/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.339 - (hide annotations) (download)
Tue Sep 21 20:31:48 2010 UTC (4 years, 2 months ago) by blueness
Branch: MAIN
Changes since 1.338: +7 -1 lines
Fast track stabilization. See bug #338273. Removed older versions.
(Portage version: 2.1.8.3/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.339 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.338 2010/09/17 20:21:28 blueness Exp $
4    
5     21 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
6     -hardened-sources-2.6.32-r14.ebuild, -hardened-sources-2.6.32-r15.ebuild,
7     hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.34-r2.ebuild,
8     -hardened-sources-2.6.34-r3.ebuild, hardened-sources-2.6.34-r6.ebuild:
9     Fast track stabilization. See bug #338273. Removed older versions.
10 blueness 1.338
11     *hardened-sources-2.6.34-r6 (17 Sep 2010)
12     *hardened-sources-2.6.32-r18 (17 Sep 2010)
13    
14     17 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
15     +hardened-sources-2.6.32-r18.ebuild, +hardened-sources-2.6.34-r6.ebuild:
16     hardened-sources-2.6.32-r18 based on 2.6.32.21 + genpatches +
17     grsec-2.2.0-2.6.32.21-201009162222
18     hardened-sources-2.6.34-r6 based on 2.6.34.7 + genpatches +
19     grsec-2.2.0-2.6.34.7-201009162222
20     Addresses IA32 syscall exploit.
21 blueness 1.337
22     *hardened-sources-2.6.34-r5 (15 Sep 2010)
23     *hardened-sources-2.6.32-r17 (15 Sep 2010)
24    
25     15 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
26     +hardened-sources-2.6.32-r17.ebuild, +hardened-sources-2.6.34-r5.ebuild:
27     hardened-sources-2.6.32-r17 based on 2.6.32.21 + genpatches +
28     grsec-2.2.0-2.6.32.21-201009130811
29     hardened-sources-2.6.34-r5 based on 2.6.34.6 + genpatches +
30     grsec-2.2.0-2.6.34.6-201009130754
31 blueness 1.336
32     *hardened-sources-2.6.34-r4 (07 Sep 2010)
33     *hardened-sources-2.6.32-r16 (07 Sep 2010)
34    
35     07 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
36     +hardened-sources-2.6.32-r16.ebuild, +hardened-sources-2.6.34-r4.ebuild:
37     hardened-sources-2.6.32-r16 based on 2.6.32.21 +
38     grsec-2.2.0-2.6.32.21-201009032133
39     hardened-sources-2.6.34-r4 based on 2.6.34.6 +
40     grsec-2.2.0-2.6.34.6-201009041352
41 blueness 1.335
42     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org> ChangeLog:
43     hardened-sources-2.6.32-r15 based on 2.6.32.21 +
44     grsec-2.2.0-2.6.32.21-201008292122
45     hardened-sources-2.6.34-r3 based on 2.6.34.6 +
46     grsec-2.2.0-2.6.34.6-201008292122
47 blueness 1.334
48     *hardened-sources-2.6.34-r3 (02 Sep 2010)
49     *hardened-sources-2.6.32-r15 (02 Sep 2010)
50    
51     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
52     -hardened-sources-2.6.32-r10.ebuild, -hardened-sources-2.6.32-r11.ebuild,
53     -hardened-sources-2.6.32-r12.ebuild, -hardened-sources-2.6.32-r13.ebuild,
54     +hardened-sources-2.6.32-r15.ebuild, -hardened-sources-2.6.34-r1.ebuild,
55     +hardened-sources-2.6.34-r3.ebuild:
56     Bumps and remove deprecated versions
57 blueness 1.333
58     *hardened-sources-2.6.34-r2 (21 Aug 2010)
59    
60     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
61     +hardened-sources-2.6.34-r2.ebuild:
62     Based on vanilla 2.6.34.4 + genpatches + grsec-2.2.0-2.6.34.4-201008131840
63 blueness 1.332
64     *hardened-sources-2.6.32-r14 (21 Aug 2010)
65    
66     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
67     +hardened-sources-2.6.32-r14.ebuild:
68     Based on vanilla 2.6.32.19 + genpatches +
69     grsec-2.2.0-2.6.32.19-201008131840
70 blueness 1.331
71     *hardened-sources-2.6.32-r13 (14 Aug 2010)
72    
73     14 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
74     +hardened-sources-2.6.32-r13.ebuild:
75     Based on vanilla 2.6.32.18 + genpatches +
76     grsecurity-2.2.0-2.6.32.18-201008112233
77 robbat2 1.330
78     03 Aug 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
79     kernel-2 deblob support for 2.6.35; bug #324505: deblob-check usage.
80 blueness 1.329
81     01 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
82     hardened-sources-2.6.32-r9.ebuild:
83     Stable ppc64. Bug #326885
84 blueness 1.328
85     *hardened-sources-2.6.32-r12 (24 Jul 2010)
86    
87     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
88     +hardened-sources-2.6.32-r12.ebuild:
89     Parallels fix incorporated into hardened-sources-2.6.34-r1
90 blueness 1.327
91     *hardened-sources-2.6.34-r1 (24 Jul 2010)
92    
93     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
94     -hardened-sources-2.6.34.ebuild, +hardened-sources-2.6.34-r1.ebuild:
95     Fixes bug #328275
96 chainsaw 1.326
97     21 Jul 2010; <chainsaw@gentoo.org> metadata.xml:
98     Address metadata concerns by Jeroen "rej" Roovers <rej@gentoo.org> raised
99     on gentoo-dev.
100 jer 1.325
101     21 Jul 2010; Jeroen Roovers <jer@gentoo.org> metadata.xml:
102     Correct mail address.
103 blueness 1.324
104     18 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
105     -hardened-sources-2.6.25-r13.ebuild, -hardened-sources-2.6.26-r9.ebuild,
106     -hardened-sources-2.6.28-r7.ebuild, -hardened-sources-2.6.29.ebuild,
107     -hardened-sources-2.6.32-r8.ebuild:
108     Removing outdated releases
109 fauli 1.323
110     17 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
111     hardened-sources-2.6.32-r9.ebuild:
112     stable x86, bug 326885
113 blueness 1.322
114     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
115     -hardened-sources-2.6.32-r7.ebuild:
116     Removed for security. Bug #325573
117 blueness 1.321
118     *hardened-sources-2.6.34 (13 Jul 2010)
119    
120     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
121     +hardened-sources-2.6.34.ebuild:
122     Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
123 blueness 1.320
124     *hardened-sources-2.6.32-r11 (13 Jul 2010)
125    
126     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
127     +hardened-sources-2.6.32-r11.ebuild:
128     New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
129 chainsaw 1.319
130     06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
131     Marked stable on AMD64 as requested by Anthony G. Basile
132     <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
133     on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
134 blueness 1.318
135     *hardened-sources-2.6.32-r10 (30 Jun 2010)
136    
137     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
138     +hardened-sources-2.6.32-r10.ebuild:
139     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
140 blueness 1.317
141     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
142     Added myself to the metadata.xml
143 chainsaw 1.316
144     *hardened-sources-2.6.32-r9 (11 Jun 2010)
145    
146     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
147     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
148 chainsaw 1.315
149     *hardened-sources-2.6.32-r8 (01 Jun 2010)
150    
151     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
152     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
153 chainsaw 1.314
154     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
155     Update SRC_URI to point to mirror network now that the distfile has
156     propagated.
157 chainsaw 1.313
158     *hardened-sources-2.6.32-r7 (26 May 2010)
159    
160     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
161     metadata.xml:
162     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
163     Summers.
164 robbat2 1.312
165     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
166     Update Manifest for deblob support in kernel-2 eclass.
167 nixnut 1.311
168     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
169     ppc stable
170 gengor 1.310
171     29 May 2009; Gordon Malm <gengor@gentoo.org>
172     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
173     Stable amd64/x86 and remove old.
174 gengor 1.309
175     *hardened-sources-2.6.29 (25 May 2009)
176    
177     25 May 2009; Gordon Malm <gengor@gentoo.org>
178     +hardened-sources-2.6.29.ebuild:
179     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
180     release candidates.
181 gengor 1.308
182     *hardened-sources-2.6.28-r9 (25 May 2009)
183    
184     25 May 2009; Gordon Malm <gengor@gentoo.org>
185     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
186     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
187 gengor 1.307
188     *hardened-sources-2.6.28-r8 (18 May 2009)
189    
190     18 May 2009; Gordon Malm <gengor@gentoo.org>
191     +hardened-sources-2.6.28-r8.ebuild:
192     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
193     and #262862 among others.
194 gengor 1.306
195     01 May 2009; Gordon Malm <gengor@gentoo.org>
196     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
197     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
198     Remove unnecessary mirror://gentoo from SRC_URI.
199 nixnut 1.305
200     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
201     ppc stable
202 gengor 1.304
203     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
204     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
205     Stable amd64/x86 and remove old.
206 gengor 1.303
207     *hardened-sources-2.6.28-r7 (27 Mar 2009)
208    
209     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
210     +hardened-sources-2.6.28-r7.ebuild:
211     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
212 gengor 1.302
213     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
214     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
215     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
216     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
217     Stable amd64/x86 and remove old versions.
218 nixnut 1.301
219     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
220     ppc stable
221 gengor 1.300
222     *hardened-sources-2.6.28-r6 (21 Mar 2009)
223    
224     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
225     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
226     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
227 gengor 1.299
228     *hardened-sources-2.6.28-r5 (20 Mar 2009)
229    
230     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
231     +hardened-sources-2.6.28-r5.ebuild:
232     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
233 gengor 1.298
234     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
235     hardened-sources-2.6.28-r4.ebuild:
236     Stable amd64/x86.
237 gengor 1.297
238     *hardened-sources-2.6.28-r4 (18 Mar 2009)
239    
240     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
241     +hardened-sources-2.6.28-r4.ebuild:
242     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
243     compilation with CPA_DEBUG and more.
244 gengor 1.296
245     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
246     hardened-sources-2.6.28-r3.ebuild:
247     Quick stable amd64/x86.
248 gengor 1.295
249     *hardened-sources-2.6.28-r3 (15 Mar 2009)
250    
251     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
252     +hardened-sources-2.6.28-r3.ebuild:
253     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
254 nixnut 1.294
255     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
256     ppc stable
257 gengor 1.293
258     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
259     hardened-sources-2.6.28-r2.ebuild:
260     Stable amd64/x86.
261 gengor 1.292
262     *hardened-sources-2.6.28-r2 (11 Mar 2009)
263    
264     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
265     +hardened-sources-2.6.28-r2.ebuild:
266     Version bump bringing in latest grsecurity patch.
267 gengor 1.291
268     *hardened-sources-2.6.28-r1 (09 Mar 2009)
269    
270     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
271     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
272     Version bump and remove old.
273 nixnut 1.290
274     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
275     ppc stable
276 gengor 1.289
277     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
278     hardened-sources-2.6.27-r8.ebuild:
279     Remove amd64 testing keyword, bug 256226.
280 gengor 1.288
281     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
282     hardened-sources-2.6.27-r8.ebuild:
283     Revert amd64 stable, bug #256226.
284 gengor 1.287
285     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
286     hardened-sources-2.6.27-r8.ebuild:
287     Stable on amd64/x86.
288 gengor 1.286
289     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
290     -hardened-sources-2.6.27-r6.ebuild:
291     Remove old 2.6.27 release.
292 gengor 1.285
293     *hardened-sources-2.6.27-r8 (24 Feb 2009)
294    
295     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
296     +hardened-sources-2.6.27-r8.ebuild:
297     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
298     and probably more.
299 nixnut 1.284
300     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
301     ppc stable
302 gengor 1.283
303     *hardened-sources-2.6.28 (25 Jan 2009)
304    
305     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
306     +hardened-sources-2.6.28.ebuild:
307     Initial 2.6.28 release.
308 gengor 1.282
309     *hardened-sources-2.6.27-r7 (25 Jan 2009)
310    
311     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
312     +hardened-sources-2.6.27-r7.ebuild:
313     Bump to Linux 2.6.27.13.
314 gengor 1.281
315     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
316     hardened-sources-2.6.26-r9.ebuild:
317     Stable amd64/x86.
318 gengor 1.280
319     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
320     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
321     -hardened-sources-2.6.27-r5.ebuild:
322     Remove problem versions.
323 gengor 1.279
324     *hardened-sources-2.6.27-r6 (24 Jan 2009)
325    
326     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
327     +hardened-sources-2.6.27-r6.ebuild:
328     Revert PaX test29 to test30 changes. Fixes bug 256226.
329 gengor 1.277
330     *hardened-sources-2.6.27-r5 (24 Jan 2009)
331    
332     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
333     +hardened-sources-2.6.27-r5.ebuild:
334 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
335 gengor 1.277 254843.
336 gengor 1.276
337     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
338     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
339     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
340     Remove problem versions.
341 nixnut 1.275
342     23 Jan 2009; nixnut <nixnut@gentoo.org>
343     hardened-sources-2.6.25-r13.ebuild:
344     ppc stable
345 gengor 1.274
346     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
347     hardened-sources-2.6.25-r13.ebuild:
348     Fasttrack stable amd64/x86.
349 gengor 1.273
350     *hardened-sources-2.6.26-r9 (21 Jan 2009)
351    
352     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
353     +hardened-sources-2.6.26-r9.ebuild:
354 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
355 gengor 1.272
356     *hardened-sources-2.6.25-r13 (20 Jan 2009)
357    
358     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
359     +hardened-sources-2.6.25-r13.ebuild:
360 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
361 nixnut 1.271
362     20 Jan 2009; nixnut <nixnut@gentoo.org>
363     hardened-sources-2.6.25-r12.ebuild:
364     ppc stable
365 gengor 1.270
366     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
367     hardened-sources-2.6.25-r12.ebuild:
368     Stable amd64/x86.
369 gengor 1.269
370     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
371     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
372     -hardened-sources-2.6.27-r2.ebuild:
373     Clean out old versions.
374 gengor 1.268
375     *hardened-sources-2.6.27-r4 (14 Jan 2009)
376     *hardened-sources-2.6.26-r8 (14 Jan 2009)
377     *hardened-sources-2.6.25-r12 (14 Jan 2009)
378    
379     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
380     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
381     +hardened-sources-2.6.27-r4.ebuild:
382     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
383     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
384     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
385     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
386 nixnut 1.267
387     15 Dec 2008; nixnut <nixnut@gentoo.org>
388     hardened-sources-2.6.25-r11.ebuild:
389     Stable on ppc
390 gengor 1.266
391     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
392     hardened-sources-2.6.25-r11.ebuild:
393     Stable amd64/x86.
394 gengor 1.265
395     *hardened-sources-2.6.27-r3 (07 Dec 2008)
396    
397     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
398     +hardened-sources-2.6.27-r3.ebuild:
399     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
400     Fixes bug #248754, #249729 and #246607.
401 gengor 1.264
402     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
403     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
404     Remove old versions.
405 gengor 1.262
406     *hardened-sources-2.6.26-r7 (03 Dec 2008)
407     *hardened-sources-2.6.25-r11 (03 Dec 2008)
408    
409 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
410     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
411 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
412     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
413     Both include many backports from 2.6.27.{6,7} -stable releases.
414 gengor 1.261
415     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
416     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
417     Remove versions broken on ARCHes != x86/amd64.
418 gengor 1.260
419     *hardened-sources-2.6.27-r2 (24 Nov 2008)
420    
421     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
422     +hardened-sources-2.6.27-r2.ebuild:
423     Bump to Linux 2.6.27.7 and latest grsecurity patch.
424 gengor 1.259
425     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
426     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
427     Remove old versions.
428 gengor 1.258
429     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
430     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
431     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
432 nixnut 1.257
433     16 Nov 2008; nixnut <nixnut@gentoo.org>
434     hardened-sources-2.6.25-r10.ebuild:
435     Stable on ppc
436 gengor 1.256
437     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
438     hardened-sources-2.6.25-r10.ebuild:
439     Stable amd64/x86.
440 gengor 1.255
441     *hardened-sources-2.6.26-r6 (12 Nov 2008)
442    
443     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
444     +hardened-sources-2.6.26-r6.ebuild:
445     Bump to Linux 2.6.26.8 and fix security bug #245650.
446 gengor 1.254
447     *hardened-sources-2.6.25-r10 (12 Nov 2008)
448    
449     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
450     +hardened-sources-2.6.25-r10.ebuild:
451     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
452 gengor 1.253
453     *hardened-sources-2.6.27-r1 (09 Nov 2008)
454    
455     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
456     +hardened-sources-2.6.27-r1.ebuild:
457     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
458 gengor 1.252
459     *hardened-sources-2.6.27 (04 Nov 2008)
460    
461     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
462     +hardened-sources-2.6.27.ebuild:
463     Initial 2.6.27 release.
464 gengor 1.251
465     *hardened-sources-2.6.26-r5 (03 Nov 2008)
466    
467     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
468     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
469     +hardened-sources-2.6.26-r5.ebuild:
470     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
471     Clean out some old versions.
472 nixnut 1.250
473     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
474     Stable on ppc
475 gengor 1.249
476     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
477     hardened-sources-2.6.25-r9.ebuild:
478     Stable on amd64/x86.
479 gengor 1.248
480     *hardened-sources-2.6.25-r9 (26 Oct 2008)
481    
482     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
483     +hardened-sources-2.6.25-r9.ebuild:
484     Update to Linux 2.6.25.19
485 nixnut 1.247
486     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
487     Stable on ppc
488 gengor 1.246
489     *hardened-sources-2.6.26-r4 (14 Oct 2008)
490    
491     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
492     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
493     Update to latest grsecurity patch, fixing building of non-modular kernels.
494 gengor 1.245
495     *hardened-sources-2.6.26-r3 (12 Oct 2008)
496    
497     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
498     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
499     +hardened-sources-2.6.26-r3.ebuild:
500     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
501     2.6.26-r1: Removed.
502     2.6.25-r8: Stable amd64/x86.
503 gengor 1.244
504     *hardened-sources-2.6.25-r8 (09 Oct 2008)
505    
506     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
507     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
508     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
509     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
510 nixnut 1.243
511     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
512     Stable on ppc
513 gengor 1.242
514     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
515     hardened-sources-2.6.25-r7.ebuild:
516     Stable amd64/x86.
517 gengor 1.241
518     *hardened-sources-2.6.26-r2 (13 Sep 2008)
519    
520     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
521     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
522     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
523     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
524 gengor 1.240
525     *hardened-sources-2.6.25-r7 (13 Sep 2008)
526    
527     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
528     +hardened-sources-2.6.25-r7.ebuild:
529     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
530 gengor 1.239
531     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
532     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
533     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
534     hardened-sources-2.6.26-r1.ebuild:
535     Update DESCRIPTION and HGPV_URI.
536 gengor 1.238
537     *hardened-sources-2.6.25-r6 (09 Sep 2008)
538    
539     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
540     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
541     2.6.25-r6: Update to Linux 2.6.25.17.
542     2.6.24-r3: Removed.
543 gengor 1.237
544     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
545     hardened-sources-2.6.25-r5.ebuild:
546     Stable on amd64/x86
547 gengor 1.236
548     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
549     Update my email address.
550 nixnut 1.235
551     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
552     stable on ppc
553 battousai 1.234
554     *hardened-sources-2.6.26-r1 (23 Aug 2008)
555     *hardened-sources-2.6.25-r5 (23 Aug 2008)
556    
557     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
558     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
559     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
560     +hardened-sources-2.6.26-r1.ebuild:
561     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
562     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
563     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
564     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
565     (gengor).
566 solar 1.233
567     *hardened-sources-2.6.26 (18 Aug 2008)
568     *hardened-sources-2.6.25-r4 (18 Aug 2008)
569    
570     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
571     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
572     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
573     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
574     2.6.25-r2: Removed.
575 tove 1.232
576     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
577     Remove phreak from metadata.xml (#96398)
578 solar 1.231
579     *hardened-sources-2.6.25-r3 (31 Jul 2008)
580    
581     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
582     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
583     +hardened-sources-2.6.25-r3.ebuild:
584     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
585     fixes, including security bug #231750.
586 nixnut 1.230
587     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
588     Stable on ppc
589 solar 1.229
590     *hardened-sources-2.6.25-r2 (05 Jul 2008)
591    
592     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
593     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
594     +hardened-sources-2.6.25-r2.ebuild:
595     2.6.23-r4: Stable x86/amd64
596     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
597     2.6.23-r{11,12}: Removed due to multiple vulns.
598     (gengor & kerframil)
599 nixnut 1.228
600     04 Jul 2008; nixnut <nixnut@gentoo.org>
601     hardened-sources-2.6.23-r13.ebuild:
602     Stable on ppc
603 solar 1.227
604     *hardened-sources-2.6.25-r1 (30 Jun 2008)
605    
606     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
607     +hardened-sources-2.6.25-r1.ebuild:
608     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
609     grsecurity release. 2.6.23-r13: x86/amd64 stable
610 solar 1.226
611     *hardened-sources-2.6.25 (17 Jun 2008)
612     *hardened-sources-2.6.24-r3 (17 Jun 2008)
613     *hardened-sources-2.6.23-r13 (17 Jun 2008)
614    
615     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
616     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
617     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
618     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
619     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
620     2.6.25: Initial 2.6.25 release.
621 solar 1.225
622     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
623     - fasttrack to stable x86/amd64
624 swegener 1.224
625     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
626     Fix broken digest for linux-2.6.24.tar.bz2.
627 solar 1.223
628     *hardened-sources-2.6.24-r2 (11 May 2008)
629     *hardened-sources-2.6.23-r12 (11 May 2008)
630    
631     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
632     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
633     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
634     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
635     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
636     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
637     security bugs 219901, 220691, 220975, 220979, 221123. New
638     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
639     should be removed as far as I'm concerned, everything else remove due to
640     vulnerable to numerous security bugs or brokeness.
641 nixnut 1.222
642     10 May 2008; nixnut <nixnut@gentoo.org>
643     hardened-sources-2.6.23-r11.ebuild:
644     Stable on ppc
645 solar 1.221
646     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
647     - -r11 stable on x86/amd64
648 solar 1.220
649     *hardened-sources-2.6.23-r11 (01 May 2008)
650    
651     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
652     - version bump to fix ulgy linux bugs
653 phreak 1.219
654     *hardened-sources-2.6.24-r1 (30 Apr 2008)
655    
656     30 Apr 2008; Christian Heim <phreak@gentoo.org>
657     +hardened-sources-2.6.24-r1.ebuild:
658     Revision bump (thanks to Kerin and Gordon, again), pulling
659     genpatches-2.6.24-7, solving #219089. Additionally contains further security
660     fixes plus some minor updates.
661 phreak 1.218
662     *hardened-sources-2.6.23-r10 (30 Apr 2008)
663    
664     30 Apr 2008; Christian Heim <phreak@gentoo.org>
665     +hardened-sources-2.6.23-r10.ebuild:
666     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
667     Additional contains "various other fixes".
668 phreak 1.217
669     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
670     Update the longdescription in metadata, thanks to Gordon Malm.
671 nixnut 1.216
672     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
673     Stable on ppc wrt bug #213255
674 solar 1.215
675     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
676     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
677     - stable on x86/amd64 per request. Removed obsolete ebuilds
678 phreak 1.214
679     *hardened-sources-2.6.24 (07 Apr 2008)
680    
681     07 Apr 2008; Christian Heim <phreak@gentoo.org>
682     +hardened-sources-2.6.24.ebuild:
683     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
684     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
685     for the many contributions and their continued effort in #216612) based on
686     2.6.24 and genpatches-2.6.24-5.
687    
688     The current ebuild/patchset contains these things:
689     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
690     * Introduces bespoke server and workstation oriented security levels
691     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
692 phreak 1.213
693     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
694     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
695     maintaining it).
696 phreak 1.212
697     24 Mar 2008; Christian Heim <phreak@gentoo.org>
698     hardened-sources-2.4.35-r2.ebuild:
699     Fixing SRC_URI for 2.4.35-r2.
700 phreak 1.211
701     *hardened-sources-2.6.23-r9 (22 Mar 2008)
702    
703     22 Mar 2008; Christian Heim <phreak@gentoo.org>
704     +hardened-sources-2.6.23-r9.ebuild:
705     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
706     * Change the default GIDs for some grsecurity options
707     * Revamp the Hardened [Gentoo] security level and make it the default level
708     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
709     * Fix a recursive lock -- call to capable() within ptrace_attach()
710     * Fix bug that allows audit and iscsi operations to be controlled via netlink
711 solar 1.210
712     *hardened-sources-2.6.23-r8 (27 Feb 2008)
713    
714     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
715     - version bump from Kerin Millar bug 210026
716 solar 1.209
717     17 Feb 2008; <solar@gentoo.org> metadata.xml,
718     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
719     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
720     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
721     - stable on x86 and remove old ebuilds
722 solar 1.207
723     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
724 solar 1.208 - stable on amd64 per request of amd64 lead
725 solar 1.206
726     *hardened-sources-2.6.23-r7 (11 Feb 2008)
727    
728     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
729     - version bump from kerin.millar
730     Changes:
731    
732     * Bump to genpatches-base-2.6.23-9
733     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
734     * Disables COMPAT_VDSO in x86/defconfig
735     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
736 phreak 1.205
737     25 Jan 2008; Christian Heim <phreak@gentoo.org>
738     -hardened-sources-2.6.22-r8.ebuild:
739     Cleaning up old versions.
740 phreak 1.204
741     *hardened-sources-2.6.23-r6 (25 Jan 2008)
742    
743     25 Jan 2008; Christian Heim <phreak@gentoo.org>
744     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
745     Revision bump, pulling in the latest genpatches.
746 phreak 1.203
747     *hardened-sources-2.6.23-r5 (24 Dec 2007)
748    
749     24 Dec 2007; Christian Heim <phreak@gentoo.org>
750     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
751     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
752     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
753     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
754 phreak 1.202
755     24 Dec 2007; Christian Heim <phreak@gentoo.org>
756     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
757     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
758     -hardened-sources-2.6.23-r3.ebuild:
759     Cleaning out some unused, old versions.
760 phreak 1.201
761     24 Dec 2007; Christian Heim <phreak@gentoo.org>
762     hardened-sources-2.6.23-r4.ebuild:
763     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
764     in the tree for long, but there isn't much of a difference between this and
765     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
766 phreak 1.200
767     *hardened-sources-2.6.23-r4 (23 Dec 2007)
768    
769     23 Dec 2007; Christian Heim <phreak@gentoo.org>
770     +hardened-sources-2.6.23-r4.ebuild:
771     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
772 phreak 1.199
773     *hardened-sources-2.6.23-r3 (04 Dec 2007)
774    
775     04 Dec 2007; Christian Heim <phreak@gentoo.org>
776     +hardened-sources-2.6.23-r3.ebuild:
777     Revision bump, pulling in 2.6.23.9.
778 phreak 1.198
779     *hardened-sources-2.6.23-r2 (25 Nov 2007)
780    
781     25 Nov 2007; Christian Heim <phreak@gentoo.org>
782     +hardened-sources-2.6.23-r2.ebuild:
783     Updated patchset, thanks to solar.
784 phreak 1.197
785     *hardened-sources-2.6.23-r1 (31 Oct 2007)
786    
787     31 Oct 2007; Christian Heim <phreak@gentoo.org>
788     +hardened-sources-2.6.23-r1.ebuild:
789     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
790 solar 1.196
791     29 Oct 2007; <solar@gentoo.org> metadata.xml:
792     - update metadata.xml
793 phreak 1.195
794     25 Oct 2007; Christian Heim <phreak@gentoo.org>
795     hardened-sources-2.6.22-r8.ebuild:
796     Marking 2.6.22-r8 stable on amd64 and x86.
797 phreak 1.194
798     21 Oct 2007; Christian Heim <phreak@gentoo.org>
799     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
800     -hardened-sources-2.6.21-r4.ebuild:
801     Removing old ebuilds.
802 phreak 1.193
803     *hardened-sources-2.4.35-r2 (21 Oct 2007)
804    
805     21 Oct 2007; Christian Heim <phreak@gentoo.org>
806     +hardened-sources-2.4.35-r2.ebuild:
807     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
808     patches.
809 phreak 1.192
810     *hardened-sources-2.6.22-r8 (21 Oct 2007)
811    
812     21 Oct 2007; Christian Heim <phreak@gentoo.org>
813     +hardened-sources-2.6.22-r8.ebuild:
814     Yet another new patch, hopefully fixing the remaining issues we had w/
815     2.6.22. Candidate for stabling.
816 phreak 1.191
817     *hardened-sources-2.6.23 (13 Oct 2007)
818    
819     13 Oct 2007; Christian Heim <phreak@gentoo.org>
820     +hardened-sources-2.6.23.ebuild:
821     Initial hardened-sources-2.6.23. If people still have problems w/ bug
822     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
823 phreak 1.190
824     11 Oct 2007; Christian Heim <phreak@gentoo.org>
825     hardened-sources-2.6.20-r10.ebuild:
826     Pulling in yet another new genpatches version, fixing the PWC bug for real.
827 phreak 1.189
828     04 Oct 2007; Christian Heim <phreak@gentoo.org>
829     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
830     Removing old versions.
831 phreak 1.188
832     *hardened-sources-2.6.22-r7 (01 Oct 2007)
833    
834     01 Oct 2007; Christian Heim <phreak@gentoo.org>
835     +hardened-sources-2.6.22-r7.ebuild:
836     Revision bump, pulling in a newer patch. Should fix #194276.
837 phreak 1.187
838     30 Sep 2007; Christian Heim <phreak@gentoo.org>
839     hardened-sources-2.6.20-r10.ebuild:
840     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
841     Mike Doty).
842 phreak 1.186
843     *hardened-sources-2.6.22-r6 (26 Sep 2007)
844    
845     26 Sep 2007; Christian Heim <phreak@gentoo.org>
846     +hardened-sources-2.6.22-r6.ebuild:
847     Revision bump, grabbing up till Linux 2.6.22.9.
848 phreak 1.185
849     24 Sep 2007; Christian Heim <phreak@gentoo.org>
850     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
851     Cleaning up further.
852 phreak 1.184
853     *hardened-sources-2.6.20-r10 (24 Sep 2007)
854    
855     24 Sep 2007; Christian Heim <phreak@gentoo.org>
856     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
857     +hardened-sources-2.6.20-r10.ebuild:
858     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
859     revisions.
860 phreak 1.183
861     *hardened-sources-2.6.22-r5 (22 Sep 2007)
862    
863     22 Sep 2007; Christian Heim <phreak@gentoo.org>
864     +hardened-sources-2.6.22-r5.ebuild:
865     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
866 phreak 1.182
867     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
868     Removing johnm from metadata.xml (see #186467 for reference).
869 phreak 1.181
870     *hardened-sources-2.6.22-r4 (17 Sep 2007)
871    
872     17 Sep 2007; Christian Heim <phreak@gentoo.org>
873     +hardened-sources-2.6.22-r4.ebuild:
874     Revision bump, hopefully fixing all those weird PAX failures.
875 phreak 1.180
876     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
877     Updating the metadata.xml.
878 phreak 1.179
879     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
880     Removing tocharian from metadata due to his retirement (see #71718 for
881     reference).
882 phreak 1.178
883     *hardened-sources-2.6.20-r9 (30 Aug 2007)
884    
885     30 Aug 2007; Christian Heim <phreak@gentoo.org>
886     +hardened-sources-2.6.20-r9.ebuild:
887     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
888 phreak 1.177
889     29 Aug 2007; Christian Heim <phreak@gentoo.org>
890     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
891     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
892     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
893     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
894     -hardened-sources-2.6.22-r2.ebuild:
895     Removing some redundant versions.
896 phreak 1.176
897     *hardened-sources-2.4.35-r1 (29 Aug 2007)
898    
899     29 Aug 2007; Christian Heim <phreak@gentoo.org>
900     +hardened-sources-2.4.35-r1.ebuild:
901     Revision bump, new grsecurity patch.
902 phreak 1.175
903     *hardened-sources-2.6.20-r8 (26 Aug 2007)
904    
905     26 Aug 2007; Christian Heim <phreak@gentoo.org>
906     +hardened-sources-2.6.20-r8.ebuild:
907     Revision bump for Linux 2.6.20.17.
908 phreak 1.174
909     *hardened-sources-2.6.22-r3 (22 Aug 2007)
910    
911     22 Aug 2007; Christian Heim <phreak@gentoo.org>
912     +hardened-sources-2.6.22-r3.ebuild:
913     Revision bump for Linux 2.6.22.4.
914 phreak 1.173
915     16 Aug 2007; Christian Heim <phreak@gentoo.org>
916     hardened-sources-2.6.22-r2.ebuild:
917     Updated patchset, to fix the alignment against 2.6.22.3.
918 phreak 1.172
919     *hardened-sources-2.6.22-r2 (16 Aug 2007)
920    
921     16 Aug 2007; Christian Heim <phreak@gentoo.org>
922     +hardened-sources-2.6.22-r2.ebuild:
923     Revision bump for Linux 2.6.22.3.
924 phreak 1.171
925     *hardened-sources-2.4.35 (16 Aug 2007)
926    
927     16 Aug 2007; Christian Heim <phreak@gentoo.org>
928     +hardened-sources-2.4.35.ebuild:
929     Version bump, initial version for Linux 2.4.35.
930 phreak 1.170
931     *hardened-sources-2.6.21-r4 (16 Aug 2007)
932    
933     16 Aug 2007; Christian Heim <phreak@gentoo.org>
934     +hardened-sources-2.6.21-r4.ebuild:
935     Revision bump for Linux 2.6.21.6.
936 phreak 1.169
937     *hardened-sources-2.6.20-r7 (16 Aug 2007)
938    
939     16 Aug 2007; Christian Heim <phreak@gentoo.org>
940     +hardened-sources-2.6.20-r7.ebuild:
941     Revision bump for Linux 2.6.20.16.
942 phreak 1.168
943     *hardened-sources-2.6.22-r1 (13 Aug 2007)
944    
945     13 Aug 2007; Christian Heim <phreak@gentoo.org>
946     +hardened-sources-2.6.22-r1.ebuild:
947     Yet another revision bump.
948 phreak 1.167
949     *hardened-sources-2.6.22 (10 Aug 2007)
950    
951     10 Aug 2007; Christian Heim <phreak@gentoo.org>
952     +hardened-sources-2.6.22.ebuild:
953     Initial release for 2.6.22. If you are using hardened-sources on a desktop
954     machine (P4 or newer), be aware you might need to disable
955     CONFIG_PAX_PAGEEXEC.
956 phreak 1.166
957     04 Aug 2007; Christian Heim <phreak@gentoo.org>
958     hardened-sources-2.6.20-r6.ebuild:
959     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
960     2.6.20.15.
961 phreak 1.165
962     10 Jul 2007; Christian Heim <phreak@gentoo.org>
963     hardened-sources-2.6.20-r5.ebuild:
964     Marking hardened-sources-2.6.20-r5 stable on ppc.
965 phreak 1.164
966     10 Jul 2007; Christian Heim <phreak@gentoo.org>
967     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
968     Cleanup.
969 phreak 1.163
970     *hardened-sources-2.6.20-r6 (08 Jul 2007)
971    
972     08 Jul 2007; Christian Heim <phreak@gentoo.org>
973     +hardened-sources-2.6.20-r6.ebuild:
974     Revision bump, grabbing yet another stable release.
975 phreak 1.162
976     17 Jun 2007; Christian Heim <phreak@gentoo.org>
977     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
978     -hardened-sources-2.6.21-r2.ebuild:
979     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
980     alpha stable KEYWORD by mistake.
981 phreak 1.161
982     17 Jun 2007; Christian Heim <phreak@gentoo.org>
983     hardened-sources-2.6.20-r5.ebuild:
984     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
985     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
986 phreak 1.160
987     *hardened-sources-2.6.21-r3 (12 Jun 2007)
988    
989     12 Jun 2007; Christian Heim <phreak@gentoo.org>
990     +hardened-sources-2.6.21-r3.ebuild:
991     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
992     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
993     love.
994 phreak 1.159
995     *hardened-sources-2.6.20-r5 (11 Jun 2007)
996    
997     11 Jun 2007; Christian Heim <phreak@gentoo.org>
998     +hardened-sources-2.6.20-r5.ebuild:
999     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
1000     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
1001     love.
1002 pappy 1.158
1003     *hardened-sources-2.4.34.5 (11 Jun 2007)
1004    
1005     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
1006     +hardened-sources-2.4.34.5.ebuild:
1007     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
1008 phreak 1.157
1009     30 May 2007; Christian Heim <phreak@gentoo.org>
1010     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
1011     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
1012     stale ebuild(s).
1013 phreak 1.156
1014     30 May 2007; Christian Heim <phreak@gentoo.org>
1015     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
1016     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
1017     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
1018     Doing some cleanups, remove stale ebuilds.
1019 phreak 1.155
1020     26 May 2007; Christian Heim <phreak@gentoo.org>
1021     hardened-sources-2.6.21-r2.ebuild:
1022     Fixing the grsecurity patch, had one '};' too much.
1023 phreak 1.154
1024     *hardened-sources-2.6.21-r2 (26 May 2007)
1025    
1026     26 May 2007; Christian Heim <phreak@gentoo.org>
1027     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
1028     +hardened-sources-2.6.21-r2.ebuild:
1029     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
1030     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
1031 phreak 1.153
1032     *hardened-sources-2.6.20-r4 (26 May 2007)
1033    
1034     26 May 2007; Christian Heim <phreak@gentoo.org>
1035     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
1036     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
1037 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
1038 phreak 1.152
1039     15 May 2007; Christian Heim <phreak@gentoo.org>
1040     hardened-sources-2.6.20-r3.ebuild:
1041     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
1042     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
1043     grsecurity patch fail in that exact same hunk.
1044 phreak 1.151
1045     *hardened-sources-2.6.20-r3 (15 May 2007)
1046    
1047     15 May 2007; Christian Heim <phreak@gentoo.org>
1048     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
1049     Revision bump, incorporating Linux 2.6.20.11.
1050    
1051     *hardened-sources-2.6.21-r1 (11 May 2007)
1052    
1053     11 May 2007; Christian Heim <phreak@gentoo.org>
1054     +hardened-sources-2.6.21-r1.ebuild:
1055     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
1056     mentioned in #177234.
1057 kevquinn 1.150
1058     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
1059     files/digest-hardened-sources-2.6.21, Manifest:
1060     Fix Manifest/digest for linux-2.6.21.tar.bz2
1061 phreak 1.149
1062     06 May 2007; Christian Heim <phreak@gentoo.org>
1063     hardened-sources-2.6.21.ebuild:
1064     Bumping the hardened-patches version, needed for the fix for #177234.
1065 phreak 1.148
1066     *hardened-sources-2.6.21 (02 May 2007)
1067    
1068     02 May 2007; Christian Heim <phreak@gentoo.org>
1069     +hardened-sources-2.6.21.ebuild:
1070     Version bump, Linux 2.6.21-hardened.
1071 phreak 1.147
1072     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1073     hardened-sources-2.6.20-r2.ebuild:
1074     Adding ~ia64 on Ned's request.
1075 phreak 1.146
1076     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1077     hardened-sources-2.6.20-r2.ebuild:
1078     Fixing the included grsecurity patch, wasn't alligning due to the Index:
1079     header line(s).
1080 phreak 1.145
1081     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1082     hardened-sources-2.6.20-r2.ebuild:
1083     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
1084 armin76 1.144
1085     *hardened-sources-2.6.20-r2 (10 Apr 2007)
1086    
1087     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
1088     +hardened-sources-2.6.20-r2.ebuild:
1089     Version bump, on behalf of phreak
1090 phreak 1.143
1091     *hardened-sources-2.6.20-r1 (04 Apr 2007)
1092    
1093     04 Apr 2007; Christian Heim <phreak@gentoo.org>
1094     +hardened-sources-2.6.20-r1.ebuild:
1095     Revision bump, grabbing a newer grsecurity snapshot.
1096 phreak 1.142
1097     *hardened-sources-2.6.20 (25 Mar 2007)
1098    
1099     25 Mar 2007; Christian Heim <phreak@gentoo.org>
1100     +hardened-sources-2.6.20.ebuild:
1101     Finally a hardened-sources version for 2.6.20; many people have been waiting
1102     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
1103     testbox.
1104 chainsaw 1.141
1105     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
1106     hardened-sources-2.6.18-r6.ebuild:
1107     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
1108 phreak 1.140
1109     *hardened-sources-2.6.18-r6 (16 Mar 2007)
1110    
1111     16 Mar 2007; Christian Heim <phreak@gentoo.org>
1112     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1113     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1114     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1115     supposed to be.
1116 phreak 1.139
1117     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1118     Fixing the Manifest, the previous one was broken (as in still had the
1119     deleted ebuild in it).
1120 phreak 1.138
1121     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1122     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1123     +hardened-sources-2.6.18-r5.ebuild:
1124     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1125     Linux 2.6.18.8. Also cleaning up the older version.
1126    
1127     *hardened-sources-2.6.18-r5 (06 Mar 2007)
1128    
1129     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1130     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1131     +hardened-sources-2.6.18-r5.ebuild:
1132     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1133     Linux 2.6.18.8. Also cleaning up the older version.
1134 phreak 1.137
1135     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1136     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1137     -hardened-sources-2.6.19-r5.ebuild:
1138     Removing some of the old version, that didn't work.
1139 phreak 1.136
1140     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1141    
1142     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1143     +hardened-sources-2.6.19-r6.ebuild:
1144     Revision bump, including a new grsec version fixing #166235.
1145 pappy 1.134
1146     *hardened-sources-2.4.34 (24 Jan 2007)
1147    
1148     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1149 pappy 1.135 Manifest:
1150     updating Manifest with checksums of new tarball and ebuild
1151    
1152     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1153 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1154     I added new hardened sources 2.4 update, this is a critical path
1155     security bugfix - all users of h-s are strongly advised
1156     to update their existing hardened sources to this version.
1157     It contains a fix for a kernel vulnerability that is pertaining
1158     to the PaX changes to virtual memory management, possibly leading
1159     to a local kernel exploit ... see grsecurity.net forums and homepage
1160 phreak 1.133
1161     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1162     files/digest-hardened-sources-2.6.19-r5, Manifest:
1163     Fixing the patch-tarball digest.
1164 phreak 1.132
1165     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1166    
1167     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1168     +hardened-sources-2.6.19-r5.ebuild:
1169     Revision bump, closing the recently discovered PaX expand_stack()
1170     vulnerability.
1171 phreak 1.131
1172     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1173    
1174     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1175     +hardened-sources-2.6.19-r4.ebuild:
1176     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1177     dropping the randomized PID feature.
1178 opfer 1.130
1179     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1180     hardened-sources-2.4.33.4.ebuild:
1181     stable x86, bug #161171
1182 phreak 1.129
1183     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1184    
1185     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1186     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1187     Revision bump for bug #157186 and #158786.
1188 phreak 1.128
1189     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1190    
1191     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1192     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1193     Revision bump for bug #157186.
1194 phreak 1.127
1195     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1196    
1197     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1198     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1199     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1200 phreak 1.126
1201     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1202     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1203     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1204     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1205     hardened-sources-2.6.19-r1.ebuild:
1206     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1207     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1208 pappy 1.125
1209     *hardened-sources-2.4.33.4 (17 Dec 2006)
1210    
1211     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1212     +hardened-sources-2.4.33.4.ebuild:
1213     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1214     and quilting
1215 phreak 1.124
1216     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1217    
1218     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1219     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1220     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1221     for reporting).
1222 phreak 1.123
1223     *hardened-sources-2.6.19 (13 Dec 2006)
1224    
1225     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1226     +hardened-sources-2.6.19.ebuild:
1227     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1228     Brad for providing that prompt update.
1229 phreak 1.122
1230     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1231    
1232     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1233     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1234     +hardened-sources-2.6.18-r3.ebuild:
1235     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1236     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1237 phreak 1.121
1238     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1239     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1240 nixnut 1.120
1241     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1242     Stable on ppc wrt bug 157356
1243 opfer 1.119
1244     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1245     hardened-sources-2.6.18.ebuild:
1246     stable x86, bug #157356
1247 phreak 1.118
1248     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1249    
1250     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1251     +hardened-sources-2.6.18-r2.ebuild:
1252     Revision bump, including 2.6.18.5 (via genpatches) and
1253     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1254     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1255     redesign.
1256 phreak 1.117
1257     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1258     hardened-sources-2.6.18.ebuild:
1259     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1260     of Mike Doty).
1261 phreak 1.116
1262     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1263    
1264     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1265     +hardened-sources-2.6.18-r1.ebuild:
1266     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1267 phreak 1.115
1268     *hardened-sources-2.6.18 (11 Nov 2006)
1269    
1270     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1271     +hardened-sources-2.6.18.ebuild:
1272     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1273 solar 1.114
1274     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1275     - mark amd64 stable also. bug #151877
1276 solar 1.113
1277     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1278     - mark 2.6.17-r1 stable
1279 phreak 1.112
1280     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1281     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1282     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1283 phreak 1.111
1284     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1285    
1286     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1287     +hardened-sources-2.6.17-r1.ebuild:
1288     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1289     grsecurity patch.
1290 phreak 1.110
1291     *hardened-sources-2.6.17 (17 Aug 2006)
1292    
1293     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1294     +hardened-sources-2.6.17.ebuild:
1295     Bumping the hardened-sources-2.6 series to 2.6.17, using
1296     genpatches-2.6.17-6.base.
1297 solar 1.109
1298     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1299     - stable on x86 and amd64
1300 solar 1.108
1301     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1302    
1303     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1304     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1305     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1306     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1307     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1308     crusty ebuilds
1309 johnm 1.107
1310     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1311     hardened-sources-2.6.16-r10.ebuild:
1312     marking stable on x86 and amd64
1313 solar 1.106
1314     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1315     - 2.4.32-r6 stable on x86. RSBAC state unknown
1316 kang 1.105
1317     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1318    
1319     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1320     +hardened-sources-2.4.32-r7.ebuild:
1321     Bump PaX for RSBAC to test-17
1322 johnm 1.104
1323     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1324    
1325     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1326     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1327     hardened-sources-2.6.16 bump to latest -base.
1328 solar 1.103
1329     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1330    
1331     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1332     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1333     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1334     sysctl controlable resource logging
1335 johnm 1.102
1336     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1337    
1338     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1339     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1340     push new 2.6.16 release in preparation for stable
1341 solar 1.101
1342     22 May 2006; <solar@gentoo.org> :
1343     - redigest bug 134002
1344 kang 1.100
1345     *hardened-sources-2.4.32-r5 (16 May 2006)
1346    
1347     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1348     +hardened-sources-2.4.32-r5.ebuild:
1349     Fixes rsbac common patching (new patch in new -r5 patchset)
1350 solar 1.99
1351     *hardened-sources-2.4.32-r4 (13 May 2006)
1352    
1353     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1354     +hardened-sources-2.4.32-r4.ebuild:
1355     - security bumps
1356 johnm 1.98
1357     *hardened-sources-2.6.16-r6 (03 May 2006)
1358    
1359     03 May 2006; John Mylchreest <johnm@gentoo.org>
1360     +hardened-sources-2.6.16-r6.ebuild:
1361     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1362 johnm 1.97
1363     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1364     hardened-sources-2.6.14-r8.ebuild:
1365     fix x86_64 build problem, this will delay the digest issue again for a short
1366     while but it will sort itself out
1367 johnm 1.96
1368     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1369     hardened-sources-2.6.14-r8.ebuild:
1370     bump hardened patchset
1371 antarus 1.94
1372     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1373     files/digest-hardened-sources-2.4.32-r2,
1374     files/digest-hardened-sources-2.4.32-r3,
1375     files/digest-hardened-sources-2.6.14-r8, Manifest:
1376     Fixing duff SHA256 digests: Bug # 131293
1377 johnm 1.93
1378 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1379    
1380     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1381     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1382     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1383     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1384     cleanup of old uneccessary sources
1385    
1386 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1387     fix digest
1388 johnm 1.92
1389     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1390    
1391     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1392     +hardened-sources-2.6.14-r8.ebuild:
1393     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1394 johnm 1.91
1395     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1396     Turning on gpg-signing again, and recomitting
1397 johnm 1.90
1398     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1399    
1400     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1401     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1402     +hardened-sources-2.6.16-r4.ebuild:
1403     Fix numerous security vulns
1404 solar 1.89
1405     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1406    
1407     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1408     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1409     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1410     - security bump for bug #112791. Removed old ebuilds
1411 johnm 1.88
1412     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1413    
1414     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1415     +hardened-sources-2.6.16-r3.ebuild:
1416     Removing silly localversion which I missed
1417 johnm 1.87
1418     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1419    
1420     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1421     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1422     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1423 johnm 1.86
1424     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1425    
1426     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1427     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1428     +hardened-sources-2.6.16-r2.ebuild:
1429     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1430     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1431 johnm 1.85
1432     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1433    
1434     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1435     +hardened-sources-2.6.16-r1.ebuild:
1436     Bumping to include ppc build fix and 2.6.16.3
1437 tsunam 1.84
1438     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1439     hardened-sources-2.6.14-r6.ebuild:
1440     Stable on x86; bug #127718
1441 johnm 1.83
1442     *hardened-sources-2.6.16 (31 Mar 2006)
1443    
1444     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1445     +hardened-sources-2.6.16.ebuild:
1446     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1447     2.6.16.1
1448 cryos 1.82
1449     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1450     hardened-sources-2.6.14-r6.ebuild:
1451     Stable on amd64, bug 127718.
1452 nixnut 1.81
1453     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1454     Stable on ppc. Bug #127718
1455 johnm 1.80
1456     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1457     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1458     -hardened-sources-2.6.14-r4.ebuild:
1459     Cleanup.
1460 johnm 1.79
1461     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1462    
1463     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1464     +hardened-sources-2.6.14-r6.ebuild:
1465     Fixes grsec policy recreation bug and adds a
1466     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1467 solar 1.78
1468     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1469     - stable on x86
1470 hansmi 1.77
1471     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1472     hardened-sources-2.6.14-r5.ebuild:
1473     Stable on ppc.
1474 johnm 1.76
1475     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1476    
1477     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1478     +hardened-sources-2.6.14-r5.ebuild:
1479     fixing every known exploit
1480 solar 1.75
1481     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1482    
1483     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1484     +hardened-sources-2.4.32-r2.ebuild:
1485     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1486 solar 1.74
1487     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1488    
1489     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1490     - version bump for new genpatches which fix up a few sec holes
1491 solar 1.73
1492     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1493    
1494     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1495     - revision bump to add misc vital linux kernel security patches.
1496 johnm 1.72
1497     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1498    
1499     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1500     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1501     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1502 johnm 1.71
1503     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1504     hardened-sources-2.6.14-r2.ebuild:
1505     making x86 & amd64 stable following testing.
1506 johnm 1.70
1507     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1508    
1509     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1510     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1511     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1512     network hooks.
1513 johnm 1.69
1514     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1515     hardened-sources-2.6.14-r1.ebuild:
1516     bumping to stable early for sec fix on x86 & amd64
1517 johnm 1.68
1518     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1519    
1520     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1521     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1522     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1523 solar 1.67
1524     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1525     - stable on x86 security bug #114227 CAN-2005-3257
1526 kang 1.66
1527     *hardened-sources-2.4.32 (19 Nov 2005)
1528    
1529     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1530     +hardened-sources-2.4.32.ebuild:
1531     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1532     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1533     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1534     rsbac >> /etc/portage/package.use)
1535 johnm 1.65
1536     *hardened-sources-2.6.14 (14 Nov 2005)
1537    
1538     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1539     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1540     Bumping 2.6 series to 2.6.14.2
1541 johnm 1.64
1542     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1543    
1544     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1545     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1546     +hardened-sources-2.6.13-r2.ebuild:
1547     Fixes minor build error in ppc.
1548 johnm 1.63
1549     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1550    
1551     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1552     +hardened-sources-2.6.13-r1.ebuild:
1553     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1554     2.6.13.4, fixes some major amd64 stability problems.
1555 johnm 1.62
1556     *hardened-sources-2.6.13 (16 Sep 2005)
1557    
1558     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1559     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1560     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1561     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1562     users should test this thoroughly.
1563 solar 1.61
1564     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1565     - stable on x86
1566 johnm 1.60
1567     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1568    
1569     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1570     +hardened-sources-2.6.11-r15.ebuild:
1571     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1572     grsec redefining curr_ip struct.
1573 solar 1.59
1574     *hardened-sources-2.4.31 (20 Jun 2005)
1575    
1576     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1577     initial import of 2.4.31 tree
1578 johnm 1.58
1579     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1580    
1581     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1582     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1583     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1584     naming scheme to abide by genpatches
1585 johnm 1.57
1586     *hardened-sources-2.6.11-r13 (18 May 2005)
1587    
1588     18 May 2005; John Mylchreest <johnm@gentoo.org>
1589     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1590     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1591     target. sorry about that. Fixes bug #93022
1592 johnm 1.56
1593     *hardened-sources-2.6.11-r12 (17 May 2005)
1594    
1595     17 May 2005; John Mylchreest <johnm@gentoo.org>
1596     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1597     +hardened-sources-2.6.11-r12.ebuild:
1598     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1599     merges in genpatches-base
1600 johnm 1.55
1601     *hardened-sources-2.6.11-r12 (17 May 2005)
1602    
1603     17 May 2005; John Mylchreest <johnm@gentoo.org>
1604     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1605     +hardened-sources-2.6.11-r12.ebuild:
1606     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1607     merges in genpatches-base
1608 solar 1.54
1609     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1610     -files/2.4.27-cmdline-race.patch,
1611     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1612     -files/2.4.28-grsec-binfmt_a.out.patch,
1613     -files/2.4.28-grsec-cmdline-race.patch,
1614     -files/2.4.28-selinux-binfmt_a.out.patch,
1615     -files/2.4.28-selinux-cmdline-race.patch,
1616     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1617     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1618     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1619     cleanup..
1620 solar 1.53
1621     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1622    
1623     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1624     - disable aout by default
1625 solar 1.52
1626     *hardened-sources-2.4.30 (18 Apr 2005)
1627    
1628     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1629     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1630     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1631     use
1632 tocharian 1.50
1633 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1634    
1635     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1636     +hardened-sources-2.4.29.ebuild:
1637     New hardened-patches-2.4-29.0 patchball.
1638     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1639    
1640     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1641    
1642     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1643     +hardened-sources-2.4.28-r5.ebuild:
1644     Added a fix for a PaX vulnerability.
1645    
1646     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1647 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1648     Stable on x86
1649 solar 1.49
1650     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1651     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1652     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1653     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1654     - fixed/added RDEPEND= in all kernel-2 ebuilds
1655 tocharian 1.48
1656     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1657    
1658     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1659     +hardened-sources-2.4.28-r4.ebuild:
1660     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1661     backport of neighbour hash updates.
1662 tocharian 1.47
1663     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1664     hardened-sources-2.4.28-r3.ebuild:
1665     Stable on x86
1666 tseng 1.46
1667     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1668    
1669     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1670     +hardened-sources-2.6.10-r3.ebuild:
1671     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1672     in 2005.0
1673 tocharian 1.45
1674     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1675     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1676     hardened-sources-2.4.28-r2.ebuild:
1677     Mark stable on x86
1678 tocharian 1.44
1679     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1680    
1681     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1682     +hardened-sources-2.4.28-r3.ebuild:
1683     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1684 tocharian 1.43
1685     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1686     hardened-sources-2.4.28.ebuild:
1687     Mark stable on x86.
1688 tocharian 1.42
1689     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1690    
1691     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1692     +hardened-sources-2.4.28-r2.ebuild:
1693     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1694     Mazinger for grsecurity patches as well.
1695 plasmaroo 1.41
1696     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1697    
1698     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1699     Security bump. Thank tocharian for rolling a new patchset...
1700 solar 1.40
1701     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1702     +files/2.4.28-grsec-cmdline-race.patch,
1703     +files/2.4.28-selinux-binfmt_a.out.patch,
1704     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1705     - Round up remaining security patches that appear to be missing in 2.4.28. -
1706     PaX standalone updated to current. hgpv=28.1
1707 solar 1.39
1708     *hardened-sources-2.4.28 (28 Nov 2004)
1709    
1710     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1711     security bump. Thank tocharian for rolling a new patchset
1712 scox 1.31
1713 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1714    
1715     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1716     +hardened-sources-2.4.27-r3.ebuild:
1717     Applies the new 2.4-27.2 patchball which updates
1718     GRSecurity to the 2.0.1 version.
1719    
1720 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1721    
1722     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1723     +hardened-sources-2.4.27-r2.ebuild:
1724     Version bump.
1725     This version uses the new 2.4-27.1 patchball which updates
1726     both the SELinux PaX hooks patch and the SELinux headers.
1727    
1728 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1729    
1730     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1731     +hardened-sources-2.4.27-r1.ebuild,
1732     -hardened-sources-2.4.27.ebuild,
1733     +files/2.4.27-cmdline-race.patch:
1734     Version bump, fix for cmdline race. See bug #59905.
1735    
1736     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1737    
1738     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1739     +hardened-sources-2.4.26-r6.ebuild,
1740     -hardened-sources-2.4.26-r5.ebuild,
1741     -hardened-sources-2.4.26-r4.ebuild,
1742     +files/2.4.26-cmdline-race.patch:
1743     Version bump, fix for cmdline race. See bug #59905.
1744    
1745 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1746    
1747     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1748     +hardened-sources-2.4.27.ebuild,
1749     +files/2.4.27-CAN-2004-0394.patch:
1750     Ported the patchball to the 2.4.27 kernel version.
1751    
1752 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1753    
1754     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1755     +hardened-sources-2.4.26-r5.ebuild:
1756 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1757 scox 1.34 It adds the following features:
1758     - Squashfs
1759     - Ebtables
1760     - Netdev random (core+drivers)
1761     - Watchdog Timer (WDT) fix.
1762    
1763 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1764    
1765     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1766     +hardened-sources-2.4.26-r4.ebuild,
1767     +files/2.4.26-CAN-2004-0415.patch,
1768     -hardened-sources-2.4.26-3:
1769     Version bump, fix for CAN 0415, see bug #59378.
1770    
1771 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1772    
1773     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1774     +hardened-sources-2.4.26-r3.ebuild,
1775     +files/2.4.26-CAN-2004-0497.patch,
1776     -hardened-sources-2.4.26-r2.ebuild:
1777     Version bump, fixed CAN 0497, see bug #56171.
1778    
1779 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1780    
1781     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1782 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1783 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1784     +files/2.4.26-CAN-2004-0535.patch,
1785     -hardened-sources-2.4.26-r1.ebuild:
1786     Fixes for both CAN 0495 and 0535, see bug #54976
1787 pvdabeel 1.27
1788 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1789     hardened-sources-2.4.26-r1.ebuild:
1790     QA - fix use invocation
1791 scox 1.28
1792     *hardened-sources-2.4.26-r1 (22 June 2004)
1793    
1794     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1795     +hardened-sources-2.4.26-r1.ebuild,
1796     +files/2.4.26-CAN-2004-0394.patch,
1797     +files/2.4.26-signal-race.patch,
1798     -hardened-sources-2.4.26.ebuild,
1799     -hardened-sources-2.4.24-r3.ebuild:
1800     Version bump for the CAN-2004-0394 issue and bug #53804
1801     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1802    
1803    
1804 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1805     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1806     Masked hardened-sources-2.4.26.ebuild broken for ppc
1807    
1808     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1809     hardened-sources-2.4.24-r3.ebuild:
1810     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1811 plasmaroo 1.25
1812 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1813    
1814     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1815     +hardened-sources-2.4.26.ebuild:
1816     Updated hardened-sources for the 2.4.26 kernel
1817     Removed broken components, updated almost everything.
1818    
1819 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1820    
1821     17 Apr 2004; <plasmaroo@gentoo.org>
1822     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1823     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1824     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1825     +hardened-sources-2.4.24-r3.ebuild:
1826     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1827     vulnerabilities. Old revisions removed.
1828 plasmaroo 1.24
1829     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1830    
1831     15 Apr 2004; <plasmaroo@gentoo.org>
1832     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1833     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1834     Version bump for the CAN-2004-0109 issue; bug #47881.
1835 aliz 1.23
1836     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1837     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1838     Add eutils to inherit.
1839 plasmaroo 1.22
1840     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1841    
1842     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1843     files/hardened-sources-2.4.24.munmap.patch:
1844     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1845 scox 1.19
1846 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1847 scox 1.26
1848 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1849     hardened-sources-2.4.24.ebuild:
1850     Version bump, updated most of the components.
1851     This release includes the following:
1852    
1853     - Hardened security
1854     - Netfilter patch-o-matic 20031219
1855     - FreeSWAN 2.04 & x509 1.4.8
1856     - EVMS 2.2.2
1857     - XFS 1.3.1
1858     - cryptoloop jari
1859     - grsecurity 2.0-rc4
1860     - SELinux
1861     - PaX 200402060000
1862     - PaX Obscurity 200308302223
1863     - Others...
1864    
1865     Neither -ck nor systrace are included anymore.
1866    
1867 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1868    
1869     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1870     hardened-sources-2.4.22-r2.ebuild:
1871 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1872 scox 1.19
1873     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1874 iggy 1.17
1875     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1876 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1877 iggy 1.16
1878     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1879 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1880     Version bump for the 'do_brk' vulnerability.
1881 iggy 1.15
1882     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1883     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1884     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1885     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1886 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1887 frogger 1.14
1888     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1889     hardened-sources-2.4.22.ebuild:
1890 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1891     components. These are no longer handled in the kernel
1892     so this code was not necessary.
1893 frogger 1.13
1894     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1895     New 2.4.22 based hardened-sources thanks to
1896     Phil West <p.west@computer.org>.
1897    
1898     These sources include:
1899 plasmaroo 1.18 - New SELinux API
1900     - Updated CK-base
1901     - Updated GRSec
1902     - Systrace
1903     - SuperFreeS/WAN 1.99.8
1904     - Propolice kernel build support
1905     - EVMS
1906     - Other various security related patches
1907 frogger 1.11
1908 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1909    
1910     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1911     Updated hardened-sources based on the 2.4.21 Linux kernel.
1912     This includes updates to most major components such as:
1913 plasmaroo 1.18 - ck-base-0306300059
1914     - selinux-2.4-2003071106
1915     - grsecurity-2.0-rc1
1916     - Updated IPTables patch-o-matic
1917     - Updated SuperFreeS/WAN
1918    
1919 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1920     updated patch set ready for the 2.4.21 based kernel.
1921    
1922 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1923     Initial import of hardened-sources-2.4.20-r4. This revision
1924     includes only a few changes, but one of these is an important
1925     security fix. It is recommended all users of hardened-sources
1926     upgrade to this release.
1927 plasmaroo 1.18
1928 frogger 1.11 - ioperm bug fix
1929     - fixed compilation failure when building without GRSec
1930 plasmaroo 1.18
1931 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1932     due to time constraints, but is planned for inclusion in the near
1933     future.
1934 msterret 1.10
1935     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1936    
1937     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1938     hardened-sources-2.4.20-r3.ebuild:
1939 plasmaroo 1.18 Add Header...
1940 frogger 1.9
1941     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1942     hardened-sources-2.4.20-r3.ebuild:
1943     Removed warnings from ebuild. This kernel should be safe to
1944     use at this point.
1945 frogger 1.8
1946     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1947    
1948     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1949     hardened-sources-2.4.20-r3.ebuild:
1950     New revision. Includes the following changes over -r2:
1951 plasmaroo 1.18
1952 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1953     - Super FreeS/WAN 1.99.7rc2
1954     - PaX for the LSM/SELinux branch
1955     - GRSecurity 2.0-pre4 (role based access control)
1956     - Systrace 1.3
1957     - EXT3 fixes
1958     - EVMS 2.0.1
1959     - GCC 3.1+ compile optimizations
1960     - ProPolice kernel build support
1961     - Hashing table security fixes
1962 frogger 1.3
1963     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1964 frogger 1.7
1965     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1966     Initial import of hardened-sources-r2. This new
1967     ebuild includes many new performance and security
1968     related patches. As in -r1, it will patch in
1969     LSM/SELinux if "selinux" is in USE, otherwise it
1970     will patch in GRSecurity. The following patches
1971     are included in this revision:
1972 plasmaroo 1.18
1973 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1974     (pulled from the base CK patch)
1975     - ptrace exploit patch for the LSM kernel
1976     (the GRSec patch already fixes this)
1977     - LSM 2.4-2003040709
1978     - SELinux 2.4-2003040709
1979     - Systrace v1.2
1980     - IPTables patch-o-matic base patches - 20030107
1981     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1982     - Super FreeS/WAN 1.99.6.1
1983     - GRSecurity 1.9.9g
1984     - MPPE
1985     - EXT3 data journal fix
1986     - CIPE 1.5.4
1987 frogger 1.6
1988     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1989     hardened-sources-2.4.20-r1.ebuild, manifest:
1990 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1991 frogger 1.5
1992     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1993     hardened-sources-2.4.20-r1.ebuild:
1994     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
1995     is patched in instead. Ptrace patches for selinux have also been added. In
1996     either case, systrace support will be patched in as well.
1997 frogger 1.3
1998     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1999     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
2000 plasmaroo 1.18 Revision bump for new sources.
2001 frogger 1.4
2002 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2003 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
2004 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
2005 method 1.1
2006 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
2007    
2008 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
2009     hardened-sources-2.4.20.ebuild:
2010 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20