/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.338 - (hide annotations) (download)
Fri Sep 17 20:21:28 2010 UTC (4 years ago) by blueness
Branch: MAIN
Changes since 1.337: +12 -1 lines
Bumps to address IA32 syscall exploit.
(Portage version: 2.1.8.3/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.338 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.337 2010/09/15 10:06:28 blueness Exp $
4    
5     *hardened-sources-2.6.34-r6 (17 Sep 2010)
6     *hardened-sources-2.6.32-r18 (17 Sep 2010)
7    
8     17 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
9     +hardened-sources-2.6.32-r18.ebuild, +hardened-sources-2.6.34-r6.ebuild:
10     hardened-sources-2.6.32-r18 based on 2.6.32.21 + genpatches +
11     grsec-2.2.0-2.6.32.21-201009162222
12     hardened-sources-2.6.34-r6 based on 2.6.34.7 + genpatches +
13     grsec-2.2.0-2.6.34.7-201009162222
14     Addresses IA32 syscall exploit.
15 blueness 1.337
16     *hardened-sources-2.6.34-r5 (15 Sep 2010)
17     *hardened-sources-2.6.32-r17 (15 Sep 2010)
18    
19     15 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
20     +hardened-sources-2.6.32-r17.ebuild, +hardened-sources-2.6.34-r5.ebuild:
21     hardened-sources-2.6.32-r17 based on 2.6.32.21 + genpatches +
22     grsec-2.2.0-2.6.32.21-201009130811
23     hardened-sources-2.6.34-r5 based on 2.6.34.6 + genpatches +
24     grsec-2.2.0-2.6.34.6-201009130754
25 blueness 1.336
26     *hardened-sources-2.6.34-r4 (07 Sep 2010)
27     *hardened-sources-2.6.32-r16 (07 Sep 2010)
28    
29     07 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
30     +hardened-sources-2.6.32-r16.ebuild, +hardened-sources-2.6.34-r4.ebuild:
31     hardened-sources-2.6.32-r16 based on 2.6.32.21 +
32     grsec-2.2.0-2.6.32.21-201009032133
33     hardened-sources-2.6.34-r4 based on 2.6.34.6 +
34     grsec-2.2.0-2.6.34.6-201009041352
35 blueness 1.335
36     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org> ChangeLog:
37     hardened-sources-2.6.32-r15 based on 2.6.32.21 +
38     grsec-2.2.0-2.6.32.21-201008292122
39     hardened-sources-2.6.34-r3 based on 2.6.34.6 +
40     grsec-2.2.0-2.6.34.6-201008292122
41 blueness 1.334
42     *hardened-sources-2.6.34-r3 (02 Sep 2010)
43     *hardened-sources-2.6.32-r15 (02 Sep 2010)
44    
45     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
46     -hardened-sources-2.6.32-r10.ebuild, -hardened-sources-2.6.32-r11.ebuild,
47     -hardened-sources-2.6.32-r12.ebuild, -hardened-sources-2.6.32-r13.ebuild,
48     +hardened-sources-2.6.32-r15.ebuild, -hardened-sources-2.6.34-r1.ebuild,
49     +hardened-sources-2.6.34-r3.ebuild:
50     Bumps and remove deprecated versions
51 blueness 1.333
52     *hardened-sources-2.6.34-r2 (21 Aug 2010)
53    
54     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
55     +hardened-sources-2.6.34-r2.ebuild:
56     Based on vanilla 2.6.34.4 + genpatches + grsec-2.2.0-2.6.34.4-201008131840
57 blueness 1.332
58     *hardened-sources-2.6.32-r14 (21 Aug 2010)
59    
60     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
61     +hardened-sources-2.6.32-r14.ebuild:
62     Based on vanilla 2.6.32.19 + genpatches +
63     grsec-2.2.0-2.6.32.19-201008131840
64 blueness 1.331
65     *hardened-sources-2.6.32-r13 (14 Aug 2010)
66    
67     14 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
68     +hardened-sources-2.6.32-r13.ebuild:
69     Based on vanilla 2.6.32.18 + genpatches +
70     grsecurity-2.2.0-2.6.32.18-201008112233
71 robbat2 1.330
72     03 Aug 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
73     kernel-2 deblob support for 2.6.35; bug #324505: deblob-check usage.
74 blueness 1.329
75     01 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
76     hardened-sources-2.6.32-r9.ebuild:
77     Stable ppc64. Bug #326885
78 blueness 1.328
79     *hardened-sources-2.6.32-r12 (24 Jul 2010)
80    
81     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
82     +hardened-sources-2.6.32-r12.ebuild:
83     Parallels fix incorporated into hardened-sources-2.6.34-r1
84 blueness 1.327
85     *hardened-sources-2.6.34-r1 (24 Jul 2010)
86    
87     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
88     -hardened-sources-2.6.34.ebuild, +hardened-sources-2.6.34-r1.ebuild:
89     Fixes bug #328275
90 chainsaw 1.326
91     21 Jul 2010; <chainsaw@gentoo.org> metadata.xml:
92     Address metadata concerns by Jeroen "rej" Roovers <rej@gentoo.org> raised
93     on gentoo-dev.
94 jer 1.325
95     21 Jul 2010; Jeroen Roovers <jer@gentoo.org> metadata.xml:
96     Correct mail address.
97 blueness 1.324
98     18 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
99     -hardened-sources-2.6.25-r13.ebuild, -hardened-sources-2.6.26-r9.ebuild,
100     -hardened-sources-2.6.28-r7.ebuild, -hardened-sources-2.6.29.ebuild,
101     -hardened-sources-2.6.32-r8.ebuild:
102     Removing outdated releases
103 fauli 1.323
104     17 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
105     hardened-sources-2.6.32-r9.ebuild:
106     stable x86, bug 326885
107 blueness 1.322
108     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
109     -hardened-sources-2.6.32-r7.ebuild:
110     Removed for security. Bug #325573
111 blueness 1.321
112     *hardened-sources-2.6.34 (13 Jul 2010)
113    
114     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
115     +hardened-sources-2.6.34.ebuild:
116     Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
117 blueness 1.320
118     *hardened-sources-2.6.32-r11 (13 Jul 2010)
119    
120     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
121     +hardened-sources-2.6.32-r11.ebuild:
122     New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
123 chainsaw 1.319
124     06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
125     Marked stable on AMD64 as requested by Anthony G. Basile
126     <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
127     on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
128 blueness 1.318
129     *hardened-sources-2.6.32-r10 (30 Jun 2010)
130    
131     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
132     +hardened-sources-2.6.32-r10.ebuild:
133     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
134 blueness 1.317
135     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
136     Added myself to the metadata.xml
137 chainsaw 1.316
138     *hardened-sources-2.6.32-r9 (11 Jun 2010)
139    
140     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
141     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
142 chainsaw 1.315
143     *hardened-sources-2.6.32-r8 (01 Jun 2010)
144    
145     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
146     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
147 chainsaw 1.314
148     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
149     Update SRC_URI to point to mirror network now that the distfile has
150     propagated.
151 chainsaw 1.313
152     *hardened-sources-2.6.32-r7 (26 May 2010)
153    
154     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
155     metadata.xml:
156     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
157     Summers.
158 robbat2 1.312
159     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
160     Update Manifest for deblob support in kernel-2 eclass.
161 nixnut 1.311
162     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
163     ppc stable
164 gengor 1.310
165     29 May 2009; Gordon Malm <gengor@gentoo.org>
166     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
167     Stable amd64/x86 and remove old.
168 gengor 1.309
169     *hardened-sources-2.6.29 (25 May 2009)
170    
171     25 May 2009; Gordon Malm <gengor@gentoo.org>
172     +hardened-sources-2.6.29.ebuild:
173     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
174     release candidates.
175 gengor 1.308
176     *hardened-sources-2.6.28-r9 (25 May 2009)
177    
178     25 May 2009; Gordon Malm <gengor@gentoo.org>
179     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
180     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
181 gengor 1.307
182     *hardened-sources-2.6.28-r8 (18 May 2009)
183    
184     18 May 2009; Gordon Malm <gengor@gentoo.org>
185     +hardened-sources-2.6.28-r8.ebuild:
186     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
187     and #262862 among others.
188 gengor 1.306
189     01 May 2009; Gordon Malm <gengor@gentoo.org>
190     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
191     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
192     Remove unnecessary mirror://gentoo from SRC_URI.
193 nixnut 1.305
194     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
195     ppc stable
196 gengor 1.304
197     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
198     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
199     Stable amd64/x86 and remove old.
200 gengor 1.303
201     *hardened-sources-2.6.28-r7 (27 Mar 2009)
202    
203     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
204     +hardened-sources-2.6.28-r7.ebuild:
205     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
206 gengor 1.302
207     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
208     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
209     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
210     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
211     Stable amd64/x86 and remove old versions.
212 nixnut 1.301
213     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
214     ppc stable
215 gengor 1.300
216     *hardened-sources-2.6.28-r6 (21 Mar 2009)
217    
218     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
219     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
220     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
221 gengor 1.299
222     *hardened-sources-2.6.28-r5 (20 Mar 2009)
223    
224     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
225     +hardened-sources-2.6.28-r5.ebuild:
226     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
227 gengor 1.298
228     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
229     hardened-sources-2.6.28-r4.ebuild:
230     Stable amd64/x86.
231 gengor 1.297
232     *hardened-sources-2.6.28-r4 (18 Mar 2009)
233    
234     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
235     +hardened-sources-2.6.28-r4.ebuild:
236     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
237     compilation with CPA_DEBUG and more.
238 gengor 1.296
239     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
240     hardened-sources-2.6.28-r3.ebuild:
241     Quick stable amd64/x86.
242 gengor 1.295
243     *hardened-sources-2.6.28-r3 (15 Mar 2009)
244    
245     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
246     +hardened-sources-2.6.28-r3.ebuild:
247     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
248 nixnut 1.294
249     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
250     ppc stable
251 gengor 1.293
252     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
253     hardened-sources-2.6.28-r2.ebuild:
254     Stable amd64/x86.
255 gengor 1.292
256     *hardened-sources-2.6.28-r2 (11 Mar 2009)
257    
258     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
259     +hardened-sources-2.6.28-r2.ebuild:
260     Version bump bringing in latest grsecurity patch.
261 gengor 1.291
262     *hardened-sources-2.6.28-r1 (09 Mar 2009)
263    
264     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
265     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
266     Version bump and remove old.
267 nixnut 1.290
268     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
269     ppc stable
270 gengor 1.289
271     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
272     hardened-sources-2.6.27-r8.ebuild:
273     Remove amd64 testing keyword, bug 256226.
274 gengor 1.288
275     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
276     hardened-sources-2.6.27-r8.ebuild:
277     Revert amd64 stable, bug #256226.
278 gengor 1.287
279     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
280     hardened-sources-2.6.27-r8.ebuild:
281     Stable on amd64/x86.
282 gengor 1.286
283     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
284     -hardened-sources-2.6.27-r6.ebuild:
285     Remove old 2.6.27 release.
286 gengor 1.285
287     *hardened-sources-2.6.27-r8 (24 Feb 2009)
288    
289     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
290     +hardened-sources-2.6.27-r8.ebuild:
291     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
292     and probably more.
293 nixnut 1.284
294     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
295     ppc stable
296 gengor 1.283
297     *hardened-sources-2.6.28 (25 Jan 2009)
298    
299     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
300     +hardened-sources-2.6.28.ebuild:
301     Initial 2.6.28 release.
302 gengor 1.282
303     *hardened-sources-2.6.27-r7 (25 Jan 2009)
304    
305     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
306     +hardened-sources-2.6.27-r7.ebuild:
307     Bump to Linux 2.6.27.13.
308 gengor 1.281
309     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
310     hardened-sources-2.6.26-r9.ebuild:
311     Stable amd64/x86.
312 gengor 1.280
313     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
314     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
315     -hardened-sources-2.6.27-r5.ebuild:
316     Remove problem versions.
317 gengor 1.279
318     *hardened-sources-2.6.27-r6 (24 Jan 2009)
319    
320     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
321     +hardened-sources-2.6.27-r6.ebuild:
322     Revert PaX test29 to test30 changes. Fixes bug 256226.
323 gengor 1.277
324     *hardened-sources-2.6.27-r5 (24 Jan 2009)
325    
326     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
327     +hardened-sources-2.6.27-r5.ebuild:
328 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
329 gengor 1.277 254843.
330 gengor 1.276
331     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
332     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
333     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
334     Remove problem versions.
335 nixnut 1.275
336     23 Jan 2009; nixnut <nixnut@gentoo.org>
337     hardened-sources-2.6.25-r13.ebuild:
338     ppc stable
339 gengor 1.274
340     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
341     hardened-sources-2.6.25-r13.ebuild:
342     Fasttrack stable amd64/x86.
343 gengor 1.273
344     *hardened-sources-2.6.26-r9 (21 Jan 2009)
345    
346     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
347     +hardened-sources-2.6.26-r9.ebuild:
348 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
349 gengor 1.272
350     *hardened-sources-2.6.25-r13 (20 Jan 2009)
351    
352     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
353     +hardened-sources-2.6.25-r13.ebuild:
354 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
355 nixnut 1.271
356     20 Jan 2009; nixnut <nixnut@gentoo.org>
357     hardened-sources-2.6.25-r12.ebuild:
358     ppc stable
359 gengor 1.270
360     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
361     hardened-sources-2.6.25-r12.ebuild:
362     Stable amd64/x86.
363 gengor 1.269
364     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
365     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
366     -hardened-sources-2.6.27-r2.ebuild:
367     Clean out old versions.
368 gengor 1.268
369     *hardened-sources-2.6.27-r4 (14 Jan 2009)
370     *hardened-sources-2.6.26-r8 (14 Jan 2009)
371     *hardened-sources-2.6.25-r12 (14 Jan 2009)
372    
373     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
374     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
375     +hardened-sources-2.6.27-r4.ebuild:
376     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
377     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
378     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
379     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
380 nixnut 1.267
381     15 Dec 2008; nixnut <nixnut@gentoo.org>
382     hardened-sources-2.6.25-r11.ebuild:
383     Stable on ppc
384 gengor 1.266
385     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
386     hardened-sources-2.6.25-r11.ebuild:
387     Stable amd64/x86.
388 gengor 1.265
389     *hardened-sources-2.6.27-r3 (07 Dec 2008)
390    
391     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
392     +hardened-sources-2.6.27-r3.ebuild:
393     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
394     Fixes bug #248754, #249729 and #246607.
395 gengor 1.264
396     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
397     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
398     Remove old versions.
399 gengor 1.262
400     *hardened-sources-2.6.26-r7 (03 Dec 2008)
401     *hardened-sources-2.6.25-r11 (03 Dec 2008)
402    
403 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
404     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
405 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
406     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
407     Both include many backports from 2.6.27.{6,7} -stable releases.
408 gengor 1.261
409     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
410     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
411     Remove versions broken on ARCHes != x86/amd64.
412 gengor 1.260
413     *hardened-sources-2.6.27-r2 (24 Nov 2008)
414    
415     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
416     +hardened-sources-2.6.27-r2.ebuild:
417     Bump to Linux 2.6.27.7 and latest grsecurity patch.
418 gengor 1.259
419     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
420     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
421     Remove old versions.
422 gengor 1.258
423     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
424     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
425     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
426 nixnut 1.257
427     16 Nov 2008; nixnut <nixnut@gentoo.org>
428     hardened-sources-2.6.25-r10.ebuild:
429     Stable on ppc
430 gengor 1.256
431     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
432     hardened-sources-2.6.25-r10.ebuild:
433     Stable amd64/x86.
434 gengor 1.255
435     *hardened-sources-2.6.26-r6 (12 Nov 2008)
436    
437     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
438     +hardened-sources-2.6.26-r6.ebuild:
439     Bump to Linux 2.6.26.8 and fix security bug #245650.
440 gengor 1.254
441     *hardened-sources-2.6.25-r10 (12 Nov 2008)
442    
443     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
444     +hardened-sources-2.6.25-r10.ebuild:
445     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
446 gengor 1.253
447     *hardened-sources-2.6.27-r1 (09 Nov 2008)
448    
449     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
450     +hardened-sources-2.6.27-r1.ebuild:
451     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
452 gengor 1.252
453     *hardened-sources-2.6.27 (04 Nov 2008)
454    
455     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
456     +hardened-sources-2.6.27.ebuild:
457     Initial 2.6.27 release.
458 gengor 1.251
459     *hardened-sources-2.6.26-r5 (03 Nov 2008)
460    
461     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
462     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
463     +hardened-sources-2.6.26-r5.ebuild:
464     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
465     Clean out some old versions.
466 nixnut 1.250
467     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
468     Stable on ppc
469 gengor 1.249
470     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
471     hardened-sources-2.6.25-r9.ebuild:
472     Stable on amd64/x86.
473 gengor 1.248
474     *hardened-sources-2.6.25-r9 (26 Oct 2008)
475    
476     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
477     +hardened-sources-2.6.25-r9.ebuild:
478     Update to Linux 2.6.25.19
479 nixnut 1.247
480     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
481     Stable on ppc
482 gengor 1.246
483     *hardened-sources-2.6.26-r4 (14 Oct 2008)
484    
485     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
486     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
487     Update to latest grsecurity patch, fixing building of non-modular kernels.
488 gengor 1.245
489     *hardened-sources-2.6.26-r3 (12 Oct 2008)
490    
491     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
492     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
493     +hardened-sources-2.6.26-r3.ebuild:
494     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
495     2.6.26-r1: Removed.
496     2.6.25-r8: Stable amd64/x86.
497 gengor 1.244
498     *hardened-sources-2.6.25-r8 (09 Oct 2008)
499    
500     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
501     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
502     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
503     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
504 nixnut 1.243
505     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
506     Stable on ppc
507 gengor 1.242
508     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
509     hardened-sources-2.6.25-r7.ebuild:
510     Stable amd64/x86.
511 gengor 1.241
512     *hardened-sources-2.6.26-r2 (13 Sep 2008)
513    
514     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
515     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
516     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
517     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
518 gengor 1.240
519     *hardened-sources-2.6.25-r7 (13 Sep 2008)
520    
521     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
522     +hardened-sources-2.6.25-r7.ebuild:
523     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
524 gengor 1.239
525     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
526     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
527     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
528     hardened-sources-2.6.26-r1.ebuild:
529     Update DESCRIPTION and HGPV_URI.
530 gengor 1.238
531     *hardened-sources-2.6.25-r6 (09 Sep 2008)
532    
533     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
534     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
535     2.6.25-r6: Update to Linux 2.6.25.17.
536     2.6.24-r3: Removed.
537 gengor 1.237
538     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
539     hardened-sources-2.6.25-r5.ebuild:
540     Stable on amd64/x86
541 gengor 1.236
542     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
543     Update my email address.
544 nixnut 1.235
545     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
546     stable on ppc
547 battousai 1.234
548     *hardened-sources-2.6.26-r1 (23 Aug 2008)
549     *hardened-sources-2.6.25-r5 (23 Aug 2008)
550    
551     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
552     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
553     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
554     +hardened-sources-2.6.26-r1.ebuild:
555     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
556     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
557     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
558     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
559     (gengor).
560 solar 1.233
561     *hardened-sources-2.6.26 (18 Aug 2008)
562     *hardened-sources-2.6.25-r4 (18 Aug 2008)
563    
564     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
565     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
566     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
567     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
568     2.6.25-r2: Removed.
569 tove 1.232
570     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
571     Remove phreak from metadata.xml (#96398)
572 solar 1.231
573     *hardened-sources-2.6.25-r3 (31 Jul 2008)
574    
575     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
576     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
577     +hardened-sources-2.6.25-r3.ebuild:
578     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
579     fixes, including security bug #231750.
580 nixnut 1.230
581     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
582     Stable on ppc
583 solar 1.229
584     *hardened-sources-2.6.25-r2 (05 Jul 2008)
585    
586     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
587     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
588     +hardened-sources-2.6.25-r2.ebuild:
589     2.6.23-r4: Stable x86/amd64
590     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
591     2.6.23-r{11,12}: Removed due to multiple vulns.
592     (gengor & kerframil)
593 nixnut 1.228
594     04 Jul 2008; nixnut <nixnut@gentoo.org>
595     hardened-sources-2.6.23-r13.ebuild:
596     Stable on ppc
597 solar 1.227
598     *hardened-sources-2.6.25-r1 (30 Jun 2008)
599    
600     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
601     +hardened-sources-2.6.25-r1.ebuild:
602     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
603     grsecurity release. 2.6.23-r13: x86/amd64 stable
604 solar 1.226
605     *hardened-sources-2.6.25 (17 Jun 2008)
606     *hardened-sources-2.6.24-r3 (17 Jun 2008)
607     *hardened-sources-2.6.23-r13 (17 Jun 2008)
608    
609     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
610     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
611     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
612     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
613     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
614     2.6.25: Initial 2.6.25 release.
615 solar 1.225
616     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
617     - fasttrack to stable x86/amd64
618 swegener 1.224
619     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
620     Fix broken digest for linux-2.6.24.tar.bz2.
621 solar 1.223
622     *hardened-sources-2.6.24-r2 (11 May 2008)
623     *hardened-sources-2.6.23-r12 (11 May 2008)
624    
625     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
626     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
627     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
628     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
629     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
630     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
631     security bugs 219901, 220691, 220975, 220979, 221123. New
632     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
633     should be removed as far as I'm concerned, everything else remove due to
634     vulnerable to numerous security bugs or brokeness.
635 nixnut 1.222
636     10 May 2008; nixnut <nixnut@gentoo.org>
637     hardened-sources-2.6.23-r11.ebuild:
638     Stable on ppc
639 solar 1.221
640     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
641     - -r11 stable on x86/amd64
642 solar 1.220
643     *hardened-sources-2.6.23-r11 (01 May 2008)
644    
645     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
646     - version bump to fix ulgy linux bugs
647 phreak 1.219
648     *hardened-sources-2.6.24-r1 (30 Apr 2008)
649    
650     30 Apr 2008; Christian Heim <phreak@gentoo.org>
651     +hardened-sources-2.6.24-r1.ebuild:
652     Revision bump (thanks to Kerin and Gordon, again), pulling
653     genpatches-2.6.24-7, solving #219089. Additionally contains further security
654     fixes plus some minor updates.
655 phreak 1.218
656     *hardened-sources-2.6.23-r10 (30 Apr 2008)
657    
658     30 Apr 2008; Christian Heim <phreak@gentoo.org>
659     +hardened-sources-2.6.23-r10.ebuild:
660     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
661     Additional contains "various other fixes".
662 phreak 1.217
663     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
664     Update the longdescription in metadata, thanks to Gordon Malm.
665 nixnut 1.216
666     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
667     Stable on ppc wrt bug #213255
668 solar 1.215
669     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
670     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
671     - stable on x86/amd64 per request. Removed obsolete ebuilds
672 phreak 1.214
673     *hardened-sources-2.6.24 (07 Apr 2008)
674    
675     07 Apr 2008; Christian Heim <phreak@gentoo.org>
676     +hardened-sources-2.6.24.ebuild:
677     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
678     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
679     for the many contributions and their continued effort in #216612) based on
680     2.6.24 and genpatches-2.6.24-5.
681    
682     The current ebuild/patchset contains these things:
683     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
684     * Introduces bespoke server and workstation oriented security levels
685     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
686 phreak 1.213
687     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
688     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
689     maintaining it).
690 phreak 1.212
691     24 Mar 2008; Christian Heim <phreak@gentoo.org>
692     hardened-sources-2.4.35-r2.ebuild:
693     Fixing SRC_URI for 2.4.35-r2.
694 phreak 1.211
695     *hardened-sources-2.6.23-r9 (22 Mar 2008)
696    
697     22 Mar 2008; Christian Heim <phreak@gentoo.org>
698     +hardened-sources-2.6.23-r9.ebuild:
699     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
700     * Change the default GIDs for some grsecurity options
701     * Revamp the Hardened [Gentoo] security level and make it the default level
702     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
703     * Fix a recursive lock -- call to capable() within ptrace_attach()
704     * Fix bug that allows audit and iscsi operations to be controlled via netlink
705 solar 1.210
706     *hardened-sources-2.6.23-r8 (27 Feb 2008)
707    
708     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
709     - version bump from Kerin Millar bug 210026
710 solar 1.209
711     17 Feb 2008; <solar@gentoo.org> metadata.xml,
712     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
713     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
714     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
715     - stable on x86 and remove old ebuilds
716 solar 1.207
717     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
718 solar 1.208 - stable on amd64 per request of amd64 lead
719 solar 1.206
720     *hardened-sources-2.6.23-r7 (11 Feb 2008)
721    
722     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
723     - version bump from kerin.millar
724     Changes:
725    
726     * Bump to genpatches-base-2.6.23-9
727     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
728     * Disables COMPAT_VDSO in x86/defconfig
729     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
730 phreak 1.205
731     25 Jan 2008; Christian Heim <phreak@gentoo.org>
732     -hardened-sources-2.6.22-r8.ebuild:
733     Cleaning up old versions.
734 phreak 1.204
735     *hardened-sources-2.6.23-r6 (25 Jan 2008)
736    
737     25 Jan 2008; Christian Heim <phreak@gentoo.org>
738     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
739     Revision bump, pulling in the latest genpatches.
740 phreak 1.203
741     *hardened-sources-2.6.23-r5 (24 Dec 2007)
742    
743     24 Dec 2007; Christian Heim <phreak@gentoo.org>
744     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
745     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
746     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
747     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
748 phreak 1.202
749     24 Dec 2007; Christian Heim <phreak@gentoo.org>
750     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
751     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
752     -hardened-sources-2.6.23-r3.ebuild:
753     Cleaning out some unused, old versions.
754 phreak 1.201
755     24 Dec 2007; Christian Heim <phreak@gentoo.org>
756     hardened-sources-2.6.23-r4.ebuild:
757     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
758     in the tree for long, but there isn't much of a difference between this and
759     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
760 phreak 1.200
761     *hardened-sources-2.6.23-r4 (23 Dec 2007)
762    
763     23 Dec 2007; Christian Heim <phreak@gentoo.org>
764     +hardened-sources-2.6.23-r4.ebuild:
765     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
766 phreak 1.199
767     *hardened-sources-2.6.23-r3 (04 Dec 2007)
768    
769     04 Dec 2007; Christian Heim <phreak@gentoo.org>
770     +hardened-sources-2.6.23-r3.ebuild:
771     Revision bump, pulling in 2.6.23.9.
772 phreak 1.198
773     *hardened-sources-2.6.23-r2 (25 Nov 2007)
774    
775     25 Nov 2007; Christian Heim <phreak@gentoo.org>
776     +hardened-sources-2.6.23-r2.ebuild:
777     Updated patchset, thanks to solar.
778 phreak 1.197
779     *hardened-sources-2.6.23-r1 (31 Oct 2007)
780    
781     31 Oct 2007; Christian Heim <phreak@gentoo.org>
782     +hardened-sources-2.6.23-r1.ebuild:
783     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
784 solar 1.196
785     29 Oct 2007; <solar@gentoo.org> metadata.xml:
786     - update metadata.xml
787 phreak 1.195
788     25 Oct 2007; Christian Heim <phreak@gentoo.org>
789     hardened-sources-2.6.22-r8.ebuild:
790     Marking 2.6.22-r8 stable on amd64 and x86.
791 phreak 1.194
792     21 Oct 2007; Christian Heim <phreak@gentoo.org>
793     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
794     -hardened-sources-2.6.21-r4.ebuild:
795     Removing old ebuilds.
796 phreak 1.193
797     *hardened-sources-2.4.35-r2 (21 Oct 2007)
798    
799     21 Oct 2007; Christian Heim <phreak@gentoo.org>
800     +hardened-sources-2.4.35-r2.ebuild:
801     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
802     patches.
803 phreak 1.192
804     *hardened-sources-2.6.22-r8 (21 Oct 2007)
805    
806     21 Oct 2007; Christian Heim <phreak@gentoo.org>
807     +hardened-sources-2.6.22-r8.ebuild:
808     Yet another new patch, hopefully fixing the remaining issues we had w/
809     2.6.22. Candidate for stabling.
810 phreak 1.191
811     *hardened-sources-2.6.23 (13 Oct 2007)
812    
813     13 Oct 2007; Christian Heim <phreak@gentoo.org>
814     +hardened-sources-2.6.23.ebuild:
815     Initial hardened-sources-2.6.23. If people still have problems w/ bug
816     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
817 phreak 1.190
818     11 Oct 2007; Christian Heim <phreak@gentoo.org>
819     hardened-sources-2.6.20-r10.ebuild:
820     Pulling in yet another new genpatches version, fixing the PWC bug for real.
821 phreak 1.189
822     04 Oct 2007; Christian Heim <phreak@gentoo.org>
823     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
824     Removing old versions.
825 phreak 1.188
826     *hardened-sources-2.6.22-r7 (01 Oct 2007)
827    
828     01 Oct 2007; Christian Heim <phreak@gentoo.org>
829     +hardened-sources-2.6.22-r7.ebuild:
830     Revision bump, pulling in a newer patch. Should fix #194276.
831 phreak 1.187
832     30 Sep 2007; Christian Heim <phreak@gentoo.org>
833     hardened-sources-2.6.20-r10.ebuild:
834     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
835     Mike Doty).
836 phreak 1.186
837     *hardened-sources-2.6.22-r6 (26 Sep 2007)
838    
839     26 Sep 2007; Christian Heim <phreak@gentoo.org>
840     +hardened-sources-2.6.22-r6.ebuild:
841     Revision bump, grabbing up till Linux 2.6.22.9.
842 phreak 1.185
843     24 Sep 2007; Christian Heim <phreak@gentoo.org>
844     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
845     Cleaning up further.
846 phreak 1.184
847     *hardened-sources-2.6.20-r10 (24 Sep 2007)
848    
849     24 Sep 2007; Christian Heim <phreak@gentoo.org>
850     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
851     +hardened-sources-2.6.20-r10.ebuild:
852     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
853     revisions.
854 phreak 1.183
855     *hardened-sources-2.6.22-r5 (22 Sep 2007)
856    
857     22 Sep 2007; Christian Heim <phreak@gentoo.org>
858     +hardened-sources-2.6.22-r5.ebuild:
859     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
860 phreak 1.182
861     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
862     Removing johnm from metadata.xml (see #186467 for reference).
863 phreak 1.181
864     *hardened-sources-2.6.22-r4 (17 Sep 2007)
865    
866     17 Sep 2007; Christian Heim <phreak@gentoo.org>
867     +hardened-sources-2.6.22-r4.ebuild:
868     Revision bump, hopefully fixing all those weird PAX failures.
869 phreak 1.180
870     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
871     Updating the metadata.xml.
872 phreak 1.179
873     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
874     Removing tocharian from metadata due to his retirement (see #71718 for
875     reference).
876 phreak 1.178
877     *hardened-sources-2.6.20-r9 (30 Aug 2007)
878    
879     30 Aug 2007; Christian Heim <phreak@gentoo.org>
880     +hardened-sources-2.6.20-r9.ebuild:
881     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
882 phreak 1.177
883     29 Aug 2007; Christian Heim <phreak@gentoo.org>
884     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
885     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
886     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
887     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
888     -hardened-sources-2.6.22-r2.ebuild:
889     Removing some redundant versions.
890 phreak 1.176
891     *hardened-sources-2.4.35-r1 (29 Aug 2007)
892    
893     29 Aug 2007; Christian Heim <phreak@gentoo.org>
894     +hardened-sources-2.4.35-r1.ebuild:
895     Revision bump, new grsecurity patch.
896 phreak 1.175
897     *hardened-sources-2.6.20-r8 (26 Aug 2007)
898    
899     26 Aug 2007; Christian Heim <phreak@gentoo.org>
900     +hardened-sources-2.6.20-r8.ebuild:
901     Revision bump for Linux 2.6.20.17.
902 phreak 1.174
903     *hardened-sources-2.6.22-r3 (22 Aug 2007)
904    
905     22 Aug 2007; Christian Heim <phreak@gentoo.org>
906     +hardened-sources-2.6.22-r3.ebuild:
907     Revision bump for Linux 2.6.22.4.
908 phreak 1.173
909     16 Aug 2007; Christian Heim <phreak@gentoo.org>
910     hardened-sources-2.6.22-r2.ebuild:
911     Updated patchset, to fix the alignment against 2.6.22.3.
912 phreak 1.172
913     *hardened-sources-2.6.22-r2 (16 Aug 2007)
914    
915     16 Aug 2007; Christian Heim <phreak@gentoo.org>
916     +hardened-sources-2.6.22-r2.ebuild:
917     Revision bump for Linux 2.6.22.3.
918 phreak 1.171
919     *hardened-sources-2.4.35 (16 Aug 2007)
920    
921     16 Aug 2007; Christian Heim <phreak@gentoo.org>
922     +hardened-sources-2.4.35.ebuild:
923     Version bump, initial version for Linux 2.4.35.
924 phreak 1.170
925     *hardened-sources-2.6.21-r4 (16 Aug 2007)
926    
927     16 Aug 2007; Christian Heim <phreak@gentoo.org>
928     +hardened-sources-2.6.21-r4.ebuild:
929     Revision bump for Linux 2.6.21.6.
930 phreak 1.169
931     *hardened-sources-2.6.20-r7 (16 Aug 2007)
932    
933     16 Aug 2007; Christian Heim <phreak@gentoo.org>
934     +hardened-sources-2.6.20-r7.ebuild:
935     Revision bump for Linux 2.6.20.16.
936 phreak 1.168
937     *hardened-sources-2.6.22-r1 (13 Aug 2007)
938    
939     13 Aug 2007; Christian Heim <phreak@gentoo.org>
940     +hardened-sources-2.6.22-r1.ebuild:
941     Yet another revision bump.
942 phreak 1.167
943     *hardened-sources-2.6.22 (10 Aug 2007)
944    
945     10 Aug 2007; Christian Heim <phreak@gentoo.org>
946     +hardened-sources-2.6.22.ebuild:
947     Initial release for 2.6.22. If you are using hardened-sources on a desktop
948     machine (P4 or newer), be aware you might need to disable
949     CONFIG_PAX_PAGEEXEC.
950 phreak 1.166
951     04 Aug 2007; Christian Heim <phreak@gentoo.org>
952     hardened-sources-2.6.20-r6.ebuild:
953     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
954     2.6.20.15.
955 phreak 1.165
956     10 Jul 2007; Christian Heim <phreak@gentoo.org>
957     hardened-sources-2.6.20-r5.ebuild:
958     Marking hardened-sources-2.6.20-r5 stable on ppc.
959 phreak 1.164
960     10 Jul 2007; Christian Heim <phreak@gentoo.org>
961     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
962     Cleanup.
963 phreak 1.163
964     *hardened-sources-2.6.20-r6 (08 Jul 2007)
965    
966     08 Jul 2007; Christian Heim <phreak@gentoo.org>
967     +hardened-sources-2.6.20-r6.ebuild:
968     Revision bump, grabbing yet another stable release.
969 phreak 1.162
970     17 Jun 2007; Christian Heim <phreak@gentoo.org>
971     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
972     -hardened-sources-2.6.21-r2.ebuild:
973     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
974     alpha stable KEYWORD by mistake.
975 phreak 1.161
976     17 Jun 2007; Christian Heim <phreak@gentoo.org>
977     hardened-sources-2.6.20-r5.ebuild:
978     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
979     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
980 phreak 1.160
981     *hardened-sources-2.6.21-r3 (12 Jun 2007)
982    
983     12 Jun 2007; Christian Heim <phreak@gentoo.org>
984     +hardened-sources-2.6.21-r3.ebuild:
985     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
986     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
987     love.
988 phreak 1.159
989     *hardened-sources-2.6.20-r5 (11 Jun 2007)
990    
991     11 Jun 2007; Christian Heim <phreak@gentoo.org>
992     +hardened-sources-2.6.20-r5.ebuild:
993     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
994     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
995     love.
996 pappy 1.158
997     *hardened-sources-2.4.34.5 (11 Jun 2007)
998    
999     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
1000     +hardened-sources-2.4.34.5.ebuild:
1001     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
1002 phreak 1.157
1003     30 May 2007; Christian Heim <phreak@gentoo.org>
1004     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
1005     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
1006     stale ebuild(s).
1007 phreak 1.156
1008     30 May 2007; Christian Heim <phreak@gentoo.org>
1009     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
1010     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
1011     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
1012     Doing some cleanups, remove stale ebuilds.
1013 phreak 1.155
1014     26 May 2007; Christian Heim <phreak@gentoo.org>
1015     hardened-sources-2.6.21-r2.ebuild:
1016     Fixing the grsecurity patch, had one '};' too much.
1017 phreak 1.154
1018     *hardened-sources-2.6.21-r2 (26 May 2007)
1019    
1020     26 May 2007; Christian Heim <phreak@gentoo.org>
1021     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
1022     +hardened-sources-2.6.21-r2.ebuild:
1023     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
1024     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
1025 phreak 1.153
1026     *hardened-sources-2.6.20-r4 (26 May 2007)
1027    
1028     26 May 2007; Christian Heim <phreak@gentoo.org>
1029     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
1030     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
1031 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
1032 phreak 1.152
1033     15 May 2007; Christian Heim <phreak@gentoo.org>
1034     hardened-sources-2.6.20-r3.ebuild:
1035     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
1036     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
1037     grsecurity patch fail in that exact same hunk.
1038 phreak 1.151
1039     *hardened-sources-2.6.20-r3 (15 May 2007)
1040    
1041     15 May 2007; Christian Heim <phreak@gentoo.org>
1042     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
1043     Revision bump, incorporating Linux 2.6.20.11.
1044    
1045     *hardened-sources-2.6.21-r1 (11 May 2007)
1046    
1047     11 May 2007; Christian Heim <phreak@gentoo.org>
1048     +hardened-sources-2.6.21-r1.ebuild:
1049     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
1050     mentioned in #177234.
1051 kevquinn 1.150
1052     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
1053     files/digest-hardened-sources-2.6.21, Manifest:
1054     Fix Manifest/digest for linux-2.6.21.tar.bz2
1055 phreak 1.149
1056     06 May 2007; Christian Heim <phreak@gentoo.org>
1057     hardened-sources-2.6.21.ebuild:
1058     Bumping the hardened-patches version, needed for the fix for #177234.
1059 phreak 1.148
1060     *hardened-sources-2.6.21 (02 May 2007)
1061    
1062     02 May 2007; Christian Heim <phreak@gentoo.org>
1063     +hardened-sources-2.6.21.ebuild:
1064     Version bump, Linux 2.6.21-hardened.
1065 phreak 1.147
1066     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1067     hardened-sources-2.6.20-r2.ebuild:
1068     Adding ~ia64 on Ned's request.
1069 phreak 1.146
1070     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1071     hardened-sources-2.6.20-r2.ebuild:
1072     Fixing the included grsecurity patch, wasn't alligning due to the Index:
1073     header line(s).
1074 phreak 1.145
1075     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1076     hardened-sources-2.6.20-r2.ebuild:
1077     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
1078 armin76 1.144
1079     *hardened-sources-2.6.20-r2 (10 Apr 2007)
1080    
1081     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
1082     +hardened-sources-2.6.20-r2.ebuild:
1083     Version bump, on behalf of phreak
1084 phreak 1.143
1085     *hardened-sources-2.6.20-r1 (04 Apr 2007)
1086    
1087     04 Apr 2007; Christian Heim <phreak@gentoo.org>
1088     +hardened-sources-2.6.20-r1.ebuild:
1089     Revision bump, grabbing a newer grsecurity snapshot.
1090 phreak 1.142
1091     *hardened-sources-2.6.20 (25 Mar 2007)
1092    
1093     25 Mar 2007; Christian Heim <phreak@gentoo.org>
1094     +hardened-sources-2.6.20.ebuild:
1095     Finally a hardened-sources version for 2.6.20; many people have been waiting
1096     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
1097     testbox.
1098 chainsaw 1.141
1099     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
1100     hardened-sources-2.6.18-r6.ebuild:
1101     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
1102 phreak 1.140
1103     *hardened-sources-2.6.18-r6 (16 Mar 2007)
1104    
1105     16 Mar 2007; Christian Heim <phreak@gentoo.org>
1106     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1107     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1108     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1109     supposed to be.
1110 phreak 1.139
1111     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1112     Fixing the Manifest, the previous one was broken (as in still had the
1113     deleted ebuild in it).
1114 phreak 1.138
1115     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1116     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1117     +hardened-sources-2.6.18-r5.ebuild:
1118     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1119     Linux 2.6.18.8. Also cleaning up the older version.
1120    
1121     *hardened-sources-2.6.18-r5 (06 Mar 2007)
1122    
1123     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1124     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1125     +hardened-sources-2.6.18-r5.ebuild:
1126     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1127     Linux 2.6.18.8. Also cleaning up the older version.
1128 phreak 1.137
1129     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1130     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1131     -hardened-sources-2.6.19-r5.ebuild:
1132     Removing some of the old version, that didn't work.
1133 phreak 1.136
1134     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1135    
1136     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1137     +hardened-sources-2.6.19-r6.ebuild:
1138     Revision bump, including a new grsec version fixing #166235.
1139 pappy 1.134
1140     *hardened-sources-2.4.34 (24 Jan 2007)
1141    
1142     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1143 pappy 1.135 Manifest:
1144     updating Manifest with checksums of new tarball and ebuild
1145    
1146     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1147 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1148     I added new hardened sources 2.4 update, this is a critical path
1149     security bugfix - all users of h-s are strongly advised
1150     to update their existing hardened sources to this version.
1151     It contains a fix for a kernel vulnerability that is pertaining
1152     to the PaX changes to virtual memory management, possibly leading
1153     to a local kernel exploit ... see grsecurity.net forums and homepage
1154 phreak 1.133
1155     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1156     files/digest-hardened-sources-2.6.19-r5, Manifest:
1157     Fixing the patch-tarball digest.
1158 phreak 1.132
1159     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1160    
1161     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1162     +hardened-sources-2.6.19-r5.ebuild:
1163     Revision bump, closing the recently discovered PaX expand_stack()
1164     vulnerability.
1165 phreak 1.131
1166     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1167    
1168     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1169     +hardened-sources-2.6.19-r4.ebuild:
1170     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1171     dropping the randomized PID feature.
1172 opfer 1.130
1173     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1174     hardened-sources-2.4.33.4.ebuild:
1175     stable x86, bug #161171
1176 phreak 1.129
1177     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1178    
1179     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1180     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1181     Revision bump for bug #157186 and #158786.
1182 phreak 1.128
1183     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1184    
1185     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1186     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1187     Revision bump for bug #157186.
1188 phreak 1.127
1189     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1190    
1191     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1192     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1193     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1194 phreak 1.126
1195     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1196     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1197     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1198     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1199     hardened-sources-2.6.19-r1.ebuild:
1200     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1201     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1202 pappy 1.125
1203     *hardened-sources-2.4.33.4 (17 Dec 2006)
1204    
1205     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1206     +hardened-sources-2.4.33.4.ebuild:
1207     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1208     and quilting
1209 phreak 1.124
1210     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1211    
1212     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1213     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1214     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1215     for reporting).
1216 phreak 1.123
1217     *hardened-sources-2.6.19 (13 Dec 2006)
1218    
1219     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1220     +hardened-sources-2.6.19.ebuild:
1221     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1222     Brad for providing that prompt update.
1223 phreak 1.122
1224     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1225    
1226     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1227     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1228     +hardened-sources-2.6.18-r3.ebuild:
1229     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1230     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1231 phreak 1.121
1232     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1233     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1234 nixnut 1.120
1235     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1236     Stable on ppc wrt bug 157356
1237 opfer 1.119
1238     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1239     hardened-sources-2.6.18.ebuild:
1240     stable x86, bug #157356
1241 phreak 1.118
1242     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1243    
1244     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1245     +hardened-sources-2.6.18-r2.ebuild:
1246     Revision bump, including 2.6.18.5 (via genpatches) and
1247     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1248     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1249     redesign.
1250 phreak 1.117
1251     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1252     hardened-sources-2.6.18.ebuild:
1253     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1254     of Mike Doty).
1255 phreak 1.116
1256     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1257    
1258     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1259     +hardened-sources-2.6.18-r1.ebuild:
1260     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1261 phreak 1.115
1262     *hardened-sources-2.6.18 (11 Nov 2006)
1263    
1264     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1265     +hardened-sources-2.6.18.ebuild:
1266     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1267 solar 1.114
1268     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1269     - mark amd64 stable also. bug #151877
1270 solar 1.113
1271     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1272     - mark 2.6.17-r1 stable
1273 phreak 1.112
1274     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1275     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1276     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1277 phreak 1.111
1278     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1279    
1280     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1281     +hardened-sources-2.6.17-r1.ebuild:
1282     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1283     grsecurity patch.
1284 phreak 1.110
1285     *hardened-sources-2.6.17 (17 Aug 2006)
1286    
1287     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1288     +hardened-sources-2.6.17.ebuild:
1289     Bumping the hardened-sources-2.6 series to 2.6.17, using
1290     genpatches-2.6.17-6.base.
1291 solar 1.109
1292     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1293     - stable on x86 and amd64
1294 solar 1.108
1295     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1296    
1297     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1298     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1299     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1300     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1301     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1302     crusty ebuilds
1303 johnm 1.107
1304     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1305     hardened-sources-2.6.16-r10.ebuild:
1306     marking stable on x86 and amd64
1307 solar 1.106
1308     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1309     - 2.4.32-r6 stable on x86. RSBAC state unknown
1310 kang 1.105
1311     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1312    
1313     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1314     +hardened-sources-2.4.32-r7.ebuild:
1315     Bump PaX for RSBAC to test-17
1316 johnm 1.104
1317     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1318    
1319     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1320     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1321     hardened-sources-2.6.16 bump to latest -base.
1322 solar 1.103
1323     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1324    
1325     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1326     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1327     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1328     sysctl controlable resource logging
1329 johnm 1.102
1330     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1331    
1332     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1333     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1334     push new 2.6.16 release in preparation for stable
1335 solar 1.101
1336     22 May 2006; <solar@gentoo.org> :
1337     - redigest bug 134002
1338 kang 1.100
1339     *hardened-sources-2.4.32-r5 (16 May 2006)
1340    
1341     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1342     +hardened-sources-2.4.32-r5.ebuild:
1343     Fixes rsbac common patching (new patch in new -r5 patchset)
1344 solar 1.99
1345     *hardened-sources-2.4.32-r4 (13 May 2006)
1346    
1347     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1348     +hardened-sources-2.4.32-r4.ebuild:
1349     - security bumps
1350 johnm 1.98
1351     *hardened-sources-2.6.16-r6 (03 May 2006)
1352    
1353     03 May 2006; John Mylchreest <johnm@gentoo.org>
1354     +hardened-sources-2.6.16-r6.ebuild:
1355     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1356 johnm 1.97
1357     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1358     hardened-sources-2.6.14-r8.ebuild:
1359     fix x86_64 build problem, this will delay the digest issue again for a short
1360     while but it will sort itself out
1361 johnm 1.96
1362     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1363     hardened-sources-2.6.14-r8.ebuild:
1364     bump hardened patchset
1365 antarus 1.94
1366     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1367     files/digest-hardened-sources-2.4.32-r2,
1368     files/digest-hardened-sources-2.4.32-r3,
1369     files/digest-hardened-sources-2.6.14-r8, Manifest:
1370     Fixing duff SHA256 digests: Bug # 131293
1371 johnm 1.93
1372 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1373    
1374     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1375     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1376     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1377     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1378     cleanup of old uneccessary sources
1379    
1380 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1381     fix digest
1382 johnm 1.92
1383     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1384    
1385     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1386     +hardened-sources-2.6.14-r8.ebuild:
1387     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1388 johnm 1.91
1389     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1390     Turning on gpg-signing again, and recomitting
1391 johnm 1.90
1392     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1393    
1394     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1395     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1396     +hardened-sources-2.6.16-r4.ebuild:
1397     Fix numerous security vulns
1398 solar 1.89
1399     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1400    
1401     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1402     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1403     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1404     - security bump for bug #112791. Removed old ebuilds
1405 johnm 1.88
1406     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1407    
1408     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1409     +hardened-sources-2.6.16-r3.ebuild:
1410     Removing silly localversion which I missed
1411 johnm 1.87
1412     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1413    
1414     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1415     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1416     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1417 johnm 1.86
1418     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1419    
1420     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1421     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1422     +hardened-sources-2.6.16-r2.ebuild:
1423     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1424     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1425 johnm 1.85
1426     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1427    
1428     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1429     +hardened-sources-2.6.16-r1.ebuild:
1430     Bumping to include ppc build fix and 2.6.16.3
1431 tsunam 1.84
1432     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1433     hardened-sources-2.6.14-r6.ebuild:
1434     Stable on x86; bug #127718
1435 johnm 1.83
1436     *hardened-sources-2.6.16 (31 Mar 2006)
1437    
1438     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1439     +hardened-sources-2.6.16.ebuild:
1440     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1441     2.6.16.1
1442 cryos 1.82
1443     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1444     hardened-sources-2.6.14-r6.ebuild:
1445     Stable on amd64, bug 127718.
1446 nixnut 1.81
1447     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1448     Stable on ppc. Bug #127718
1449 johnm 1.80
1450     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1451     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1452     -hardened-sources-2.6.14-r4.ebuild:
1453     Cleanup.
1454 johnm 1.79
1455     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1456    
1457     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1458     +hardened-sources-2.6.14-r6.ebuild:
1459     Fixes grsec policy recreation bug and adds a
1460     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1461 solar 1.78
1462     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1463     - stable on x86
1464 hansmi 1.77
1465     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1466     hardened-sources-2.6.14-r5.ebuild:
1467     Stable on ppc.
1468 johnm 1.76
1469     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1470    
1471     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1472     +hardened-sources-2.6.14-r5.ebuild:
1473     fixing every known exploit
1474 solar 1.75
1475     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1476    
1477     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1478     +hardened-sources-2.4.32-r2.ebuild:
1479     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1480 solar 1.74
1481     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1482    
1483     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1484     - version bump for new genpatches which fix up a few sec holes
1485 solar 1.73
1486     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1487    
1488     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1489     - revision bump to add misc vital linux kernel security patches.
1490 johnm 1.72
1491     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1492    
1493     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1494     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1495     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1496 johnm 1.71
1497     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1498     hardened-sources-2.6.14-r2.ebuild:
1499     making x86 & amd64 stable following testing.
1500 johnm 1.70
1501     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1502    
1503     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1504     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1505     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1506     network hooks.
1507 johnm 1.69
1508     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1509     hardened-sources-2.6.14-r1.ebuild:
1510     bumping to stable early for sec fix on x86 & amd64
1511 johnm 1.68
1512     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1513    
1514     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1515     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1516     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1517 solar 1.67
1518     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1519     - stable on x86 security bug #114227 CAN-2005-3257
1520 kang 1.66
1521     *hardened-sources-2.4.32 (19 Nov 2005)
1522    
1523     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1524     +hardened-sources-2.4.32.ebuild:
1525     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1526     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1527     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1528     rsbac >> /etc/portage/package.use)
1529 johnm 1.65
1530     *hardened-sources-2.6.14 (14 Nov 2005)
1531    
1532     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1533     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1534     Bumping 2.6 series to 2.6.14.2
1535 johnm 1.64
1536     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1537    
1538     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1539     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1540     +hardened-sources-2.6.13-r2.ebuild:
1541     Fixes minor build error in ppc.
1542 johnm 1.63
1543     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1544    
1545     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1546     +hardened-sources-2.6.13-r1.ebuild:
1547     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1548     2.6.13.4, fixes some major amd64 stability problems.
1549 johnm 1.62
1550     *hardened-sources-2.6.13 (16 Sep 2005)
1551    
1552     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1553     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1554     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1555     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1556     users should test this thoroughly.
1557 solar 1.61
1558     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1559     - stable on x86
1560 johnm 1.60
1561     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1562    
1563     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1564     +hardened-sources-2.6.11-r15.ebuild:
1565     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1566     grsec redefining curr_ip struct.
1567 solar 1.59
1568     *hardened-sources-2.4.31 (20 Jun 2005)
1569    
1570     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1571     initial import of 2.4.31 tree
1572 johnm 1.58
1573     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1574    
1575     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1576     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1577     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1578     naming scheme to abide by genpatches
1579 johnm 1.57
1580     *hardened-sources-2.6.11-r13 (18 May 2005)
1581    
1582     18 May 2005; John Mylchreest <johnm@gentoo.org>
1583     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1584     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1585     target. sorry about that. Fixes bug #93022
1586 johnm 1.56
1587     *hardened-sources-2.6.11-r12 (17 May 2005)
1588    
1589     17 May 2005; John Mylchreest <johnm@gentoo.org>
1590     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1591     +hardened-sources-2.6.11-r12.ebuild:
1592     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1593     merges in genpatches-base
1594 johnm 1.55
1595     *hardened-sources-2.6.11-r12 (17 May 2005)
1596    
1597     17 May 2005; John Mylchreest <johnm@gentoo.org>
1598     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1599     +hardened-sources-2.6.11-r12.ebuild:
1600     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1601     merges in genpatches-base
1602 solar 1.54
1603     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1604     -files/2.4.27-cmdline-race.patch,
1605     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1606     -files/2.4.28-grsec-binfmt_a.out.patch,
1607     -files/2.4.28-grsec-cmdline-race.patch,
1608     -files/2.4.28-selinux-binfmt_a.out.patch,
1609     -files/2.4.28-selinux-cmdline-race.patch,
1610     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1611     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1612     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1613     cleanup..
1614 solar 1.53
1615     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1616    
1617     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1618     - disable aout by default
1619 solar 1.52
1620     *hardened-sources-2.4.30 (18 Apr 2005)
1621    
1622     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1623     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1624     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1625     use
1626 tocharian 1.50
1627 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1628    
1629     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1630     +hardened-sources-2.4.29.ebuild:
1631     New hardened-patches-2.4-29.0 patchball.
1632     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1633    
1634     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1635    
1636     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1637     +hardened-sources-2.4.28-r5.ebuild:
1638     Added a fix for a PaX vulnerability.
1639    
1640     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1641 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1642     Stable on x86
1643 solar 1.49
1644     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1645     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1646     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1647     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1648     - fixed/added RDEPEND= in all kernel-2 ebuilds
1649 tocharian 1.48
1650     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1651    
1652     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1653     +hardened-sources-2.4.28-r4.ebuild:
1654     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1655     backport of neighbour hash updates.
1656 tocharian 1.47
1657     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1658     hardened-sources-2.4.28-r3.ebuild:
1659     Stable on x86
1660 tseng 1.46
1661     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1662    
1663     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1664     +hardened-sources-2.6.10-r3.ebuild:
1665     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1666     in 2005.0
1667 tocharian 1.45
1668     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1669     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1670     hardened-sources-2.4.28-r2.ebuild:
1671     Mark stable on x86
1672 tocharian 1.44
1673     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1674    
1675     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1676     +hardened-sources-2.4.28-r3.ebuild:
1677     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1678 tocharian 1.43
1679     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1680     hardened-sources-2.4.28.ebuild:
1681     Mark stable on x86.
1682 tocharian 1.42
1683     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1684    
1685     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1686     +hardened-sources-2.4.28-r2.ebuild:
1687     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1688     Mazinger for grsecurity patches as well.
1689 plasmaroo 1.41
1690     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1691    
1692     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1693     Security bump. Thank tocharian for rolling a new patchset...
1694 solar 1.40
1695     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1696     +files/2.4.28-grsec-cmdline-race.patch,
1697     +files/2.4.28-selinux-binfmt_a.out.patch,
1698     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1699     - Round up remaining security patches that appear to be missing in 2.4.28. -
1700     PaX standalone updated to current. hgpv=28.1
1701 solar 1.39
1702     *hardened-sources-2.4.28 (28 Nov 2004)
1703    
1704     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1705     security bump. Thank tocharian for rolling a new patchset
1706 scox 1.31
1707 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1708    
1709     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1710     +hardened-sources-2.4.27-r3.ebuild:
1711     Applies the new 2.4-27.2 patchball which updates
1712     GRSecurity to the 2.0.1 version.
1713    
1714 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1715    
1716     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1717     +hardened-sources-2.4.27-r2.ebuild:
1718     Version bump.
1719     This version uses the new 2.4-27.1 patchball which updates
1720     both the SELinux PaX hooks patch and the SELinux headers.
1721    
1722 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1723    
1724     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1725     +hardened-sources-2.4.27-r1.ebuild,
1726     -hardened-sources-2.4.27.ebuild,
1727     +files/2.4.27-cmdline-race.patch:
1728     Version bump, fix for cmdline race. See bug #59905.
1729    
1730     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1731    
1732     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1733     +hardened-sources-2.4.26-r6.ebuild,
1734     -hardened-sources-2.4.26-r5.ebuild,
1735     -hardened-sources-2.4.26-r4.ebuild,
1736     +files/2.4.26-cmdline-race.patch:
1737     Version bump, fix for cmdline race. See bug #59905.
1738    
1739 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1740    
1741     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1742     +hardened-sources-2.4.27.ebuild,
1743     +files/2.4.27-CAN-2004-0394.patch:
1744     Ported the patchball to the 2.4.27 kernel version.
1745    
1746 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1747    
1748     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1749     +hardened-sources-2.4.26-r5.ebuild:
1750 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1751 scox 1.34 It adds the following features:
1752     - Squashfs
1753     - Ebtables
1754     - Netdev random (core+drivers)
1755     - Watchdog Timer (WDT) fix.
1756    
1757 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1758    
1759     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1760     +hardened-sources-2.4.26-r4.ebuild,
1761     +files/2.4.26-CAN-2004-0415.patch,
1762     -hardened-sources-2.4.26-3:
1763     Version bump, fix for CAN 0415, see bug #59378.
1764    
1765 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1766    
1767     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1768     +hardened-sources-2.4.26-r3.ebuild,
1769     +files/2.4.26-CAN-2004-0497.patch,
1770     -hardened-sources-2.4.26-r2.ebuild:
1771     Version bump, fixed CAN 0497, see bug #56171.
1772    
1773 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1774    
1775     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1776 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1777 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1778     +files/2.4.26-CAN-2004-0535.patch,
1779     -hardened-sources-2.4.26-r1.ebuild:
1780     Fixes for both CAN 0495 and 0535, see bug #54976
1781 pvdabeel 1.27
1782 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1783     hardened-sources-2.4.26-r1.ebuild:
1784     QA - fix use invocation
1785 scox 1.28
1786     *hardened-sources-2.4.26-r1 (22 June 2004)
1787    
1788     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1789     +hardened-sources-2.4.26-r1.ebuild,
1790     +files/2.4.26-CAN-2004-0394.patch,
1791     +files/2.4.26-signal-race.patch,
1792     -hardened-sources-2.4.26.ebuild,
1793     -hardened-sources-2.4.24-r3.ebuild:
1794     Version bump for the CAN-2004-0394 issue and bug #53804
1795     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1796    
1797    
1798 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1799     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1800     Masked hardened-sources-2.4.26.ebuild broken for ppc
1801    
1802     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1803     hardened-sources-2.4.24-r3.ebuild:
1804     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1805 plasmaroo 1.25
1806 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1807    
1808     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1809     +hardened-sources-2.4.26.ebuild:
1810     Updated hardened-sources for the 2.4.26 kernel
1811     Removed broken components, updated almost everything.
1812    
1813 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1814    
1815     17 Apr 2004; <plasmaroo@gentoo.org>
1816     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1817     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1818     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1819     +hardened-sources-2.4.24-r3.ebuild:
1820     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1821     vulnerabilities. Old revisions removed.
1822 plasmaroo 1.24
1823     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1824    
1825     15 Apr 2004; <plasmaroo@gentoo.org>
1826     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1827     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1828     Version bump for the CAN-2004-0109 issue; bug #47881.
1829 aliz 1.23
1830     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1831     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1832     Add eutils to inherit.
1833 plasmaroo 1.22
1834     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1835    
1836     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1837     files/hardened-sources-2.4.24.munmap.patch:
1838     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1839 scox 1.19
1840 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1841 scox 1.26
1842 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1843     hardened-sources-2.4.24.ebuild:
1844     Version bump, updated most of the components.
1845     This release includes the following:
1846    
1847     - Hardened security
1848     - Netfilter patch-o-matic 20031219
1849     - FreeSWAN 2.04 & x509 1.4.8
1850     - EVMS 2.2.2
1851     - XFS 1.3.1
1852     - cryptoloop jari
1853     - grsecurity 2.0-rc4
1854     - SELinux
1855     - PaX 200402060000
1856     - PaX Obscurity 200308302223
1857     - Others...
1858    
1859     Neither -ck nor systrace are included anymore.
1860    
1861 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1862    
1863     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1864     hardened-sources-2.4.22-r2.ebuild:
1865 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1866 scox 1.19
1867     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1868 iggy 1.17
1869     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1870 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1871 iggy 1.16
1872     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1873 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1874     Version bump for the 'do_brk' vulnerability.
1875 iggy 1.15
1876     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1877     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1878     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1879     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1880 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1881 frogger 1.14
1882     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1883     hardened-sources-2.4.22.ebuild:
1884 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1885     components. These are no longer handled in the kernel
1886     so this code was not necessary.
1887 frogger 1.13
1888     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1889     New 2.4.22 based hardened-sources thanks to
1890     Phil West <p.west@computer.org>.
1891    
1892     These sources include:
1893 plasmaroo 1.18 - New SELinux API
1894     - Updated CK-base
1895     - Updated GRSec
1896     - Systrace
1897     - SuperFreeS/WAN 1.99.8
1898     - Propolice kernel build support
1899     - EVMS
1900     - Other various security related patches
1901 frogger 1.11
1902 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1903    
1904     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1905     Updated hardened-sources based on the 2.4.21 Linux kernel.
1906     This includes updates to most major components such as:
1907 plasmaroo 1.18 - ck-base-0306300059
1908     - selinux-2.4-2003071106
1909     - grsecurity-2.0-rc1
1910     - Updated IPTables patch-o-matic
1911     - Updated SuperFreeS/WAN
1912    
1913 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1914     updated patch set ready for the 2.4.21 based kernel.
1915    
1916 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1917     Initial import of hardened-sources-2.4.20-r4. This revision
1918     includes only a few changes, but one of these is an important
1919     security fix. It is recommended all users of hardened-sources
1920     upgrade to this release.
1921 plasmaroo 1.18
1922 frogger 1.11 - ioperm bug fix
1923     - fixed compilation failure when building without GRSec
1924 plasmaroo 1.18
1925 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1926     due to time constraints, but is planned for inclusion in the near
1927     future.
1928 msterret 1.10
1929     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1930    
1931     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1932     hardened-sources-2.4.20-r3.ebuild:
1933 plasmaroo 1.18 Add Header...
1934 frogger 1.9
1935     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1936     hardened-sources-2.4.20-r3.ebuild:
1937     Removed warnings from ebuild. This kernel should be safe to
1938     use at this point.
1939 frogger 1.8
1940     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1941    
1942     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1943     hardened-sources-2.4.20-r3.ebuild:
1944     New revision. Includes the following changes over -r2:
1945 plasmaroo 1.18
1946 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1947     - Super FreeS/WAN 1.99.7rc2
1948     - PaX for the LSM/SELinux branch
1949     - GRSecurity 2.0-pre4 (role based access control)
1950     - Systrace 1.3
1951     - EXT3 fixes
1952     - EVMS 2.0.1
1953     - GCC 3.1+ compile optimizations
1954     - ProPolice kernel build support
1955     - Hashing table security fixes
1956 frogger 1.3
1957     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1958 frogger 1.7
1959     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1960     Initial import of hardened-sources-r2. This new
1961     ebuild includes many new performance and security
1962     related patches. As in -r1, it will patch in
1963     LSM/SELinux if "selinux" is in USE, otherwise it
1964     will patch in GRSecurity. The following patches
1965     are included in this revision:
1966 plasmaroo 1.18
1967 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1968     (pulled from the base CK patch)
1969     - ptrace exploit patch for the LSM kernel
1970     (the GRSec patch already fixes this)
1971     - LSM 2.4-2003040709
1972     - SELinux 2.4-2003040709
1973     - Systrace v1.2
1974     - IPTables patch-o-matic base patches - 20030107
1975     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1976     - Super FreeS/WAN 1.99.6.1
1977     - GRSecurity 1.9.9g
1978     - MPPE
1979     - EXT3 data journal fix
1980     - CIPE 1.5.4
1981 frogger 1.6
1982     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1983     hardened-sources-2.4.20-r1.ebuild, manifest:
1984 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1985 frogger 1.5
1986     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1987     hardened-sources-2.4.20-r1.ebuild:
1988     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1989     is patched in instead. Ptrace patches for selinux have also been added. In
1990     either case, systrace support will be patched in as well.
1991 frogger 1.3
1992     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1993     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
1994 plasmaroo 1.18 Revision bump for new sources.
1995 frogger 1.4
1996 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1997 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
1998 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
1999 method 1.1
2000 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
2001    
2002 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
2003     hardened-sources-2.4.20.ebuild:
2004 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20