/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.324 - (hide annotations) (download)
Sun Jul 18 12:16:07 2010 UTC (4 years, 1 month ago) by blueness
Branch: MAIN
Changes since 1.323: +7 -1 lines
Removing outdated releases
(Portage version: 2.1.8.3/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.324 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.323 2010/07/17 09:13:48 fauli Exp $
4    
5     18 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
6     -hardened-sources-2.6.25-r13.ebuild, -hardened-sources-2.6.26-r9.ebuild,
7     -hardened-sources-2.6.28-r7.ebuild, -hardened-sources-2.6.29.ebuild,
8     -hardened-sources-2.6.32-r8.ebuild:
9     Removing outdated releases
10 fauli 1.323
11     17 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
12     hardened-sources-2.6.32-r9.ebuild:
13     stable x86, bug 326885
14 blueness 1.322
15     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
16     -hardened-sources-2.6.32-r7.ebuild:
17     Removed for security. Bug #325573
18 blueness 1.321
19     *hardened-sources-2.6.34 (13 Jul 2010)
20    
21     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
22     +hardened-sources-2.6.34.ebuild:
23     Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
24 blueness 1.320
25     *hardened-sources-2.6.32-r11 (13 Jul 2010)
26    
27     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
28     +hardened-sources-2.6.32-r11.ebuild:
29     New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
30 chainsaw 1.319
31     06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
32     Marked stable on AMD64 as requested by Anthony G. Basile
33     <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
34     on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
35 blueness 1.318
36     *hardened-sources-2.6.32-r10 (30 Jun 2010)
37    
38     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
39     +hardened-sources-2.6.32-r10.ebuild:
40     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
41 blueness 1.317
42     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
43     Added myself to the metadata.xml
44 chainsaw 1.316
45     *hardened-sources-2.6.32-r9 (11 Jun 2010)
46    
47     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
48     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
49 chainsaw 1.315
50     *hardened-sources-2.6.32-r8 (01 Jun 2010)
51    
52     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
53     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
54 chainsaw 1.314
55     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
56     Update SRC_URI to point to mirror network now that the distfile has
57     propagated.
58 chainsaw 1.313
59     *hardened-sources-2.6.32-r7 (26 May 2010)
60    
61     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
62     metadata.xml:
63     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
64     Summers.
65 robbat2 1.312
66     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
67     Update Manifest for deblob support in kernel-2 eclass.
68 nixnut 1.311
69     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
70     ppc stable
71 gengor 1.310
72     29 May 2009; Gordon Malm <gengor@gentoo.org>
73     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
74     Stable amd64/x86 and remove old.
75 gengor 1.309
76     *hardened-sources-2.6.29 (25 May 2009)
77    
78     25 May 2009; Gordon Malm <gengor@gentoo.org>
79     +hardened-sources-2.6.29.ebuild:
80     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
81     release candidates.
82 gengor 1.308
83     *hardened-sources-2.6.28-r9 (25 May 2009)
84    
85     25 May 2009; Gordon Malm <gengor@gentoo.org>
86     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
87     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
88 gengor 1.307
89     *hardened-sources-2.6.28-r8 (18 May 2009)
90    
91     18 May 2009; Gordon Malm <gengor@gentoo.org>
92     +hardened-sources-2.6.28-r8.ebuild:
93     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
94     and #262862 among others.
95 gengor 1.306
96     01 May 2009; Gordon Malm <gengor@gentoo.org>
97     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
98     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
99     Remove unnecessary mirror://gentoo from SRC_URI.
100 nixnut 1.305
101     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
102     ppc stable
103 gengor 1.304
104     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
105     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
106     Stable amd64/x86 and remove old.
107 gengor 1.303
108     *hardened-sources-2.6.28-r7 (27 Mar 2009)
109    
110     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
111     +hardened-sources-2.6.28-r7.ebuild:
112     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
113 gengor 1.302
114     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
115     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
116     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
117     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
118     Stable amd64/x86 and remove old versions.
119 nixnut 1.301
120     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
121     ppc stable
122 gengor 1.300
123     *hardened-sources-2.6.28-r6 (21 Mar 2009)
124    
125     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
126     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
127     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
128 gengor 1.299
129     *hardened-sources-2.6.28-r5 (20 Mar 2009)
130    
131     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
132     +hardened-sources-2.6.28-r5.ebuild:
133     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
134 gengor 1.298
135     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
136     hardened-sources-2.6.28-r4.ebuild:
137     Stable amd64/x86.
138 gengor 1.297
139     *hardened-sources-2.6.28-r4 (18 Mar 2009)
140    
141     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
142     +hardened-sources-2.6.28-r4.ebuild:
143     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
144     compilation with CPA_DEBUG and more.
145 gengor 1.296
146     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
147     hardened-sources-2.6.28-r3.ebuild:
148     Quick stable amd64/x86.
149 gengor 1.295
150     *hardened-sources-2.6.28-r3 (15 Mar 2009)
151    
152     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
153     +hardened-sources-2.6.28-r3.ebuild:
154     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
155 nixnut 1.294
156     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
157     ppc stable
158 gengor 1.293
159     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
160     hardened-sources-2.6.28-r2.ebuild:
161     Stable amd64/x86.
162 gengor 1.292
163     *hardened-sources-2.6.28-r2 (11 Mar 2009)
164    
165     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
166     +hardened-sources-2.6.28-r2.ebuild:
167     Version bump bringing in latest grsecurity patch.
168 gengor 1.291
169     *hardened-sources-2.6.28-r1 (09 Mar 2009)
170    
171     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
172     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
173     Version bump and remove old.
174 nixnut 1.290
175     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
176     ppc stable
177 gengor 1.289
178     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
179     hardened-sources-2.6.27-r8.ebuild:
180     Remove amd64 testing keyword, bug 256226.
181 gengor 1.288
182     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
183     hardened-sources-2.6.27-r8.ebuild:
184     Revert amd64 stable, bug #256226.
185 gengor 1.287
186     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
187     hardened-sources-2.6.27-r8.ebuild:
188     Stable on amd64/x86.
189 gengor 1.286
190     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
191     -hardened-sources-2.6.27-r6.ebuild:
192     Remove old 2.6.27 release.
193 gengor 1.285
194     *hardened-sources-2.6.27-r8 (24 Feb 2009)
195    
196     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
197     +hardened-sources-2.6.27-r8.ebuild:
198     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
199     and probably more.
200 nixnut 1.284
201     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
202     ppc stable
203 gengor 1.283
204     *hardened-sources-2.6.28 (25 Jan 2009)
205    
206     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
207     +hardened-sources-2.6.28.ebuild:
208     Initial 2.6.28 release.
209 gengor 1.282
210     *hardened-sources-2.6.27-r7 (25 Jan 2009)
211    
212     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
213     +hardened-sources-2.6.27-r7.ebuild:
214     Bump to Linux 2.6.27.13.
215 gengor 1.281
216     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
217     hardened-sources-2.6.26-r9.ebuild:
218     Stable amd64/x86.
219 gengor 1.280
220     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
221     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
222     -hardened-sources-2.6.27-r5.ebuild:
223     Remove problem versions.
224 gengor 1.279
225     *hardened-sources-2.6.27-r6 (24 Jan 2009)
226    
227     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
228     +hardened-sources-2.6.27-r6.ebuild:
229     Revert PaX test29 to test30 changes. Fixes bug 256226.
230 gengor 1.277
231     *hardened-sources-2.6.27-r5 (24 Jan 2009)
232    
233     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
234     +hardened-sources-2.6.27-r5.ebuild:
235 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
236 gengor 1.277 254843.
237 gengor 1.276
238     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
239     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
240     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
241     Remove problem versions.
242 nixnut 1.275
243     23 Jan 2009; nixnut <nixnut@gentoo.org>
244     hardened-sources-2.6.25-r13.ebuild:
245     ppc stable
246 gengor 1.274
247     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
248     hardened-sources-2.6.25-r13.ebuild:
249     Fasttrack stable amd64/x86.
250 gengor 1.273
251     *hardened-sources-2.6.26-r9 (21 Jan 2009)
252    
253     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
254     +hardened-sources-2.6.26-r9.ebuild:
255 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
256 gengor 1.272
257     *hardened-sources-2.6.25-r13 (20 Jan 2009)
258    
259     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
260     +hardened-sources-2.6.25-r13.ebuild:
261 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
262 nixnut 1.271
263     20 Jan 2009; nixnut <nixnut@gentoo.org>
264     hardened-sources-2.6.25-r12.ebuild:
265     ppc stable
266 gengor 1.270
267     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
268     hardened-sources-2.6.25-r12.ebuild:
269     Stable amd64/x86.
270 gengor 1.269
271     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
272     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
273     -hardened-sources-2.6.27-r2.ebuild:
274     Clean out old versions.
275 gengor 1.268
276     *hardened-sources-2.6.27-r4 (14 Jan 2009)
277     *hardened-sources-2.6.26-r8 (14 Jan 2009)
278     *hardened-sources-2.6.25-r12 (14 Jan 2009)
279    
280     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
281     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
282     +hardened-sources-2.6.27-r4.ebuild:
283     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
284     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
285     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
286     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
287 nixnut 1.267
288     15 Dec 2008; nixnut <nixnut@gentoo.org>
289     hardened-sources-2.6.25-r11.ebuild:
290     Stable on ppc
291 gengor 1.266
292     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
293     hardened-sources-2.6.25-r11.ebuild:
294     Stable amd64/x86.
295 gengor 1.265
296     *hardened-sources-2.6.27-r3 (07 Dec 2008)
297    
298     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
299     +hardened-sources-2.6.27-r3.ebuild:
300     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
301     Fixes bug #248754, #249729 and #246607.
302 gengor 1.264
303     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
304     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
305     Remove old versions.
306 gengor 1.262
307     *hardened-sources-2.6.26-r7 (03 Dec 2008)
308     *hardened-sources-2.6.25-r11 (03 Dec 2008)
309    
310 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
311     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
312 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
313     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
314     Both include many backports from 2.6.27.{6,7} -stable releases.
315 gengor 1.261
316     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
317     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
318     Remove versions broken on ARCHes != x86/amd64.
319 gengor 1.260
320     *hardened-sources-2.6.27-r2 (24 Nov 2008)
321    
322     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
323     +hardened-sources-2.6.27-r2.ebuild:
324     Bump to Linux 2.6.27.7 and latest grsecurity patch.
325 gengor 1.259
326     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
327     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
328     Remove old versions.
329 gengor 1.258
330     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
331     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
332     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
333 nixnut 1.257
334     16 Nov 2008; nixnut <nixnut@gentoo.org>
335     hardened-sources-2.6.25-r10.ebuild:
336     Stable on ppc
337 gengor 1.256
338     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
339     hardened-sources-2.6.25-r10.ebuild:
340     Stable amd64/x86.
341 gengor 1.255
342     *hardened-sources-2.6.26-r6 (12 Nov 2008)
343    
344     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
345     +hardened-sources-2.6.26-r6.ebuild:
346     Bump to Linux 2.6.26.8 and fix security bug #245650.
347 gengor 1.254
348     *hardened-sources-2.6.25-r10 (12 Nov 2008)
349    
350     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
351     +hardened-sources-2.6.25-r10.ebuild:
352     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
353 gengor 1.253
354     *hardened-sources-2.6.27-r1 (09 Nov 2008)
355    
356     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
357     +hardened-sources-2.6.27-r1.ebuild:
358     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
359 gengor 1.252
360     *hardened-sources-2.6.27 (04 Nov 2008)
361    
362     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
363     +hardened-sources-2.6.27.ebuild:
364     Initial 2.6.27 release.
365 gengor 1.251
366     *hardened-sources-2.6.26-r5 (03 Nov 2008)
367    
368     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
369     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
370     +hardened-sources-2.6.26-r5.ebuild:
371     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
372     Clean out some old versions.
373 nixnut 1.250
374     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
375     Stable on ppc
376 gengor 1.249
377     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
378     hardened-sources-2.6.25-r9.ebuild:
379     Stable on amd64/x86.
380 gengor 1.248
381     *hardened-sources-2.6.25-r9 (26 Oct 2008)
382    
383     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
384     +hardened-sources-2.6.25-r9.ebuild:
385     Update to Linux 2.6.25.19
386 nixnut 1.247
387     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
388     Stable on ppc
389 gengor 1.246
390     *hardened-sources-2.6.26-r4 (14 Oct 2008)
391    
392     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
393     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
394     Update to latest grsecurity patch, fixing building of non-modular kernels.
395 gengor 1.245
396     *hardened-sources-2.6.26-r3 (12 Oct 2008)
397    
398     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
399     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
400     +hardened-sources-2.6.26-r3.ebuild:
401     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
402     2.6.26-r1: Removed.
403     2.6.25-r8: Stable amd64/x86.
404 gengor 1.244
405     *hardened-sources-2.6.25-r8 (09 Oct 2008)
406    
407     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
408     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
409     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
410     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
411 nixnut 1.243
412     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
413     Stable on ppc
414 gengor 1.242
415     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
416     hardened-sources-2.6.25-r7.ebuild:
417     Stable amd64/x86.
418 gengor 1.241
419     *hardened-sources-2.6.26-r2 (13 Sep 2008)
420    
421     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
422     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
423     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
424     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
425 gengor 1.240
426     *hardened-sources-2.6.25-r7 (13 Sep 2008)
427    
428     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
429     +hardened-sources-2.6.25-r7.ebuild:
430     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
431 gengor 1.239
432     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
433     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
434     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
435     hardened-sources-2.6.26-r1.ebuild:
436     Update DESCRIPTION and HGPV_URI.
437 gengor 1.238
438     *hardened-sources-2.6.25-r6 (09 Sep 2008)
439    
440     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
441     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
442     2.6.25-r6: Update to Linux 2.6.25.17.
443     2.6.24-r3: Removed.
444 gengor 1.237
445     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
446     hardened-sources-2.6.25-r5.ebuild:
447     Stable on amd64/x86
448 gengor 1.236
449     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
450     Update my email address.
451 nixnut 1.235
452     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
453     stable on ppc
454 battousai 1.234
455     *hardened-sources-2.6.26-r1 (23 Aug 2008)
456     *hardened-sources-2.6.25-r5 (23 Aug 2008)
457    
458     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
459     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
460     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
461     +hardened-sources-2.6.26-r1.ebuild:
462     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
463     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
464     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
465     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
466     (gengor).
467 solar 1.233
468     *hardened-sources-2.6.26 (18 Aug 2008)
469     *hardened-sources-2.6.25-r4 (18 Aug 2008)
470    
471     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
472     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
473     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
474     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
475     2.6.25-r2: Removed.
476 tove 1.232
477     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
478     Remove phreak from metadata.xml (#96398)
479 solar 1.231
480     *hardened-sources-2.6.25-r3 (31 Jul 2008)
481    
482     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
483     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
484     +hardened-sources-2.6.25-r3.ebuild:
485     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
486     fixes, including security bug #231750.
487 nixnut 1.230
488     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
489     Stable on ppc
490 solar 1.229
491     *hardened-sources-2.6.25-r2 (05 Jul 2008)
492    
493     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
494     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
495     +hardened-sources-2.6.25-r2.ebuild:
496     2.6.23-r4: Stable x86/amd64
497     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
498     2.6.23-r{11,12}: Removed due to multiple vulns.
499     (gengor & kerframil)
500 nixnut 1.228
501     04 Jul 2008; nixnut <nixnut@gentoo.org>
502     hardened-sources-2.6.23-r13.ebuild:
503     Stable on ppc
504 solar 1.227
505     *hardened-sources-2.6.25-r1 (30 Jun 2008)
506    
507     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
508     +hardened-sources-2.6.25-r1.ebuild:
509     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
510     grsecurity release. 2.6.23-r13: x86/amd64 stable
511 solar 1.226
512     *hardened-sources-2.6.25 (17 Jun 2008)
513     *hardened-sources-2.6.24-r3 (17 Jun 2008)
514     *hardened-sources-2.6.23-r13 (17 Jun 2008)
515    
516     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
517     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
518     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
519     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
520     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
521     2.6.25: Initial 2.6.25 release.
522 solar 1.225
523     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
524     - fasttrack to stable x86/amd64
525 swegener 1.224
526     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
527     Fix broken digest for linux-2.6.24.tar.bz2.
528 solar 1.223
529     *hardened-sources-2.6.24-r2 (11 May 2008)
530     *hardened-sources-2.6.23-r12 (11 May 2008)
531    
532     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
533     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
534     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
535     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
536     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
537     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
538     security bugs 219901, 220691, 220975, 220979, 221123. New
539     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
540     should be removed as far as I'm concerned, everything else remove due to
541     vulnerable to numerous security bugs or brokeness.
542 nixnut 1.222
543     10 May 2008; nixnut <nixnut@gentoo.org>
544     hardened-sources-2.6.23-r11.ebuild:
545     Stable on ppc
546 solar 1.221
547     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
548     - -r11 stable on x86/amd64
549 solar 1.220
550     *hardened-sources-2.6.23-r11 (01 May 2008)
551    
552     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
553     - version bump to fix ulgy linux bugs
554 phreak 1.219
555     *hardened-sources-2.6.24-r1 (30 Apr 2008)
556    
557     30 Apr 2008; Christian Heim <phreak@gentoo.org>
558     +hardened-sources-2.6.24-r1.ebuild:
559     Revision bump (thanks to Kerin and Gordon, again), pulling
560     genpatches-2.6.24-7, solving #219089. Additionally contains further security
561     fixes plus some minor updates.
562 phreak 1.218
563     *hardened-sources-2.6.23-r10 (30 Apr 2008)
564    
565     30 Apr 2008; Christian Heim <phreak@gentoo.org>
566     +hardened-sources-2.6.23-r10.ebuild:
567     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
568     Additional contains "various other fixes".
569 phreak 1.217
570     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
571     Update the longdescription in metadata, thanks to Gordon Malm.
572 nixnut 1.216
573     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
574     Stable on ppc wrt bug #213255
575 solar 1.215
576     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
577     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
578     - stable on x86/amd64 per request. Removed obsolete ebuilds
579 phreak 1.214
580     *hardened-sources-2.6.24 (07 Apr 2008)
581    
582     07 Apr 2008; Christian Heim <phreak@gentoo.org>
583     +hardened-sources-2.6.24.ebuild:
584     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
585     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
586     for the many contributions and their continued effort in #216612) based on
587     2.6.24 and genpatches-2.6.24-5.
588    
589     The current ebuild/patchset contains these things:
590     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
591     * Introduces bespoke server and workstation oriented security levels
592     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
593 phreak 1.213
594     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
595     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
596     maintaining it).
597 phreak 1.212
598     24 Mar 2008; Christian Heim <phreak@gentoo.org>
599     hardened-sources-2.4.35-r2.ebuild:
600     Fixing SRC_URI for 2.4.35-r2.
601 phreak 1.211
602     *hardened-sources-2.6.23-r9 (22 Mar 2008)
603    
604     22 Mar 2008; Christian Heim <phreak@gentoo.org>
605     +hardened-sources-2.6.23-r9.ebuild:
606     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
607     * Change the default GIDs for some grsecurity options
608     * Revamp the Hardened [Gentoo] security level and make it the default level
609     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
610     * Fix a recursive lock -- call to capable() within ptrace_attach()
611     * Fix bug that allows audit and iscsi operations to be controlled via netlink
612 solar 1.210
613     *hardened-sources-2.6.23-r8 (27 Feb 2008)
614    
615     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
616     - version bump from Kerin Millar bug 210026
617 solar 1.209
618     17 Feb 2008; <solar@gentoo.org> metadata.xml,
619     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
620     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
621     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
622     - stable on x86 and remove old ebuilds
623 solar 1.207
624     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
625 solar 1.208 - stable on amd64 per request of amd64 lead
626 solar 1.206
627     *hardened-sources-2.6.23-r7 (11 Feb 2008)
628    
629     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
630     - version bump from kerin.millar
631     Changes:
632    
633     * Bump to genpatches-base-2.6.23-9
634     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
635     * Disables COMPAT_VDSO in x86/defconfig
636     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
637 phreak 1.205
638     25 Jan 2008; Christian Heim <phreak@gentoo.org>
639     -hardened-sources-2.6.22-r8.ebuild:
640     Cleaning up old versions.
641 phreak 1.204
642     *hardened-sources-2.6.23-r6 (25 Jan 2008)
643    
644     25 Jan 2008; Christian Heim <phreak@gentoo.org>
645     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
646     Revision bump, pulling in the latest genpatches.
647 phreak 1.203
648     *hardened-sources-2.6.23-r5 (24 Dec 2007)
649    
650     24 Dec 2007; Christian Heim <phreak@gentoo.org>
651     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
652     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
653     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
654     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
655 phreak 1.202
656     24 Dec 2007; Christian Heim <phreak@gentoo.org>
657     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
658     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
659     -hardened-sources-2.6.23-r3.ebuild:
660     Cleaning out some unused, old versions.
661 phreak 1.201
662     24 Dec 2007; Christian Heim <phreak@gentoo.org>
663     hardened-sources-2.6.23-r4.ebuild:
664     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
665     in the tree for long, but there isn't much of a difference between this and
666     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
667 phreak 1.200
668     *hardened-sources-2.6.23-r4 (23 Dec 2007)
669    
670     23 Dec 2007; Christian Heim <phreak@gentoo.org>
671     +hardened-sources-2.6.23-r4.ebuild:
672     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
673 phreak 1.199
674     *hardened-sources-2.6.23-r3 (04 Dec 2007)
675    
676     04 Dec 2007; Christian Heim <phreak@gentoo.org>
677     +hardened-sources-2.6.23-r3.ebuild:
678     Revision bump, pulling in 2.6.23.9.
679 phreak 1.198
680     *hardened-sources-2.6.23-r2 (25 Nov 2007)
681    
682     25 Nov 2007; Christian Heim <phreak@gentoo.org>
683     +hardened-sources-2.6.23-r2.ebuild:
684     Updated patchset, thanks to solar.
685 phreak 1.197
686     *hardened-sources-2.6.23-r1 (31 Oct 2007)
687    
688     31 Oct 2007; Christian Heim <phreak@gentoo.org>
689     +hardened-sources-2.6.23-r1.ebuild:
690     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
691 solar 1.196
692     29 Oct 2007; <solar@gentoo.org> metadata.xml:
693     - update metadata.xml
694 phreak 1.195
695     25 Oct 2007; Christian Heim <phreak@gentoo.org>
696     hardened-sources-2.6.22-r8.ebuild:
697     Marking 2.6.22-r8 stable on amd64 and x86.
698 phreak 1.194
699     21 Oct 2007; Christian Heim <phreak@gentoo.org>
700     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
701     -hardened-sources-2.6.21-r4.ebuild:
702     Removing old ebuilds.
703 phreak 1.193
704     *hardened-sources-2.4.35-r2 (21 Oct 2007)
705    
706     21 Oct 2007; Christian Heim <phreak@gentoo.org>
707     +hardened-sources-2.4.35-r2.ebuild:
708     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
709     patches.
710 phreak 1.192
711     *hardened-sources-2.6.22-r8 (21 Oct 2007)
712    
713     21 Oct 2007; Christian Heim <phreak@gentoo.org>
714     +hardened-sources-2.6.22-r8.ebuild:
715     Yet another new patch, hopefully fixing the remaining issues we had w/
716     2.6.22. Candidate for stabling.
717 phreak 1.191
718     *hardened-sources-2.6.23 (13 Oct 2007)
719    
720     13 Oct 2007; Christian Heim <phreak@gentoo.org>
721     +hardened-sources-2.6.23.ebuild:
722     Initial hardened-sources-2.6.23. If people still have problems w/ bug
723     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
724 phreak 1.190
725     11 Oct 2007; Christian Heim <phreak@gentoo.org>
726     hardened-sources-2.6.20-r10.ebuild:
727     Pulling in yet another new genpatches version, fixing the PWC bug for real.
728 phreak 1.189
729     04 Oct 2007; Christian Heim <phreak@gentoo.org>
730     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
731     Removing old versions.
732 phreak 1.188
733     *hardened-sources-2.6.22-r7 (01 Oct 2007)
734    
735     01 Oct 2007; Christian Heim <phreak@gentoo.org>
736     +hardened-sources-2.6.22-r7.ebuild:
737     Revision bump, pulling in a newer patch. Should fix #194276.
738 phreak 1.187
739     30 Sep 2007; Christian Heim <phreak@gentoo.org>
740     hardened-sources-2.6.20-r10.ebuild:
741     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
742     Mike Doty).
743 phreak 1.186
744     *hardened-sources-2.6.22-r6 (26 Sep 2007)
745    
746     26 Sep 2007; Christian Heim <phreak@gentoo.org>
747     +hardened-sources-2.6.22-r6.ebuild:
748     Revision bump, grabbing up till Linux 2.6.22.9.
749 phreak 1.185
750     24 Sep 2007; Christian Heim <phreak@gentoo.org>
751     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
752     Cleaning up further.
753 phreak 1.184
754     *hardened-sources-2.6.20-r10 (24 Sep 2007)
755    
756     24 Sep 2007; Christian Heim <phreak@gentoo.org>
757     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
758     +hardened-sources-2.6.20-r10.ebuild:
759     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
760     revisions.
761 phreak 1.183
762     *hardened-sources-2.6.22-r5 (22 Sep 2007)
763    
764     22 Sep 2007; Christian Heim <phreak@gentoo.org>
765     +hardened-sources-2.6.22-r5.ebuild:
766     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
767 phreak 1.182
768     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
769     Removing johnm from metadata.xml (see #186467 for reference).
770 phreak 1.181
771     *hardened-sources-2.6.22-r4 (17 Sep 2007)
772    
773     17 Sep 2007; Christian Heim <phreak@gentoo.org>
774     +hardened-sources-2.6.22-r4.ebuild:
775     Revision bump, hopefully fixing all those weird PAX failures.
776 phreak 1.180
777     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
778     Updating the metadata.xml.
779 phreak 1.179
780     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
781     Removing tocharian from metadata due to his retirement (see #71718 for
782     reference).
783 phreak 1.178
784     *hardened-sources-2.6.20-r9 (30 Aug 2007)
785    
786     30 Aug 2007; Christian Heim <phreak@gentoo.org>
787     +hardened-sources-2.6.20-r9.ebuild:
788     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
789 phreak 1.177
790     29 Aug 2007; Christian Heim <phreak@gentoo.org>
791     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
792     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
793     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
794     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
795     -hardened-sources-2.6.22-r2.ebuild:
796     Removing some redundant versions.
797 phreak 1.176
798     *hardened-sources-2.4.35-r1 (29 Aug 2007)
799    
800     29 Aug 2007; Christian Heim <phreak@gentoo.org>
801     +hardened-sources-2.4.35-r1.ebuild:
802     Revision bump, new grsecurity patch.
803 phreak 1.175
804     *hardened-sources-2.6.20-r8 (26 Aug 2007)
805    
806     26 Aug 2007; Christian Heim <phreak@gentoo.org>
807     +hardened-sources-2.6.20-r8.ebuild:
808     Revision bump for Linux 2.6.20.17.
809 phreak 1.174
810     *hardened-sources-2.6.22-r3 (22 Aug 2007)
811    
812     22 Aug 2007; Christian Heim <phreak@gentoo.org>
813     +hardened-sources-2.6.22-r3.ebuild:
814     Revision bump for Linux 2.6.22.4.
815 phreak 1.173
816     16 Aug 2007; Christian Heim <phreak@gentoo.org>
817     hardened-sources-2.6.22-r2.ebuild:
818     Updated patchset, to fix the alignment against 2.6.22.3.
819 phreak 1.172
820     *hardened-sources-2.6.22-r2 (16 Aug 2007)
821    
822     16 Aug 2007; Christian Heim <phreak@gentoo.org>
823     +hardened-sources-2.6.22-r2.ebuild:
824     Revision bump for Linux 2.6.22.3.
825 phreak 1.171
826     *hardened-sources-2.4.35 (16 Aug 2007)
827    
828     16 Aug 2007; Christian Heim <phreak@gentoo.org>
829     +hardened-sources-2.4.35.ebuild:
830     Version bump, initial version for Linux 2.4.35.
831 phreak 1.170
832     *hardened-sources-2.6.21-r4 (16 Aug 2007)
833    
834     16 Aug 2007; Christian Heim <phreak@gentoo.org>
835     +hardened-sources-2.6.21-r4.ebuild:
836     Revision bump for Linux 2.6.21.6.
837 phreak 1.169
838     *hardened-sources-2.6.20-r7 (16 Aug 2007)
839    
840     16 Aug 2007; Christian Heim <phreak@gentoo.org>
841     +hardened-sources-2.6.20-r7.ebuild:
842     Revision bump for Linux 2.6.20.16.
843 phreak 1.168
844     *hardened-sources-2.6.22-r1 (13 Aug 2007)
845    
846     13 Aug 2007; Christian Heim <phreak@gentoo.org>
847     +hardened-sources-2.6.22-r1.ebuild:
848     Yet another revision bump.
849 phreak 1.167
850     *hardened-sources-2.6.22 (10 Aug 2007)
851    
852     10 Aug 2007; Christian Heim <phreak@gentoo.org>
853     +hardened-sources-2.6.22.ebuild:
854     Initial release for 2.6.22. If you are using hardened-sources on a desktop
855     machine (P4 or newer), be aware you might need to disable
856     CONFIG_PAX_PAGEEXEC.
857 phreak 1.166
858     04 Aug 2007; Christian Heim <phreak@gentoo.org>
859     hardened-sources-2.6.20-r6.ebuild:
860     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
861     2.6.20.15.
862 phreak 1.165
863     10 Jul 2007; Christian Heim <phreak@gentoo.org>
864     hardened-sources-2.6.20-r5.ebuild:
865     Marking hardened-sources-2.6.20-r5 stable on ppc.
866 phreak 1.164
867     10 Jul 2007; Christian Heim <phreak@gentoo.org>
868     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
869     Cleanup.
870 phreak 1.163
871     *hardened-sources-2.6.20-r6 (08 Jul 2007)
872    
873     08 Jul 2007; Christian Heim <phreak@gentoo.org>
874     +hardened-sources-2.6.20-r6.ebuild:
875     Revision bump, grabbing yet another stable release.
876 phreak 1.162
877     17 Jun 2007; Christian Heim <phreak@gentoo.org>
878     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
879     -hardened-sources-2.6.21-r2.ebuild:
880     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
881     alpha stable KEYWORD by mistake.
882 phreak 1.161
883     17 Jun 2007; Christian Heim <phreak@gentoo.org>
884     hardened-sources-2.6.20-r5.ebuild:
885     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
886     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
887 phreak 1.160
888     *hardened-sources-2.6.21-r3 (12 Jun 2007)
889    
890     12 Jun 2007; Christian Heim <phreak@gentoo.org>
891     +hardened-sources-2.6.21-r3.ebuild:
892     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
893     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
894     love.
895 phreak 1.159
896     *hardened-sources-2.6.20-r5 (11 Jun 2007)
897    
898     11 Jun 2007; Christian Heim <phreak@gentoo.org>
899     +hardened-sources-2.6.20-r5.ebuild:
900     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
901     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
902     love.
903 pappy 1.158
904     *hardened-sources-2.4.34.5 (11 Jun 2007)
905    
906     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
907     +hardened-sources-2.4.34.5.ebuild:
908     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
909 phreak 1.157
910     30 May 2007; Christian Heim <phreak@gentoo.org>
911     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
912     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
913     stale ebuild(s).
914 phreak 1.156
915     30 May 2007; Christian Heim <phreak@gentoo.org>
916     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
917     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
918     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
919     Doing some cleanups, remove stale ebuilds.
920 phreak 1.155
921     26 May 2007; Christian Heim <phreak@gentoo.org>
922     hardened-sources-2.6.21-r2.ebuild:
923     Fixing the grsecurity patch, had one '};' too much.
924 phreak 1.154
925     *hardened-sources-2.6.21-r2 (26 May 2007)
926    
927     26 May 2007; Christian Heim <phreak@gentoo.org>
928     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
929     +hardened-sources-2.6.21-r2.ebuild:
930     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
931     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
932 phreak 1.153
933     *hardened-sources-2.6.20-r4 (26 May 2007)
934    
935     26 May 2007; Christian Heim <phreak@gentoo.org>
936     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
937     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
938 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
939 phreak 1.152
940     15 May 2007; Christian Heim <phreak@gentoo.org>
941     hardened-sources-2.6.20-r3.ebuild:
942     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
943     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
944     grsecurity patch fail in that exact same hunk.
945 phreak 1.151
946     *hardened-sources-2.6.20-r3 (15 May 2007)
947    
948     15 May 2007; Christian Heim <phreak@gentoo.org>
949     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
950     Revision bump, incorporating Linux 2.6.20.11.
951    
952     *hardened-sources-2.6.21-r1 (11 May 2007)
953    
954     11 May 2007; Christian Heim <phreak@gentoo.org>
955     +hardened-sources-2.6.21-r1.ebuild:
956     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
957     mentioned in #177234.
958 kevquinn 1.150
959     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
960     files/digest-hardened-sources-2.6.21, Manifest:
961     Fix Manifest/digest for linux-2.6.21.tar.bz2
962 phreak 1.149
963     06 May 2007; Christian Heim <phreak@gentoo.org>
964     hardened-sources-2.6.21.ebuild:
965     Bumping the hardened-patches version, needed for the fix for #177234.
966 phreak 1.148
967     *hardened-sources-2.6.21 (02 May 2007)
968    
969     02 May 2007; Christian Heim <phreak@gentoo.org>
970     +hardened-sources-2.6.21.ebuild:
971     Version bump, Linux 2.6.21-hardened.
972 phreak 1.147
973     29 Apr 2007; Christian Heim <phreak@gentoo.org>
974     hardened-sources-2.6.20-r2.ebuild:
975     Adding ~ia64 on Ned's request.
976 phreak 1.146
977     29 Apr 2007; Christian Heim <phreak@gentoo.org>
978     hardened-sources-2.6.20-r2.ebuild:
979     Fixing the included grsecurity patch, wasn't alligning due to the Index:
980     header line(s).
981 phreak 1.145
982     29 Apr 2007; Christian Heim <phreak@gentoo.org>
983     hardened-sources-2.6.20-r2.ebuild:
984     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
985 armin76 1.144
986     *hardened-sources-2.6.20-r2 (10 Apr 2007)
987    
988     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
989     +hardened-sources-2.6.20-r2.ebuild:
990     Version bump, on behalf of phreak
991 phreak 1.143
992     *hardened-sources-2.6.20-r1 (04 Apr 2007)
993    
994     04 Apr 2007; Christian Heim <phreak@gentoo.org>
995     +hardened-sources-2.6.20-r1.ebuild:
996     Revision bump, grabbing a newer grsecurity snapshot.
997 phreak 1.142
998     *hardened-sources-2.6.20 (25 Mar 2007)
999    
1000     25 Mar 2007; Christian Heim <phreak@gentoo.org>
1001     +hardened-sources-2.6.20.ebuild:
1002     Finally a hardened-sources version for 2.6.20; many people have been waiting
1003     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
1004     testbox.
1005 chainsaw 1.141
1006     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
1007     hardened-sources-2.6.18-r6.ebuild:
1008     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
1009 phreak 1.140
1010     *hardened-sources-2.6.18-r6 (16 Mar 2007)
1011    
1012     16 Mar 2007; Christian Heim <phreak@gentoo.org>
1013     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1014     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1015     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1016     supposed to be.
1017 phreak 1.139
1018     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1019     Fixing the Manifest, the previous one was broken (as in still had the
1020     deleted ebuild in it).
1021 phreak 1.138
1022     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1023     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1024     +hardened-sources-2.6.18-r5.ebuild:
1025     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1026     Linux 2.6.18.8. Also cleaning up the older version.
1027    
1028     *hardened-sources-2.6.18-r5 (06 Mar 2007)
1029    
1030     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1031     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1032     +hardened-sources-2.6.18-r5.ebuild:
1033     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1034     Linux 2.6.18.8. Also cleaning up the older version.
1035 phreak 1.137
1036     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1037     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1038     -hardened-sources-2.6.19-r5.ebuild:
1039     Removing some of the old version, that didn't work.
1040 phreak 1.136
1041     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1042    
1043     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1044     +hardened-sources-2.6.19-r6.ebuild:
1045     Revision bump, including a new grsec version fixing #166235.
1046 pappy 1.134
1047     *hardened-sources-2.4.34 (24 Jan 2007)
1048    
1049     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1050 pappy 1.135 Manifest:
1051     updating Manifest with checksums of new tarball and ebuild
1052    
1053     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1054 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1055     I added new hardened sources 2.4 update, this is a critical path
1056     security bugfix - all users of h-s are strongly advised
1057     to update their existing hardened sources to this version.
1058     It contains a fix for a kernel vulnerability that is pertaining
1059     to the PaX changes to virtual memory management, possibly leading
1060     to a local kernel exploit ... see grsecurity.net forums and homepage
1061 phreak 1.133
1062     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1063     files/digest-hardened-sources-2.6.19-r5, Manifest:
1064     Fixing the patch-tarball digest.
1065 phreak 1.132
1066     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1067    
1068     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1069     +hardened-sources-2.6.19-r5.ebuild:
1070     Revision bump, closing the recently discovered PaX expand_stack()
1071     vulnerability.
1072 phreak 1.131
1073     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1074    
1075     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1076     +hardened-sources-2.6.19-r4.ebuild:
1077     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1078     dropping the randomized PID feature.
1079 opfer 1.130
1080     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1081     hardened-sources-2.4.33.4.ebuild:
1082     stable x86, bug #161171
1083 phreak 1.129
1084     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1085    
1086     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1087     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1088     Revision bump for bug #157186 and #158786.
1089 phreak 1.128
1090     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1091    
1092     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1093     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1094     Revision bump for bug #157186.
1095 phreak 1.127
1096     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1097    
1098     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1099     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1100     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1101 phreak 1.126
1102     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1103     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1104     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1105     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1106     hardened-sources-2.6.19-r1.ebuild:
1107     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1108     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1109 pappy 1.125
1110     *hardened-sources-2.4.33.4 (17 Dec 2006)
1111    
1112     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1113     +hardened-sources-2.4.33.4.ebuild:
1114     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1115     and quilting
1116 phreak 1.124
1117     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1118    
1119     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1120     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1121     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1122     for reporting).
1123 phreak 1.123
1124     *hardened-sources-2.6.19 (13 Dec 2006)
1125    
1126     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1127     +hardened-sources-2.6.19.ebuild:
1128     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1129     Brad for providing that prompt update.
1130 phreak 1.122
1131     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1132    
1133     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1134     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1135     +hardened-sources-2.6.18-r3.ebuild:
1136     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1137     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1138 phreak 1.121
1139     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1140     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1141 nixnut 1.120
1142     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1143     Stable on ppc wrt bug 157356
1144 opfer 1.119
1145     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1146     hardened-sources-2.6.18.ebuild:
1147     stable x86, bug #157356
1148 phreak 1.118
1149     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1150    
1151     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1152     +hardened-sources-2.6.18-r2.ebuild:
1153     Revision bump, including 2.6.18.5 (via genpatches) and
1154     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1155     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1156     redesign.
1157 phreak 1.117
1158     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1159     hardened-sources-2.6.18.ebuild:
1160     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1161     of Mike Doty).
1162 phreak 1.116
1163     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1164    
1165     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1166     +hardened-sources-2.6.18-r1.ebuild:
1167     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1168 phreak 1.115
1169     *hardened-sources-2.6.18 (11 Nov 2006)
1170    
1171     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1172     +hardened-sources-2.6.18.ebuild:
1173     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1174 solar 1.114
1175     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1176     - mark amd64 stable also. bug #151877
1177 solar 1.113
1178     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1179     - mark 2.6.17-r1 stable
1180 phreak 1.112
1181     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1182     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1183     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1184 phreak 1.111
1185     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1186    
1187     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1188     +hardened-sources-2.6.17-r1.ebuild:
1189     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1190     grsecurity patch.
1191 phreak 1.110
1192     *hardened-sources-2.6.17 (17 Aug 2006)
1193    
1194     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1195     +hardened-sources-2.6.17.ebuild:
1196     Bumping the hardened-sources-2.6 series to 2.6.17, using
1197     genpatches-2.6.17-6.base.
1198 solar 1.109
1199     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1200     - stable on x86 and amd64
1201 solar 1.108
1202     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1203    
1204     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1205     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1206     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1207     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1208     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1209     crusty ebuilds
1210 johnm 1.107
1211     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1212     hardened-sources-2.6.16-r10.ebuild:
1213     marking stable on x86 and amd64
1214 solar 1.106
1215     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1216     - 2.4.32-r6 stable on x86. RSBAC state unknown
1217 kang 1.105
1218     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1219    
1220     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1221     +hardened-sources-2.4.32-r7.ebuild:
1222     Bump PaX for RSBAC to test-17
1223 johnm 1.104
1224     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1225    
1226     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1227     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1228     hardened-sources-2.6.16 bump to latest -base.
1229 solar 1.103
1230     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1231    
1232     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1233     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1234     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1235     sysctl controlable resource logging
1236 johnm 1.102
1237     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1238    
1239     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1240     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1241     push new 2.6.16 release in preparation for stable
1242 solar 1.101
1243     22 May 2006; <solar@gentoo.org> :
1244     - redigest bug 134002
1245 kang 1.100
1246     *hardened-sources-2.4.32-r5 (16 May 2006)
1247    
1248     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1249     +hardened-sources-2.4.32-r5.ebuild:
1250     Fixes rsbac common patching (new patch in new -r5 patchset)
1251 solar 1.99
1252     *hardened-sources-2.4.32-r4 (13 May 2006)
1253    
1254     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1255     +hardened-sources-2.4.32-r4.ebuild:
1256     - security bumps
1257 johnm 1.98
1258     *hardened-sources-2.6.16-r6 (03 May 2006)
1259    
1260     03 May 2006; John Mylchreest <johnm@gentoo.org>
1261     +hardened-sources-2.6.16-r6.ebuild:
1262     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1263 johnm 1.97
1264     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1265     hardened-sources-2.6.14-r8.ebuild:
1266     fix x86_64 build problem, this will delay the digest issue again for a short
1267     while but it will sort itself out
1268 johnm 1.96
1269     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1270     hardened-sources-2.6.14-r8.ebuild:
1271     bump hardened patchset
1272 antarus 1.94
1273     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1274     files/digest-hardened-sources-2.4.32-r2,
1275     files/digest-hardened-sources-2.4.32-r3,
1276     files/digest-hardened-sources-2.6.14-r8, Manifest:
1277     Fixing duff SHA256 digests: Bug # 131293
1278 johnm 1.93
1279 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1280    
1281     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1282     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1283     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1284     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1285     cleanup of old uneccessary sources
1286    
1287 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1288     fix digest
1289 johnm 1.92
1290     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1291    
1292     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1293     +hardened-sources-2.6.14-r8.ebuild:
1294     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1295 johnm 1.91
1296     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1297     Turning on gpg-signing again, and recomitting
1298 johnm 1.90
1299     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1300    
1301     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1302     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1303     +hardened-sources-2.6.16-r4.ebuild:
1304     Fix numerous security vulns
1305 solar 1.89
1306     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1307    
1308     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1309     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1310     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1311     - security bump for bug #112791. Removed old ebuilds
1312 johnm 1.88
1313     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1314    
1315     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1316     +hardened-sources-2.6.16-r3.ebuild:
1317     Removing silly localversion which I missed
1318 johnm 1.87
1319     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1320    
1321     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1322     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1323     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1324 johnm 1.86
1325     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1326    
1327     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1328     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1329     +hardened-sources-2.6.16-r2.ebuild:
1330     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1331     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1332 johnm 1.85
1333     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1334    
1335     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1336     +hardened-sources-2.6.16-r1.ebuild:
1337     Bumping to include ppc build fix and 2.6.16.3
1338 tsunam 1.84
1339     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1340     hardened-sources-2.6.14-r6.ebuild:
1341     Stable on x86; bug #127718
1342 johnm 1.83
1343     *hardened-sources-2.6.16 (31 Mar 2006)
1344    
1345     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1346     +hardened-sources-2.6.16.ebuild:
1347     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1348     2.6.16.1
1349 cryos 1.82
1350     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1351     hardened-sources-2.6.14-r6.ebuild:
1352     Stable on amd64, bug 127718.
1353 nixnut 1.81
1354     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1355     Stable on ppc. Bug #127718
1356 johnm 1.80
1357     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1358     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1359     -hardened-sources-2.6.14-r4.ebuild:
1360     Cleanup.
1361 johnm 1.79
1362     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1363    
1364     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1365     +hardened-sources-2.6.14-r6.ebuild:
1366     Fixes grsec policy recreation bug and adds a
1367     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1368 solar 1.78
1369     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1370     - stable on x86
1371 hansmi 1.77
1372     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1373     hardened-sources-2.6.14-r5.ebuild:
1374     Stable on ppc.
1375 johnm 1.76
1376     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1377    
1378     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1379     +hardened-sources-2.6.14-r5.ebuild:
1380     fixing every known exploit
1381 solar 1.75
1382     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1383    
1384     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1385     +hardened-sources-2.4.32-r2.ebuild:
1386     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1387 solar 1.74
1388     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1389    
1390     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1391     - version bump for new genpatches which fix up a few sec holes
1392 solar 1.73
1393     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1394    
1395     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1396     - revision bump to add misc vital linux kernel security patches.
1397 johnm 1.72
1398     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1399    
1400     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1401     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1402     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1403 johnm 1.71
1404     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1405     hardened-sources-2.6.14-r2.ebuild:
1406     making x86 & amd64 stable following testing.
1407 johnm 1.70
1408     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1409    
1410     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1411     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1412     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1413     network hooks.
1414 johnm 1.69
1415     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1416     hardened-sources-2.6.14-r1.ebuild:
1417     bumping to stable early for sec fix on x86 & amd64
1418 johnm 1.68
1419     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1420    
1421     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1422     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1423     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1424 solar 1.67
1425     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1426     - stable on x86 security bug #114227 CAN-2005-3257
1427 kang 1.66
1428     *hardened-sources-2.4.32 (19 Nov 2005)
1429    
1430     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1431     +hardened-sources-2.4.32.ebuild:
1432     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1433     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1434     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1435     rsbac >> /etc/portage/package.use)
1436 johnm 1.65
1437     *hardened-sources-2.6.14 (14 Nov 2005)
1438    
1439     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1440     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1441     Bumping 2.6 series to 2.6.14.2
1442 johnm 1.64
1443     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1444    
1445     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1446     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1447     +hardened-sources-2.6.13-r2.ebuild:
1448     Fixes minor build error in ppc.
1449 johnm 1.63
1450     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1451    
1452     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1453     +hardened-sources-2.6.13-r1.ebuild:
1454     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1455     2.6.13.4, fixes some major amd64 stability problems.
1456 johnm 1.62
1457     *hardened-sources-2.6.13 (16 Sep 2005)
1458    
1459     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1460     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1461     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1462     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1463     users should test this thoroughly.
1464 solar 1.61
1465     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1466     - stable on x86
1467 johnm 1.60
1468     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1469    
1470     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1471     +hardened-sources-2.6.11-r15.ebuild:
1472     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1473     grsec redefining curr_ip struct.
1474 solar 1.59
1475     *hardened-sources-2.4.31 (20 Jun 2005)
1476    
1477     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1478     initial import of 2.4.31 tree
1479 johnm 1.58
1480     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1481    
1482     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1483     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1484     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1485     naming scheme to abide by genpatches
1486 johnm 1.57
1487     *hardened-sources-2.6.11-r13 (18 May 2005)
1488    
1489     18 May 2005; John Mylchreest <johnm@gentoo.org>
1490     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1491     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1492     target. sorry about that. Fixes bug #93022
1493 johnm 1.56
1494     *hardened-sources-2.6.11-r12 (17 May 2005)
1495    
1496     17 May 2005; John Mylchreest <johnm@gentoo.org>
1497     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1498     +hardened-sources-2.6.11-r12.ebuild:
1499     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1500     merges in genpatches-base
1501 johnm 1.55
1502     *hardened-sources-2.6.11-r12 (17 May 2005)
1503    
1504     17 May 2005; John Mylchreest <johnm@gentoo.org>
1505     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1506     +hardened-sources-2.6.11-r12.ebuild:
1507     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1508     merges in genpatches-base
1509 solar 1.54
1510     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1511     -files/2.4.27-cmdline-race.patch,
1512     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1513     -files/2.4.28-grsec-binfmt_a.out.patch,
1514     -files/2.4.28-grsec-cmdline-race.patch,
1515     -files/2.4.28-selinux-binfmt_a.out.patch,
1516     -files/2.4.28-selinux-cmdline-race.patch,
1517     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1518     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1519     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1520     cleanup..
1521 solar 1.53
1522     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1523    
1524     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1525     - disable aout by default
1526 solar 1.52
1527     *hardened-sources-2.4.30 (18 Apr 2005)
1528    
1529     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1530     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1531     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1532     use
1533 tocharian 1.50
1534 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1535    
1536     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1537     +hardened-sources-2.4.29.ebuild:
1538     New hardened-patches-2.4-29.0 patchball.
1539     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1540    
1541     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1542    
1543     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1544     +hardened-sources-2.4.28-r5.ebuild:
1545     Added a fix for a PaX vulnerability.
1546    
1547     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1548 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1549     Stable on x86
1550 solar 1.49
1551     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1552     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1553     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1554     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1555     - fixed/added RDEPEND= in all kernel-2 ebuilds
1556 tocharian 1.48
1557     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1558    
1559     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1560     +hardened-sources-2.4.28-r4.ebuild:
1561     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1562     backport of neighbour hash updates.
1563 tocharian 1.47
1564     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1565     hardened-sources-2.4.28-r3.ebuild:
1566     Stable on x86
1567 tseng 1.46
1568     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1569    
1570     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1571     +hardened-sources-2.6.10-r3.ebuild:
1572     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1573     in 2005.0
1574 tocharian 1.45
1575     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1576     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1577     hardened-sources-2.4.28-r2.ebuild:
1578     Mark stable on x86
1579 tocharian 1.44
1580     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1581    
1582     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1583     +hardened-sources-2.4.28-r3.ebuild:
1584     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1585 tocharian 1.43
1586     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1587     hardened-sources-2.4.28.ebuild:
1588     Mark stable on x86.
1589 tocharian 1.42
1590     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1591    
1592     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1593     +hardened-sources-2.4.28-r2.ebuild:
1594     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1595     Mazinger for grsecurity patches as well.
1596 plasmaroo 1.41
1597     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1598    
1599     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1600     Security bump. Thank tocharian for rolling a new patchset...
1601 solar 1.40
1602     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1603     +files/2.4.28-grsec-cmdline-race.patch,
1604     +files/2.4.28-selinux-binfmt_a.out.patch,
1605     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1606     - Round up remaining security patches that appear to be missing in 2.4.28. -
1607     PaX standalone updated to current. hgpv=28.1
1608 solar 1.39
1609     *hardened-sources-2.4.28 (28 Nov 2004)
1610    
1611     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1612     security bump. Thank tocharian for rolling a new patchset
1613 scox 1.31
1614 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1615    
1616     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1617     +hardened-sources-2.4.27-r3.ebuild:
1618     Applies the new 2.4-27.2 patchball which updates
1619     GRSecurity to the 2.0.1 version.
1620    
1621 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1622    
1623     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1624     +hardened-sources-2.4.27-r2.ebuild:
1625     Version bump.
1626     This version uses the new 2.4-27.1 patchball which updates
1627     both the SELinux PaX hooks patch and the SELinux headers.
1628    
1629 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1630    
1631     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1632     +hardened-sources-2.4.27-r1.ebuild,
1633     -hardened-sources-2.4.27.ebuild,
1634     +files/2.4.27-cmdline-race.patch:
1635     Version bump, fix for cmdline race. See bug #59905.
1636    
1637     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1638    
1639     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1640     +hardened-sources-2.4.26-r6.ebuild,
1641     -hardened-sources-2.4.26-r5.ebuild,
1642     -hardened-sources-2.4.26-r4.ebuild,
1643     +files/2.4.26-cmdline-race.patch:
1644     Version bump, fix for cmdline race. See bug #59905.
1645    
1646 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1647    
1648     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1649     +hardened-sources-2.4.27.ebuild,
1650     +files/2.4.27-CAN-2004-0394.patch:
1651     Ported the patchball to the 2.4.27 kernel version.
1652    
1653 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1654    
1655     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1656     +hardened-sources-2.4.26-r5.ebuild:
1657 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1658 scox 1.34 It adds the following features:
1659     - Squashfs
1660     - Ebtables
1661     - Netdev random (core+drivers)
1662     - Watchdog Timer (WDT) fix.
1663    
1664 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1665    
1666     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1667     +hardened-sources-2.4.26-r4.ebuild,
1668     +files/2.4.26-CAN-2004-0415.patch,
1669     -hardened-sources-2.4.26-3:
1670     Version bump, fix for CAN 0415, see bug #59378.
1671    
1672 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1673    
1674     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1675     +hardened-sources-2.4.26-r3.ebuild,
1676     +files/2.4.26-CAN-2004-0497.patch,
1677     -hardened-sources-2.4.26-r2.ebuild:
1678     Version bump, fixed CAN 0497, see bug #56171.
1679    
1680 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1681    
1682     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1683 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1684 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1685     +files/2.4.26-CAN-2004-0535.patch,
1686     -hardened-sources-2.4.26-r1.ebuild:
1687     Fixes for both CAN 0495 and 0535, see bug #54976
1688 pvdabeel 1.27
1689 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1690     hardened-sources-2.4.26-r1.ebuild:
1691     QA - fix use invocation
1692 scox 1.28
1693     *hardened-sources-2.4.26-r1 (22 June 2004)
1694    
1695     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1696     +hardened-sources-2.4.26-r1.ebuild,
1697     +files/2.4.26-CAN-2004-0394.patch,
1698     +files/2.4.26-signal-race.patch,
1699     -hardened-sources-2.4.26.ebuild,
1700     -hardened-sources-2.4.24-r3.ebuild:
1701     Version bump for the CAN-2004-0394 issue and bug #53804
1702     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1703    
1704    
1705 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1706     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1707     Masked hardened-sources-2.4.26.ebuild broken for ppc
1708    
1709     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1710     hardened-sources-2.4.24-r3.ebuild:
1711     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1712 plasmaroo 1.25
1713 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1714    
1715     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1716     +hardened-sources-2.4.26.ebuild:
1717     Updated hardened-sources for the 2.4.26 kernel
1718     Removed broken components, updated almost everything.
1719    
1720 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1721    
1722     17 Apr 2004; <plasmaroo@gentoo.org>
1723     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1724     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1725     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1726     +hardened-sources-2.4.24-r3.ebuild:
1727     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1728     vulnerabilities. Old revisions removed.
1729 plasmaroo 1.24
1730     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1731    
1732     15 Apr 2004; <plasmaroo@gentoo.org>
1733     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1734     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1735     Version bump for the CAN-2004-0109 issue; bug #47881.
1736 aliz 1.23
1737     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1738     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1739     Add eutils to inherit.
1740 plasmaroo 1.22
1741     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1742    
1743     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1744     files/hardened-sources-2.4.24.munmap.patch:
1745     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1746 scox 1.19
1747 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1748 scox 1.26
1749 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1750     hardened-sources-2.4.24.ebuild:
1751     Version bump, updated most of the components.
1752     This release includes the following:
1753    
1754     - Hardened security
1755     - Netfilter patch-o-matic 20031219
1756     - FreeSWAN 2.04 & x509 1.4.8
1757     - EVMS 2.2.2
1758     - XFS 1.3.1
1759     - cryptoloop jari
1760     - grsecurity 2.0-rc4
1761     - SELinux
1762     - PaX 200402060000
1763     - PaX Obscurity 200308302223
1764     - Others...
1765    
1766     Neither -ck nor systrace are included anymore.
1767    
1768 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1769    
1770     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1771     hardened-sources-2.4.22-r2.ebuild:
1772 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1773 scox 1.19
1774     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1775 iggy 1.17
1776     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1777 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1778 iggy 1.16
1779     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1780 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1781     Version bump for the 'do_brk' vulnerability.
1782 iggy 1.15
1783     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1784     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1785     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1786     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1787 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1788 frogger 1.14
1789     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1790     hardened-sources-2.4.22.ebuild:
1791 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1792     components. These are no longer handled in the kernel
1793     so this code was not necessary.
1794 frogger 1.13
1795     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1796     New 2.4.22 based hardened-sources thanks to
1797     Phil West <p.west@computer.org>.
1798    
1799     These sources include:
1800 plasmaroo 1.18 - New SELinux API
1801     - Updated CK-base
1802     - Updated GRSec
1803     - Systrace
1804     - SuperFreeS/WAN 1.99.8
1805     - Propolice kernel build support
1806     - EVMS
1807     - Other various security related patches
1808 frogger 1.11
1809 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1810    
1811     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1812     Updated hardened-sources based on the 2.4.21 Linux kernel.
1813     This includes updates to most major components such as:
1814 plasmaroo 1.18 - ck-base-0306300059
1815     - selinux-2.4-2003071106
1816     - grsecurity-2.0-rc1
1817     - Updated IPTables patch-o-matic
1818     - Updated SuperFreeS/WAN
1819    
1820 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1821     updated patch set ready for the 2.4.21 based kernel.
1822    
1823 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1824     Initial import of hardened-sources-2.4.20-r4. This revision
1825     includes only a few changes, but one of these is an important
1826     security fix. It is recommended all users of hardened-sources
1827     upgrade to this release.
1828 plasmaroo 1.18
1829 frogger 1.11 - ioperm bug fix
1830     - fixed compilation failure when building without GRSec
1831 plasmaroo 1.18
1832 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1833     due to time constraints, but is planned for inclusion in the near
1834     future.
1835 msterret 1.10
1836     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1837    
1838     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1839     hardened-sources-2.4.20-r3.ebuild:
1840 plasmaroo 1.18 Add Header...
1841 frogger 1.9
1842     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1843     hardened-sources-2.4.20-r3.ebuild:
1844     Removed warnings from ebuild. This kernel should be safe to
1845     use at this point.
1846 frogger 1.8
1847     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1848    
1849     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1850     hardened-sources-2.4.20-r3.ebuild:
1851     New revision. Includes the following changes over -r2:
1852 plasmaroo 1.18
1853 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1854     - Super FreeS/WAN 1.99.7rc2
1855     - PaX for the LSM/SELinux branch
1856     - GRSecurity 2.0-pre4 (role based access control)
1857     - Systrace 1.3
1858     - EXT3 fixes
1859     - EVMS 2.0.1
1860     - GCC 3.1+ compile optimizations
1861     - ProPolice kernel build support
1862     - Hashing table security fixes
1863 frogger 1.3
1864     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1865 frogger 1.7
1866     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1867     Initial import of hardened-sources-r2. This new
1868     ebuild includes many new performance and security
1869     related patches. As in -r1, it will patch in
1870     LSM/SELinux if "selinux" is in USE, otherwise it
1871     will patch in GRSecurity. The following patches
1872     are included in this revision:
1873 plasmaroo 1.18
1874 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1875     (pulled from the base CK patch)
1876     - ptrace exploit patch for the LSM kernel
1877     (the GRSec patch already fixes this)
1878     - LSM 2.4-2003040709
1879     - SELinux 2.4-2003040709
1880     - Systrace v1.2
1881     - IPTables patch-o-matic base patches - 20030107
1882     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1883     - Super FreeS/WAN 1.99.6.1
1884     - GRSecurity 1.9.9g
1885     - MPPE
1886     - EXT3 data journal fix
1887     - CIPE 1.5.4
1888 frogger 1.6
1889     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1890     hardened-sources-2.4.20-r1.ebuild, manifest:
1891 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1892 frogger 1.5
1893     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1894     hardened-sources-2.4.20-r1.ebuild:
1895     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1896     is patched in instead. Ptrace patches for selinux have also been added. In
1897     either case, systrace support will be patched in as well.
1898 frogger 1.3
1899     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1900     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1901 plasmaroo 1.18 Revision bump for new sources.
1902 frogger 1.4
1903 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1904 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1905 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1906 method 1.1
1907 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1908    
1909 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1910     hardened-sources-2.4.20.ebuild:
1911 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20