/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.323 - (hide annotations) (download)
Sat Jul 17 09:13:48 2010 UTC (4 years, 5 months ago) by fauli
Branch: MAIN
Changes since 1.322: +5 -1 lines
stable x86, bug 326885
(Portage version: 2.1.8.3/cvs/Linux i686)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 fauli 1.323 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.322 2010/07/13 10:38:16 blueness Exp $
4    
5     17 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
6     hardened-sources-2.6.32-r9.ebuild:
7     stable x86, bug 326885
8 blueness 1.322
9     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
10     -hardened-sources-2.6.32-r7.ebuild:
11     Removed for security. Bug #325573
12 blueness 1.321
13     *hardened-sources-2.6.34 (13 Jul 2010)
14    
15     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
16     +hardened-sources-2.6.34.ebuild:
17     Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
18 blueness 1.320
19     *hardened-sources-2.6.32-r11 (13 Jul 2010)
20    
21     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
22     +hardened-sources-2.6.32-r11.ebuild:
23     New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
24 chainsaw 1.319
25     06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
26     Marked stable on AMD64 as requested by Anthony G. Basile
27     <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
28     on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
29 blueness 1.318
30     *hardened-sources-2.6.32-r10 (30 Jun 2010)
31    
32     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
33     +hardened-sources-2.6.32-r10.ebuild:
34     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
35 blueness 1.317
36     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
37     Added myself to the metadata.xml
38 chainsaw 1.316
39     *hardened-sources-2.6.32-r9 (11 Jun 2010)
40    
41     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
42     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
43 chainsaw 1.315
44     *hardened-sources-2.6.32-r8 (01 Jun 2010)
45    
46     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
47     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
48 chainsaw 1.314
49     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
50     Update SRC_URI to point to mirror network now that the distfile has
51     propagated.
52 chainsaw 1.313
53     *hardened-sources-2.6.32-r7 (26 May 2010)
54    
55     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
56     metadata.xml:
57     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
58     Summers.
59 robbat2 1.312
60     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
61     Update Manifest for deblob support in kernel-2 eclass.
62 nixnut 1.311
63     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
64     ppc stable
65 gengor 1.310
66     29 May 2009; Gordon Malm <gengor@gentoo.org>
67     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
68     Stable amd64/x86 and remove old.
69 gengor 1.309
70     *hardened-sources-2.6.29 (25 May 2009)
71    
72     25 May 2009; Gordon Malm <gengor@gentoo.org>
73     +hardened-sources-2.6.29.ebuild:
74     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
75     release candidates.
76 gengor 1.308
77     *hardened-sources-2.6.28-r9 (25 May 2009)
78    
79     25 May 2009; Gordon Malm <gengor@gentoo.org>
80     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
81     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
82 gengor 1.307
83     *hardened-sources-2.6.28-r8 (18 May 2009)
84    
85     18 May 2009; Gordon Malm <gengor@gentoo.org>
86     +hardened-sources-2.6.28-r8.ebuild:
87     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
88     and #262862 among others.
89 gengor 1.306
90     01 May 2009; Gordon Malm <gengor@gentoo.org>
91     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
92     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
93     Remove unnecessary mirror://gentoo from SRC_URI.
94 nixnut 1.305
95     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
96     ppc stable
97 gengor 1.304
98     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
99     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
100     Stable amd64/x86 and remove old.
101 gengor 1.303
102     *hardened-sources-2.6.28-r7 (27 Mar 2009)
103    
104     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
105     +hardened-sources-2.6.28-r7.ebuild:
106     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
107 gengor 1.302
108     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
109     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
110     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
111     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
112     Stable amd64/x86 and remove old versions.
113 nixnut 1.301
114     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
115     ppc stable
116 gengor 1.300
117     *hardened-sources-2.6.28-r6 (21 Mar 2009)
118    
119     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
120     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
121     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
122 gengor 1.299
123     *hardened-sources-2.6.28-r5 (20 Mar 2009)
124    
125     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
126     +hardened-sources-2.6.28-r5.ebuild:
127     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
128 gengor 1.298
129     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
130     hardened-sources-2.6.28-r4.ebuild:
131     Stable amd64/x86.
132 gengor 1.297
133     *hardened-sources-2.6.28-r4 (18 Mar 2009)
134    
135     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
136     +hardened-sources-2.6.28-r4.ebuild:
137     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
138     compilation with CPA_DEBUG and more.
139 gengor 1.296
140     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
141     hardened-sources-2.6.28-r3.ebuild:
142     Quick stable amd64/x86.
143 gengor 1.295
144     *hardened-sources-2.6.28-r3 (15 Mar 2009)
145    
146     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
147     +hardened-sources-2.6.28-r3.ebuild:
148     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
149 nixnut 1.294
150     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
151     ppc stable
152 gengor 1.293
153     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
154     hardened-sources-2.6.28-r2.ebuild:
155     Stable amd64/x86.
156 gengor 1.292
157     *hardened-sources-2.6.28-r2 (11 Mar 2009)
158    
159     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
160     +hardened-sources-2.6.28-r2.ebuild:
161     Version bump bringing in latest grsecurity patch.
162 gengor 1.291
163     *hardened-sources-2.6.28-r1 (09 Mar 2009)
164    
165     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
166     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
167     Version bump and remove old.
168 nixnut 1.290
169     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
170     ppc stable
171 gengor 1.289
172     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
173     hardened-sources-2.6.27-r8.ebuild:
174     Remove amd64 testing keyword, bug 256226.
175 gengor 1.288
176     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
177     hardened-sources-2.6.27-r8.ebuild:
178     Revert amd64 stable, bug #256226.
179 gengor 1.287
180     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
181     hardened-sources-2.6.27-r8.ebuild:
182     Stable on amd64/x86.
183 gengor 1.286
184     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
185     -hardened-sources-2.6.27-r6.ebuild:
186     Remove old 2.6.27 release.
187 gengor 1.285
188     *hardened-sources-2.6.27-r8 (24 Feb 2009)
189    
190     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
191     +hardened-sources-2.6.27-r8.ebuild:
192     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
193     and probably more.
194 nixnut 1.284
195     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
196     ppc stable
197 gengor 1.283
198     *hardened-sources-2.6.28 (25 Jan 2009)
199    
200     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
201     +hardened-sources-2.6.28.ebuild:
202     Initial 2.6.28 release.
203 gengor 1.282
204     *hardened-sources-2.6.27-r7 (25 Jan 2009)
205    
206     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
207     +hardened-sources-2.6.27-r7.ebuild:
208     Bump to Linux 2.6.27.13.
209 gengor 1.281
210     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
211     hardened-sources-2.6.26-r9.ebuild:
212     Stable amd64/x86.
213 gengor 1.280
214     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
215     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
216     -hardened-sources-2.6.27-r5.ebuild:
217     Remove problem versions.
218 gengor 1.279
219     *hardened-sources-2.6.27-r6 (24 Jan 2009)
220    
221     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
222     +hardened-sources-2.6.27-r6.ebuild:
223     Revert PaX test29 to test30 changes. Fixes bug 256226.
224 gengor 1.277
225     *hardened-sources-2.6.27-r5 (24 Jan 2009)
226    
227     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
228     +hardened-sources-2.6.27-r5.ebuild:
229 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
230 gengor 1.277 254843.
231 gengor 1.276
232     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
233     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
234     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
235     Remove problem versions.
236 nixnut 1.275
237     23 Jan 2009; nixnut <nixnut@gentoo.org>
238     hardened-sources-2.6.25-r13.ebuild:
239     ppc stable
240 gengor 1.274
241     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
242     hardened-sources-2.6.25-r13.ebuild:
243     Fasttrack stable amd64/x86.
244 gengor 1.273
245     *hardened-sources-2.6.26-r9 (21 Jan 2009)
246    
247     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
248     +hardened-sources-2.6.26-r9.ebuild:
249 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
250 gengor 1.272
251     *hardened-sources-2.6.25-r13 (20 Jan 2009)
252    
253     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
254     +hardened-sources-2.6.25-r13.ebuild:
255 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
256 nixnut 1.271
257     20 Jan 2009; nixnut <nixnut@gentoo.org>
258     hardened-sources-2.6.25-r12.ebuild:
259     ppc stable
260 gengor 1.270
261     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
262     hardened-sources-2.6.25-r12.ebuild:
263     Stable amd64/x86.
264 gengor 1.269
265     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
266     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
267     -hardened-sources-2.6.27-r2.ebuild:
268     Clean out old versions.
269 gengor 1.268
270     *hardened-sources-2.6.27-r4 (14 Jan 2009)
271     *hardened-sources-2.6.26-r8 (14 Jan 2009)
272     *hardened-sources-2.6.25-r12 (14 Jan 2009)
273    
274     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
275     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
276     +hardened-sources-2.6.27-r4.ebuild:
277     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
278     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
279     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
280     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
281 nixnut 1.267
282     15 Dec 2008; nixnut <nixnut@gentoo.org>
283     hardened-sources-2.6.25-r11.ebuild:
284     Stable on ppc
285 gengor 1.266
286     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
287     hardened-sources-2.6.25-r11.ebuild:
288     Stable amd64/x86.
289 gengor 1.265
290     *hardened-sources-2.6.27-r3 (07 Dec 2008)
291    
292     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
293     +hardened-sources-2.6.27-r3.ebuild:
294     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
295     Fixes bug #248754, #249729 and #246607.
296 gengor 1.264
297     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
298     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
299     Remove old versions.
300 gengor 1.262
301     *hardened-sources-2.6.26-r7 (03 Dec 2008)
302     *hardened-sources-2.6.25-r11 (03 Dec 2008)
303    
304 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
305     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
306 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
307     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
308     Both include many backports from 2.6.27.{6,7} -stable releases.
309 gengor 1.261
310     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
311     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
312     Remove versions broken on ARCHes != x86/amd64.
313 gengor 1.260
314     *hardened-sources-2.6.27-r2 (24 Nov 2008)
315    
316     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
317     +hardened-sources-2.6.27-r2.ebuild:
318     Bump to Linux 2.6.27.7 and latest grsecurity patch.
319 gengor 1.259
320     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
321     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
322     Remove old versions.
323 gengor 1.258
324     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
325     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
326     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
327 nixnut 1.257
328     16 Nov 2008; nixnut <nixnut@gentoo.org>
329     hardened-sources-2.6.25-r10.ebuild:
330     Stable on ppc
331 gengor 1.256
332     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
333     hardened-sources-2.6.25-r10.ebuild:
334     Stable amd64/x86.
335 gengor 1.255
336     *hardened-sources-2.6.26-r6 (12 Nov 2008)
337    
338     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
339     +hardened-sources-2.6.26-r6.ebuild:
340     Bump to Linux 2.6.26.8 and fix security bug #245650.
341 gengor 1.254
342     *hardened-sources-2.6.25-r10 (12 Nov 2008)
343    
344     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
345     +hardened-sources-2.6.25-r10.ebuild:
346     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
347 gengor 1.253
348     *hardened-sources-2.6.27-r1 (09 Nov 2008)
349    
350     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
351     +hardened-sources-2.6.27-r1.ebuild:
352     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
353 gengor 1.252
354     *hardened-sources-2.6.27 (04 Nov 2008)
355    
356     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
357     +hardened-sources-2.6.27.ebuild:
358     Initial 2.6.27 release.
359 gengor 1.251
360     *hardened-sources-2.6.26-r5 (03 Nov 2008)
361    
362     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
363     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
364     +hardened-sources-2.6.26-r5.ebuild:
365     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
366     Clean out some old versions.
367 nixnut 1.250
368     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
369     Stable on ppc
370 gengor 1.249
371     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
372     hardened-sources-2.6.25-r9.ebuild:
373     Stable on amd64/x86.
374 gengor 1.248
375     *hardened-sources-2.6.25-r9 (26 Oct 2008)
376    
377     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
378     +hardened-sources-2.6.25-r9.ebuild:
379     Update to Linux 2.6.25.19
380 nixnut 1.247
381     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
382     Stable on ppc
383 gengor 1.246
384     *hardened-sources-2.6.26-r4 (14 Oct 2008)
385    
386     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
387     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
388     Update to latest grsecurity patch, fixing building of non-modular kernels.
389 gengor 1.245
390     *hardened-sources-2.6.26-r3 (12 Oct 2008)
391    
392     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
393     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
394     +hardened-sources-2.6.26-r3.ebuild:
395     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
396     2.6.26-r1: Removed.
397     2.6.25-r8: Stable amd64/x86.
398 gengor 1.244
399     *hardened-sources-2.6.25-r8 (09 Oct 2008)
400    
401     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
402     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
403     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
404     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
405 nixnut 1.243
406     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
407     Stable on ppc
408 gengor 1.242
409     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
410     hardened-sources-2.6.25-r7.ebuild:
411     Stable amd64/x86.
412 gengor 1.241
413     *hardened-sources-2.6.26-r2 (13 Sep 2008)
414    
415     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
416     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
417     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
418     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
419 gengor 1.240
420     *hardened-sources-2.6.25-r7 (13 Sep 2008)
421    
422     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
423     +hardened-sources-2.6.25-r7.ebuild:
424     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
425 gengor 1.239
426     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
427     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
428     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
429     hardened-sources-2.6.26-r1.ebuild:
430     Update DESCRIPTION and HGPV_URI.
431 gengor 1.238
432     *hardened-sources-2.6.25-r6 (09 Sep 2008)
433    
434     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
435     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
436     2.6.25-r6: Update to Linux 2.6.25.17.
437     2.6.24-r3: Removed.
438 gengor 1.237
439     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
440     hardened-sources-2.6.25-r5.ebuild:
441     Stable on amd64/x86
442 gengor 1.236
443     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
444     Update my email address.
445 nixnut 1.235
446     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
447     stable on ppc
448 battousai 1.234
449     *hardened-sources-2.6.26-r1 (23 Aug 2008)
450     *hardened-sources-2.6.25-r5 (23 Aug 2008)
451    
452     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
453     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
454     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
455     +hardened-sources-2.6.26-r1.ebuild:
456     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
457     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
458     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
459     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
460     (gengor).
461 solar 1.233
462     *hardened-sources-2.6.26 (18 Aug 2008)
463     *hardened-sources-2.6.25-r4 (18 Aug 2008)
464    
465     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
466     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
467     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
468     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
469     2.6.25-r2: Removed.
470 tove 1.232
471     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
472     Remove phreak from metadata.xml (#96398)
473 solar 1.231
474     *hardened-sources-2.6.25-r3 (31 Jul 2008)
475    
476     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
477     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
478     +hardened-sources-2.6.25-r3.ebuild:
479     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
480     fixes, including security bug #231750.
481 nixnut 1.230
482     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
483     Stable on ppc
484 solar 1.229
485     *hardened-sources-2.6.25-r2 (05 Jul 2008)
486    
487     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
488     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
489     +hardened-sources-2.6.25-r2.ebuild:
490     2.6.23-r4: Stable x86/amd64
491     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
492     2.6.23-r{11,12}: Removed due to multiple vulns.
493     (gengor & kerframil)
494 nixnut 1.228
495     04 Jul 2008; nixnut <nixnut@gentoo.org>
496     hardened-sources-2.6.23-r13.ebuild:
497     Stable on ppc
498 solar 1.227
499     *hardened-sources-2.6.25-r1 (30 Jun 2008)
500    
501     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
502     +hardened-sources-2.6.25-r1.ebuild:
503     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
504     grsecurity release. 2.6.23-r13: x86/amd64 stable
505 solar 1.226
506     *hardened-sources-2.6.25 (17 Jun 2008)
507     *hardened-sources-2.6.24-r3 (17 Jun 2008)
508     *hardened-sources-2.6.23-r13 (17 Jun 2008)
509    
510     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
511     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
512     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
513     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
514     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
515     2.6.25: Initial 2.6.25 release.
516 solar 1.225
517     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
518     - fasttrack to stable x86/amd64
519 swegener 1.224
520     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
521     Fix broken digest for linux-2.6.24.tar.bz2.
522 solar 1.223
523     *hardened-sources-2.6.24-r2 (11 May 2008)
524     *hardened-sources-2.6.23-r12 (11 May 2008)
525    
526     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
527     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
528     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
529     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
530     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
531     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
532     security bugs 219901, 220691, 220975, 220979, 221123. New
533     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
534     should be removed as far as I'm concerned, everything else remove due to
535     vulnerable to numerous security bugs or brokeness.
536 nixnut 1.222
537     10 May 2008; nixnut <nixnut@gentoo.org>
538     hardened-sources-2.6.23-r11.ebuild:
539     Stable on ppc
540 solar 1.221
541     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
542     - -r11 stable on x86/amd64
543 solar 1.220
544     *hardened-sources-2.6.23-r11 (01 May 2008)
545    
546     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
547     - version bump to fix ulgy linux bugs
548 phreak 1.219
549     *hardened-sources-2.6.24-r1 (30 Apr 2008)
550    
551     30 Apr 2008; Christian Heim <phreak@gentoo.org>
552     +hardened-sources-2.6.24-r1.ebuild:
553     Revision bump (thanks to Kerin and Gordon, again), pulling
554     genpatches-2.6.24-7, solving #219089. Additionally contains further security
555     fixes plus some minor updates.
556 phreak 1.218
557     *hardened-sources-2.6.23-r10 (30 Apr 2008)
558    
559     30 Apr 2008; Christian Heim <phreak@gentoo.org>
560     +hardened-sources-2.6.23-r10.ebuild:
561     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
562     Additional contains "various other fixes".
563 phreak 1.217
564     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
565     Update the longdescription in metadata, thanks to Gordon Malm.
566 nixnut 1.216
567     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
568     Stable on ppc wrt bug #213255
569 solar 1.215
570     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
571     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
572     - stable on x86/amd64 per request. Removed obsolete ebuilds
573 phreak 1.214
574     *hardened-sources-2.6.24 (07 Apr 2008)
575    
576     07 Apr 2008; Christian Heim <phreak@gentoo.org>
577     +hardened-sources-2.6.24.ebuild:
578     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
579     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
580     for the many contributions and their continued effort in #216612) based on
581     2.6.24 and genpatches-2.6.24-5.
582    
583     The current ebuild/patchset contains these things:
584     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
585     * Introduces bespoke server and workstation oriented security levels
586     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
587 phreak 1.213
588     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
589     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
590     maintaining it).
591 phreak 1.212
592     24 Mar 2008; Christian Heim <phreak@gentoo.org>
593     hardened-sources-2.4.35-r2.ebuild:
594     Fixing SRC_URI for 2.4.35-r2.
595 phreak 1.211
596     *hardened-sources-2.6.23-r9 (22 Mar 2008)
597    
598     22 Mar 2008; Christian Heim <phreak@gentoo.org>
599     +hardened-sources-2.6.23-r9.ebuild:
600     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
601     * Change the default GIDs for some grsecurity options
602     * Revamp the Hardened [Gentoo] security level and make it the default level
603     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
604     * Fix a recursive lock -- call to capable() within ptrace_attach()
605     * Fix bug that allows audit and iscsi operations to be controlled via netlink
606 solar 1.210
607     *hardened-sources-2.6.23-r8 (27 Feb 2008)
608    
609     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
610     - version bump from Kerin Millar bug 210026
611 solar 1.209
612     17 Feb 2008; <solar@gentoo.org> metadata.xml,
613     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
614     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
615     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
616     - stable on x86 and remove old ebuilds
617 solar 1.207
618     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
619 solar 1.208 - stable on amd64 per request of amd64 lead
620 solar 1.206
621     *hardened-sources-2.6.23-r7 (11 Feb 2008)
622    
623     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
624     - version bump from kerin.millar
625     Changes:
626    
627     * Bump to genpatches-base-2.6.23-9
628     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
629     * Disables COMPAT_VDSO in x86/defconfig
630     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
631 phreak 1.205
632     25 Jan 2008; Christian Heim <phreak@gentoo.org>
633     -hardened-sources-2.6.22-r8.ebuild:
634     Cleaning up old versions.
635 phreak 1.204
636     *hardened-sources-2.6.23-r6 (25 Jan 2008)
637    
638     25 Jan 2008; Christian Heim <phreak@gentoo.org>
639     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
640     Revision bump, pulling in the latest genpatches.
641 phreak 1.203
642     *hardened-sources-2.6.23-r5 (24 Dec 2007)
643    
644     24 Dec 2007; Christian Heim <phreak@gentoo.org>
645     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
646     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
647     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
648     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
649 phreak 1.202
650     24 Dec 2007; Christian Heim <phreak@gentoo.org>
651     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
652     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
653     -hardened-sources-2.6.23-r3.ebuild:
654     Cleaning out some unused, old versions.
655 phreak 1.201
656     24 Dec 2007; Christian Heim <phreak@gentoo.org>
657     hardened-sources-2.6.23-r4.ebuild:
658     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
659     in the tree for long, but there isn't much of a difference between this and
660     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
661 phreak 1.200
662     *hardened-sources-2.6.23-r4 (23 Dec 2007)
663    
664     23 Dec 2007; Christian Heim <phreak@gentoo.org>
665     +hardened-sources-2.6.23-r4.ebuild:
666     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
667 phreak 1.199
668     *hardened-sources-2.6.23-r3 (04 Dec 2007)
669    
670     04 Dec 2007; Christian Heim <phreak@gentoo.org>
671     +hardened-sources-2.6.23-r3.ebuild:
672     Revision bump, pulling in 2.6.23.9.
673 phreak 1.198
674     *hardened-sources-2.6.23-r2 (25 Nov 2007)
675    
676     25 Nov 2007; Christian Heim <phreak@gentoo.org>
677     +hardened-sources-2.6.23-r2.ebuild:
678     Updated patchset, thanks to solar.
679 phreak 1.197
680     *hardened-sources-2.6.23-r1 (31 Oct 2007)
681    
682     31 Oct 2007; Christian Heim <phreak@gentoo.org>
683     +hardened-sources-2.6.23-r1.ebuild:
684     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
685 solar 1.196
686     29 Oct 2007; <solar@gentoo.org> metadata.xml:
687     - update metadata.xml
688 phreak 1.195
689     25 Oct 2007; Christian Heim <phreak@gentoo.org>
690     hardened-sources-2.6.22-r8.ebuild:
691     Marking 2.6.22-r8 stable on amd64 and x86.
692 phreak 1.194
693     21 Oct 2007; Christian Heim <phreak@gentoo.org>
694     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
695     -hardened-sources-2.6.21-r4.ebuild:
696     Removing old ebuilds.
697 phreak 1.193
698     *hardened-sources-2.4.35-r2 (21 Oct 2007)
699    
700     21 Oct 2007; Christian Heim <phreak@gentoo.org>
701     +hardened-sources-2.4.35-r2.ebuild:
702     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
703     patches.
704 phreak 1.192
705     *hardened-sources-2.6.22-r8 (21 Oct 2007)
706    
707     21 Oct 2007; Christian Heim <phreak@gentoo.org>
708     +hardened-sources-2.6.22-r8.ebuild:
709     Yet another new patch, hopefully fixing the remaining issues we had w/
710     2.6.22. Candidate for stabling.
711 phreak 1.191
712     *hardened-sources-2.6.23 (13 Oct 2007)
713    
714     13 Oct 2007; Christian Heim <phreak@gentoo.org>
715     +hardened-sources-2.6.23.ebuild:
716     Initial hardened-sources-2.6.23. If people still have problems w/ bug
717     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
718 phreak 1.190
719     11 Oct 2007; Christian Heim <phreak@gentoo.org>
720     hardened-sources-2.6.20-r10.ebuild:
721     Pulling in yet another new genpatches version, fixing the PWC bug for real.
722 phreak 1.189
723     04 Oct 2007; Christian Heim <phreak@gentoo.org>
724     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
725     Removing old versions.
726 phreak 1.188
727     *hardened-sources-2.6.22-r7 (01 Oct 2007)
728    
729     01 Oct 2007; Christian Heim <phreak@gentoo.org>
730     +hardened-sources-2.6.22-r7.ebuild:
731     Revision bump, pulling in a newer patch. Should fix #194276.
732 phreak 1.187
733     30 Sep 2007; Christian Heim <phreak@gentoo.org>
734     hardened-sources-2.6.20-r10.ebuild:
735     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
736     Mike Doty).
737 phreak 1.186
738     *hardened-sources-2.6.22-r6 (26 Sep 2007)
739    
740     26 Sep 2007; Christian Heim <phreak@gentoo.org>
741     +hardened-sources-2.6.22-r6.ebuild:
742     Revision bump, grabbing up till Linux 2.6.22.9.
743 phreak 1.185
744     24 Sep 2007; Christian Heim <phreak@gentoo.org>
745     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
746     Cleaning up further.
747 phreak 1.184
748     *hardened-sources-2.6.20-r10 (24 Sep 2007)
749    
750     24 Sep 2007; Christian Heim <phreak@gentoo.org>
751     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
752     +hardened-sources-2.6.20-r10.ebuild:
753     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
754     revisions.
755 phreak 1.183
756     *hardened-sources-2.6.22-r5 (22 Sep 2007)
757    
758     22 Sep 2007; Christian Heim <phreak@gentoo.org>
759     +hardened-sources-2.6.22-r5.ebuild:
760     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
761 phreak 1.182
762     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
763     Removing johnm from metadata.xml (see #186467 for reference).
764 phreak 1.181
765     *hardened-sources-2.6.22-r4 (17 Sep 2007)
766    
767     17 Sep 2007; Christian Heim <phreak@gentoo.org>
768     +hardened-sources-2.6.22-r4.ebuild:
769     Revision bump, hopefully fixing all those weird PAX failures.
770 phreak 1.180
771     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
772     Updating the metadata.xml.
773 phreak 1.179
774     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
775     Removing tocharian from metadata due to his retirement (see #71718 for
776     reference).
777 phreak 1.178
778     *hardened-sources-2.6.20-r9 (30 Aug 2007)
779    
780     30 Aug 2007; Christian Heim <phreak@gentoo.org>
781     +hardened-sources-2.6.20-r9.ebuild:
782     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
783 phreak 1.177
784     29 Aug 2007; Christian Heim <phreak@gentoo.org>
785     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
786     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
787     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
788     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
789     -hardened-sources-2.6.22-r2.ebuild:
790     Removing some redundant versions.
791 phreak 1.176
792     *hardened-sources-2.4.35-r1 (29 Aug 2007)
793    
794     29 Aug 2007; Christian Heim <phreak@gentoo.org>
795     +hardened-sources-2.4.35-r1.ebuild:
796     Revision bump, new grsecurity patch.
797 phreak 1.175
798     *hardened-sources-2.6.20-r8 (26 Aug 2007)
799    
800     26 Aug 2007; Christian Heim <phreak@gentoo.org>
801     +hardened-sources-2.6.20-r8.ebuild:
802     Revision bump for Linux 2.6.20.17.
803 phreak 1.174
804     *hardened-sources-2.6.22-r3 (22 Aug 2007)
805    
806     22 Aug 2007; Christian Heim <phreak@gentoo.org>
807     +hardened-sources-2.6.22-r3.ebuild:
808     Revision bump for Linux 2.6.22.4.
809 phreak 1.173
810     16 Aug 2007; Christian Heim <phreak@gentoo.org>
811     hardened-sources-2.6.22-r2.ebuild:
812     Updated patchset, to fix the alignment against 2.6.22.3.
813 phreak 1.172
814     *hardened-sources-2.6.22-r2 (16 Aug 2007)
815    
816     16 Aug 2007; Christian Heim <phreak@gentoo.org>
817     +hardened-sources-2.6.22-r2.ebuild:
818     Revision bump for Linux 2.6.22.3.
819 phreak 1.171
820     *hardened-sources-2.4.35 (16 Aug 2007)
821    
822     16 Aug 2007; Christian Heim <phreak@gentoo.org>
823     +hardened-sources-2.4.35.ebuild:
824     Version bump, initial version for Linux 2.4.35.
825 phreak 1.170
826     *hardened-sources-2.6.21-r4 (16 Aug 2007)
827    
828     16 Aug 2007; Christian Heim <phreak@gentoo.org>
829     +hardened-sources-2.6.21-r4.ebuild:
830     Revision bump for Linux 2.6.21.6.
831 phreak 1.169
832     *hardened-sources-2.6.20-r7 (16 Aug 2007)
833    
834     16 Aug 2007; Christian Heim <phreak@gentoo.org>
835     +hardened-sources-2.6.20-r7.ebuild:
836     Revision bump for Linux 2.6.20.16.
837 phreak 1.168
838     *hardened-sources-2.6.22-r1 (13 Aug 2007)
839    
840     13 Aug 2007; Christian Heim <phreak@gentoo.org>
841     +hardened-sources-2.6.22-r1.ebuild:
842     Yet another revision bump.
843 phreak 1.167
844     *hardened-sources-2.6.22 (10 Aug 2007)
845    
846     10 Aug 2007; Christian Heim <phreak@gentoo.org>
847     +hardened-sources-2.6.22.ebuild:
848     Initial release for 2.6.22. If you are using hardened-sources on a desktop
849     machine (P4 or newer), be aware you might need to disable
850     CONFIG_PAX_PAGEEXEC.
851 phreak 1.166
852     04 Aug 2007; Christian Heim <phreak@gentoo.org>
853     hardened-sources-2.6.20-r6.ebuild:
854     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
855     2.6.20.15.
856 phreak 1.165
857     10 Jul 2007; Christian Heim <phreak@gentoo.org>
858     hardened-sources-2.6.20-r5.ebuild:
859     Marking hardened-sources-2.6.20-r5 stable on ppc.
860 phreak 1.164
861     10 Jul 2007; Christian Heim <phreak@gentoo.org>
862     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
863     Cleanup.
864 phreak 1.163
865     *hardened-sources-2.6.20-r6 (08 Jul 2007)
866    
867     08 Jul 2007; Christian Heim <phreak@gentoo.org>
868     +hardened-sources-2.6.20-r6.ebuild:
869     Revision bump, grabbing yet another stable release.
870 phreak 1.162
871     17 Jun 2007; Christian Heim <phreak@gentoo.org>
872     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
873     -hardened-sources-2.6.21-r2.ebuild:
874     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
875     alpha stable KEYWORD by mistake.
876 phreak 1.161
877     17 Jun 2007; Christian Heim <phreak@gentoo.org>
878     hardened-sources-2.6.20-r5.ebuild:
879     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
880     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
881 phreak 1.160
882     *hardened-sources-2.6.21-r3 (12 Jun 2007)
883    
884     12 Jun 2007; Christian Heim <phreak@gentoo.org>
885     +hardened-sources-2.6.21-r3.ebuild:
886     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
887     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
888     love.
889 phreak 1.159
890     *hardened-sources-2.6.20-r5 (11 Jun 2007)
891    
892     11 Jun 2007; Christian Heim <phreak@gentoo.org>
893     +hardened-sources-2.6.20-r5.ebuild:
894     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
895     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
896     love.
897 pappy 1.158
898     *hardened-sources-2.4.34.5 (11 Jun 2007)
899    
900     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
901     +hardened-sources-2.4.34.5.ebuild:
902     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
903 phreak 1.157
904     30 May 2007; Christian Heim <phreak@gentoo.org>
905     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
906     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
907     stale ebuild(s).
908 phreak 1.156
909     30 May 2007; Christian Heim <phreak@gentoo.org>
910     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
911     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
912     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
913     Doing some cleanups, remove stale ebuilds.
914 phreak 1.155
915     26 May 2007; Christian Heim <phreak@gentoo.org>
916     hardened-sources-2.6.21-r2.ebuild:
917     Fixing the grsecurity patch, had one '};' too much.
918 phreak 1.154
919     *hardened-sources-2.6.21-r2 (26 May 2007)
920    
921     26 May 2007; Christian Heim <phreak@gentoo.org>
922     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
923     +hardened-sources-2.6.21-r2.ebuild:
924     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
925     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
926 phreak 1.153
927     *hardened-sources-2.6.20-r4 (26 May 2007)
928    
929     26 May 2007; Christian Heim <phreak@gentoo.org>
930     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
931     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
932 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
933 phreak 1.152
934     15 May 2007; Christian Heim <phreak@gentoo.org>
935     hardened-sources-2.6.20-r3.ebuild:
936     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
937     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
938     grsecurity patch fail in that exact same hunk.
939 phreak 1.151
940     *hardened-sources-2.6.20-r3 (15 May 2007)
941    
942     15 May 2007; Christian Heim <phreak@gentoo.org>
943     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
944     Revision bump, incorporating Linux 2.6.20.11.
945    
946     *hardened-sources-2.6.21-r1 (11 May 2007)
947    
948     11 May 2007; Christian Heim <phreak@gentoo.org>
949     +hardened-sources-2.6.21-r1.ebuild:
950     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
951     mentioned in #177234.
952 kevquinn 1.150
953     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
954     files/digest-hardened-sources-2.6.21, Manifest:
955     Fix Manifest/digest for linux-2.6.21.tar.bz2
956 phreak 1.149
957     06 May 2007; Christian Heim <phreak@gentoo.org>
958     hardened-sources-2.6.21.ebuild:
959     Bumping the hardened-patches version, needed for the fix for #177234.
960 phreak 1.148
961     *hardened-sources-2.6.21 (02 May 2007)
962    
963     02 May 2007; Christian Heim <phreak@gentoo.org>
964     +hardened-sources-2.6.21.ebuild:
965     Version bump, Linux 2.6.21-hardened.
966 phreak 1.147
967     29 Apr 2007; Christian Heim <phreak@gentoo.org>
968     hardened-sources-2.6.20-r2.ebuild:
969     Adding ~ia64 on Ned's request.
970 phreak 1.146
971     29 Apr 2007; Christian Heim <phreak@gentoo.org>
972     hardened-sources-2.6.20-r2.ebuild:
973     Fixing the included grsecurity patch, wasn't alligning due to the Index:
974     header line(s).
975 phreak 1.145
976     29 Apr 2007; Christian Heim <phreak@gentoo.org>
977     hardened-sources-2.6.20-r2.ebuild:
978     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
979 armin76 1.144
980     *hardened-sources-2.6.20-r2 (10 Apr 2007)
981    
982     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
983     +hardened-sources-2.6.20-r2.ebuild:
984     Version bump, on behalf of phreak
985 phreak 1.143
986     *hardened-sources-2.6.20-r1 (04 Apr 2007)
987    
988     04 Apr 2007; Christian Heim <phreak@gentoo.org>
989     +hardened-sources-2.6.20-r1.ebuild:
990     Revision bump, grabbing a newer grsecurity snapshot.
991 phreak 1.142
992     *hardened-sources-2.6.20 (25 Mar 2007)
993    
994     25 Mar 2007; Christian Heim <phreak@gentoo.org>
995     +hardened-sources-2.6.20.ebuild:
996     Finally a hardened-sources version for 2.6.20; many people have been waiting
997     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
998     testbox.
999 chainsaw 1.141
1000     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
1001     hardened-sources-2.6.18-r6.ebuild:
1002     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
1003 phreak 1.140
1004     *hardened-sources-2.6.18-r6 (16 Mar 2007)
1005    
1006     16 Mar 2007; Christian Heim <phreak@gentoo.org>
1007     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1008     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1009     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1010     supposed to be.
1011 phreak 1.139
1012     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1013     Fixing the Manifest, the previous one was broken (as in still had the
1014     deleted ebuild in it).
1015 phreak 1.138
1016     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1017     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1018     +hardened-sources-2.6.18-r5.ebuild:
1019     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1020     Linux 2.6.18.8. Also cleaning up the older version.
1021    
1022     *hardened-sources-2.6.18-r5 (06 Mar 2007)
1023    
1024     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1025     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1026     +hardened-sources-2.6.18-r5.ebuild:
1027     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1028     Linux 2.6.18.8. Also cleaning up the older version.
1029 phreak 1.137
1030     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1031     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1032     -hardened-sources-2.6.19-r5.ebuild:
1033     Removing some of the old version, that didn't work.
1034 phreak 1.136
1035     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1036    
1037     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1038     +hardened-sources-2.6.19-r6.ebuild:
1039     Revision bump, including a new grsec version fixing #166235.
1040 pappy 1.134
1041     *hardened-sources-2.4.34 (24 Jan 2007)
1042    
1043     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1044 pappy 1.135 Manifest:
1045     updating Manifest with checksums of new tarball and ebuild
1046    
1047     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1048 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1049     I added new hardened sources 2.4 update, this is a critical path
1050     security bugfix - all users of h-s are strongly advised
1051     to update their existing hardened sources to this version.
1052     It contains a fix for a kernel vulnerability that is pertaining
1053     to the PaX changes to virtual memory management, possibly leading
1054     to a local kernel exploit ... see grsecurity.net forums and homepage
1055 phreak 1.133
1056     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1057     files/digest-hardened-sources-2.6.19-r5, Manifest:
1058     Fixing the patch-tarball digest.
1059 phreak 1.132
1060     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1061    
1062     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1063     +hardened-sources-2.6.19-r5.ebuild:
1064     Revision bump, closing the recently discovered PaX expand_stack()
1065     vulnerability.
1066 phreak 1.131
1067     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1068    
1069     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1070     +hardened-sources-2.6.19-r4.ebuild:
1071     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1072     dropping the randomized PID feature.
1073 opfer 1.130
1074     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1075     hardened-sources-2.4.33.4.ebuild:
1076     stable x86, bug #161171
1077 phreak 1.129
1078     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1079    
1080     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1081     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1082     Revision bump for bug #157186 and #158786.
1083 phreak 1.128
1084     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1085    
1086     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1087     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1088     Revision bump for bug #157186.
1089 phreak 1.127
1090     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1091    
1092     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1093     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1094     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1095 phreak 1.126
1096     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1097     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1098     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1099     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1100     hardened-sources-2.6.19-r1.ebuild:
1101     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1102     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1103 pappy 1.125
1104     *hardened-sources-2.4.33.4 (17 Dec 2006)
1105    
1106     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1107     +hardened-sources-2.4.33.4.ebuild:
1108     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1109     and quilting
1110 phreak 1.124
1111     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1112    
1113     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1114     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1115     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1116     for reporting).
1117 phreak 1.123
1118     *hardened-sources-2.6.19 (13 Dec 2006)
1119    
1120     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1121     +hardened-sources-2.6.19.ebuild:
1122     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1123     Brad for providing that prompt update.
1124 phreak 1.122
1125     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1126    
1127     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1128     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1129     +hardened-sources-2.6.18-r3.ebuild:
1130     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1131     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1132 phreak 1.121
1133     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1134     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1135 nixnut 1.120
1136     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1137     Stable on ppc wrt bug 157356
1138 opfer 1.119
1139     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1140     hardened-sources-2.6.18.ebuild:
1141     stable x86, bug #157356
1142 phreak 1.118
1143     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1144    
1145     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1146     +hardened-sources-2.6.18-r2.ebuild:
1147     Revision bump, including 2.6.18.5 (via genpatches) and
1148     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1149     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1150     redesign.
1151 phreak 1.117
1152     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1153     hardened-sources-2.6.18.ebuild:
1154     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1155     of Mike Doty).
1156 phreak 1.116
1157     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1158    
1159     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1160     +hardened-sources-2.6.18-r1.ebuild:
1161     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1162 phreak 1.115
1163     *hardened-sources-2.6.18 (11 Nov 2006)
1164    
1165     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1166     +hardened-sources-2.6.18.ebuild:
1167     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1168 solar 1.114
1169     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1170     - mark amd64 stable also. bug #151877
1171 solar 1.113
1172     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1173     - mark 2.6.17-r1 stable
1174 phreak 1.112
1175     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1176     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1177     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1178 phreak 1.111
1179     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1180    
1181     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1182     +hardened-sources-2.6.17-r1.ebuild:
1183     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1184     grsecurity patch.
1185 phreak 1.110
1186     *hardened-sources-2.6.17 (17 Aug 2006)
1187    
1188     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1189     +hardened-sources-2.6.17.ebuild:
1190     Bumping the hardened-sources-2.6 series to 2.6.17, using
1191     genpatches-2.6.17-6.base.
1192 solar 1.109
1193     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1194     - stable on x86 and amd64
1195 solar 1.108
1196     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1197    
1198     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1199     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1200     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1201     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1202     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1203     crusty ebuilds
1204 johnm 1.107
1205     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1206     hardened-sources-2.6.16-r10.ebuild:
1207     marking stable on x86 and amd64
1208 solar 1.106
1209     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1210     - 2.4.32-r6 stable on x86. RSBAC state unknown
1211 kang 1.105
1212     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1213    
1214     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1215     +hardened-sources-2.4.32-r7.ebuild:
1216     Bump PaX for RSBAC to test-17
1217 johnm 1.104
1218     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1219    
1220     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1221     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1222     hardened-sources-2.6.16 bump to latest -base.
1223 solar 1.103
1224     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1225    
1226     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1227     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1228     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1229     sysctl controlable resource logging
1230 johnm 1.102
1231     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1232    
1233     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1234     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1235     push new 2.6.16 release in preparation for stable
1236 solar 1.101
1237     22 May 2006; <solar@gentoo.org> :
1238     - redigest bug 134002
1239 kang 1.100
1240     *hardened-sources-2.4.32-r5 (16 May 2006)
1241    
1242     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1243     +hardened-sources-2.4.32-r5.ebuild:
1244     Fixes rsbac common patching (new patch in new -r5 patchset)
1245 solar 1.99
1246     *hardened-sources-2.4.32-r4 (13 May 2006)
1247    
1248     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1249     +hardened-sources-2.4.32-r4.ebuild:
1250     - security bumps
1251 johnm 1.98
1252     *hardened-sources-2.6.16-r6 (03 May 2006)
1253    
1254     03 May 2006; John Mylchreest <johnm@gentoo.org>
1255     +hardened-sources-2.6.16-r6.ebuild:
1256     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1257 johnm 1.97
1258     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1259     hardened-sources-2.6.14-r8.ebuild:
1260     fix x86_64 build problem, this will delay the digest issue again for a short
1261     while but it will sort itself out
1262 johnm 1.96
1263     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1264     hardened-sources-2.6.14-r8.ebuild:
1265     bump hardened patchset
1266 antarus 1.94
1267     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1268     files/digest-hardened-sources-2.4.32-r2,
1269     files/digest-hardened-sources-2.4.32-r3,
1270     files/digest-hardened-sources-2.6.14-r8, Manifest:
1271     Fixing duff SHA256 digests: Bug # 131293
1272 johnm 1.93
1273 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1274    
1275     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1276     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1277     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1278     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1279     cleanup of old uneccessary sources
1280    
1281 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1282     fix digest
1283 johnm 1.92
1284     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1285    
1286     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1287     +hardened-sources-2.6.14-r8.ebuild:
1288     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1289 johnm 1.91
1290     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1291     Turning on gpg-signing again, and recomitting
1292 johnm 1.90
1293     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1294    
1295     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1296     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1297     +hardened-sources-2.6.16-r4.ebuild:
1298     Fix numerous security vulns
1299 solar 1.89
1300     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1301    
1302     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1303     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1304     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1305     - security bump for bug #112791. Removed old ebuilds
1306 johnm 1.88
1307     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1308    
1309     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1310     +hardened-sources-2.6.16-r3.ebuild:
1311     Removing silly localversion which I missed
1312 johnm 1.87
1313     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1314    
1315     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1316     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1317     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1318 johnm 1.86
1319     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1320    
1321     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1322     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1323     +hardened-sources-2.6.16-r2.ebuild:
1324     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1325     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1326 johnm 1.85
1327     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1328    
1329     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1330     +hardened-sources-2.6.16-r1.ebuild:
1331     Bumping to include ppc build fix and 2.6.16.3
1332 tsunam 1.84
1333     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1334     hardened-sources-2.6.14-r6.ebuild:
1335     Stable on x86; bug #127718
1336 johnm 1.83
1337     *hardened-sources-2.6.16 (31 Mar 2006)
1338    
1339     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1340     +hardened-sources-2.6.16.ebuild:
1341     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1342     2.6.16.1
1343 cryos 1.82
1344     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1345     hardened-sources-2.6.14-r6.ebuild:
1346     Stable on amd64, bug 127718.
1347 nixnut 1.81
1348     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1349     Stable on ppc. Bug #127718
1350 johnm 1.80
1351     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1352     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1353     -hardened-sources-2.6.14-r4.ebuild:
1354     Cleanup.
1355 johnm 1.79
1356     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1357    
1358     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1359     +hardened-sources-2.6.14-r6.ebuild:
1360     Fixes grsec policy recreation bug and adds a
1361     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1362 solar 1.78
1363     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1364     - stable on x86
1365 hansmi 1.77
1366     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1367     hardened-sources-2.6.14-r5.ebuild:
1368     Stable on ppc.
1369 johnm 1.76
1370     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1371    
1372     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1373     +hardened-sources-2.6.14-r5.ebuild:
1374     fixing every known exploit
1375 solar 1.75
1376     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1377    
1378     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1379     +hardened-sources-2.4.32-r2.ebuild:
1380     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1381 solar 1.74
1382     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1383    
1384     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1385     - version bump for new genpatches which fix up a few sec holes
1386 solar 1.73
1387     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1388    
1389     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1390     - revision bump to add misc vital linux kernel security patches.
1391 johnm 1.72
1392     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1393    
1394     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1395     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1396     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1397 johnm 1.71
1398     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1399     hardened-sources-2.6.14-r2.ebuild:
1400     making x86 & amd64 stable following testing.
1401 johnm 1.70
1402     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1403    
1404     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1405     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1406     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1407     network hooks.
1408 johnm 1.69
1409     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1410     hardened-sources-2.6.14-r1.ebuild:
1411     bumping to stable early for sec fix on x86 & amd64
1412 johnm 1.68
1413     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1414    
1415     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1416     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1417     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1418 solar 1.67
1419     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1420     - stable on x86 security bug #114227 CAN-2005-3257
1421 kang 1.66
1422     *hardened-sources-2.4.32 (19 Nov 2005)
1423    
1424     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1425     +hardened-sources-2.4.32.ebuild:
1426     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1427     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1428     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1429     rsbac >> /etc/portage/package.use)
1430 johnm 1.65
1431     *hardened-sources-2.6.14 (14 Nov 2005)
1432    
1433     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1434     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1435     Bumping 2.6 series to 2.6.14.2
1436 johnm 1.64
1437     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1438    
1439     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1440     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1441     +hardened-sources-2.6.13-r2.ebuild:
1442     Fixes minor build error in ppc.
1443 johnm 1.63
1444     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1445    
1446     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1447     +hardened-sources-2.6.13-r1.ebuild:
1448     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1449     2.6.13.4, fixes some major amd64 stability problems.
1450 johnm 1.62
1451     *hardened-sources-2.6.13 (16 Sep 2005)
1452    
1453     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1454     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1455     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1456     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1457     users should test this thoroughly.
1458 solar 1.61
1459     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1460     - stable on x86
1461 johnm 1.60
1462     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1463    
1464     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1465     +hardened-sources-2.6.11-r15.ebuild:
1466     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1467     grsec redefining curr_ip struct.
1468 solar 1.59
1469     *hardened-sources-2.4.31 (20 Jun 2005)
1470    
1471     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1472     initial import of 2.4.31 tree
1473 johnm 1.58
1474     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1475    
1476     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1477     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1478     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1479     naming scheme to abide by genpatches
1480 johnm 1.57
1481     *hardened-sources-2.6.11-r13 (18 May 2005)
1482    
1483     18 May 2005; John Mylchreest <johnm@gentoo.org>
1484     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1485     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1486     target. sorry about that. Fixes bug #93022
1487 johnm 1.56
1488     *hardened-sources-2.6.11-r12 (17 May 2005)
1489    
1490     17 May 2005; John Mylchreest <johnm@gentoo.org>
1491     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1492     +hardened-sources-2.6.11-r12.ebuild:
1493     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1494     merges in genpatches-base
1495 johnm 1.55
1496     *hardened-sources-2.6.11-r12 (17 May 2005)
1497    
1498     17 May 2005; John Mylchreest <johnm@gentoo.org>
1499     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1500     +hardened-sources-2.6.11-r12.ebuild:
1501     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1502     merges in genpatches-base
1503 solar 1.54
1504     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1505     -files/2.4.27-cmdline-race.patch,
1506     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1507     -files/2.4.28-grsec-binfmt_a.out.patch,
1508     -files/2.4.28-grsec-cmdline-race.patch,
1509     -files/2.4.28-selinux-binfmt_a.out.patch,
1510     -files/2.4.28-selinux-cmdline-race.patch,
1511     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1512     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1513     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1514     cleanup..
1515 solar 1.53
1516     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1517    
1518     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1519     - disable aout by default
1520 solar 1.52
1521     *hardened-sources-2.4.30 (18 Apr 2005)
1522    
1523     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1524     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1525     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1526     use
1527 tocharian 1.50
1528 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1529    
1530     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1531     +hardened-sources-2.4.29.ebuild:
1532     New hardened-patches-2.4-29.0 patchball.
1533     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1534    
1535     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1536    
1537     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1538     +hardened-sources-2.4.28-r5.ebuild:
1539     Added a fix for a PaX vulnerability.
1540    
1541     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1542 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1543     Stable on x86
1544 solar 1.49
1545     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1546     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1547     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1548     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1549     - fixed/added RDEPEND= in all kernel-2 ebuilds
1550 tocharian 1.48
1551     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1552    
1553     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1554     +hardened-sources-2.4.28-r4.ebuild:
1555     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1556     backport of neighbour hash updates.
1557 tocharian 1.47
1558     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1559     hardened-sources-2.4.28-r3.ebuild:
1560     Stable on x86
1561 tseng 1.46
1562     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1563    
1564     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1565     +hardened-sources-2.6.10-r3.ebuild:
1566     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1567     in 2005.0
1568 tocharian 1.45
1569     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1570     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1571     hardened-sources-2.4.28-r2.ebuild:
1572     Mark stable on x86
1573 tocharian 1.44
1574     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1575    
1576     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1577     +hardened-sources-2.4.28-r3.ebuild:
1578     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1579 tocharian 1.43
1580     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1581     hardened-sources-2.4.28.ebuild:
1582     Mark stable on x86.
1583 tocharian 1.42
1584     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1585    
1586     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1587     +hardened-sources-2.4.28-r2.ebuild:
1588     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1589     Mazinger for grsecurity patches as well.
1590 plasmaroo 1.41
1591     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1592    
1593     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1594     Security bump. Thank tocharian for rolling a new patchset...
1595 solar 1.40
1596     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1597     +files/2.4.28-grsec-cmdline-race.patch,
1598     +files/2.4.28-selinux-binfmt_a.out.patch,
1599     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1600     - Round up remaining security patches that appear to be missing in 2.4.28. -
1601     PaX standalone updated to current. hgpv=28.1
1602 solar 1.39
1603     *hardened-sources-2.4.28 (28 Nov 2004)
1604    
1605     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1606     security bump. Thank tocharian for rolling a new patchset
1607 scox 1.31
1608 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1609    
1610     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1611     +hardened-sources-2.4.27-r3.ebuild:
1612     Applies the new 2.4-27.2 patchball which updates
1613     GRSecurity to the 2.0.1 version.
1614    
1615 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1616    
1617     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1618     +hardened-sources-2.4.27-r2.ebuild:
1619     Version bump.
1620     This version uses the new 2.4-27.1 patchball which updates
1621     both the SELinux PaX hooks patch and the SELinux headers.
1622    
1623 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1624    
1625     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1626     +hardened-sources-2.4.27-r1.ebuild,
1627     -hardened-sources-2.4.27.ebuild,
1628     +files/2.4.27-cmdline-race.patch:
1629     Version bump, fix for cmdline race. See bug #59905.
1630    
1631     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1632    
1633     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1634     +hardened-sources-2.4.26-r6.ebuild,
1635     -hardened-sources-2.4.26-r5.ebuild,
1636     -hardened-sources-2.4.26-r4.ebuild,
1637     +files/2.4.26-cmdline-race.patch:
1638     Version bump, fix for cmdline race. See bug #59905.
1639    
1640 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1641    
1642     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1643     +hardened-sources-2.4.27.ebuild,
1644     +files/2.4.27-CAN-2004-0394.patch:
1645     Ported the patchball to the 2.4.27 kernel version.
1646    
1647 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1648    
1649     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1650     +hardened-sources-2.4.26-r5.ebuild:
1651 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1652 scox 1.34 It adds the following features:
1653     - Squashfs
1654     - Ebtables
1655     - Netdev random (core+drivers)
1656     - Watchdog Timer (WDT) fix.
1657    
1658 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1659    
1660     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1661     +hardened-sources-2.4.26-r4.ebuild,
1662     +files/2.4.26-CAN-2004-0415.patch,
1663     -hardened-sources-2.4.26-3:
1664     Version bump, fix for CAN 0415, see bug #59378.
1665    
1666 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1667    
1668     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1669     +hardened-sources-2.4.26-r3.ebuild,
1670     +files/2.4.26-CAN-2004-0497.patch,
1671     -hardened-sources-2.4.26-r2.ebuild:
1672     Version bump, fixed CAN 0497, see bug #56171.
1673    
1674 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1675    
1676     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1677 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1678 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1679     +files/2.4.26-CAN-2004-0535.patch,
1680     -hardened-sources-2.4.26-r1.ebuild:
1681     Fixes for both CAN 0495 and 0535, see bug #54976
1682 pvdabeel 1.27
1683 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1684     hardened-sources-2.4.26-r1.ebuild:
1685     QA - fix use invocation
1686 scox 1.28
1687     *hardened-sources-2.4.26-r1 (22 June 2004)
1688    
1689     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1690     +hardened-sources-2.4.26-r1.ebuild,
1691     +files/2.4.26-CAN-2004-0394.patch,
1692     +files/2.4.26-signal-race.patch,
1693     -hardened-sources-2.4.26.ebuild,
1694     -hardened-sources-2.4.24-r3.ebuild:
1695     Version bump for the CAN-2004-0394 issue and bug #53804
1696     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1697    
1698    
1699 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1700     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1701     Masked hardened-sources-2.4.26.ebuild broken for ppc
1702    
1703     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1704     hardened-sources-2.4.24-r3.ebuild:
1705     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1706 plasmaroo 1.25
1707 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1708    
1709     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1710     +hardened-sources-2.4.26.ebuild:
1711     Updated hardened-sources for the 2.4.26 kernel
1712     Removed broken components, updated almost everything.
1713    
1714 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1715    
1716     17 Apr 2004; <plasmaroo@gentoo.org>
1717     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1718     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1719     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1720     +hardened-sources-2.4.24-r3.ebuild:
1721     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1722     vulnerabilities. Old revisions removed.
1723 plasmaroo 1.24
1724     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1725    
1726     15 Apr 2004; <plasmaroo@gentoo.org>
1727     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1728     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1729     Version bump for the CAN-2004-0109 issue; bug #47881.
1730 aliz 1.23
1731     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1732     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1733     Add eutils to inherit.
1734 plasmaroo 1.22
1735     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1736    
1737     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1738     files/hardened-sources-2.4.24.munmap.patch:
1739     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1740 scox 1.19
1741 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1742 scox 1.26
1743 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1744     hardened-sources-2.4.24.ebuild:
1745     Version bump, updated most of the components.
1746     This release includes the following:
1747    
1748     - Hardened security
1749     - Netfilter patch-o-matic 20031219
1750     - FreeSWAN 2.04 & x509 1.4.8
1751     - EVMS 2.2.2
1752     - XFS 1.3.1
1753     - cryptoloop jari
1754     - grsecurity 2.0-rc4
1755     - SELinux
1756     - PaX 200402060000
1757     - PaX Obscurity 200308302223
1758     - Others...
1759    
1760     Neither -ck nor systrace are included anymore.
1761    
1762 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1763    
1764     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1765     hardened-sources-2.4.22-r2.ebuild:
1766 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1767 scox 1.19
1768     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1769 iggy 1.17
1770     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1771 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1772 iggy 1.16
1773     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1774 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1775     Version bump for the 'do_brk' vulnerability.
1776 iggy 1.15
1777     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1778     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1779     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1780     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1781 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1782 frogger 1.14
1783     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1784     hardened-sources-2.4.22.ebuild:
1785 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1786     components. These are no longer handled in the kernel
1787     so this code was not necessary.
1788 frogger 1.13
1789     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1790     New 2.4.22 based hardened-sources thanks to
1791     Phil West <p.west@computer.org>.
1792    
1793     These sources include:
1794 plasmaroo 1.18 - New SELinux API
1795     - Updated CK-base
1796     - Updated GRSec
1797     - Systrace
1798     - SuperFreeS/WAN 1.99.8
1799     - Propolice kernel build support
1800     - EVMS
1801     - Other various security related patches
1802 frogger 1.11
1803 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1804    
1805     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1806     Updated hardened-sources based on the 2.4.21 Linux kernel.
1807     This includes updates to most major components such as:
1808 plasmaroo 1.18 - ck-base-0306300059
1809     - selinux-2.4-2003071106
1810     - grsecurity-2.0-rc1
1811     - Updated IPTables patch-o-matic
1812     - Updated SuperFreeS/WAN
1813    
1814 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1815     updated patch set ready for the 2.4.21 based kernel.
1816    
1817 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1818     Initial import of hardened-sources-2.4.20-r4. This revision
1819     includes only a few changes, but one of these is an important
1820     security fix. It is recommended all users of hardened-sources
1821     upgrade to this release.
1822 plasmaroo 1.18
1823 frogger 1.11 - ioperm bug fix
1824     - fixed compilation failure when building without GRSec
1825 plasmaroo 1.18
1826 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1827     due to time constraints, but is planned for inclusion in the near
1828     future.
1829 msterret 1.10
1830     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1831    
1832     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1833     hardened-sources-2.4.20-r3.ebuild:
1834 plasmaroo 1.18 Add Header...
1835 frogger 1.9
1836     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1837     hardened-sources-2.4.20-r3.ebuild:
1838     Removed warnings from ebuild. This kernel should be safe to
1839     use at this point.
1840 frogger 1.8
1841     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1842    
1843     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1844     hardened-sources-2.4.20-r3.ebuild:
1845     New revision. Includes the following changes over -r2:
1846 plasmaroo 1.18
1847 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1848     - Super FreeS/WAN 1.99.7rc2
1849     - PaX for the LSM/SELinux branch
1850     - GRSecurity 2.0-pre4 (role based access control)
1851     - Systrace 1.3
1852     - EXT3 fixes
1853     - EVMS 2.0.1
1854     - GCC 3.1+ compile optimizations
1855     - ProPolice kernel build support
1856     - Hashing table security fixes
1857 frogger 1.3
1858     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1859 frogger 1.7
1860     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1861     Initial import of hardened-sources-r2. This new
1862     ebuild includes many new performance and security
1863     related patches. As in -r1, it will patch in
1864     LSM/SELinux if "selinux" is in USE, otherwise it
1865     will patch in GRSecurity. The following patches
1866     are included in this revision:
1867 plasmaroo 1.18
1868 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1869     (pulled from the base CK patch)
1870     - ptrace exploit patch for the LSM kernel
1871     (the GRSec patch already fixes this)
1872     - LSM 2.4-2003040709
1873     - SELinux 2.4-2003040709
1874     - Systrace v1.2
1875     - IPTables patch-o-matic base patches - 20030107
1876     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1877     - Super FreeS/WAN 1.99.6.1
1878     - GRSecurity 1.9.9g
1879     - MPPE
1880     - EXT3 data journal fix
1881     - CIPE 1.5.4
1882 frogger 1.6
1883     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1884     hardened-sources-2.4.20-r1.ebuild, manifest:
1885 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1886 frogger 1.5
1887     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1888     hardened-sources-2.4.20-r1.ebuild:
1889     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1890     is patched in instead. Ptrace patches for selinux have also been added. In
1891     either case, systrace support will be patched in as well.
1892 frogger 1.3
1893     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1894     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1895 plasmaroo 1.18 Revision bump for new sources.
1896 frogger 1.4
1897 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1898 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1899 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1900 method 1.1
1901 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1902    
1903 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1904     hardened-sources-2.4.20.ebuild:
1905 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20