phreak 1.153
923     *hardened-sources-2.6.20-r4 (26 May 2007)
924    
925     26 May 2007; Christian Heim <phreak@gentoo.org>
926     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
927     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
928 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
929 phreak 1.152
930     15 May 2007; Christian Heim <phreak@gentoo.org>
931     hardened-sources-2.6.20-r3.ebuild:
932     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
933     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
934     grsecurity patch fail in that exact same hunk.
935 phreak 1.151
936     *hardened-sources-2.6.20-r3 (15 May 2007)
937    
938     15 May 2007; Christian Heim <phreak@gentoo.org>
939     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
940     Revision bump, incorporating Linux 2.6.20.11.
941    
942     *hardened-sources-2.6.21-r1 (11 May 2007)
943    
944     11 May 2007; Christian Heim <phreak@gentoo.org>
945     +hardened-sources-2.6.21-r1.ebuild:
946     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
947     mentioned in #177234.
948 kevquinn 1.150
949     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
950     files/digest-hardened-sources-2.6.21, Manifest:
951     Fix Manifest/digest for linux-2.6.21.tar.bz2
952 phreak 1.149
953     06 May 2007; Christian Heim <phreak@gentoo.org>
954     hardened-sources-2.6.21.ebuild:
955     Bumping the hardened-patches version, needed for the fix for #177234.
956 phreak 1.148
957     *hardened-sources-2.6.21 (02 May 2007)
958    
959     02 May 2007; Christian Heim <phreak@gentoo.org>
960     +hardened-sources-2.6.21.ebuild:
961     Version bump, Linux 2.6.21-hardened.
962 phreak 1.147
963     29 Apr 2007; Christian Heim <phreak@gentoo.org>
964     hardened-sources-2.6.20-r2.ebuild:
965     Adding ~ia64 on Ned's request.
966 phreak 1.146
967     29 Apr 2007; Christian Heim <phreak@gentoo.org>
968     hardened-sources-2.6.20-r2.ebuild:
969     Fixing the included grsecurity patch, wasn't alligning due to the Index:
970     header line(s).
971 phreak 1.145
972     29 Apr 2007; Christian Heim <phreak@gentoo.org>
973     hardened-sources-2.6.20-r2.ebuild:
974     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
975 armin76 1.144
976     *hardened-sources-2.6.20-r2 (10 Apr 2007)
977    
978     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
979     +hardened-sources-2.6.20-r2.ebuild:
980     Version bump, on behalf of phreak
981 phreak 1.143
982     *hardened-sources-2.6.20-r1 (04 Apr 2007)
983    
984     04 Apr 2007; Christian Heim <phreak@gentoo.org>
985     +hardened-sources-2.6.20-r1.ebuild:
986     Revision bump, grabbing a newer grsecurity snapshot.
987 phreak 1.142
988     *hardened-sources-2.6.20 (25 Mar 2007)
989    
990     25 Mar 2007; Christian Heim <phreak@gentoo.org>
991     +hardened-sources-2.6.20.ebuild:
992     Finally a hardened-sources version for 2.6.20; many people have been waiting
993     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
994     testbox.
995 chainsaw 1.141
996     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
997     hardened-sources-2.6.18-r6.ebuild:
998     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
999 phreak 1.140
1000     *hardened-sources-2.6.18-r6 (16 Mar 2007)
1001    
1002     16 Mar 2007; Christian Heim <phreak@gentoo.org>
1003     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1004     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1005     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1006     supposed to be.
1007 phreak 1.139
1008     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1009     Fixing the Manifest, the previous one was broken (as in still had the
1010     deleted ebuild in it).
1011 phreak 1.138
1012     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1013     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1014     +hardened-sources-2.6.18-r5.ebuild:
1015     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1016     Linux 2.6.18.8. Also cleaning up the older version.
1017    
1018     *hardened-sources-2.6.18-r5 (06 Mar 2007)
1019    
1020     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1021     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1022     +hardened-sources-2.6.18-r5.ebuild:
1023     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1024     Linux 2.6.18.8. Also cleaning up the older version.
1025 phreak 1.137
1026     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1027     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1028     -hardened-sources-2.6.19-r5.ebuild:
1029     Removing some of the old version, that didn't work.
1030 phreak 1.136
1031     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1032    
1033     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1034     +hardened-sources-2.6.19-r6.ebuild:
1035     Revision bump, including a new grsec version fixing #166235.
1036 pappy 1.134
1037     *hardened-sources-2.4.34 (24 Jan 2007)
1038    
1039     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1040 pappy 1.135 Manifest:
1041     updating Manifest with checksums of new tarball and ebuild
1042    
1043     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1044 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1045     I added new hardened sources 2.4 update, this is a critical path
1046     security bugfix - all users of h-s are strongly advised
1047     to update their existing hardened sources to this version.
1048     It contains a fix for a kernel vulnerability that is pertaining
1049     to the PaX changes to virtual memory management, possibly leading
1050     to a local kernel exploit ... see grsecurity.net forums and homepage
1051 phreak 1.133
1052     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1053     files/digest-hardened-sources-2.6.19-r5, Manifest:
1054     Fixing the patch-tarball digest.
1055 phreak 1.132
1056     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1057    
1058     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1059     +hardened-sources-2.6.19-r5.ebuild:
1060     Revision bump, closing the recently discovered PaX expand_stack()
1061     vulnerability.
1062 phreak 1.131
1063     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1064    
1065     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1066     +hardened-sources-2.6.19-r4.ebuild:
1067     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1068     dropping the randomized PID feature.
1069 opfer 1.130
1070     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1071     hardened-sources-2.4.33.4.ebuild:
1072     stable x86, bug #161171
1073 phreak 1.129
1074     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1075    
1076     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1077     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1078     Revision bump for bug #157186 and #158786.
1079 phreak 1.128
1080     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1081    
1082     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1083     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1084     Revision bump for bug #157186.
1085 phreak 1.127
1086     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1087    
1088     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1089     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1090     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1091 phreak 1.126
1092     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1093     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1094     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1095     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1096     hardened-sources-2.6.19-r1.ebuild:
1097     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1098     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1099 pappy 1.125
1100     *hardened-sources-2.4.33.4 (17 Dec 2006)
1101    
1102     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1103     +hardened-sources-2.4.33.4.ebuild:
1104     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1105     and quilting
1106 phreak 1.124
1107     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1108    
1109     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1110     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1111     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1112     for reporting).
1113 phreak 1.123
1114     *hardened-sources-2.6.19 (13 Dec 2006)
1115    
1116     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1117     +hardened-sources-2.6.19.ebuild:
1118     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1119     Brad for providing that prompt update.
1120 phreak 1.122
1121     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1122    
1123     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1124     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1125     +hardened-sources-2.6.18-r3.ebuild:
1126     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1127     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1128 phreak 1.121
1129     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1130     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1131 nixnut 1.120
1132     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1133     Stable on ppc wrt bug 157356
1134 opfer 1.119
1135     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1136     hardened-sources-2.6.18.ebuild:
1137     stable x86, bug #157356
1138 phreak 1.118
1139     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1140    
1141     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1142     +hardened-sources-2.6.18-r2.ebuild:
1143     Revision bump, including 2.6.18.5 (via genpatches) and
1144     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1145     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1146     redesign.
1147 phreak 1.117
1148     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1149     hardened-sources-2.6.18.ebuild:
1150     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1151     of Mike Doty).
1152 phreak 1.116
1153     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1154    
1155     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1156     +hardened-sources-2.6.18-r1.ebuild:
1157     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1158 phreak 1.115
1159     *hardened-sources-2.6.18 (11 Nov 2006)
1160    
1161     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1162     +hardened-sources-2.6.18.ebuild:
1163     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1164 solar 1.114
1165     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1166     - mark amd64 stable also. bug #151877
1167 solar 1.113
1168     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1169     - mark 2.6.17-r1 stable
1170 phreak 1.112
1171     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1172     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1173     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1174 phreak 1.111
1175     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1176    
1177     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1178     +hardened-sources-2.6.17-r1.ebuild:
1179     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1180     grsecurity patch.
1181 phreak 1.110
1182     *hardened-sources-2.6.17 (17 Aug 2006)
1183    
1184     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1185     +hardened-sources-2.6.17.ebuild:
1186     Bumping the hardened-sources-2.6 series to 2.6.17, using
1187     genpatches-2.6.17-6.base.
1188 solar 1.109
1189     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1190     - stable on x86 and amd64
1191 solar 1.108
1192     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1193    
1194     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1195     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1196     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1197     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1198     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1199     crusty ebuilds
1200 johnm 1.107
1201     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1202     hardened-sources-2.6.16-r10.ebuild:
1203     marking stable on x86 and amd64
1204 solar 1.106
1205     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1206     - 2.4.32-r6 stable on x86. RSBAC state unknown
1207 kang 1.105
1208     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1209    
1210     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1211     +hardened-sources-2.4.32-r7.ebuild:
1212     Bump PaX for RSBAC to test-17
1213 johnm 1.104
1214     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1215    
1216     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1217     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1218     hardened-sources-2.6.16 bump to latest -base.
1219 solar 1.103
1220     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1221    
1222     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1223     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1224     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1225     sysctl controlable resource logging
1226 johnm 1.102
1227     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1228    
1229     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1230     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1231     push new 2.6.16 release in preparation for stable
1232 solar 1.101
1233     22 May 2006; <solar@gentoo.org> :
1234     - redigest bug 134002
1235 kang 1.100
1236     *hardened-sources-2.4.32-r5 (16 May 2006)
1237    
1238     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1239     +hardened-sources-2.4.32-r5.ebuild:
1240     Fixes rsbac common patching (new patch in new -r5 patchset)
1241 solar 1.99
1242     *hardened-sources-2.4.32-r4 (13 May 2006)
1243    
1244     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1245     +hardened-sources-2.4.32-r4.ebuild:
1246     - security bumps
1247 johnm 1.98
1248     *hardened-sources-2.6.16-r6 (03 May 2006)
1249    
1250     03 May 2006; John Mylchreest <johnm@gentoo.org>
1251     +hardened-sources-2.6.16-r6.ebuild:
1252     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1253 johnm 1.97
1254     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1255     hardened-sources-2.6.14-r8.ebuild:
1256     fix x86_64 build problem, this will delay the digest issue again for a short
1257     while but it will sort itself out
1258 johnm 1.96
1259     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1260     hardened-sources-2.6.14-r8.ebuild:
1261     bump hardened patchset
1262 antarus 1.94
1263     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1264     files/digest-hardened-sources-2.4.32-r2,
1265     files/digest-hardened-sources-2.4.32-r3,
1266     files/digest-hardened-sources-2.6.14-r8, Manifest:
1267     Fixing duff SHA256 digests: Bug # 131293
1268 johnm 1.93
1269 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1270    
1271     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1272     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1273     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1274     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1275     cleanup of old uneccessary sources
1276    
1277 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1278     fix digest
1279 johnm 1.92
1280     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1281    
1282     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1283     +hardened-sources-2.6.14-r8.ebuild:
1284     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1285 johnm 1.91
1286     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1287     Turning on gpg-signing again, and recomitting
1288 johnm 1.90
1289     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1290    
1291     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1292     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1293     +hardened-sources-2.6.16-r4.ebuild:
1294     Fix numerous security vulns
1295 solar 1.89
1296     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1297    
1298     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1299     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1300     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1301     - security bump for bug #112791. Removed old ebuilds
1302 johnm 1.88
1303     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1304    
1305     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1306     +hardened-sources-2.6.16-r3.ebuild:
1307     Removing silly localversion which I missed
1308 johnm 1.87
1309     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1310    
1311     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1312     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1313     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1314 johnm 1.86
1315     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1316    
1317     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1318     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1319     +hardened-sources-2.6.16-r2.ebuild:
1320     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1321     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1322 johnm 1.85
1323     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1324    
1325     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1326     +hardened-sources-2.6.16-r1.ebuild:
1327     Bumping to include ppc build fix and 2.6.16.3
1328 tsunam 1.84
1329     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1330     hardened-sources-2.6.14-r6.ebuild:
1331     Stable on x86; bug #127718
1332 johnm 1.83
1333     *hardened-sources-2.6.16 (31 Mar 2006)
1334    
1335     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1336     +hardened-sources-2.6.16.ebuild:
1337     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1338     2.6.16.1
1339 cryos 1.82
1340     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1341     hardened-sources-2.6.14-r6.ebuild:
1342     Stable on amd64, bug 127718.
1343 nixnut 1.81
1344     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1345     Stable on ppc. Bug #127718
1346 johnm 1.80
1347     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1348     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1349     -hardened-sources-2.6.14-r4.ebuild:
1350     Cleanup.
1351 johnm 1.79
1352     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1353    
1354     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1355     +hardened-sources-2.6.14-r6.ebuild:
1356     Fixes grsec policy recreation bug and adds a
1357     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1358 solar 1.78
1359     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1360     - stable on x86
1361 hansmi 1.77
1362     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1363     hardened-sources-2.6.14-r5.ebuild:
1364     Stable on ppc.
1365 johnm 1.76
1366     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1367    
1368     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1369     +hardened-sources-2.6.14-r5.ebuild:
1370     fixing every known exploit
1371 solar 1.75
1372     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1373    
1374     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1375     +hardened-sources-2.4.32-r2.ebuild:
1376     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1377 solar 1.74
1378     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1379    
1380     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1381     - version bump for new genpatches which fix up a few sec holes
1382 solar 1.73
1383     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1384    
1385     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1386     - revision bump to add misc vital linux kernel security patches.
1387 johnm 1.72
1388     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1389    
1390     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1391     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1392     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1393 johnm 1.71
1394     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1395     hardened-sources-2.6.14-r2.ebuild:
1396     making x86 & amd64 stable following testing.
1397 johnm 1.70
1398     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1399    
1400     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1401     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1402     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1403     network hooks.
1404 johnm 1.69
1405     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1406     hardened-sources-2.6.14-r1.ebuild:
1407     bumping to stable early for sec fix on x86 & amd64
1408 johnm 1.68
1409     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1410    
1411     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1412     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1413     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1414 solar 1.67
1415     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1416     - stable on x86 security bug #114227 CAN-2005-3257
1417 kang 1.66
1418     *hardened-sources-2.4.32 (19 Nov 2005)
1419    
1420     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1421     +hardened-sources-2.4.32.ebuild:
1422     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1423     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1424     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1425     rsbac >> /etc/portage/package.use)
1426 johnm 1.65
1427     *hardened-sources-2.6.14 (14 Nov 2005)
1428    
1429     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1430     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1431     Bumping 2.6 series to 2.6.14.2
1432 johnm 1.64
1433     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1434    
1435     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1436     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1437     +hardened-sources-2.6.13-r2.ebuild:
1438     Fixes minor build error in ppc.
1439 johnm 1.63
1440     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1441    
1442     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1443     +hardened-sources-2.6.13-r1.ebuild:
1444     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1445     2.6.13.4, fixes some major amd64 stability problems.
1446 johnm 1.62
1447     *hardened-sources-2.6.13 (16 Sep 2005)
1448    
1449     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1450     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1451     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1452     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1453     users should test this thoroughly.
1454 solar 1.61
1455     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1456     - stable on x86
1457 johnm 1.60
1458     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1459    
1460     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1461     +hardened-sources-2.6.11-r15.ebuild:
1462     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1463     grsec redefining curr_ip struct.
1464 solar 1.59
1465     *hardened-sources-2.4.31 (20 Jun 2005)
1466    
1467     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1468     initial import of 2.4.31 tree
1469 johnm 1.58
1470     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1471    
1472     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1473     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1474     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1475     naming scheme to abide by genpatches
1476 johnm 1.57
1477     *hardened-sources-2.6.11-r13 (18 May 2005)
1478    
1479     18 May 2005; John Mylchreest <johnm@gentoo.org>
1480     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1481     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1482     target. sorry about that. Fixes bug #93022
1483 johnm 1.56
1484     *hardened-sources-2.6.11-r12 (17 May 2005)
1485    
1486     17 May 2005; John Mylchreest <johnm@gentoo.org>
1487     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1488     +hardened-sources-2.6.11-r12.ebuild:
1489     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1490     merges in genpatches-base
1491 johnm 1.55
1492     *hardened-sources-2.6.11-r12 (17 May 2005)
1493    
1494     17 May 2005; John Mylchreest <johnm@gentoo.org>
1495     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1496     +hardened-sources-2.6.11-r12.ebuild:
1497     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1498     merges in genpatches-base
1499 solar 1.54
1500     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1501     -files/2.4.27-cmdline-race.patch,
1502     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1503     -files/2.4.28-grsec-binfmt_a.out.patch,
1504     -files/2.4.28-grsec-cmdline-race.patch,
1505     -files/2.4.28-selinux-binfmt_a.out.patch,
1506     -files/2.4.28-selinux-cmdline-race.patch,
1507     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1508     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1509     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1510     cleanup..
1511 solar 1.53
1512     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1513    
1514     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1515     - disable aout by default
1516 solar 1.52
1517     *hardened-sources-2.4.30 (18 Apr 2005)
1518    
1519     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1520     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1521     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1522     use
1523 tocharian 1.50
1524 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1525    
1526     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1527     +hardened-sources-2.4.29.ebuild:
1528     New hardened-patches-2.4-29.0 patchball.
1529     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1530    
1531     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1532    
1533     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1534     +hardened-sources-2.4.28-r5.ebuild:
1535     Added a fix for a PaX vulnerability.
1536    
1537     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1538 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1539     Stable on x86
1540 solar 1.49
1541     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1542     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1543     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1544     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1545     - fixed/added RDEPEND= in all kernel-2 ebuilds
1546 tocharian 1.48
1547     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1548    
1549     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1550     +hardened-sources-2.4.28-r4.ebuild:
1551     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1552     backport of neighbour hash updates.
1553 tocharian 1.47
1554     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1555     hardened-sources-2.4.28-r3.ebuild:
1556     Stable on x86
1557 tseng 1.46
1558     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1559    
1560     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1561     +hardened-sources-2.6.10-r3.ebuild:
1562     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1563     in 2005.0
1564 tocharian 1.45
1565     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1566     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1567     hardened-sources-2.4.28-r2.ebuild:
1568     Mark stable on x86
1569 tocharian 1.44
1570     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1571    
1572     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1573     +hardened-sources-2.4.28-r3.ebuild:
1574     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1575 tocharian 1.43
1576     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1577     hardened-sources-2.4.28.ebuild:
1578     Mark stable on x86.
1579 tocharian 1.42
1580     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1581    
1582     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1583     +hardened-sources-2.4.28-r2.ebuild:
1584     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1585     Mazinger for grsecurity patches as well.
1586 plasmaroo 1.41
1587     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1588    
1589     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1590     Security bump. Thank tocharian for rolling a new patchset...
1591 solar 1.40
1592     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1593     +files/2.4.28-grsec-cmdline-race.patch,
1594     +files/2.4.28-selinux-binfmt_a.out.patch,
1595     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1596     - Round up remaining security patches that appear to be missing in 2.4.28. -
1597     PaX standalone updated to current. hgpv=28.1
1598 solar 1.39
1599     *hardened-sources-2.4.28 (28 Nov 2004)
1600    
1601     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1602     security bump. Thank tocharian for rolling a new patchset
1603 scox 1.31
1604 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1605    
1606     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1607     +hardened-sources-2.4.27-r3.ebuild:
1608     Applies the new 2.4-27.2 patchball which updates
1609     GRSecurity to the 2.0.1 version.
1610    
1611 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1612    
1613     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1614     +hardened-sources-2.4.27-r2.ebuild:
1615     Version bump.
1616     This version uses the new 2.4-27.1 patchball which updates
1617     both the SELinux PaX hooks patch and the SELinux headers.
1618    
1619 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1620    
1621     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1622     +hardened-sources-2.4.27-r1.ebuild,
1623     -hardened-sources-2.4.27.ebuild,
1624     +files/2.4.27-cmdline-race.patch:
1625     Version bump, fix for cmdline race. See bug #59905.
1626    
1627     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1628    
1629     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1630     +hardened-sources-2.4.26-r6.ebuild,
1631     -hardened-sources-2.4.26-r5.ebuild,
1632     -hardened-sources-2.4.26-r4.ebuild,
1633     +files/2.4.26-cmdline-race.patch:
1634     Version bump, fix for cmdline race. See bug #59905.
1635    
1636 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1637    
1638     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1639     +hardened-sources-2.4.27.ebuild,
1640     +files/2.4.27-CAN-2004-0394.patch:
1641     Ported the patchball to the 2.4.27 kernel version.
1642    
1643 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1644    
1645     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1646     +hardened-sources-2.4.26-r5.ebuild:
1647 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1648 scox 1.34 It adds the following features:
1649     - Squashfs
1650     - Ebtables
1651     - Netdev random (core+drivers)
1652     - Watchdog Timer (WDT) fix.
1653    
1654 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1655    
1656     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1657     +hardened-sources-2.4.26-r4.ebuild,
1658     +files/2.4.26-CAN-2004-0415.patch,
1659     -hardened-sources-2.4.26-3:
1660     Version bump, fix for CAN 0415, see bug #59378.
1661    
1662 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1663    
1664     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1665     +hardened-sources-2.4.26-r3.ebuild,
1666     +files/2.4.26-CAN-2004-0497.patch,
1667     -hardened-sources-2.4.26-r2.ebuild:
1668     Version bump, fixed CAN 0497, see bug #56171.
1669    
1670 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1671    
1672     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1673 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1674 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1675     +files/2.4.26-CAN-2004-0535.patch,
1676     -hardened-sources-2.4.26-r1.ebuild:
1677     Fixes for both CAN 0495 and 0535, see bug #54976
1678 pvdabeel 1.27
1679 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1680     hardened-sources-2.4.26-r1.ebuild:
1681     QA - fix use invocation
1682 scox 1.28
1683     *hardened-sources-2.4.26-r1 (22 June 2004)
1684    
1685     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1686     +hardened-sources-2.4.26-r1.ebuild,
1687     +files/2.4.26-CAN-2004-0394.patch,
1688     +files/2.4.26-signal-race.patch,
1689     -hardened-sources-2.4.26.ebuild,
1690     -hardened-sources-2.4.24-r3.ebuild:
1691     Version bump for the CAN-2004-0394 issue and bug #53804
1692     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1693    
1694    
1695 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1696     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1697     Masked hardened-sources-2.4.26.ebuild broken for ppc
1698    
1699     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1700     hardened-sources-2.4.24-r3.ebuild:
1701     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1702 plasmaroo 1.25
1703 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1704    
1705     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1706     +hardened-sources-2.4.26.ebuild:
1707     Updated hardened-sources for the 2.4.26 kernel
1708     Removed broken components, updated almost everything.
1709    
1710 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1711    
1712     17 Apr 2004; <plasmaroo@gentoo.org>
1713     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1714     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1715     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1716     +hardened-sources-2.4.24-r3.ebuild:
1717     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1718     vulnerabilities. Old revisions removed.
1719 plasmaroo 1.24
1720     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1721    
1722     15 Apr 2004; <plasmaroo@gentoo.org>
1723     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1724     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1725     Version bump for the CAN-2004-0109 issue; bug #47881.
1726 aliz 1.23
1727     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1728     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1729     Add eutils to inherit.
1730 plasmaroo 1.22
1731     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1732    
1733     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1734     files/hardened-sources-2.4.24.munmap.patch:
1735     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1736 scox 1.19
1737 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1738 scox 1.26
1739 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1740     hardened-sources-2.4.24.ebuild:
1741     Version bump, updated most of the components.
1742     This release includes the following:
1743    
1744     - Hardened security
1745     - Netfilter patch-o-matic 20031219
1746     - FreeSWAN 2.04 & x509 1.4.8
1747     - EVMS 2.2.2
1748     - XFS 1.3.1
1749     - cryptoloop jari
1750     - grsecurity 2.0-rc4
1751     - SELinux
1752     - PaX 200402060000
1753     - PaX Obscurity 200308302223
1754     - Others...
1755    
1756     Neither -ck nor systrace are included anymore.
1757    
1758 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1759    
1760     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1761     hardened-sources-2.4.22-r2.ebuild:
1762 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1763 scox 1.19
1764     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1765 iggy 1.17
1766     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1767 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1768 iggy 1.16
1769     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1770 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1771     Version bump for the 'do_brk' vulnerability.
1772 iggy 1.15
1773     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1774     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1775     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1776     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1777 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1778 frogger 1.14
1779     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1780     hardened-sources-2.4.22.ebuild:
1781 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1782     components. These are no longer handled in the kernel
1783     so this code was not necessary.
1784 frogger 1.13
1785     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1786     New 2.4.22 based hardened-sources thanks to
1787     Phil West <p.west@computer.org>.
1788    
1789     These sources include:
1790 plasmaroo 1.18 - New SELinux API
1791     - Updated CK-base
1792     - Updated GRSec
1793     - Systrace
1794     - SuperFreeS/WAN 1.99.8
1795     - Propolice kernel build support
1796     - EVMS
1797     - Other various security related patches
1798 frogger 1.11
1799 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1800    
1801     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1802     Updated hardened-sources based on the 2.4.21 Linux kernel.
1803     This includes updates to most major components such as:
1804 plasmaroo 1.18 - ck-base-0306300059
1805     - selinux-2.4-2003071106
1806     - grsecurity-2.0-rc1
1807     - Updated IPTables patch-o-matic
1808     - Updated SuperFreeS/WAN
1809    
1810 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1811     updated patch set ready for the 2.4.21 based kernel.
1812    
1813 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1814     Initial import of hardened-sources-2.4.20-r4. This revision
1815     includes only a few changes, but one of these is an important
1816     security fix. It is recommended all users of hardened-sources
1817     upgrade to this release.
1818 plasmaroo 1.18
1819 frogger 1.11 - ioperm bug fix
1820     - fixed compilation failure when building without GRSec
1821 plasmaroo 1.18
1822 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1823     due to time constraints, but is planned for inclusion in the near
1824     future.
1825 msterret 1.10
1826     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1827    
1828     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1829     hardened-sources-2.4.20-r3.ebuild:
1830 plasmaroo 1.18 Add Header...
1831 frogger 1.9
1832     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1833     hardened-sources-2.4.20-r3.ebuild:
1834     Removed warnings from ebuild. This kernel should be safe to
1835     use at this point.
1836 frogger 1.8
1837     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1838    
1839     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1840     hardened-sources-2.4.20-r3.ebuild:
1841     New revision. Includes the following changes over -r2:
1842 plasmaroo 1.18
1843 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1844     - Super FreeS/WAN 1.99.7rc2
1845     - PaX for the LSM/SELinux branch
1846     - GRSecurity 2.0-pre4 (role based access control)
1847     - Systrace 1.3
1848     - EXT3 fixes
1849     - EVMS 2.0.1
1850     - GCC 3.1+ compile optimizations
1851     - ProPolice kernel build support
1852     - Hashing table security fixes
1853 frogger 1.3
1854     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1855 frogger 1.7
1856     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1857     Initial import of hardened-sources-r2. This new
1858     ebuild includes many new performance and security
1859     related patches. As in -r1, it will patch in
1860     LSM/SELinux if "selinux" is in USE, otherwise it
1861     will patch in GRSecurity. The following patches
1862     are included in this revision:
1863 plasmaroo 1.18
1864 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1865     (pulled from the base CK patch)
1866     - ptrace exploit patch for the LSM kernel
1867     (the GRSec patch already fixes this)
1868     - LSM 2.4-2003040709
1869     - SELinux 2.4-2003040709
1870     - Systrace v1.2
1871     - IPTables patch-o-matic base patches - 20030107
1872     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1873     - Super FreeS/WAN 1.99.6.1
1874     - GRSecurity 1.9.9g
1875     - MPPE
1876     - EXT3 data journal fix
1877     - CIPE 1.5.4
1878 frogger 1.6
1879     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1880     hardened-sources-2.4.20-r1.ebuild, manifest:
1881 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1882 frogger 1.5
1883     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1884     hardened-sources-2.4.20-r1.ebuild:
1885     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1886     is patched in instead. Ptrace patches for selinux have also been added. In
1887     either case, systrace support will be patched in as well.
1888 frogger 1.3
1889     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1890     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1891 plasmaroo 1.18 Revision bump for new sources.
1892 frogger 1.4
1893 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1894 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1895 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1896 method 1.1
1897 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1898    
1899 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1900     hardened-sources-2.4.20.ebuild:
1901 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20