/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.332 - (hide annotations) (download)
Sat Aug 21 11:50:29 2010 UTC (3 years, 11 months ago) by blueness
Branch: MAIN
Changes since 1.331: +8 -1 lines
Based on vanilla 2.6.32.19 + genpatches + grsec-2.2.0-2.6.32.19-201008131840
(Portage version: 2.1.8.3/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.332 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.331 2010/08/14 19:18:30 blueness Exp $
4    
5     *hardened-sources-2.6.32-r14 (21 Aug 2010)
6    
7     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
8     +hardened-sources-2.6.32-r14.ebuild:
9     Based on vanilla 2.6.32.19 + genpatches +
10     grsec-2.2.0-2.6.32.19-201008131840
11 blueness 1.331
12     *hardened-sources-2.6.32-r13 (14 Aug 2010)
13    
14     14 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
15     +hardened-sources-2.6.32-r13.ebuild:
16     Based on vanilla 2.6.32.18 + genpatches +
17     grsecurity-2.2.0-2.6.32.18-201008112233
18 robbat2 1.330
19     03 Aug 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
20     kernel-2 deblob support for 2.6.35; bug #324505: deblob-check usage.
21 blueness 1.329
22     01 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
23     hardened-sources-2.6.32-r9.ebuild:
24     Stable ppc64. Bug #326885
25 blueness 1.328
26     *hardened-sources-2.6.32-r12 (24 Jul 2010)
27    
28     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
29     +hardened-sources-2.6.32-r12.ebuild:
30     Parallels fix incorporated into hardened-sources-2.6.34-r1
31 blueness 1.327
32     *hardened-sources-2.6.34-r1 (24 Jul 2010)
33    
34     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
35     -hardened-sources-2.6.34.ebuild, +hardened-sources-2.6.34-r1.ebuild:
36     Fixes bug #328275
37 chainsaw 1.326
38     21 Jul 2010; <chainsaw@gentoo.org> metadata.xml:
39     Address metadata concerns by Jeroen "rej" Roovers <rej@gentoo.org> raised
40     on gentoo-dev.
41 jer 1.325
42     21 Jul 2010; Jeroen Roovers <jer@gentoo.org> metadata.xml:
43     Correct mail address.
44 blueness 1.324
45     18 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
46     -hardened-sources-2.6.25-r13.ebuild, -hardened-sources-2.6.26-r9.ebuild,
47     -hardened-sources-2.6.28-r7.ebuild, -hardened-sources-2.6.29.ebuild,
48     -hardened-sources-2.6.32-r8.ebuild:
49     Removing outdated releases
50 fauli 1.323
51     17 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
52     hardened-sources-2.6.32-r9.ebuild:
53     stable x86, bug 326885
54 blueness 1.322
55     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
56     -hardened-sources-2.6.32-r7.ebuild:
57     Removed for security. Bug #325573
58 blueness 1.321
59     *hardened-sources-2.6.34 (13 Jul 2010)
60    
61     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
62     +hardened-sources-2.6.34.ebuild:
63     Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
64 blueness 1.320
65     *hardened-sources-2.6.32-r11 (13 Jul 2010)
66    
67     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
68     +hardened-sources-2.6.32-r11.ebuild:
69     New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
70 chainsaw 1.319
71     06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
72     Marked stable on AMD64 as requested by Anthony G. Basile
73     <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
74     on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
75 blueness 1.318
76     *hardened-sources-2.6.32-r10 (30 Jun 2010)
77    
78     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
79     +hardened-sources-2.6.32-r10.ebuild:
80     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
81 blueness 1.317
82     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
83     Added myself to the metadata.xml
84 chainsaw 1.316
85     *hardened-sources-2.6.32-r9 (11 Jun 2010)
86    
87     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
88     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
89 chainsaw 1.315
90     *hardened-sources-2.6.32-r8 (01 Jun 2010)
91    
92     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
93     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
94 chainsaw 1.314
95     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
96     Update SRC_URI to point to mirror network now that the distfile has
97     propagated.
98 chainsaw 1.313
99     *hardened-sources-2.6.32-r7 (26 May 2010)
100    
101     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
102     metadata.xml:
103     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
104     Summers.
105 robbat2 1.312
106     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
107     Update Manifest for deblob support in kernel-2 eclass.
108 nixnut 1.311
109     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
110     ppc stable
111 gengor 1.310
112     29 May 2009; Gordon Malm <gengor@gentoo.org>
113     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
114     Stable amd64/x86 and remove old.
115 gengor 1.309
116     *hardened-sources-2.6.29 (25 May 2009)
117    
118     25 May 2009; Gordon Malm <gengor@gentoo.org>
119     +hardened-sources-2.6.29.ebuild:
120     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
121     release candidates.
122 gengor 1.308
123     *hardened-sources-2.6.28-r9 (25 May 2009)
124    
125     25 May 2009; Gordon Malm <gengor@gentoo.org>
126     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
127     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
128 gengor 1.307
129     *hardened-sources-2.6.28-r8 (18 May 2009)
130    
131     18 May 2009; Gordon Malm <gengor@gentoo.org>
132     +hardened-sources-2.6.28-r8.ebuild:
133     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
134     and #262862 among others.
135 gengor 1.306
136     01 May 2009; Gordon Malm <gengor@gentoo.org>
137     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
138     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
139     Remove unnecessary mirror://gentoo from SRC_URI.
140 nixnut 1.305
141     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
142     ppc stable
143 gengor 1.304
144     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
145     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
146     Stable amd64/x86 and remove old.
147 gengor 1.303
148     *hardened-sources-2.6.28-r7 (27 Mar 2009)
149    
150     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
151     +hardened-sources-2.6.28-r7.ebuild:
152     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
153 gengor 1.302
154     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
155     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
156     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
157     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
158     Stable amd64/x86 and remove old versions.
159 nixnut 1.301
160     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
161     ppc stable
162 gengor 1.300
163     *hardened-sources-2.6.28-r6 (21 Mar 2009)
164    
165     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
166     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
167     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
168 gengor 1.299
169     *hardened-sources-2.6.28-r5 (20 Mar 2009)
170    
171     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
172     +hardened-sources-2.6.28-r5.ebuild:
173     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
174 gengor 1.298
175     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
176     hardened-sources-2.6.28-r4.ebuild:
177     Stable amd64/x86.
178 gengor 1.297
179     *hardened-sources-2.6.28-r4 (18 Mar 2009)
180    
181     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
182     +hardened-sources-2.6.28-r4.ebuild:
183     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
184     compilation with CPA_DEBUG and more.
185 gengor 1.296
186     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
187     hardened-sources-2.6.28-r3.ebuild:
188     Quick stable amd64/x86.
189 gengor 1.295
190     *hardened-sources-2.6.28-r3 (15 Mar 2009)
191    
192     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
193     +hardened-sources-2.6.28-r3.ebuild:
194     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
195 nixnut 1.294
196     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
197     ppc stable
198 gengor 1.293
199     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
200     hardened-sources-2.6.28-r2.ebuild:
201     Stable amd64/x86.
202 gengor 1.292
203     *hardened-sources-2.6.28-r2 (11 Mar 2009)
204    
205     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
206     +hardened-sources-2.6.28-r2.ebuild:
207     Version bump bringing in latest grsecurity patch.
208 gengor 1.291
209     *hardened-sources-2.6.28-r1 (09 Mar 2009)
210    
211     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
212     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
213     Version bump and remove old.
214 nixnut 1.290
215     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
216     ppc stable
217 gengor 1.289
218     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
219     hardened-sources-2.6.27-r8.ebuild:
220     Remove amd64 testing keyword, bug 256226.
221 gengor 1.288
222     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
223     hardened-sources-2.6.27-r8.ebuild:
224     Revert amd64 stable, bug #256226.
225 gengor 1.287
226     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
227     hardened-sources-2.6.27-r8.ebuild:
228     Stable on amd64/x86.
229 gengor 1.286
230     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
231     -hardened-sources-2.6.27-r6.ebuild:
232     Remove old 2.6.27 release.
233 gengor 1.285
234     *hardened-sources-2.6.27-r8 (24 Feb 2009)
235    
236     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
237     +hardened-sources-2.6.27-r8.ebuild:
238     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
239     and probably more.
240 nixnut 1.284
241     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
242     ppc stable
243 gengor 1.283
244     *hardened-sources-2.6.28 (25 Jan 2009)
245    
246     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
247     +hardened-sources-2.6.28.ebuild:
248     Initial 2.6.28 release.
249 gengor 1.282
250     *hardened-sources-2.6.27-r7 (25 Jan 2009)
251    
252     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
253     +hardened-sources-2.6.27-r7.ebuild:
254     Bump to Linux 2.6.27.13.
255 gengor 1.281
256     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
257     hardened-sources-2.6.26-r9.ebuild:
258     Stable amd64/x86.
259 gengor 1.280
260     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
261     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
262     -hardened-sources-2.6.27-r5.ebuild:
263     Remove problem versions.
264 gengor 1.279
265     *hardened-sources-2.6.27-r6 (24 Jan 2009)
266    
267     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
268     +hardened-sources-2.6.27-r6.ebuild:
269     Revert PaX test29 to test30 changes. Fixes bug 256226.
270 gengor 1.277
271     *hardened-sources-2.6.27-r5 (24 Jan 2009)
272    
273     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
274     +hardened-sources-2.6.27-r5.ebuild:
275 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
276 gengor 1.277 254843.
277 gengor 1.276
278     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
279     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
280     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
281     Remove problem versions.
282 nixnut 1.275
283     23 Jan 2009; nixnut <nixnut@gentoo.org>
284     hardened-sources-2.6.25-r13.ebuild:
285     ppc stable
286 gengor 1.274
287     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
288     hardened-sources-2.6.25-r13.ebuild:
289     Fasttrack stable amd64/x86.
290 gengor 1.273
291     *hardened-sources-2.6.26-r9 (21 Jan 2009)
292    
293     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
294     +hardened-sources-2.6.26-r9.ebuild:
295 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
296 gengor 1.272
297     *hardened-sources-2.6.25-r13 (20 Jan 2009)
298    
299     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
300     +hardened-sources-2.6.25-r13.ebuild:
301 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
302 nixnut 1.271
303     20 Jan 2009; nixnut <nixnut@gentoo.org>
304     hardened-sources-2.6.25-r12.ebuild:
305     ppc stable
306 gengor 1.270
307     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
308     hardened-sources-2.6.25-r12.ebuild:
309     Stable amd64/x86.
310 gengor 1.269
311     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
312     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
313     -hardened-sources-2.6.27-r2.ebuild:
314     Clean out old versions.
315 gengor 1.268
316     *hardened-sources-2.6.27-r4 (14 Jan 2009)
317     *hardened-sources-2.6.26-r8 (14 Jan 2009)
318     *hardened-sources-2.6.25-r12 (14 Jan 2009)
319    
320     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
321     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
322     +hardened-sources-2.6.27-r4.ebuild:
323     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
324     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
325     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
326     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
327 nixnut 1.267
328     15 Dec 2008; nixnut <nixnut@gentoo.org>
329     hardened-sources-2.6.25-r11.ebuild:
330     Stable on ppc
331 gengor 1.266
332     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
333     hardened-sources-2.6.25-r11.ebuild:
334     Stable amd64/x86.
335 gengor 1.265
336     *hardened-sources-2.6.27-r3 (07 Dec 2008)
337    
338     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
339     +hardened-sources-2.6.27-r3.ebuild:
340     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
341     Fixes bug #248754, #249729 and #246607.
342 gengor 1.264
343     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
344     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
345     Remove old versions.
346 gengor 1.262
347     *hardened-sources-2.6.26-r7 (03 Dec 2008)
348     *hardened-sources-2.6.25-r11 (03 Dec 2008)
349    
350 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
351     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
352 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
353     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
354     Both include many backports from 2.6.27.{6,7} -stable releases.
355 gengor 1.261
356     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
357     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
358     Remove versions broken on ARCHes != x86/amd64.
359 gengor 1.260
360     *hardened-sources-2.6.27-r2 (24 Nov 2008)
361    
362     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
363     +hardened-sources-2.6.27-r2.ebuild:
364     Bump to Linux 2.6.27.7 and latest grsecurity patch.
365 gengor 1.259
366     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
367     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
368     Remove old versions.
369 gengor 1.258
370     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
371     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
372     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
373 nixnut 1.257
374     16 Nov 2008; nixnut <nixnut@gentoo.org>
375     hardened-sources-2.6.25-r10.ebuild:
376     Stable on ppc
377 gengor 1.256
378     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
379     hardened-sources-2.6.25-r10.ebuild:
380     Stable amd64/x86.
381 gengor 1.255
382     *hardened-sources-2.6.26-r6 (12 Nov 2008)
383    
384     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
385     +hardened-sources-2.6.26-r6.ebuild:
386     Bump to Linux 2.6.26.8 and fix security bug #245650.
387 gengor 1.254
388     *hardened-sources-2.6.25-r10 (12 Nov 2008)
389    
390     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
391     +hardened-sources-2.6.25-r10.ebuild:
392     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
393 gengor 1.253
394     *hardened-sources-2.6.27-r1 (09 Nov 2008)
395    
396     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
397     +hardened-sources-2.6.27-r1.ebuild:
398     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
399 gengor 1.252
400     *hardened-sources-2.6.27 (04 Nov 2008)
401    
402     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
403     +hardened-sources-2.6.27.ebuild:
404     Initial 2.6.27 release.
405 gengor 1.251
406     *hardened-sources-2.6.26-r5 (03 Nov 2008)
407    
408     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
409     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
410     +hardened-sources-2.6.26-r5.ebuild:
411     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
412     Clean out some old versions.
413 nixnut 1.250
414     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
415     Stable on ppc
416 gengor 1.249
417     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
418     hardened-sources-2.6.25-r9.ebuild:
419     Stable on amd64/x86.
420 gengor 1.248
421     *hardened-sources-2.6.25-r9 (26 Oct 2008)
422    
423     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
424     +hardened-sources-2.6.25-r9.ebuild:
425     Update to Linux 2.6.25.19
426 nixnut 1.247
427     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
428     Stable on ppc
429 gengor 1.246
430     *hardened-sources-2.6.26-r4 (14 Oct 2008)
431    
432     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
433     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
434     Update to latest grsecurity patch, fixing building of non-modular kernels.
435 gengor 1.245
436     *hardened-sources-2.6.26-r3 (12 Oct 2008)
437    
438     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
439     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
440     +hardened-sources-2.6.26-r3.ebuild:
441     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
442     2.6.26-r1: Removed.
443     2.6.25-r8: Stable amd64/x86.
444 gengor 1.244
445     *hardened-sources-2.6.25-r8 (09 Oct 2008)
446    
447     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
448     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
449     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
450     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
451 nixnut 1.243
452     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
453     Stable on ppc
454 gengor 1.242
455     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
456     hardened-sources-2.6.25-r7.ebuild:
457     Stable amd64/x86.
458 gengor 1.241
459     *hardened-sources-2.6.26-r2 (13 Sep 2008)
460    
461     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
462     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
463     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
464     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
465 gengor 1.240
466     *hardened-sources-2.6.25-r7 (13 Sep 2008)
467    
468     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
469     +hardened-sources-2.6.25-r7.ebuild:
470     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
471 gengor 1.239
472     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
473     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
474     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
475     hardened-sources-2.6.26-r1.ebuild:
476     Update DESCRIPTION and HGPV_URI.
477 gengor 1.238
478     *hardened-sources-2.6.25-r6 (09 Sep 2008)
479    
480     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
481     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
482     2.6.25-r6: Update to Linux 2.6.25.17.
483     2.6.24-r3: Removed.
484 gengor 1.237
485     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
486     hardened-sources-2.6.25-r5.ebuild:
487     Stable on amd64/x86
488 gengor 1.236
489     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
490     Update my email address.
491 nixnut 1.235
492     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
493     stable on ppc
494 battousai 1.234
495     *hardened-sources-2.6.26-r1 (23 Aug 2008)
496     *hardened-sources-2.6.25-r5 (23 Aug 2008)
497    
498     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
499     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
500     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
501     +hardened-sources-2.6.26-r1.ebuild:
502     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
503     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
504     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
505     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
506     (gengor).
507 solar 1.233
508     *hardened-sources-2.6.26 (18 Aug 2008)
509     *hardened-sources-2.6.25-r4 (18 Aug 2008)
510    
511     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
512     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
513     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
514     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
515     2.6.25-r2: Removed.
516 tove 1.232
517     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
518     Remove phreak from metadata.xml (#96398)
519 solar 1.231
520     *hardened-sources-2.6.25-r3 (31 Jul 2008)
521    
522     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
523     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
524     +hardened-sources-2.6.25-r3.ebuild:
525     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
526     fixes, including security bug #231750.
527 nixnut 1.230
528     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
529     Stable on ppc
530 solar 1.229
531     *hardened-sources-2.6.25-r2 (05 Jul 2008)
532    
533     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
534     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
535     +hardened-sources-2.6.25-r2.ebuild:
536     2.6.23-r4: Stable x86/amd64
537     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
538     2.6.23-r{11,12}: Removed due to multiple vulns.
539     (gengor & kerframil)
540 nixnut 1.228
541     04 Jul 2008; nixnut <nixnut@gentoo.org>
542     hardened-sources-2.6.23-r13.ebuild:
543     Stable on ppc
544 solar 1.227
545     *hardened-sources-2.6.25-r1 (30 Jun 2008)
546    
547     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
548     +hardened-sources-2.6.25-r1.ebuild:
549     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
550     grsecurity release. 2.6.23-r13: x86/amd64 stable
551 solar 1.226
552     *hardened-sources-2.6.25 (17 Jun 2008)
553     *hardened-sources-2.6.24-r3 (17 Jun 2008)
554     *hardened-sources-2.6.23-r13 (17 Jun 2008)
555    
556     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
557     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
558     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
559     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
560     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
561     2.6.25: Initial 2.6.25 release.
562 solar 1.225
563     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
564     - fasttrack to stable x86/amd64
565 swegener 1.224
566     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
567     Fix broken digest for linux-2.6.24.tar.bz2.
568 solar 1.223
569     *hardened-sources-2.6.24-r2 (11 May 2008)
570     *hardened-sources-2.6.23-r12 (11 May 2008)
571    
572     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
573     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
574     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
575     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
576     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
577     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
578     security bugs 219901, 220691, 220975, 220979, 221123. New
579     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
580     should be removed as far as I'm concerned, everything else remove due to
581     vulnerable to numerous security bugs or brokeness.
582 nixnut 1.222
583     10 May 2008; nixnut <nixnut@gentoo.org>
584     hardened-sources-2.6.23-r11.ebuild:
585     Stable on ppc
586 solar 1.221
587     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
588     - -r11 stable on x86/amd64
589 solar 1.220
590     *hardened-sources-2.6.23-r11 (01 May 2008)
591    
592     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
593     - version bump to fix ulgy linux bugs
594 phreak 1.219
595     *hardened-sources-2.6.24-r1 (30 Apr 2008)
596    
597     30 Apr 2008; Christian Heim <phreak@gentoo.org>
598     +hardened-sources-2.6.24-r1.ebuild:
599     Revision bump (thanks to Kerin and Gordon, again), pulling
600     genpatches-2.6.24-7, solving #219089. Additionally contains further security
601     fixes plus some minor updates.
602 phreak 1.218
603     *hardened-sources-2.6.23-r10 (30 Apr 2008)
604    
605     30 Apr 2008; Christian Heim <phreak@gentoo.org>
606     +hardened-sources-2.6.23-r10.ebuild:
607     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
608     Additional contains "various other fixes".
609 phreak 1.217
610     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
611     Update the longdescription in metadata, thanks to Gordon Malm.
612 nixnut 1.216
613     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
614     Stable on ppc wrt bug #213255
615 solar 1.215
616     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
617     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
618     - stable on x86/amd64 per request. Removed obsolete ebuilds
619 phreak 1.214
620     *hardened-sources-2.6.24 (07 Apr 2008)
621    
622     07 Apr 2008; Christian Heim <phreak@gentoo.org>
623     +hardened-sources-2.6.24.ebuild:
624     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
625     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
626     for the many contributions and their continued effort in #216612) based on
627     2.6.24 and genpatches-2.6.24-5.
628    
629     The current ebuild/patchset contains these things:
630     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
631     * Introduces bespoke server and workstation oriented security levels
632     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
633 phreak 1.213
634     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
635     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
636     maintaining it).
637 phreak 1.212
638     24 Mar 2008; Christian Heim <phreak@gentoo.org>
639     hardened-sources-2.4.35-r2.ebuild:
640     Fixing SRC_URI for 2.4.35-r2.
641 phreak 1.211
642     *hardened-sources-2.6.23-r9 (22 Mar 2008)
643    
644     22 Mar 2008; Christian Heim <phreak@gentoo.org>
645     +hardened-sources-2.6.23-r9.ebuild:
646     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
647     * Change the default GIDs for some grsecurity options
648     * Revamp the Hardened [Gentoo] security level and make it the default level
649     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
650     * Fix a recursive lock -- call to capable() within ptrace_attach()
651     * Fix bug that allows audit and iscsi operations to be controlled via netlink
652 solar 1.210
653     *hardened-sources-2.6.23-r8 (27 Feb 2008)
654    
655     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
656     - version bump from Kerin Millar bug 210026
657 solar 1.209
658     17 Feb 2008; <solar@gentoo.org> metadata.xml,
659     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
660     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
661     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
662     - stable on x86 and remove old ebuilds
663 solar 1.207
664     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
665 solar 1.208 - stable on amd64 per request of amd64 lead
666 solar 1.206
667     *hardened-sources-2.6.23-r7 (11 Feb 2008)
668    
669     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
670     - version bump from kerin.millar
671     Changes:
672    
673     * Bump to genpatches-base-2.6.23-9
674     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
675     * Disables COMPAT_VDSO in x86/defconfig
676     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
677 phreak 1.205
678     25 Jan 2008; Christian Heim <phreak@gentoo.org>
679     -hardened-sources-2.6.22-r8.ebuild:
680     Cleaning up old versions.
681 phreak 1.204
682     *hardened-sources-2.6.23-r6 (25 Jan 2008)
683    
684     25 Jan 2008; Christian Heim <phreak@gentoo.org>
685     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
686     Revision bump, pulling in the latest genpatches.
687 phreak 1.203
688     *hardened-sources-2.6.23-r5 (24 Dec 2007)
689    
690     24 Dec 2007; Christian Heim <phreak@gentoo.org>
691     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
692     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
693     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
694     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
695 phreak 1.202
696     24 Dec 2007; Christian Heim <phreak@gentoo.org>
697     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
698     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
699     -hardened-sources-2.6.23-r3.ebuild:
700     Cleaning out some unused, old versions.
701 phreak 1.201
702     24 Dec 2007; Christian Heim <phreak@gentoo.org>
703     hardened-sources-2.6.23-r4.ebuild:
704     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
705     in the tree for long, but there isn't much of a difference between this and
706     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
707 phreak 1.200
708     *hardened-sources-2.6.23-r4 (23 Dec 2007)
709    
710     23 Dec 2007; Christian Heim <phreak@gentoo.org>
711     +hardened-sources-2.6.23-r4.ebuild:
712     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
713 phreak 1.199
714     *hardened-sources-2.6.23-r3 (04 Dec 2007)
715    
716     04 Dec 2007; Christian Heim <phreak@gentoo.org>
717     +hardened-sources-2.6.23-r3.ebuild:
718     Revision bump, pulling in 2.6.23.9.
719 phreak 1.198
720     *hardened-sources-2.6.23-r2 (25 Nov 2007)
721    
722     25 Nov 2007; Christian Heim <phreak@gentoo.org>
723     +hardened-sources-2.6.23-r2.ebuild:
724     Updated patchset, thanks to solar.
725 phreak 1.197
726     *hardened-sources-2.6.23-r1 (31 Oct 2007)
727    
728     31 Oct 2007; Christian Heim <phreak@gentoo.org>
729     +hardened-sources-2.6.23-r1.ebuild:
730     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
731 solar 1.196
732     29 Oct 2007; <solar@gentoo.org> metadata.xml:
733     - update metadata.xml
734 phreak 1.195
735     25 Oct 2007; Christian Heim <phreak@gentoo.org>
736     hardened-sources-2.6.22-r8.ebuild:
737     Marking 2.6.22-r8 stable on amd64 and x86.
738 phreak 1.194
739     21 Oct 2007; Christian Heim <phreak@gentoo.org>
740     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
741     -hardened-sources-2.6.21-r4.ebuild:
742     Removing old ebuilds.
743 phreak 1.193
744     *hardened-sources-2.4.35-r2 (21 Oct 2007)
745    
746     21 Oct 2007; Christian Heim <phreak@gentoo.org>
747     +hardened-sources-2.4.35-r2.ebuild:
748     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
749     patches.
750 phreak 1.192
751     *hardened-sources-2.6.22-r8 (21 Oct 2007)
752    
753     21 Oct 2007; Christian Heim <phreak@gentoo.org>
754     +hardened-sources-2.6.22-r8.ebuild:
755     Yet another new patch, hopefully fixing the remaining issues we had w/
756     2.6.22. Candidate for stabling.
757 phreak 1.191
758     *hardened-sources-2.6.23 (13 Oct 2007)
759    
760     13 Oct 2007; Christian Heim <phreak@gentoo.org>
761     +hardened-sources-2.6.23.ebuild:
762     Initial hardened-sources-2.6.23. If people still have problems w/ bug
763     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
764 phreak 1.190
765     11 Oct 2007; Christian Heim <phreak@gentoo.org>
766     hardened-sources-2.6.20-r10.ebuild:
767     Pulling in yet another new genpatches version, fixing the PWC bug for real.
768 phreak 1.189
769     04 Oct 2007; Christian Heim <phreak@gentoo.org>
770     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
771     Removing old versions.
772 phreak 1.188
773     *hardened-sources-2.6.22-r7 (01 Oct 2007)
774    
775     01 Oct 2007; Christian Heim <phreak@gentoo.org>
776     +hardened-sources-2.6.22-r7.ebuild:
777     Revision bump, pulling in a newer patch. Should fix #194276.
778 phreak 1.187
779     30 Sep 2007; Christian Heim <phreak@gentoo.org>
780     hardened-sources-2.6.20-r10.ebuild:
781     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
782     Mike Doty).
783 phreak 1.186
784     *hardened-sources-2.6.22-r6 (26 Sep 2007)
785    
786     26 Sep 2007; Christian Heim <phreak@gentoo.org>
787     +hardened-sources-2.6.22-r6.ebuild:
788     Revision bump, grabbing up till Linux 2.6.22.9.
789 phreak 1.185
790     24 Sep 2007; Christian Heim <phreak@gentoo.org>
791     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
792     Cleaning up further.
793 phreak 1.184
794     *hardened-sources-2.6.20-r10 (24 Sep 2007)
795    
796     24 Sep 2007; Christian Heim <phreak@gentoo.org>
797     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
798     +hardened-sources-2.6.20-r10.ebuild:
799     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
800     revisions.
801 phreak 1.183
802     *hardened-sources-2.6.22-r5 (22 Sep 2007)
803    
804     22 Sep 2007; Christian Heim <phreak@gentoo.org>
805     +hardened-sources-2.6.22-r5.ebuild:
806     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
807 phreak 1.182
808     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
809     Removing johnm from metadata.xml (see #186467 for reference).
810 phreak 1.181
811     *hardened-sources-2.6.22-r4 (17 Sep 2007)
812    
813     17 Sep 2007; Christian Heim <phreak@gentoo.org>
814     +hardened-sources-2.6.22-r4.ebuild:
815     Revision bump, hopefully fixing all those weird PAX failures.
816 phreak 1.180
817     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
818     Updating the metadata.xml.
819 phreak 1.179
820     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
821     Removing tocharian from metadata due to his retirement (see #71718 for
822     reference).
823 phreak 1.178
824     *hardened-sources-2.6.20-r9 (30 Aug 2007)
825    
826     30 Aug 2007; Christian Heim <phreak@gentoo.org>
827     +hardened-sources-2.6.20-r9.ebuild:
828     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
829 phreak 1.177
830     29 Aug 2007; Christian Heim <phreak@gentoo.org>
831     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
832     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
833     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
834     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
835     -hardened-sources-2.6.22-r2.ebuild:
836     Removing some redundant versions.
837 phreak 1.176
838     *hardened-sources-2.4.35-r1 (29 Aug 2007)
839    
840     29 Aug 2007; Christian Heim <phreak@gentoo.org>
841     +hardened-sources-2.4.35-r1.ebuild:
842     Revision bump, new grsecurity patch.
843 phreak 1.175
844     *hardened-sources-2.6.20-r8 (26 Aug 2007)
845    
846     26 Aug 2007; Christian Heim <phreak@gentoo.org>
847     +hardened-sources-2.6.20-r8.ebuild:
848     Revision bump for Linux 2.6.20.17.
849 phreak 1.174
850     *hardened-sources-2.6.22-r3 (22 Aug 2007)
851    
852     22 Aug 2007; Christian Heim <phreak@gentoo.org>
853     +hardened-sources-2.6.22-r3.ebuild:
854     Revision bump for Linux 2.6.22.4.
855 phreak 1.173
856     16 Aug 2007; Christian Heim <phreak@gentoo.org>
857     hardened-sources-2.6.22-r2.ebuild:
858     Updated patchset, to fix the alignment against 2.6.22.3.
859 phreak 1.172
860     *hardened-sources-2.6.22-r2 (16 Aug 2007)
861    
862     16 Aug 2007; Christian Heim <phreak@gentoo.org>
863     +hardened-sources-2.6.22-r2.ebuild:
864     Revision bump for Linux 2.6.22.3.
865 phreak 1.171
866     *hardened-sources-2.4.35 (16 Aug 2007)
867    
868     16 Aug 2007; Christian Heim <phreak@gentoo.org>
869     +hardened-sources-2.4.35.ebuild:
870     Version bump, initial version for Linux 2.4.35.
871 phreak 1.170
872     *hardened-sources-2.6.21-r4 (16 Aug 2007)
873    
874     16 Aug 2007; Christian Heim <phreak@gentoo.org>
875     +hardened-sources-2.6.21-r4.ebuild:
876     Revision bump for Linux 2.6.21.6.
877 phreak 1.169
878     *hardened-sources-2.6.20-r7 (16 Aug 2007)
879    
880     16 Aug 2007; Christian Heim <phreak@gentoo.org>
881     +hardened-sources-2.6.20-r7.ebuild:
882     Revision bump for Linux 2.6.20.16.
883 phreak 1.168
884     *hardened-sources-2.6.22-r1 (13 Aug 2007)
885    
886     13 Aug 2007; Christian Heim <phreak@gentoo.org>
887     +hardened-sources-2.6.22-r1.ebuild:
888     Yet another revision bump.
889 phreak 1.167
890     *hardened-sources-2.6.22 (10 Aug 2007)
891    
892     10 Aug 2007; Christian Heim <phreak@gentoo.org>
893     +hardened-sources-2.6.22.ebuild:
894     Initial release for 2.6.22. If you are using hardened-sources on a desktop
895     machine (P4 or newer), be aware you might need to disable
896     CONFIG_PAX_PAGEEXEC.
897 phreak 1.166
898     04 Aug 2007; Christian Heim <phreak@gentoo.org>
899     hardened-sources-2.6.20-r6.ebuild:
900     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
901     2.6.20.15.
902 phreak 1.165
903     10 Jul 2007; Christian Heim <phreak@gentoo.org>
904     hardened-sources-2.6.20-r5.ebuild:
905     Marking hardened-sources-2.6.20-r5 stable on ppc.
906 phreak 1.164
907     10 Jul 2007; Christian Heim <phreak@gentoo.org>
908     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
909     Cleanup.
910 phreak 1.163
911     *hardened-sources-2.6.20-r6 (08 Jul 2007)
912    
913     08 Jul 2007; Christian Heim <phreak@gentoo.org>
914     +hardened-sources-2.6.20-r6.ebuild:
915     Revision bump, grabbing yet another stable release.
916 phreak 1.162
917     17 Jun 2007; Christian Heim <phreak@gentoo.org>
918     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
919     -hardened-sources-2.6.21-r2.ebuild:
920     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
921     alpha stable KEYWORD by mistake.
922 phreak 1.161
923     17 Jun 2007; Christian Heim <phreak@gentoo.org>
924     hardened-sources-2.6.20-r5.ebuild:
925     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
926     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
927 phreak 1.160
928     *hardened-sources-2.6.21-r3 (12 Jun 2007)
929    
930     12 Jun 2007; Christian Heim <phreak@gentoo.org>
931     +hardened-sources-2.6.21-r3.ebuild:
932     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
933     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
934     love.
935 phreak 1.159
936     *hardened-sources-2.6.20-r5 (11 Jun 2007)
937    
938     11 Jun 2007; Christian Heim <phreak@gentoo.org>
939     +hardened-sources-2.6.20-r5.ebuild:
940     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
941     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
942     love.
943 pappy 1.158
944     *hardened-sources-2.4.34.5 (11 Jun 2007)
945    
946     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
947     +hardened-sources-2.4.34.5.ebuild:
948     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
949 phreak 1.157
950     30 May 2007; Christian Heim <phreak@gentoo.org>
951     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
952     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
953     stale ebuild(s).
954 phreak 1.156
955     30 May 2007; Christian Heim <phreak@gentoo.org>
956     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
957     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
958     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
959     Doing some cleanups, remove stale ebuilds.
960 phreak 1.155
961     26 May 2007; Christian Heim <phreak@gentoo.org>
962     hardened-sources-2.6.21-r2.ebuild:
963     Fixing the grsecurity patch, had one '};' too much.
964 phreak 1.154
965     *hardened-sources-2.6.21-r2 (26 May 2007)
966    
967     26 May 2007; Christian Heim <phreak@gentoo.org>
968     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
969     +hardened-sources-2.6.21-r2.ebuild:
970     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
971     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
972 phreak 1.153
973     *hardened-sources-2.6.20-r4 (26 May 2007)
974    
975     26 May 2007; Christian Heim <phreak@gentoo.org>
976     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
977     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
978 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
979 phreak 1.152
980     15 May 2007; Christian Heim <phreak@gentoo.org>
981     hardened-sources-2.6.20-r3.ebuild:
982     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
983     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
984     grsecurity patch fail in that exact same hunk.
985 phreak 1.151
986     *hardened-sources-2.6.20-r3 (15 May 2007)
987    
988     15 May 2007; Christian Heim <phreak@gentoo.org>
989     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
990     Revision bump, incorporating Linux 2.6.20.11.
991    
992     *hardened-sources-2.6.21-r1 (11 May 2007)
993    
994     11 May 2007; Christian Heim <phreak@gentoo.org>
995     +hardened-sources-2.6.21-r1.ebuild:
996     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
997     mentioned in #177234.
998 kevquinn 1.150
999     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
1000     files/digest-hardened-sources-2.6.21, Manifest:
1001     Fix Manifest/digest for linux-2.6.21.tar.bz2
1002 phreak 1.149
1003     06 May 2007; Christian Heim <phreak@gentoo.org>
1004     hardened-sources-2.6.21.ebuild:
1005     Bumping the hardened-patches version, needed for the fix for #177234.
1006 phreak 1.148
1007     *hardened-sources-2.6.21 (02 May 2007)
1008    
1009     02 May 2007; Christian Heim <phreak@gentoo.org>
1010     +hardened-sources-2.6.21.ebuild:
1011     Version bump, Linux 2.6.21-hardened.
1012 phreak 1.147
1013     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1014     hardened-sources-2.6.20-r2.ebuild:
1015     Adding ~ia64 on Ned's request.
1016 phreak 1.146
1017     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1018     hardened-sources-2.6.20-r2.ebuild:
1019     Fixing the included grsecurity patch, wasn't alligning due to the Index:
1020     header line(s).
1021 phreak 1.145
1022     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1023     hardened-sources-2.6.20-r2.ebuild:
1024     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
1025 armin76 1.144
1026     *hardened-sources-2.6.20-r2 (10 Apr 2007)
1027    
1028     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
1029     +hardened-sources-2.6.20-r2.ebuild:
1030     Version bump, on behalf of phreak
1031 phreak 1.143
1032     *hardened-sources-2.6.20-r1 (04 Apr 2007)
1033    
1034     04 Apr 2007; Christian Heim <phreak@gentoo.org>
1035     +hardened-sources-2.6.20-r1.ebuild:
1036     Revision bump, grabbing a newer grsecurity snapshot.
1037 phreak 1.142
1038     *hardened-sources-2.6.20 (25 Mar 2007)
1039    
1040     25 Mar 2007; Christian Heim <phreak@gentoo.org>
1041     +hardened-sources-2.6.20.ebuild:
1042     Finally a hardened-sources version for 2.6.20; many people have been waiting
1043     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
1044     testbox.
1045 chainsaw 1.141
1046     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
1047     hardened-sources-2.6.18-r6.ebuild:
1048     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
1049 phreak 1.140
1050     *hardened-sources-2.6.18-r6 (16 Mar 2007)
1051    
1052     16 Mar 2007; Christian Heim <phreak@gentoo.org>
1053     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1054     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1055     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1056     supposed to be.
1057 phreak 1.139
1058     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1059     Fixing the Manifest, the previous one was broken (as in still had the
1060     deleted ebuild in it).
1061 phreak 1.138
1062     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1063     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1064     +hardened-sources-2.6.18-r5.ebuild:
1065     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1066     Linux 2.6.18.8. Also cleaning up the older version.
1067    
1068     *hardened-sources-2.6.18-r5 (06 Mar 2007)
1069    
1070     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1071     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1072     +hardened-sources-2.6.18-r5.ebuild:
1073     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1074     Linux 2.6.18.8. Also cleaning up the older version.
1075 phreak 1.137
1076     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1077     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1078     -hardened-sources-2.6.19-r5.ebuild:
1079     Removing some of the old version, that didn't work.
1080 phreak 1.136
1081     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1082    
1083     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1084     +hardened-sources-2.6.19-r6.ebuild:
1085     Revision bump, including a new grsec version fixing #166235.
1086 pappy 1.134
1087     *hardened-sources-2.4.34 (24 Jan 2007)
1088    
1089     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1090 pappy 1.135 Manifest:
1091     updating Manifest with checksums of new tarball and ebuild
1092    
1093     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1094 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1095     I added new hardened sources 2.4 update, this is a critical path
1096     security bugfix - all users of h-s are strongly advised
1097     to update their existing hardened sources to this version.
1098     It contains a fix for a kernel vulnerability that is pertaining
1099     to the PaX changes to virtual memory management, possibly leading
1100     to a local kernel exploit ... see grsecurity.net forums and homepage
1101 phreak 1.133
1102     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1103     files/digest-hardened-sources-2.6.19-r5, Manifest:
1104     Fixing the patch-tarball digest.
1105 phreak 1.132
1106     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1107    
1108     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1109     +hardened-sources-2.6.19-r5.ebuild:
1110     Revision bump, closing the recently discovered PaX expand_stack()
1111     vulnerability.
1112 phreak 1.131
1113     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1114    
1115     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1116     +hardened-sources-2.6.19-r4.ebuild:
1117     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1118     dropping the randomized PID feature.
1119 opfer 1.130
1120     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1121     hardened-sources-2.4.33.4.ebuild:
1122     stable x86, bug #161171
1123 phreak 1.129
1124     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1125    
1126     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1127     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1128     Revision bump for bug #157186 and #158786.
1129 phreak 1.128
1130     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1131    
1132     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1133     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1134     Revision bump for bug #157186.
1135 phreak 1.127
1136     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1137    
1138     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1139     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1140     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1141 phreak 1.126
1142     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1143     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1144     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1145     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1146     hardened-sources-2.6.19-r1.ebuild:
1147     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1148     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1149 pappy 1.125
1150     *hardened-sources-2.4.33.4 (17 Dec 2006)
1151    
1152     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1153     +hardened-sources-2.4.33.4.ebuild:
1154     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1155     and quilting
1156 phreak 1.124
1157     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1158    
1159     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1160     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1161     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1162     for reporting).
1163 phreak 1.123
1164     *hardened-sources-2.6.19 (13 Dec 2006)
1165    
1166     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1167     +hardened-sources-2.6.19.ebuild:
1168     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1169     Brad for providing that prompt update.
1170 phreak 1.122
1171     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1172    
1173     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1174     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1175     +hardened-sources-2.6.18-r3.ebuild:
1176     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1177     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1178 phreak 1.121
1179     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1180     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1181 nixnut 1.120
1182     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1183     Stable on ppc wrt bug 157356
1184 opfer 1.119
1185     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1186     hardened-sources-2.6.18.ebuild:
1187     stable x86, bug #157356
1188 phreak 1.118
1189     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1190    
1191     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1192     +hardened-sources-2.6.18-r2.ebuild:
1193     Revision bump, including 2.6.18.5 (via genpatches) and
1194     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1195     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1196     redesign.
1197 phreak 1.117
1198     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1199     hardened-sources-2.6.18.ebuild:
1200     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1201     of Mike Doty).
1202 phreak 1.116
1203     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1204    
1205     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1206     +hardened-sources-2.6.18-r1.ebuild:
1207     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1208 phreak 1.115
1209     *hardened-sources-2.6.18 (11 Nov 2006)
1210    
1211     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1212     +hardened-sources-2.6.18.ebuild:
1213     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1214 solar 1.114
1215     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1216     - mark amd64 stable also. bug #151877
1217 solar 1.113
1218     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1219     - mark 2.6.17-r1 stable
1220 phreak 1.112
1221     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1222     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1223     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1224 phreak 1.111
1225     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1226    
1227     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1228     +hardened-sources-2.6.17-r1.ebuild:
1229     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1230     grsecurity patch.
1231 phreak 1.110
1232     *hardened-sources-2.6.17 (17 Aug 2006)
1233    
1234     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1235     +hardened-sources-2.6.17.ebuild:
1236     Bumping the hardened-sources-2.6 series to 2.6.17, using
1237     genpatches-2.6.17-6.base.
1238 solar 1.109
1239     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1240     - stable on x86 and amd64
1241 solar 1.108
1242     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1243    
1244     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1245     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1246     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1247     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1248     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1249     crusty ebuilds
1250 johnm 1.107
1251     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1252     hardened-sources-2.6.16-r10.ebuild:
1253     marking stable on x86 and amd64
1254 solar 1.106
1255     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1256     - 2.4.32-r6 stable on x86. RSBAC state unknown
1257 kang 1.105
1258     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1259    
1260     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1261     +hardened-sources-2.4.32-r7.ebuild:
1262     Bump PaX for RSBAC to test-17
1263 johnm 1.104
1264     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1265    
1266     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1267     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1268     hardened-sources-2.6.16 bump to latest -base.
1269 solar 1.103
1270     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1271    
1272     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1273     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1274     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1275     sysctl controlable resource logging
1276 johnm 1.102
1277     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1278    
1279     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1280     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1281     push new 2.6.16 release in preparation for stable
1282 solar 1.101
1283     22 May 2006; <solar@gentoo.org> :
1284     - redigest bug 134002
1285 kang 1.100
1286     *hardened-sources-2.4.32-r5 (16 May 2006)
1287    
1288     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1289     +hardened-sources-2.4.32-r5.ebuild:
1290     Fixes rsbac common patching (new patch in new -r5 patchset)
1291 solar 1.99
1292     *hardened-sources-2.4.32-r4 (13 May 2006)
1293    
1294     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1295     +hardened-sources-2.4.32-r4.ebuild:
1296     - security bumps
1297 johnm 1.98
1298     *hardened-sources-2.6.16-r6 (03 May 2006)
1299    
1300     03 May 2006; John Mylchreest <johnm@gentoo.org>
1301     +hardened-sources-2.6.16-r6.ebuild:
1302     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1303 johnm 1.97
1304     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1305     hardened-sources-2.6.14-r8.ebuild:
1306     fix x86_64 build problem, this will delay the digest issue again for a short
1307     while but it will sort itself out
1308 johnm 1.96
1309     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1310     hardened-sources-2.6.14-r8.ebuild:
1311     bump hardened patchset
1312 antarus 1.94
1313     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1314     files/digest-hardened-sources-2.4.32-r2,
1315     files/digest-hardened-sources-2.4.32-r3,
1316     files/digest-hardened-sources-2.6.14-r8, Manifest:
1317     Fixing duff SHA256 digests: Bug # 131293
1318 johnm 1.93
1319 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1320    
1321     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1322     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1323     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1324     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1325     cleanup of old uneccessary sources
1326    
1327 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1328     fix digest
1329 johnm 1.92
1330     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1331    
1332     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1333     +hardened-sources-2.6.14-r8.ebuild:
1334     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1335 johnm 1.91
1336     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1337     Turning on gpg-signing again, and recomitting
1338 johnm 1.90
1339     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1340    
1341     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1342     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1343     +hardened-sources-2.6.16-r4.ebuild:
1344     Fix numerous security vulns
1345 solar 1.89
1346     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1347    
1348     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1349     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1350     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1351     - security bump for bug #112791. Removed old ebuilds
1352 johnm 1.88
1353     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1354    
1355     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1356     +hardened-sources-2.6.16-r3.ebuild:
1357     Removing silly localversion which I missed
1358 johnm 1.87
1359     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1360    
1361     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1362     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1363     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1364 johnm 1.86
1365     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1366    
1367     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1368     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1369     +hardened-sources-2.6.16-r2.ebuild:
1370     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1371     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1372 johnm 1.85
1373     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1374    
1375     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1376     +hardened-sources-2.6.16-r1.ebuild:
1377     Bumping to include ppc build fix and 2.6.16.3
1378 tsunam 1.84
1379     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1380     hardened-sources-2.6.14-r6.ebuild:
1381     Stable on x86; bug #127718
1382 johnm 1.83
1383     *hardened-sources-2.6.16 (31 Mar 2006)
1384    
1385     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1386     +hardened-sources-2.6.16.ebuild:
1387     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1388     2.6.16.1
1389 cryos 1.82
1390     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1391     hardened-sources-2.6.14-r6.ebuild:
1392     Stable on amd64, bug 127718.
1393 nixnut 1.81
1394     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1395     Stable on ppc. Bug #127718
1396 johnm 1.80
1397     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1398     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1399     -hardened-sources-2.6.14-r4.ebuild:
1400     Cleanup.
1401 johnm 1.79
1402     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1403    
1404     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1405     +hardened-sources-2.6.14-r6.ebuild:
1406     Fixes grsec policy recreation bug and adds a
1407     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1408 solar 1.78
1409     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1410     - stable on x86
1411 hansmi 1.77
1412     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1413     hardened-sources-2.6.14-r5.ebuild:
1414     Stable on ppc.
1415 johnm 1.76
1416     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1417    
1418     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1419     +hardened-sources-2.6.14-r5.ebuild:
1420     fixing every known exploit
1421 solar 1.75
1422     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1423    
1424     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1425     +hardened-sources-2.4.32-r2.ebuild:
1426     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1427 solar 1.74
1428     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1429    
1430     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1431     - version bump for new genpatches which fix up a few sec holes
1432 solar 1.73
1433     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1434    
1435     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1436     - revision bump to add misc vital linux kernel security patches.
1437 johnm 1.72
1438     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1439    
1440     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1441     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1442     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1443 johnm 1.71
1444     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1445     hardened-sources-2.6.14-r2.ebuild:
1446     making x86 & amd64 stable following testing.
1447 johnm 1.70
1448     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1449    
1450     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1451     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1452     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1453     network hooks.
1454 johnm 1.69
1455     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1456     hardened-sources-2.6.14-r1.ebuild:
1457     bumping to stable early for sec fix on x86 & amd64
1458 johnm 1.68
1459     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1460    
1461     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1462     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1463     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1464 solar 1.67
1465     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1466     - stable on x86 security bug #114227 CAN-2005-3257
1467 kang 1.66
1468     *hardened-sources-2.4.32 (19 Nov 2005)
1469    
1470     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1471     +hardened-sources-2.4.32.ebuild:
1472     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1473     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1474     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1475     rsbac >> /etc/portage/package.use)
1476 johnm 1.65
1477     *hardened-sources-2.6.14 (14 Nov 2005)
1478    
1479     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1480     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1481     Bumping 2.6 series to 2.6.14.2
1482 johnm 1.64
1483     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1484    
1485     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1486     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1487     +hardened-sources-2.6.13-r2.ebuild:
1488     Fixes minor build error in ppc.
1489 johnm 1.63
1490     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1491    
1492     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1493     +hardened-sources-2.6.13-r1.ebuild:
1494     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1495     2.6.13.4, fixes some major amd64 stability problems.
1496 johnm 1.62
1497     *hardened-sources-2.6.13 (16 Sep 2005)
1498    
1499     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1500     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1501     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1502     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1503     users should test this thoroughly.
1504 solar 1.61
1505     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1506     - stable on x86
1507 johnm 1.60
1508     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1509    
1510     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1511     +hardened-sources-2.6.11-r15.ebuild:
1512     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1513     grsec redefining curr_ip struct.
1514 solar 1.59
1515     *hardened-sources-2.4.31 (20 Jun 2005)
1516    
1517     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1518     initial import of 2.4.31 tree
1519 johnm 1.58
1520     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1521    
1522     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1523     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1524     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1525     naming scheme to abide by genpatches
1526 johnm 1.57
1527     *hardened-sources-2.6.11-r13 (18 May 2005)
1528    
1529     18 May 2005; John Mylchreest <johnm@gentoo.org>
1530     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1531     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1532     target. sorry about that. Fixes bug #93022
1533 johnm 1.56
1534     *hardened-sources-2.6.11-r12 (17 May 2005)
1535    
1536     17 May 2005; John Mylchreest <johnm@gentoo.org>
1537     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1538     +hardened-sources-2.6.11-r12.ebuild:
1539     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1540     merges in genpatches-base
1541 johnm 1.55
1542     *hardened-sources-2.6.11-r12 (17 May 2005)
1543    
1544     17 May 2005; John Mylchreest <johnm@gentoo.org>
1545     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1546     +hardened-sources-2.6.11-r12.ebuild:
1547     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1548     merges in genpatches-base
1549 solar 1.54
1550     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1551     -files/2.4.27-cmdline-race.patch,
1552     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1553     -files/2.4.28-grsec-binfmt_a.out.patch,
1554     -files/2.4.28-grsec-cmdline-race.patch,
1555     -files/2.4.28-selinux-binfmt_a.out.patch,
1556     -files/2.4.28-selinux-cmdline-race.patch,
1557     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1558     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1559     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1560     cleanup..
1561 solar 1.53
1562     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1563    
1564     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1565     - disable aout by default
1566 solar 1.52
1567     *hardened-sources-2.4.30 (18 Apr 2005)
1568    
1569     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1570     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1571     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1572     use
1573 tocharian 1.50
1574 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1575    
1576     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1577     +hardened-sources-2.4.29.ebuild:
1578     New hardened-patches-2.4-29.0 patchball.
1579     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1580    
1581     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1582    
1583     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1584     +hardened-sources-2.4.28-r5.ebuild:
1585     Added a fix for a PaX vulnerability.
1586    
1587     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1588 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1589     Stable on x86
1590 solar 1.49
1591     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1592     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1593     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1594     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1595     - fixed/added RDEPEND= in all kernel-2 ebuilds
1596 tocharian 1.48
1597     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1598    
1599     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1600     +hardened-sources-2.4.28-r4.ebuild:
1601     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1602     backport of neighbour hash updates.
1603 tocharian 1.47
1604     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1605     hardened-sources-2.4.28-r3.ebuild:
1606     Stable on x86
1607 tseng 1.46
1608     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1609    
1610     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1611     +hardened-sources-2.6.10-r3.ebuild:
1612     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1613     in 2005.0
1614 tocharian 1.45
1615     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1616     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1617     hardened-sources-2.4.28-r2.ebuild:
1618     Mark stable on x86
1619 tocharian 1.44
1620     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1621    
1622     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1623     +hardened-sources-2.4.28-r3.ebuild:
1624     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1625 tocharian 1.43
1626     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1627     hardened-sources-2.4.28.ebuild:
1628     Mark stable on x86.
1629 tocharian 1.42
1630     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1631    
1632     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1633     +hardened-sources-2.4.28-r2.ebuild:
1634     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1635     Mazinger for grsecurity patches as well.
1636 plasmaroo 1.41
1637     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1638    
1639     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1640     Security bump. Thank tocharian for rolling a new patchset...
1641 solar 1.40
1642     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1643     +files/2.4.28-grsec-cmdline-race.patch,
1644     +files/2.4.28-selinux-binfmt_a.out.patch,
1645     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1646     - Round up remaining security patches that appear to be missing in 2.4.28. -
1647     PaX standalone updated to current. hgpv=28.1
1648 solar 1.39
1649     *hardened-sources-2.4.28 (28 Nov 2004)
1650    
1651     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1652     security bump. Thank tocharian for rolling a new patchset
1653 scox 1.31
1654 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1655    
1656     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1657     +hardened-sources-2.4.27-r3.ebuild:
1658     Applies the new 2.4-27.2 patchball which updates
1659     GRSecurity to the 2.0.1 version.
1660    
1661 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1662    
1663     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1664     +hardened-sources-2.4.27-r2.ebuild:
1665     Version bump.
1666     This version uses the new 2.4-27.1 patchball which updates
1667     both the SELinux PaX hooks patch and the SELinux headers.
1668    
1669 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1670    
1671     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1672     +hardened-sources-2.4.27-r1.ebuild,
1673     -hardened-sources-2.4.27.ebuild,
1674     +files/2.4.27-cmdline-race.patch:
1675     Version bump, fix for cmdline race. See bug #59905.
1676    
1677     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1678    
1679     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1680     +hardened-sources-2.4.26-r6.ebuild,
1681     -hardened-sources-2.4.26-r5.ebuild,
1682     -hardened-sources-2.4.26-r4.ebuild,
1683     +files/2.4.26-cmdline-race.patch:
1684     Version bump, fix for cmdline race. See bug #59905.
1685    
1686 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1687    
1688     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1689     +hardened-sources-2.4.27.ebuild,
1690     +files/2.4.27-CAN-2004-0394.patch:
1691     Ported the patchball to the 2.4.27 kernel version.
1692    
1693 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1694    
1695     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1696     +hardened-sources-2.4.26-r5.ebuild:
1697 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1698 scox 1.34 It adds the following features:
1699     - Squashfs
1700     - Ebtables
1701     - Netdev random (core+drivers)
1702     - Watchdog Timer (WDT) fix.
1703    
1704 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1705    
1706     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1707     +hardened-sources-2.4.26-r4.ebuild,
1708     +files/2.4.26-CAN-2004-0415.patch,
1709     -hardened-sources-2.4.26-3:
1710     Version bump, fix for CAN 0415, see bug #59378.
1711    
1712 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1713    
1714     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1715     +hardened-sources-2.4.26-r3.ebuild,
1716     +files/2.4.26-CAN-2004-0497.patch,
1717     -hardened-sources-2.4.26-r2.ebuild:
1718     Version bump, fixed CAN 0497, see bug #56171.
1719    
1720 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1721    
1722     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1723 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1724 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1725     +files/2.4.26-CAN-2004-0535.patch,
1726     -hardened-sources-2.4.26-r1.ebuild:
1727     Fixes for both CAN 0495 and 0535, see bug #54976
1728 pvdabeel 1.27
1729 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1730     hardened-sources-2.4.26-r1.ebuild:
1731     QA - fix use invocation
1732 scox 1.28
1733     *hardened-sources-2.4.26-r1 (22 June 2004)
1734    
1735     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1736     +hardened-sources-2.4.26-r1.ebuild,
1737     +files/2.4.26-CAN-2004-0394.patch,
1738     +files/2.4.26-signal-race.patch,
1739     -hardened-sources-2.4.26.ebuild,
1740     -hardened-sources-2.4.24-r3.ebuild:
1741     Version bump for the CAN-2004-0394 issue and bug #53804
1742     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1743    
1744    
1745 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1746     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1747     Masked hardened-sources-2.4.26.ebuild broken for ppc
1748    
1749     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1750     hardened-sources-2.4.24-r3.ebuild:
1751     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1752 plasmaroo 1.25
1753 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1754    
1755     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1756     +hardened-sources-2.4.26.ebuild:
1757     Updated hardened-sources for the 2.4.26 kernel
1758     Removed broken components, updated almost everything.
1759    
1760 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1761    
1762     17 Apr 2004; <plasmaroo@gentoo.org>
1763     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1764     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1765     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1766     +hardened-sources-2.4.24-r3.ebuild:
1767     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1768     vulnerabilities. Old revisions removed.
1769 plasmaroo 1.24
1770     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1771    
1772     15 Apr 2004; <plasmaroo@gentoo.org>
1773     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1774     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1775     Version bump for the CAN-2004-0109 issue; bug #47881.
1776 aliz 1.23
1777     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1778     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1779     Add eutils to inherit.
1780 plasmaroo 1.22
1781     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1782    
1783     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1784     files/hardened-sources-2.4.24.munmap.patch:
1785     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1786 scox 1.19
1787 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1788 scox 1.26
1789 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1790     hardened-sources-2.4.24.ebuild:
1791     Version bump, updated most of the components.
1792     This release includes the following:
1793    
1794     - Hardened security
1795     - Netfilter patch-o-matic 20031219
1796     - FreeSWAN 2.04 & x509 1.4.8
1797     - EVMS 2.2.2
1798     - XFS 1.3.1
1799     - cryptoloop jari
1800     - grsecurity 2.0-rc4
1801     - SELinux
1802     - PaX 200402060000
1803     - PaX Obscurity 200308302223
1804     - Others...
1805    
1806     Neither -ck nor systrace are included anymore.
1807    
1808 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1809    
1810     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1811     hardened-sources-2.4.22-r2.ebuild:
1812 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1813 scox 1.19
1814     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1815 iggy 1.17
1816     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1817 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1818 iggy 1.16
1819     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1820 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1821     Version bump for the 'do_brk' vulnerability.
1822 iggy 1.15
1823     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1824     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1825     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1826     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1827 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1828 frogger 1.14
1829     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1830     hardened-sources-2.4.22.ebuild:
1831 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1832     components. These are no longer handled in the kernel
1833     so this code was not necessary.
1834 frogger 1.13
1835     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1836     New 2.4.22 based hardened-sources thanks to
1837     Phil West <p.west@computer.org>.
1838    
1839     These sources include:
1840 plasmaroo 1.18 - New SELinux API
1841     - Updated CK-base
1842     - Updated GRSec
1843     - Systrace
1844     - SuperFreeS/WAN 1.99.8
1845     - Propolice kernel build support
1846     - EVMS
1847     - Other various security related patches
1848 frogger 1.11
1849 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1850    
1851     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1852     Updated hardened-sources based on the 2.4.21 Linux kernel.
1853     This includes updates to most major components such as:
1854 plasmaroo 1.18 - ck-base-0306300059
1855     - selinux-2.4-2003071106
1856     - grsecurity-2.0-rc1
1857     - Updated IPTables patch-o-matic
1858     - Updated SuperFreeS/WAN
1859    
1860 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1861     updated patch set ready for the 2.4.21 based kernel.
1862    
1863 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1864     Initial import of hardened-sources-2.4.20-r4. This revision
1865     includes only a few changes, but one of these is an important
1866     security fix. It is recommended all users of hardened-sources
1867     upgrade to this release.
1868 plasmaroo 1.18
1869 frogger 1.11 - ioperm bug fix
1870     - fixed compilation failure when building without GRSec
1871 plasmaroo 1.18
1872 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1873     due to time constraints, but is planned for inclusion in the near
1874     future.
1875 msterret 1.10
1876     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1877    
1878     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1879     hardened-sources-2.4.20-r3.ebuild:
1880 plasmaroo 1.18 Add Header...
1881 frogger 1.9
1882     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1883     hardened-sources-2.4.20-r3.ebuild:
1884     Removed warnings from ebuild. This kernel should be safe to
1885     use at this point.
1886 frogger 1.8
1887     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1888    
1889     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1890     hardened-sources-2.4.20-r3.ebuild:
1891     New revision. Includes the following changes over -r2:
1892 plasmaroo 1.18
1893 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1894     - Super FreeS/WAN 1.99.7rc2
1895     - PaX for the LSM/SELinux branch
1896     - GRSecurity 2.0-pre4 (role based access control)
1897     - Systrace 1.3
1898     - EXT3 fixes
1899     - EVMS 2.0.1
1900     - GCC 3.1+ compile optimizations
1901     - ProPolice kernel build support
1902     - Hashing table security fixes
1903 frogger 1.3
1904     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1905 frogger 1.7
1906     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1907     Initial import of hardened-sources-r2. This new
1908     ebuild includes many new performance and security
1909     related patches. As in -r1, it will patch in
1910     LSM/SELinux if "selinux" is in USE, otherwise it
1911     will patch in GRSecurity. The following patches
1912     are included in this revision:
1913 plasmaroo 1.18
1914 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1915     (pulled from the base CK patch)
1916     - ptrace exploit patch for the LSM kernel
1917     (the GRSec patch already fixes this)
1918     - LSM 2.4-2003040709
1919     - SELinux 2.4-2003040709
1920     - Systrace v1.2
1921     - IPTables patch-o-matic base patches - 20030107
1922     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1923     - Super FreeS/WAN 1.99.6.1
1924     - GRSecurity 1.9.9g
1925     - MPPE
1926     - EXT3 data journal fix
1927     - CIPE 1.5.4
1928 frogger 1.6
1929     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1930     hardened-sources-2.4.20-r1.ebuild, manifest:
1931 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1932 frogger 1.5
1933     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1934     hardened-sources-2.4.20-r1.ebuild:
1935     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1936     is patched in instead. Ptrace patches for selinux have also been added. In
1937     either case, systrace support will be patched in as well.
1938 frogger 1.3
1939     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1940     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1941 plasmaroo 1.18 Revision bump for new sources.
1942 frogger 1.4
1943 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1944 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1945 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1946 method 1.1
1947 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
1948    
1949 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
1950     hardened-sources-2.4.20.ebuild:
1951 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20