/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.340 - (hide annotations) (download)
Tue Sep 28 02:17:03 2010 UTC (3 years, 6 months ago) by blueness
Branch: MAIN
Changes since 1.339: +7 -1 lines
hardened-sources-2.6.35 based on grsec-2.2.0-2.6.35.6-201009262116
(Portage version: 2.1.8.3/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.340 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.339 2010/09/21 20:31:48 blueness Exp $
4    
5     *hardened-sources-2.6.35 (28 Sep 2010)
6    
7     28 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
8     +hardened-sources-2.6.35.ebuild:
9     hardened-sources-2.6.35 based on grsec-2.2.0-2.6.35.6-201009262116
10 blueness 1.339
11     21 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
12     -hardened-sources-2.6.32-r14.ebuild, -hardened-sources-2.6.32-r15.ebuild,
13     hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.34-r2.ebuild,
14     -hardened-sources-2.6.34-r3.ebuild, hardened-sources-2.6.34-r6.ebuild:
15     Fast track stabilization. See bug #338273. Removed older versions.
16 blueness 1.338
17     *hardened-sources-2.6.34-r6 (17 Sep 2010)
18     *hardened-sources-2.6.32-r18 (17 Sep 2010)
19    
20     17 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
21     +hardened-sources-2.6.32-r18.ebuild, +hardened-sources-2.6.34-r6.ebuild:
22     hardened-sources-2.6.32-r18 based on 2.6.32.21 + genpatches +
23     grsec-2.2.0-2.6.32.21-201009162222
24     hardened-sources-2.6.34-r6 based on 2.6.34.7 + genpatches +
25     grsec-2.2.0-2.6.34.7-201009162222
26     Addresses IA32 syscall exploit.
27 blueness 1.337
28     *hardened-sources-2.6.34-r5 (15 Sep 2010)
29     *hardened-sources-2.6.32-r17 (15 Sep 2010)
30    
31     15 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
32     +hardened-sources-2.6.32-r17.ebuild, +hardened-sources-2.6.34-r5.ebuild:
33     hardened-sources-2.6.32-r17 based on 2.6.32.21 + genpatches +
34     grsec-2.2.0-2.6.32.21-201009130811
35     hardened-sources-2.6.34-r5 based on 2.6.34.6 + genpatches +
36     grsec-2.2.0-2.6.34.6-201009130754
37 blueness 1.336
38     *hardened-sources-2.6.34-r4 (07 Sep 2010)
39     *hardened-sources-2.6.32-r16 (07 Sep 2010)
40    
41     07 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
42     +hardened-sources-2.6.32-r16.ebuild, +hardened-sources-2.6.34-r4.ebuild:
43     hardened-sources-2.6.32-r16 based on 2.6.32.21 +
44     grsec-2.2.0-2.6.32.21-201009032133
45     hardened-sources-2.6.34-r4 based on 2.6.34.6 +
46     grsec-2.2.0-2.6.34.6-201009041352
47 blueness 1.335
48     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org> ChangeLog:
49     hardened-sources-2.6.32-r15 based on 2.6.32.21 +
50     grsec-2.2.0-2.6.32.21-201008292122
51     hardened-sources-2.6.34-r3 based on 2.6.34.6 +
52     grsec-2.2.0-2.6.34.6-201008292122
53 blueness 1.334
54     *hardened-sources-2.6.34-r3 (02 Sep 2010)
55     *hardened-sources-2.6.32-r15 (02 Sep 2010)
56    
57     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
58     -hardened-sources-2.6.32-r10.ebuild, -hardened-sources-2.6.32-r11.ebuild,
59     -hardened-sources-2.6.32-r12.ebuild, -hardened-sources-2.6.32-r13.ebuild,
60     +hardened-sources-2.6.32-r15.ebuild, -hardened-sources-2.6.34-r1.ebuild,
61     +hardened-sources-2.6.34-r3.ebuild:
62     Bumps and remove deprecated versions
63 blueness 1.333
64     *hardened-sources-2.6.34-r2 (21 Aug 2010)
65    
66     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
67     +hardened-sources-2.6.34-r2.ebuild:
68     Based on vanilla 2.6.34.4 + genpatches + grsec-2.2.0-2.6.34.4-201008131840
69 blueness 1.332
70     *hardened-sources-2.6.32-r14 (21 Aug 2010)
71    
72     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
73     +hardened-sources-2.6.32-r14.ebuild:
74     Based on vanilla 2.6.32.19 + genpatches +
75     grsec-2.2.0-2.6.32.19-201008131840
76 blueness 1.331
77     *hardened-sources-2.6.32-r13 (14 Aug 2010)
78    
79     14 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
80     +hardened-sources-2.6.32-r13.ebuild:
81     Based on vanilla 2.6.32.18 + genpatches +
82     grsecurity-2.2.0-2.6.32.18-201008112233
83 robbat2 1.330
84     03 Aug 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
85     kernel-2 deblob support for 2.6.35; bug #324505: deblob-check usage.
86 blueness 1.329
87     01 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
88     hardened-sources-2.6.32-r9.ebuild:
89     Stable ppc64. Bug #326885
90 blueness 1.328
91     *hardened-sources-2.6.32-r12 (24 Jul 2010)
92    
93     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
94     +hardened-sources-2.6.32-r12.ebuild:
95     Parallels fix incorporated into hardened-sources-2.6.34-r1
96 blueness 1.327
97     *hardened-sources-2.6.34-r1 (24 Jul 2010)
98    
99     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
100     -hardened-sources-2.6.34.ebuild, +hardened-sources-2.6.34-r1.ebuild:
101     Fixes bug #328275
102 chainsaw 1.326
103     21 Jul 2010; <chainsaw@gentoo.org> metadata.xml:
104     Address metadata concerns by Jeroen "rej" Roovers <rej@gentoo.org> raised
105     on gentoo-dev.
106 jer 1.325
107     21 Jul 2010; Jeroen Roovers <jer@gentoo.org> metadata.xml:
108     Correct mail address.
109 blueness 1.324
110     18 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
111     -hardened-sources-2.6.25-r13.ebuild, -hardened-sources-2.6.26-r9.ebuild,
112     -hardened-sources-2.6.28-r7.ebuild, -hardened-sources-2.6.29.ebuild,
113     -hardened-sources-2.6.32-r8.ebuild:
114     Removing outdated releases
115 fauli 1.323
116     17 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
117     hardened-sources-2.6.32-r9.ebuild:
118     stable x86, bug 326885
119 blueness 1.322
120     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
121     -hardened-sources-2.6.32-r7.ebuild:
122     Removed for security. Bug #325573
123 blueness 1.321
124     *hardened-sources-2.6.34 (13 Jul 2010)
125    
126     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
127     +hardened-sources-2.6.34.ebuild:
128     Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
129 blueness 1.320
130     *hardened-sources-2.6.32-r11 (13 Jul 2010)
131    
132     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
133     +hardened-sources-2.6.32-r11.ebuild:
134     New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
135 chainsaw 1.319
136     06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
137     Marked stable on AMD64 as requested by Anthony G. Basile
138     <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
139     on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
140 blueness 1.318
141     *hardened-sources-2.6.32-r10 (30 Jun 2010)
142    
143     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
144     +hardened-sources-2.6.32-r10.ebuild:
145     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
146 blueness 1.317
147     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
148     Added myself to the metadata.xml
149 chainsaw 1.316
150     *hardened-sources-2.6.32-r9 (11 Jun 2010)
151    
152     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
153     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
154 chainsaw 1.315
155     *hardened-sources-2.6.32-r8 (01 Jun 2010)
156    
157     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
158     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
159 chainsaw 1.314
160     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
161     Update SRC_URI to point to mirror network now that the distfile has
162     propagated.
163 chainsaw 1.313
164     *hardened-sources-2.6.32-r7 (26 May 2010)
165    
166     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
167     metadata.xml:
168     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
169     Summers.
170 robbat2 1.312
171     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
172     Update Manifest for deblob support in kernel-2 eclass.
173 nixnut 1.311
174     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
175     ppc stable
176 gengor 1.310
177     29 May 2009; Gordon Malm <gengor@gentoo.org>
178     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
179     Stable amd64/x86 and remove old.
180 gengor 1.309
181     *hardened-sources-2.6.29 (25 May 2009)
182    
183     25 May 2009; Gordon Malm <gengor@gentoo.org>
184     +hardened-sources-2.6.29.ebuild:
185     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
186     release candidates.
187 gengor 1.308
188     *hardened-sources-2.6.28-r9 (25 May 2009)
189    
190     25 May 2009; Gordon Malm <gengor@gentoo.org>
191     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
192     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
193 gengor 1.307
194     *hardened-sources-2.6.28-r8 (18 May 2009)
195    
196     18 May 2009; Gordon Malm <gengor@gentoo.org>
197     +hardened-sources-2.6.28-r8.ebuild:
198     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
199     and #262862 among others.
200 gengor 1.306
201     01 May 2009; Gordon Malm <gengor@gentoo.org>
202     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
203     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
204     Remove unnecessary mirror://gentoo from SRC_URI.
205 nixnut 1.305
206     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
207     ppc stable
208 gengor 1.304
209     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
210     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
211     Stable amd64/x86 and remove old.
212 gengor 1.303
213     *hardened-sources-2.6.28-r7 (27 Mar 2009)
214    
215     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
216     +hardened-sources-2.6.28-r7.ebuild:
217     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
218 gengor 1.302
219     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
220     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
221     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
222     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
223     Stable amd64/x86 and remove old versions.
224 nixnut 1.301
225     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
226     ppc stable
227 gengor 1.300
228     *hardened-sources-2.6.28-r6 (21 Mar 2009)
229    
230     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
231     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
232     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
233 gengor 1.299
234     *hardened-sources-2.6.28-r5 (20 Mar 2009)
235    
236     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
237     +hardened-sources-2.6.28-r5.ebuild:
238     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
239 gengor 1.298
240     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
241     hardened-sources-2.6.28-r4.ebuild:
242     Stable amd64/x86.
243 gengor 1.297
244     *hardened-sources-2.6.28-r4 (18 Mar 2009)
245    
246     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
247     +hardened-sources-2.6.28-r4.ebuild:
248     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
249     compilation with CPA_DEBUG and more.
250 gengor 1.296
251     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
252     hardened-sources-2.6.28-r3.ebuild:
253     Quick stable amd64/x86.
254 gengor 1.295
255     *hardened-sources-2.6.28-r3 (15 Mar 2009)
256    
257     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
258     +hardened-sources-2.6.28-r3.ebuild:
259     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
260 nixnut 1.294
261     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
262     ppc stable
263 gengor 1.293
264     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
265     hardened-sources-2.6.28-r2.ebuild:
266     Stable amd64/x86.
267 gengor 1.292
268     *hardened-sources-2.6.28-r2 (11 Mar 2009)
269    
270     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
271     +hardened-sources-2.6.28-r2.ebuild:
272     Version bump bringing in latest grsecurity patch.
273 gengor 1.291
274     *hardened-sources-2.6.28-r1 (09 Mar 2009)
275    
276     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
277     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
278     Version bump and remove old.
279 nixnut 1.290
280     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
281     ppc stable
282 gengor 1.289
283     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
284     hardened-sources-2.6.27-r8.ebuild:
285     Remove amd64 testing keyword, bug 256226.
286 gengor 1.288
287     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
288     hardened-sources-2.6.27-r8.ebuild:
289     Revert amd64 stable, bug #256226.
290 gengor 1.287
291     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
292     hardened-sources-2.6.27-r8.ebuild:
293     Stable on amd64/x86.
294 gengor 1.286
295     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
296     -hardened-sources-2.6.27-r6.ebuild:
297     Remove old 2.6.27 release.
298 gengor 1.285
299     *hardened-sources-2.6.27-r8 (24 Feb 2009)
300    
301     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
302     +hardened-sources-2.6.27-r8.ebuild:
303     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
304     and probably more.
305 nixnut 1.284
306     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
307     ppc stable
308 gengor 1.283
309     *hardened-sources-2.6.28 (25 Jan 2009)
310    
311     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
312     +hardened-sources-2.6.28.ebuild:
313     Initial 2.6.28 release.
314 gengor 1.282
315     *hardened-sources-2.6.27-r7 (25 Jan 2009)
316    
317     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
318     +hardened-sources-2.6.27-r7.ebuild:
319     Bump to Linux 2.6.27.13.
320 gengor 1.281
321     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
322     hardened-sources-2.6.26-r9.ebuild:
323     Stable amd64/x86.
324 gengor 1.280
325     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
326     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
327     -hardened-sources-2.6.27-r5.ebuild:
328     Remove problem versions.
329 gengor 1.279
330     *hardened-sources-2.6.27-r6 (24 Jan 2009)
331    
332     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
333     +hardened-sources-2.6.27-r6.ebuild:
334     Revert PaX test29 to test30 changes. Fixes bug 256226.
335 gengor 1.277
336     *hardened-sources-2.6.27-r5 (24 Jan 2009)
337    
338     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
339     +hardened-sources-2.6.27-r5.ebuild:
340 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
341 gengor 1.277 254843.
342 gengor 1.276
343     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
344     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
345     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
346     Remove problem versions.
347 nixnut 1.275
348     23 Jan 2009; nixnut <nixnut@gentoo.org>
349     hardened-sources-2.6.25-r13.ebuild:
350     ppc stable
351 gengor 1.274
352     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
353     hardened-sources-2.6.25-r13.ebuild:
354     Fasttrack stable amd64/x86.
355 gengor 1.273
356     *hardened-sources-2.6.26-r9 (21 Jan 2009)
357    
358     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
359     +hardened-sources-2.6.26-r9.ebuild:
360 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
361 gengor 1.272
362     *hardened-sources-2.6.25-r13 (20 Jan 2009)
363    
364     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
365     +hardened-sources-2.6.25-r13.ebuild:
366 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
367 nixnut 1.271
368     20 Jan 2009; nixnut <nixnut@gentoo.org>
369     hardened-sources-2.6.25-r12.ebuild:
370     ppc stable
371 gengor 1.270
372     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
373     hardened-sources-2.6.25-r12.ebuild:
374     Stable amd64/x86.
375 gengor 1.269
376     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
377     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
378     -hardened-sources-2.6.27-r2.ebuild:
379     Clean out old versions.
380 gengor 1.268
381     *hardened-sources-2.6.27-r4 (14 Jan 2009)
382     *hardened-sources-2.6.26-r8 (14 Jan 2009)
383     *hardened-sources-2.6.25-r12 (14 Jan 2009)
384    
385     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
386     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
387     +hardened-sources-2.6.27-r4.ebuild:
388     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
389     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
390     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
391     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
392 nixnut 1.267
393     15 Dec 2008; nixnut <nixnut@gentoo.org>
394     hardened-sources-2.6.25-r11.ebuild:
395     Stable on ppc
396 gengor 1.266
397     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
398     hardened-sources-2.6.25-r11.ebuild:
399     Stable amd64/x86.
400 gengor 1.265
401     *hardened-sources-2.6.27-r3 (07 Dec 2008)
402    
403     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
404     +hardened-sources-2.6.27-r3.ebuild:
405     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
406     Fixes bug #248754, #249729 and #246607.
407 gengor 1.264
408     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
409     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
410     Remove old versions.
411 gengor 1.262
412     *hardened-sources-2.6.26-r7 (03 Dec 2008)
413     *hardened-sources-2.6.25-r11 (03 Dec 2008)
414    
415 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
416     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
417 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
418     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
419     Both include many backports from 2.6.27.{6,7} -stable releases.
420 gengor 1.261
421     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
422     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
423     Remove versions broken on ARCHes != x86/amd64.
424 gengor 1.260
425     *hardened-sources-2.6.27-r2 (24 Nov 2008)
426    
427     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
428     +hardened-sources-2.6.27-r2.ebuild:
429     Bump to Linux 2.6.27.7 and latest grsecurity patch.
430 gengor 1.259
431     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
432     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
433     Remove old versions.
434 gengor 1.258
435     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
436     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
437     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
438 nixnut 1.257
439     16 Nov 2008; nixnut <nixnut@gentoo.org>
440     hardened-sources-2.6.25-r10.ebuild:
441     Stable on ppc
442 gengor 1.256
443     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
444     hardened-sources-2.6.25-r10.ebuild:
445     Stable amd64/x86.
446 gengor 1.255
447     *hardened-sources-2.6.26-r6 (12 Nov 2008)
448    
449     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
450     +hardened-sources-2.6.26-r6.ebuild:
451     Bump to Linux 2.6.26.8 and fix security bug #245650.
452 gengor 1.254
453     *hardened-sources-2.6.25-r10 (12 Nov 2008)
454    
455     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
456     +hardened-sources-2.6.25-r10.ebuild:
457     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
458 gengor 1.253
459     *hardened-sources-2.6.27-r1 (09 Nov 2008)
460    
461     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
462     +hardened-sources-2.6.27-r1.ebuild:
463     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
464 gengor 1.252
465     *hardened-sources-2.6.27 (04 Nov 2008)
466    
467     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
468     +hardened-sources-2.6.27.ebuild:
469     Initial 2.6.27 release.
470 gengor 1.251
471     *hardened-sources-2.6.26-r5 (03 Nov 2008)
472    
473     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
474     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
475     +hardened-sources-2.6.26-r5.ebuild:
476     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
477     Clean out some old versions.
478 nixnut 1.250
479     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
480     Stable on ppc
481 gengor 1.249
482     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
483     hardened-sources-2.6.25-r9.ebuild:
484     Stable on amd64/x86.
485 gengor 1.248
486     *hardened-sources-2.6.25-r9 (26 Oct 2008)
487    
488     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
489     +hardened-sources-2.6.25-r9.ebuild:
490     Update to Linux 2.6.25.19
491 nixnut 1.247
492     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
493     Stable on ppc
494 gengor 1.246
495     *hardened-sources-2.6.26-r4 (14 Oct 2008)
496    
497     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
498     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
499     Update to latest grsecurity patch, fixing building of non-modular kernels.
500 gengor 1.245
501     *hardened-sources-2.6.26-r3 (12 Oct 2008)
502    
503     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
504     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
505     +hardened-sources-2.6.26-r3.ebuild:
506     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
507     2.6.26-r1: Removed.
508     2.6.25-r8: Stable amd64/x86.
509 gengor 1.244
510     *hardened-sources-2.6.25-r8 (09 Oct 2008)
511    
512     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
513     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
514     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
515     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
516 nixnut 1.243
517     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
518     Stable on ppc
519 gengor 1.242
520     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
521     hardened-sources-2.6.25-r7.ebuild:
522     Stable amd64/x86.
523 gengor 1.241
524     *hardened-sources-2.6.26-r2 (13 Sep 2008)
525    
526     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
527     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
528     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
529     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
530 gengor 1.240
531     *hardened-sources-2.6.25-r7 (13 Sep 2008)
532    
533     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
534     +hardened-sources-2.6.25-r7.ebuild:
535     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
536 gengor 1.239
537     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
538     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
539     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
540     hardened-sources-2.6.26-r1.ebuild:
541     Update DESCRIPTION and HGPV_URI.
542 gengor 1.238
543     *hardened-sources-2.6.25-r6 (09 Sep 2008)
544    
545     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
546     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
547     2.6.25-r6: Update to Linux 2.6.25.17.
548     2.6.24-r3: Removed.
549 gengor 1.237
550     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
551     hardened-sources-2.6.25-r5.ebuild:
552     Stable on amd64/x86
553 gengor 1.236
554     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
555     Update my email address.
556 nixnut 1.235
557     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
558     stable on ppc
559 battousai 1.234
560     *hardened-sources-2.6.26-r1 (23 Aug 2008)
561     *hardened-sources-2.6.25-r5 (23 Aug 2008)
562    
563     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
564     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
565     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
566     +hardened-sources-2.6.26-r1.ebuild:
567     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
568     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
569     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
570     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
571     (gengor).
572 solar 1.233
573     *hardened-sources-2.6.26 (18 Aug 2008)
574     *hardened-sources-2.6.25-r4 (18 Aug 2008)
575    
576     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
577     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
578     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
579     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
580     2.6.25-r2: Removed.
581 tove 1.232
582     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
583     Remove phreak from metadata.xml (#96398)
584 solar 1.231
585     *hardened-sources-2.6.25-r3 (31 Jul 2008)
586    
587     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
588     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
589     +hardened-sources-2.6.25-r3.ebuild:
590     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
591     fixes, including security bug #231750.
592 nixnut 1.230
593     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
594     Stable on ppc
595 solar 1.229
596     *hardened-sources-2.6.25-r2 (05 Jul 2008)
597    
598     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
599     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
600     +hardened-sources-2.6.25-r2.ebuild:
601     2.6.23-r4: Stable x86/amd64
602     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
603     2.6.23-r{11,12}: Removed due to multiple vulns.
604     (gengor & kerframil)
605 nixnut 1.228
606     04 Jul 2008; nixnut <nixnut@gentoo.org>
607     hardened-sources-2.6.23-r13.ebuild:
608     Stable on ppc
609 solar 1.227
610     *hardened-sources-2.6.25-r1 (30 Jun 2008)
611    
612     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
613     +hardened-sources-2.6.25-r1.ebuild:
614     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
615     grsecurity release. 2.6.23-r13: x86/amd64 stable
616 solar 1.226
617     *hardened-sources-2.6.25 (17 Jun 2008)
618     *hardened-sources-2.6.24-r3 (17 Jun 2008)
619     *hardened-sources-2.6.23-r13 (17 Jun 2008)
620    
621     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
622     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
623     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
624     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
625     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
626     2.6.25: Initial 2.6.25 release.
627 solar 1.225
628     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
629     - fasttrack to stable x86/amd64
630 swegener 1.224
631     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
632     Fix broken digest for linux-2.6.24.tar.bz2.
633 solar 1.223
634     *hardened-sources-2.6.24-r2 (11 May 2008)
635     *hardened-sources-2.6.23-r12 (11 May 2008)
636    
637     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
638     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
639     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
640     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
641     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
642     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
643     security bugs 219901, 220691, 220975, 220979, 221123. New
644     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
645     should be removed as far as I'm concerned, everything else remove due to
646     vulnerable to numerous security bugs or brokeness.
647 nixnut 1.222
648     10 May 2008; nixnut <nixnut@gentoo.org>
649     hardened-sources-2.6.23-r11.ebuild:
650     Stable on ppc
651 solar 1.221
652     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
653     - -r11 stable on x86/amd64
654 solar 1.220
655     *hardened-sources-2.6.23-r11 (01 May 2008)
656    
657     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
658     - version bump to fix ulgy linux bugs
659 phreak 1.219
660     *hardened-sources-2.6.24-r1 (30 Apr 2008)
661    
662     30 Apr 2008; Christian Heim <phreak@gentoo.org>
663     +hardened-sources-2.6.24-r1.ebuild:
664     Revision bump (thanks to Kerin and Gordon, again), pulling
665     genpatches-2.6.24-7, solving #219089. Additionally contains further security
666     fixes plus some minor updates.
667 phreak 1.218
668     *hardened-sources-2.6.23-r10 (30 Apr 2008)
669    
670     30 Apr 2008; Christian Heim <phreak@gentoo.org>
671     +hardened-sources-2.6.23-r10.ebuild:
672     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
673     Additional contains "various other fixes".
674 phreak 1.217
675     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
676     Update the longdescription in metadata, thanks to Gordon Malm.
677 nixnut 1.216
678     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
679     Stable on ppc wrt bug #213255
680 solar 1.215
681     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
682     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
683     - stable on x86/amd64 per request. Removed obsolete ebuilds
684 phreak 1.214
685     *hardened-sources-2.6.24 (07 Apr 2008)
686    
687     07 Apr 2008; Christian Heim <phreak@gentoo.org>
688     +hardened-sources-2.6.24.ebuild:
689     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
690     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
691     for the many contributions and their continued effort in #216612) based on
692     2.6.24 and genpatches-2.6.24-5.
693    
694     The current ebuild/patchset contains these things:
695     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
696     * Introduces bespoke server and workstation oriented security levels
697     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
698 phreak 1.213
699     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
700     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
701     maintaining it).
702 phreak 1.212
703     24 Mar 2008; Christian Heim <phreak@gentoo.org>
704     hardened-sources-2.4.35-r2.ebuild:
705     Fixing SRC_URI for 2.4.35-r2.
706 phreak 1.211
707     *hardened-sources-2.6.23-r9 (22 Mar 2008)
708    
709     22 Mar 2008; Christian Heim <phreak@gentoo.org>
710     +hardened-sources-2.6.23-r9.ebuild:
711     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
712     * Change the default GIDs for some grsecurity options
713     * Revamp the Hardened [Gentoo] security level and make it the default level
714     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
715     * Fix a recursive lock -- call to capable() within ptrace_attach()
716     * Fix bug that allows audit and iscsi operations to be controlled via netlink
717 solar 1.210
718     *hardened-sources-2.6.23-r8 (27 Feb 2008)
719    
720     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
721     - version bump from Kerin Millar bug 210026
722 solar 1.209
723     17 Feb 2008; <solar@gentoo.org> metadata.xml,
724     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
725     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
726     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
727     - stable on x86 and remove old ebuilds
728 solar 1.207
729     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
730 solar 1.208 - stable on amd64 per request of amd64 lead
731 solar 1.206
732     *hardened-sources-2.6.23-r7 (11 Feb 2008)
733    
734     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
735     - version bump from kerin.millar
736     Changes:
737    
738     * Bump to genpatches-base-2.6.23-9
739     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
740     * Disables COMPAT_VDSO in x86/defconfig
741     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
742 phreak 1.205
743     25 Jan 2008; Christian Heim <phreak@gentoo.org>
744     -hardened-sources-2.6.22-r8.ebuild:
745     Cleaning up old versions.
746 phreak 1.204
747     *hardened-sources-2.6.23-r6 (25 Jan 2008)
748    
749     25 Jan 2008; Christian Heim <phreak@gentoo.org>
750     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
751     Revision bump, pulling in the latest genpatches.
752 phreak 1.203
753     *hardened-sources-2.6.23-r5 (24 Dec 2007)
754    
755     24 Dec 2007; Christian Heim <phreak@gentoo.org>
756     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
757     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
758     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
759     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
760 phreak 1.202
761     24 Dec 2007; Christian Heim <phreak@gentoo.org>
762     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
763     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
764     -hardened-sources-2.6.23-r3.ebuild:
765     Cleaning out some unused, old versions.
766 phreak 1.201
767     24 Dec 2007; Christian Heim <phreak@gentoo.org>
768     hardened-sources-2.6.23-r4.ebuild:
769     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
770     in the tree for long, but there isn't much of a difference between this and
771     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
772 phreak 1.200
773     *hardened-sources-2.6.23-r4 (23 Dec 2007)
774    
775     23 Dec 2007; Christian Heim <phreak@gentoo.org>
776     +hardened-sources-2.6.23-r4.ebuild:
777     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
778 phreak 1.199
779     *hardened-sources-2.6.23-r3 (04 Dec 2007)
780    
781     04 Dec 2007; Christian Heim <phreak@gentoo.org>
782     +hardened-sources-2.6.23-r3.ebuild:
783     Revision bump, pulling in 2.6.23.9.
784 phreak 1.198
785     *hardened-sources-2.6.23-r2 (25 Nov 2007)
786    
787     25 Nov 2007; Christian Heim <phreak@gentoo.org>
788     +hardened-sources-2.6.23-r2.ebuild:
789     Updated patchset, thanks to solar.
790 phreak 1.197
791     *hardened-sources-2.6.23-r1 (31 Oct 2007)
792    
793     31 Oct 2007; Christian Heim <phreak@gentoo.org>
794     +hardened-sources-2.6.23-r1.ebuild:
795     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
796 solar 1.196
797     29 Oct 2007; <solar@gentoo.org> metadata.xml:
798     - update metadata.xml
799 phreak 1.195
800     25 Oct 2007; Christian Heim <phreak@gentoo.org>
801     hardened-sources-2.6.22-r8.ebuild:
802     Marking 2.6.22-r8 stable on amd64 and x86.
803 phreak 1.194
804     21 Oct 2007; Christian Heim <phreak@gentoo.org>
805     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
806     -hardened-sources-2.6.21-r4.ebuild:
807     Removing old ebuilds.
808 phreak 1.193
809     *hardened-sources-2.4.35-r2 (21 Oct 2007)
810    
811     21 Oct 2007; Christian Heim <phreak@gentoo.org>
812     +hardened-sources-2.4.35-r2.ebuild:
813     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
814     patches.
815 phreak 1.192
816     *hardened-sources-2.6.22-r8 (21 Oct 2007)
817    
818     21 Oct 2007; Christian Heim <phreak@gentoo.org>
819     +hardened-sources-2.6.22-r8.ebuild:
820     Yet another new patch, hopefully fixing the remaining issues we had w/
821     2.6.22. Candidate for stabling.
822 phreak 1.191
823     *hardened-sources-2.6.23 (13 Oct 2007)
824    
825     13 Oct 2007; Christian Heim <phreak@gentoo.org>
826     +hardened-sources-2.6.23.ebuild:
827     Initial hardened-sources-2.6.23. If people still have problems w/ bug
828     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
829 phreak 1.190
830     11 Oct 2007; Christian Heim <phreak@gentoo.org>
831     hardened-sources-2.6.20-r10.ebuild:
832     Pulling in yet another new genpatches version, fixing the PWC bug for real.
833 phreak 1.189
834     04 Oct 2007; Christian Heim <phreak@gentoo.org>
835     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
836     Removing old versions.
837 phreak 1.188
838     *hardened-sources-2.6.22-r7 (01 Oct 2007)
839    
840     01 Oct 2007; Christian Heim <phreak@gentoo.org>
841     +hardened-sources-2.6.22-r7.ebuild:
842     Revision bump, pulling in a newer patch. Should fix #194276.
843 phreak 1.187
844     30 Sep 2007; Christian Heim <phreak@gentoo.org>
845     hardened-sources-2.6.20-r10.ebuild:
846     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
847     Mike Doty).
848 phreak 1.186
849     *hardened-sources-2.6.22-r6 (26 Sep 2007)
850    
851     26 Sep 2007; Christian Heim <phreak@gentoo.org>
852     +hardened-sources-2.6.22-r6.ebuild:
853     Revision bump, grabbing up till Linux 2.6.22.9.
854 phreak 1.185
855     24 Sep 2007; Christian Heim <phreak@gentoo.org>
856     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
857     Cleaning up further.
858 phreak 1.184
859     *hardened-sources-2.6.20-r10 (24 Sep 2007)
860    
861     24 Sep 2007; Christian Heim <phreak@gentoo.org>
862     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
863     +hardened-sources-2.6.20-r10.ebuild:
864     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
865     revisions.
866 phreak 1.183
867     *hardened-sources-2.6.22-r5 (22 Sep 2007)
868    
869     22 Sep 2007; Christian Heim <phreak@gentoo.org>
870     +hardened-sources-2.6.22-r5.ebuild:
871     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
872 phreak 1.182
873     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
874     Removing johnm from metadata.xml (see #186467 for reference).
875 phreak 1.181
876     *hardened-sources-2.6.22-r4 (17 Sep 2007)
877    
878     17 Sep 2007; Christian Heim <phreak@gentoo.org>
879     +hardened-sources-2.6.22-r4.ebuild:
880     Revision bump, hopefully fixing all those weird PAX failures.
881 phreak 1.180
882     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
883     Updating the metadata.xml.
884 phreak 1.179
885     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
886     Removing tocharian from metadata due to his retirement (see #71718 for
887     reference).
888 phreak 1.178
889     *hardened-sources-2.6.20-r9 (30 Aug 2007)
890    
891     30 Aug 2007; Christian Heim <phreak@gentoo.org>
892     +hardened-sources-2.6.20-r9.ebuild:
893     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
894 phreak 1.177
895     29 Aug 2007; Christian Heim <phreak@gentoo.org>
896     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
897     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
898     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
899     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
900     -hardened-sources-2.6.22-r2.ebuild:
901     Removing some redundant versions.
902 phreak 1.176
903     *hardened-sources-2.4.35-r1 (29 Aug 2007)
904    
905     29 Aug 2007; Christian Heim <phreak@gentoo.org>
906     +hardened-sources-2.4.35-r1.ebuild:
907     Revision bump, new grsecurity patch.
908 phreak 1.175
909     *hardened-sources-2.6.20-r8 (26 Aug 2007)
910    
911     26 Aug 2007; Christian Heim <phreak@gentoo.org>
912     +hardened-sources-2.6.20-r8.ebuild:
913     Revision bump for Linux 2.6.20.17.
914 phreak 1.174
915     *hardened-sources-2.6.22-r3 (22 Aug 2007)
916    
917     22 Aug 2007; Christian Heim <phreak@gentoo.org>
918     +hardened-sources-2.6.22-r3.ebuild:
919     Revision bump for Linux 2.6.22.4.
920 phreak 1.173
921     16 Aug 2007; Christian Heim <phreak@gentoo.org>
922     hardened-sources-2.6.22-r2.ebuild:
923     Updated patchset, to fix the alignment against 2.6.22.3.
924 phreak 1.172
925     *hardened-sources-2.6.22-r2 (16 Aug 2007)
926    
927     16 Aug 2007; Christian Heim <phreak@gentoo.org>
928     +hardened-sources-2.6.22-r2.ebuild:
929     Revision bump for Linux 2.6.22.3.
930 phreak 1.171
931     *hardened-sources-2.4.35 (16 Aug 2007)
932    
933     16 Aug 2007; Christian Heim <phreak@gentoo.org>
934     +hardened-sources-2.4.35.ebuild:
935     Version bump, initial version for Linux 2.4.35.
936 phreak 1.170
937     *hardened-sources-2.6.21-r4 (16 Aug 2007)
938    
939     16 Aug 2007; Christian Heim <phreak@gentoo.org>
940     +hardened-sources-2.6.21-r4.ebuild:
941     Revision bump for Linux 2.6.21.6.
942 phreak 1.169
943     *hardened-sources-2.6.20-r7 (16 Aug 2007)
944    
945     16 Aug 2007; Christian Heim <phreak@gentoo.org>
946     +hardened-sources-2.6.20-r7.ebuild:
947     Revision bump for Linux 2.6.20.16.
948 phreak 1.168
949     *hardened-sources-2.6.22-r1 (13 Aug 2007)
950    
951     13 Aug 2007; Christian Heim <phreak@gentoo.org>
952     +hardened-sources-2.6.22-r1.ebuild:
953     Yet another revision bump.
954 phreak 1.167
955     *hardened-sources-2.6.22 (10 Aug 2007)
956    
957     10 Aug 2007; Christian Heim <phreak@gentoo.org>
958     +hardened-sources-2.6.22.ebuild:
959     Initial release for 2.6.22. If you are using hardened-sources on a desktop
960     machine (P4 or newer), be aware you might need to disable
961     CONFIG_PAX_PAGEEXEC.
962 phreak 1.166
963     04 Aug 2007; Christian Heim <phreak@gentoo.org>
964     hardened-sources-2.6.20-r6.ebuild:
965     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
966     2.6.20.15.
967 phreak 1.165
968     10 Jul 2007; Christian Heim <phreak@gentoo.org>
969     hardened-sources-2.6.20-r5.ebuild:
970     Marking hardened-sources-2.6.20-r5 stable on ppc.
971 phreak 1.164
972     10 Jul 2007; Christian Heim <phreak@gentoo.org>
973     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
974     Cleanup.
975 phreak 1.163
976     *hardened-sources-2.6.20-r6 (08 Jul 2007)
977    
978     08 Jul 2007; Christian Heim <phreak@gentoo.org>
979     +hardened-sources-2.6.20-r6.ebuild:
980     Revision bump, grabbing yet another stable release.
981 phreak 1.162
982     17 Jun 2007; Christian Heim <phreak@gentoo.org>
983     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
984     -hardened-sources-2.6.21-r2.ebuild:
985     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
986     alpha stable KEYWORD by mistake.
987 phreak 1.161
988     17 Jun 2007; Christian Heim <phreak@gentoo.org>
989     hardened-sources-2.6.20-r5.ebuild:
990     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
991     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
992 phreak 1.160
993     *hardened-sources-2.6.21-r3 (12 Jun 2007)
994    
995     12 Jun 2007; Christian Heim <phreak@gentoo.org>
996     +hardened-sources-2.6.21-r3.ebuild:
997     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
998     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
999     love.
1000 phreak 1.159
1001     *hardened-sources-2.6.20-r5 (11 Jun 2007)
1002    
1003     11 Jun 2007; Christian Heim <phreak@gentoo.org>
1004     +hardened-sources-2.6.20-r5.ebuild:
1005     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
1006     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
1007     love.
1008 pappy 1.158
1009     *hardened-sources-2.4.34.5 (11 Jun 2007)
1010    
1011     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
1012     +hardened-sources-2.4.34.5.ebuild:
1013     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
1014 phreak 1.157
1015     30 May 2007; Christian Heim <phreak@gentoo.org>
1016     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
1017     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
1018     stale ebuild(s).
1019 phreak 1.156
1020     30 May 2007; Christian Heim <phreak@gentoo.org>
1021     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
1022     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
1023     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
1024     Doing some cleanups, remove stale ebuilds.
1025 phreak 1.155
1026     26 May 2007; Christian Heim <phreak@gentoo.org>
1027     hardened-sources-2.6.21-r2.ebuild:
1028     Fixing the grsecurity patch, had one '};' too much.
1029 phreak 1.154
1030     *hardened-sources-2.6.21-r2 (26 May 2007)
1031    
1032     26 May 2007; Christian Heim <phreak@gentoo.org>
1033     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
1034     +hardened-sources-2.6.21-r2.ebuild:
1035     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
1036     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
1037 phreak 1.153
1038     *hardened-sources-2.6.20-r4 (26 May 2007)
1039    
1040     26 May 2007; Christian Heim <phreak@gentoo.org>
1041     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
1042     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
1043 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
1044 phreak 1.152
1045     15 May 2007; Christian Heim <phreak@gentoo.org>
1046     hardened-sources-2.6.20-r3.ebuild:
1047     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
1048     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
1049     grsecurity patch fail in that exact same hunk.
1050 phreak 1.151
1051     *hardened-sources-2.6.20-r3 (15 May 2007)
1052    
1053     15 May 2007; Christian Heim <phreak@gentoo.org>
1054     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
1055     Revision bump, incorporating Linux 2.6.20.11.
1056    
1057     *hardened-sources-2.6.21-r1 (11 May 2007)
1058    
1059     11 May 2007; Christian Heim <phreak@gentoo.org>
1060     +hardened-sources-2.6.21-r1.ebuild:
1061     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
1062     mentioned in #177234.
1063 kevquinn 1.150
1064     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
1065     files/digest-hardened-sources-2.6.21, Manifest:
1066     Fix Manifest/digest for linux-2.6.21.tar.bz2
1067 phreak 1.149
1068     06 May 2007; Christian Heim <phreak@gentoo.org>
1069     hardened-sources-2.6.21.ebuild:
1070     Bumping the hardened-patches version, needed for the fix for #177234.
1071 phreak 1.148
1072     *hardened-sources-2.6.21 (02 May 2007)
1073    
1074     02 May 2007; Christian Heim <phreak@gentoo.org>
1075     +hardened-sources-2.6.21.ebuild:
1076     Version bump, Linux 2.6.21-hardened.
1077 phreak 1.147
1078     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1079     hardened-sources-2.6.20-r2.ebuild:
1080     Adding ~ia64 on Ned's request.
1081 phreak 1.146
1082     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1083     hardened-sources-2.6.20-r2.ebuild:
1084     Fixing the included grsecurity patch, wasn't alligning due to the Index:
1085     header line(s).
1086 phreak 1.145
1087     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1088     hardened-sources-2.6.20-r2.ebuild:
1089     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
1090 armin76 1.144
1091     *hardened-sources-2.6.20-r2 (10 Apr 2007)
1092    
1093     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
1094     +hardened-sources-2.6.20-r2.ebuild:
1095     Version bump, on behalf of phreak
1096 phreak 1.143
1097     *hardened-sources-2.6.20-r1 (04 Apr 2007)
1098    
1099     04 Apr 2007; Christian Heim <phreak@gentoo.org>
1100     +hardened-sources-2.6.20-r1.ebuild:
1101     Revision bump, grabbing a newer grsecurity snapshot.
1102 phreak 1.142
1103     *hardened-sources-2.6.20 (25 Mar 2007)
1104    
1105     25 Mar 2007; Christian Heim <phreak@gentoo.org>
1106     +hardened-sources-2.6.20.ebuild:
1107     Finally a hardened-sources version for 2.6.20; many people have been waiting
1108     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
1109     testbox.
1110 chainsaw 1.141
1111     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
1112     hardened-sources-2.6.18-r6.ebuild:
1113     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
1114 phreak 1.140
1115     *hardened-sources-2.6.18-r6 (16 Mar 2007)
1116    
1117     16 Mar 2007; Christian Heim <phreak@gentoo.org>
1118     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1119     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1120     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1121     supposed to be.
1122 phreak 1.139
1123     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1124     Fixing the Manifest, the previous one was broken (as in still had the
1125     deleted ebuild in it).
1126 phreak 1.138
1127     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1128     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1129     +hardened-sources-2.6.18-r5.ebuild:
1130     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1131     Linux 2.6.18.8. Also cleaning up the older version.
1132    
1133     *hardened-sources-2.6.18-r5 (06 Mar 2007)
1134    
1135     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1136     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1137     +hardened-sources-2.6.18-r5.ebuild:
1138     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1139     Linux 2.6.18.8. Also cleaning up the older version.
1140 phreak 1.137
1141     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1142     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1143     -hardened-sources-2.6.19-r5.ebuild:
1144     Removing some of the old version, that didn't work.
1145 phreak 1.136
1146     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1147    
1148     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1149     +hardened-sources-2.6.19-r6.ebuild:
1150     Revision bump, including a new grsec version fixing #166235.
1151 pappy 1.134
1152     *hardened-sources-2.4.34 (24 Jan 2007)
1153    
1154     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1155 pappy 1.135 Manifest:
1156     updating Manifest with checksums of new tarball and ebuild
1157    
1158     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1159 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1160     I added new hardened sources 2.4 update, this is a critical path
1161     security bugfix - all users of h-s are strongly advised
1162     to update their existing hardened sources to this version.
1163     It contains a fix for a kernel vulnerability that is pertaining
1164     to the PaX changes to virtual memory management, possibly leading
1165     to a local kernel exploit ... see grsecurity.net forums and homepage
1166 phreak 1.133
1167     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1168     files/digest-hardened-sources-2.6.19-r5, Manifest:
1169     Fixing the patch-tarball digest.
1170 phreak 1.132
1171     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1172    
1173     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1174     +hardened-sources-2.6.19-r5.ebuild:
1175     Revision bump, closing the recently discovered PaX expand_stack()
1176     vulnerability.
1177 phreak 1.131
1178     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1179    
1180     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1181     +hardened-sources-2.6.19-r4.ebuild:
1182     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1183     dropping the randomized PID feature.
1184 opfer 1.130
1185     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1186     hardened-sources-2.4.33.4.ebuild:
1187     stable x86, bug #161171
1188 phreak 1.129
1189     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1190    
1191     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1192     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1193     Revision bump for bug #157186 and #158786.
1194 phreak 1.128
1195     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1196    
1197     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1198     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1199     Revision bump for bug #157186.
1200 phreak 1.127
1201     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1202    
1203     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1204     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1205     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1206 phreak 1.126
1207     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1208     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1209     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1210     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1211     hardened-sources-2.6.19-r1.ebuild:
1212     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1213     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1214 pappy 1.125
1215     *hardened-sources-2.4.33.4 (17 Dec 2006)
1216    
1217     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1218     +hardened-sources-2.4.33.4.ebuild:
1219     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1220     and quilting
1221 phreak 1.124
1222     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1223    
1224     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1225     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1226     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1227     for reporting).
1228 phreak 1.123
1229     *hardened-sources-2.6.19 (13 Dec 2006)
1230    
1231     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1232     +hardened-sources-2.6.19.ebuild:
1233     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1234     Brad for providing that prompt update.
1235 phreak 1.122
1236     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1237    
1238     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1239     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1240     +hardened-sources-2.6.18-r3.ebuild:
1241     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1242     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1243 phreak 1.121
1244     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1245     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1246 nixnut 1.120
1247     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1248     Stable on ppc wrt bug 157356
1249 opfer 1.119
1250     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1251     hardened-sources-2.6.18.ebuild:
1252     stable x86, bug #157356
1253 phreak 1.118
1254     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1255    
1256     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1257     +hardened-sources-2.6.18-r2.ebuild:
1258     Revision bump, including 2.6.18.5 (via genpatches) and
1259     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1260     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1261     redesign.
1262 phreak 1.117
1263     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1264     hardened-sources-2.6.18.ebuild:
1265     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1266     of Mike Doty).
1267 phreak 1.116
1268     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1269    
1270     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1271     +hardened-sources-2.6.18-r1.ebuild:
1272     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1273 phreak 1.115
1274     *hardened-sources-2.6.18 (11 Nov 2006)
1275    
1276     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1277     +hardened-sources-2.6.18.ebuild:
1278     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1279 solar 1.114
1280     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1281     - mark amd64 stable also. bug #151877
1282 solar 1.113
1283     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1284     - mark 2.6.17-r1 stable
1285 phreak 1.112
1286     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1287     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1288     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1289 phreak 1.111
1290     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1291    
1292     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1293     +hardened-sources-2.6.17-r1.ebuild:
1294     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1295     grsecurity patch.
1296 phreak 1.110
1297     *hardened-sources-2.6.17 (17 Aug 2006)
1298    
1299     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1300     +hardened-sources-2.6.17.ebuild:
1301     Bumping the hardened-sources-2.6 series to 2.6.17, using
1302     genpatches-2.6.17-6.base.
1303 solar 1.109
1304     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1305     - stable on x86 and amd64
1306 solar 1.108
1307     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1308    
1309     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1310     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1311     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1312     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1313     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1314     crusty ebuilds
1315 johnm 1.107
1316     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1317     hardened-sources-2.6.16-r10.ebuild:
1318     marking stable on x86 and amd64
1319 solar 1.106
1320     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1321     - 2.4.32-r6 stable on x86. RSBAC state unknown
1322 kang 1.105
1323     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1324    
1325     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1326     +hardened-sources-2.4.32-r7.ebuild:
1327     Bump PaX for RSBAC to test-17
1328 johnm 1.104
1329     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1330    
1331     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1332     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1333     hardened-sources-2.6.16 bump to latest -base.
1334 solar 1.103
1335     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1336    
1337     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1338     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1339     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1340     sysctl controlable resource logging
1341 johnm 1.102
1342     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1343    
1344     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1345     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1346     push new 2.6.16 release in preparation for stable
1347 solar 1.101
1348     22 May 2006; <solar@gentoo.org> :
1349     - redigest bug 134002
1350 kang 1.100
1351     *hardened-sources-2.4.32-r5 (16 May 2006)
1352    
1353     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1354     +hardened-sources-2.4.32-r5.ebuild:
1355     Fixes rsbac common patching (new patch in new -r5 patchset)
1356 solar 1.99
1357     *hardened-sources-2.4.32-r4 (13 May 2006)
1358    
1359     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1360     +hardened-sources-2.4.32-r4.ebuild:
1361     - security bumps
1362 johnm 1.98
1363     *hardened-sources-2.6.16-r6 (03 May 2006)
1364    
1365     03 May 2006; John Mylchreest <johnm@gentoo.org>
1366     +hardened-sources-2.6.16-r6.ebuild:
1367     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1368 johnm 1.97
1369     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1370     hardened-sources-2.6.14-r8.ebuild:
1371     fix x86_64 build problem, this will delay the digest issue again for a short
1372     while but it will sort itself out
1373 johnm 1.96
1374     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1375     hardened-sources-2.6.14-r8.ebuild:
1376     bump hardened patchset
1377 antarus 1.94
1378     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1379     files/digest-hardened-sources-2.4.32-r2,
1380     files/digest-hardened-sources-2.4.32-r3,
1381     files/digest-hardened-sources-2.6.14-r8, Manifest:
1382     Fixing duff SHA256 digests: Bug # 131293
1383 johnm 1.93
1384 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1385    
1386     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1387     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1388     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1389     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1390     cleanup of old uneccessary sources
1391    
1392 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1393     fix digest
1394 johnm 1.92
1395     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1396    
1397     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1398     +hardened-sources-2.6.14-r8.ebuild:
1399     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1400 johnm 1.91
1401     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1402     Turning on gpg-signing again, and recomitting
1403 johnm 1.90
1404     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1405    
1406     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1407     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1408     +hardened-sources-2.6.16-r4.ebuild:
1409     Fix numerous security vulns
1410 solar 1.89
1411     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1412    
1413     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1414     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1415     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1416     - security bump for bug #112791. Removed old ebuilds
1417 johnm 1.88
1418     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1419    
1420     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1421     +hardened-sources-2.6.16-r3.ebuild:
1422     Removing silly localversion which I missed
1423 johnm 1.87
1424     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1425    
1426     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1427     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1428     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1429 johnm 1.86
1430     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1431    
1432     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1433     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1434     +hardened-sources-2.6.16-r2.ebuild:
1435     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1436     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1437 johnm 1.85
1438     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1439    
1440     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1441     +hardened-sources-2.6.16-r1.ebuild:
1442     Bumping to include ppc build fix and 2.6.16.3
1443 tsunam 1.84
1444     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1445     hardened-sources-2.6.14-r6.ebuild:
1446     Stable on x86; bug #127718
1447 johnm 1.83
1448     *hardened-sources-2.6.16 (31 Mar 2006)
1449    
1450     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1451     +hardened-sources-2.6.16.ebuild:
1452     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1453     2.6.16.1
1454 cryos 1.82
1455     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1456     hardened-sources-2.6.14-r6.ebuild:
1457     Stable on amd64, bug 127718.
1458 nixnut 1.81
1459     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1460     Stable on ppc. Bug #127718
1461 johnm 1.80
1462     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1463     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1464     -hardened-sources-2.6.14-r4.ebuild:
1465     Cleanup.
1466 johnm 1.79
1467     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1468    
1469     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1470     +hardened-sources-2.6.14-r6.ebuild:
1471     Fixes grsec policy recreation bug and adds a
1472     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1473 solar 1.78
1474     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1475     - stable on x86
1476 hansmi 1.77
1477     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1478     hardened-sources-2.6.14-r5.ebuild:
1479     Stable on ppc.
1480 johnm 1.76
1481     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1482    
1483     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1484     +hardened-sources-2.6.14-r5.ebuild:
1485     fixing every known exploit
1486 solar 1.75
1487     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1488    
1489     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1490     +hardened-sources-2.4.32-r2.ebuild:
1491     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1492 solar 1.74
1493     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1494    
1495     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1496     - version bump for new genpatches which fix up a few sec holes
1497 solar 1.73
1498     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1499    
1500     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1501     - revision bump to add misc vital linux kernel security patches.
1502 johnm 1.72
1503     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1504    
1505     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1506     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1507     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1508 johnm 1.71
1509     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1510     hardened-sources-2.6.14-r2.ebuild:
1511     making x86 & amd64 stable following testing.
1512 johnm 1.70
1513     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1514    
1515     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1516     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1517     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1518     network hooks.
1519 johnm 1.69
1520     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1521     hardened-sources-2.6.14-r1.ebuild:
1522     bumping to stable early for sec fix on x86 & amd64
1523 johnm 1.68
1524     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1525    
1526     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1527     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1528     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1529 solar 1.67
1530     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1531     - stable on x86 security bug #114227 CAN-2005-3257
1532 kang 1.66
1533     *hardened-sources-2.4.32 (19 Nov 2005)
1534    
1535     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1536     +hardened-sources-2.4.32.ebuild:
1537     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1538     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1539     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1540     rsbac >> /etc/portage/package.use)
1541 johnm 1.65
1542     *hardened-sources-2.6.14 (14 Nov 2005)
1543    
1544     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1545     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1546     Bumping 2.6 series to 2.6.14.2
1547 johnm 1.64
1548     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1549    
1550     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1551     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1552     +hardened-sources-2.6.13-r2.ebuild:
1553     Fixes minor build error in ppc.
1554 johnm 1.63
1555     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1556    
1557     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1558     +hardened-sources-2.6.13-r1.ebuild:
1559     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1560     2.6.13.4, fixes some major amd64 stability problems.
1561 johnm 1.62
1562     *hardened-sources-2.6.13 (16 Sep 2005)
1563    
1564     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1565     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1566     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1567     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1568     users should test this thoroughly.
1569 solar 1.61
1570     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1571     - stable on x86
1572 johnm 1.60
1573     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1574    
1575     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1576     +hardened-sources-2.6.11-r15.ebuild:
1577     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1578     grsec redefining curr_ip struct.
1579 solar 1.59
1580     *hardened-sources-2.4.31 (20 Jun 2005)
1581    
1582     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1583     initial import of 2.4.31 tree
1584 johnm 1.58
1585     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1586    
1587     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1588     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1589     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1590     naming scheme to abide by genpatches
1591 johnm 1.57
1592     *hardened-sources-2.6.11-r13 (18 May 2005)
1593    
1594     18 May 2005; John Mylchreest <johnm@gentoo.org>
1595     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1596     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1597     target. sorry about that. Fixes bug #93022
1598 johnm 1.56
1599     *hardened-sources-2.6.11-r12 (17 May 2005)
1600    
1601     17 May 2005; John Mylchreest <johnm@gentoo.org>
1602     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1603     +hardened-sources-2.6.11-r12.ebuild:
1604     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1605     merges in genpatches-base
1606 johnm 1.55
1607     *hardened-sources-2.6.11-r12 (17 May 2005)
1608    
1609     17 May 2005; John Mylchreest <johnm@gentoo.org>
1610     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1611     +hardened-sources-2.6.11-r12.ebuild:
1612     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1613     merges in genpatches-base
1614 solar 1.54
1615     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1616     -files/2.4.27-cmdline-race.patch,
1617     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1618     -files/2.4.28-grsec-binfmt_a.out.patch,
1619     -files/2.4.28-grsec-cmdline-race.patch,
1620     -files/2.4.28-selinux-binfmt_a.out.patch,
1621     -files/2.4.28-selinux-cmdline-race.patch,
1622     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1623     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1624     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1625     cleanup..
1626 solar 1.53
1627     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1628    
1629     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1630     - disable aout by default
1631 solar 1.52
1632     *hardened-sources-2.4.30 (18 Apr 2005)
1633    
1634     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1635     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1636     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1637     use
1638 tocharian 1.50
1639 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1640    
1641     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1642     +hardened-sources-2.4.29.ebuild:
1643     New hardened-patches-2.4-29.0 patchball.
1644     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1645    
1646     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1647    
1648     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1649     +hardened-sources-2.4.28-r5.ebuild:
1650     Added a fix for a PaX vulnerability.
1651    
1652     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1653 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1654     Stable on x86
1655 solar 1.49
1656     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1657     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1658     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1659     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1660     - fixed/added RDEPEND= in all kernel-2 ebuilds
1661 tocharian 1.48
1662     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1663    
1664     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1665     +hardened-sources-2.4.28-r4.ebuild:
1666     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1667     backport of neighbour hash updates.
1668 tocharian 1.47
1669     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1670     hardened-sources-2.4.28-r3.ebuild:
1671     Stable on x86
1672 tseng 1.46
1673     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1674    
1675     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1676     +hardened-sources-2.6.10-r3.ebuild:
1677     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1678     in 2005.0
1679 tocharian 1.45
1680     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1681     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1682     hardened-sources-2.4.28-r2.ebuild:
1683     Mark stable on x86
1684 tocharian 1.44
1685     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1686    
1687     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1688     +hardened-sources-2.4.28-r3.ebuild:
1689     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1690 tocharian 1.43
1691     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1692     hardened-sources-2.4.28.ebuild:
1693     Mark stable on x86.
1694 tocharian 1.42
1695     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1696    
1697     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1698     +hardened-sources-2.4.28-r2.ebuild:
1699     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1700     Mazinger for grsecurity patches as well.
1701 plasmaroo 1.41
1702     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1703    
1704     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1705     Security bump. Thank tocharian for rolling a new patchset...
1706 solar 1.40
1707     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1708     +files/2.4.28-grsec-cmdline-race.patch,
1709     +files/2.4.28-selinux-binfmt_a.out.patch,
1710     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1711     - Round up remaining security patches that appear to be missing in 2.4.28. -
1712     PaX standalone updated to current. hgpv=28.1
1713 solar 1.39
1714     *hardened-sources-2.4.28 (28 Nov 2004)
1715    
1716     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1717     security bump. Thank tocharian for rolling a new patchset
1718 scox 1.31
1719 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1720    
1721     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1722     +hardened-sources-2.4.27-r3.ebuild:
1723     Applies the new 2.4-27.2 patchball which updates
1724     GRSecurity to the 2.0.1 version.
1725    
1726 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1727    
1728     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1729     +hardened-sources-2.4.27-r2.ebuild:
1730     Version bump.
1731     This version uses the new 2.4-27.1 patchball which updates
1732     both the SELinux PaX hooks patch and the SELinux headers.
1733    
1734 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1735    
1736     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1737     +hardened-sources-2.4.27-r1.ebuild,
1738     -hardened-sources-2.4.27.ebuild,
1739     +files/2.4.27-cmdline-race.patch:
1740     Version bump, fix for cmdline race. See bug #59905.
1741    
1742     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1743    
1744     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1745     +hardened-sources-2.4.26-r6.ebuild,
1746     -hardened-sources-2.4.26-r5.ebuild,
1747     -hardened-sources-2.4.26-r4.ebuild,
1748     +files/2.4.26-cmdline-race.patch:
1749     Version bump, fix for cmdline race. See bug #59905.
1750    
1751 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1752    
1753     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1754     +hardened-sources-2.4.27.ebuild,
1755     +files/2.4.27-CAN-2004-0394.patch:
1756     Ported the patchball to the 2.4.27 kernel version.
1757    
1758 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1759    
1760     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1761     +hardened-sources-2.4.26-r5.ebuild:
1762 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1763 scox 1.34 It adds the following features:
1764     - Squashfs
1765     - Ebtables
1766     - Netdev random (core+drivers)
1767     - Watchdog Timer (WDT) fix.
1768    
1769 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1770    
1771     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1772     +hardened-sources-2.4.26-r4.ebuild,
1773     +files/2.4.26-CAN-2004-0415.patch,
1774     -hardened-sources-2.4.26-3:
1775     Version bump, fix for CAN 0415, see bug #59378.
1776    
1777 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1778    
1779     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1780     +hardened-sources-2.4.26-r3.ebuild,
1781     +files/2.4.26-CAN-2004-0497.patch,
1782     -hardened-sources-2.4.26-r2.ebuild:
1783     Version bump, fixed CAN 0497, see bug #56171.
1784    
1785 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1786    
1787     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1788 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1789 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1790     +files/2.4.26-CAN-2004-0535.patch,
1791     -hardened-sources-2.4.26-r1.ebuild:
1792     Fixes for both CAN 0495 and 0535, see bug #54976
1793 pvdabeel 1.27
1794 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1795     hardened-sources-2.4.26-r1.ebuild:
1796     QA - fix use invocation
1797 scox 1.28
1798     *hardened-sources-2.4.26-r1 (22 June 2004)
1799    
1800     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1801     +hardened-sources-2.4.26-r1.ebuild,
1802     +files/2.4.26-CAN-2004-0394.patch,
1803     +files/2.4.26-signal-race.patch,
1804     -hardened-sources-2.4.26.ebuild,
1805     -hardened-sources-2.4.24-r3.ebuild:
1806     Version bump for the CAN-2004-0394 issue and bug #53804
1807     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1808    
1809    
1810 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1811     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1812     Masked hardened-sources-2.4.26.ebuild broken for ppc
1813    
1814     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1815     hardened-sources-2.4.24-r3.ebuild:
1816     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1817 plasmaroo 1.25
1818 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1819    
1820     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1821     +hardened-sources-2.4.26.ebuild:
1822     Updated hardened-sources for the 2.4.26 kernel
1823     Removed broken components, updated almost everything.
1824    
1825 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1826    
1827     17 Apr 2004; <plasmaroo@gentoo.org>
1828     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1829     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1830     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1831     +hardened-sources-2.4.24-r3.ebuild:
1832     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1833     vulnerabilities. Old revisions removed.
1834 plasmaroo 1.24
1835     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1836    
1837     15 Apr 2004; <plasmaroo@gentoo.org>
1838     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1839     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1840     Version bump for the CAN-2004-0109 issue; bug #47881.
1841 aliz 1.23
1842     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1843     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1844     Add eutils to inherit.
1845 plasmaroo 1.22
1846     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1847    
1848     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1849     files/hardened-sources-2.4.24.munmap.patch:
1850     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1851 scox 1.19
1852 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1853 scox 1.26
1854 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1855     hardened-sources-2.4.24.ebuild:
1856     Version bump, updated most of the components.
1857     This release includes the following:
1858    
1859     - Hardened security
1860     - Netfilter patch-o-matic 20031219
1861     - FreeSWAN 2.04 & x509 1.4.8
1862     - EVMS 2.2.2
1863     - XFS 1.3.1
1864     - cryptoloop jari
1865     - grsecurity 2.0-rc4
1866     - SELinux
1867     - PaX 200402060000
1868     - PaX Obscurity 200308302223
1869     - Others...
1870    
1871     Neither -ck nor systrace are included anymore.
1872    
1873 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1874    
1875     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1876     hardened-sources-2.4.22-r2.ebuild:
1877 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1878 scox 1.19
1879     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1880 iggy 1.17
1881     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1882 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1883 iggy 1.16
1884     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1885 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1886     Version bump for the 'do_brk' vulnerability.
1887 iggy 1.15
1888     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1889     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1890     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1891     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1892 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1893 frogger 1.14
1894     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1895     hardened-sources-2.4.22.ebuild:
1896 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1897     components. These are no longer handled in the kernel
1898     so this code was not necessary.
1899 frogger 1.13
1900     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1901     New 2.4.22 based hardened-sources thanks to
1902     Phil West <p.west@computer.org>.
1903    
1904     These sources include:
1905 plasmaroo 1.18 - New SELinux API
1906     - Updated CK-base
1907     - Updated GRSec
1908     - Systrace
1909     - SuperFreeS/WAN 1.99.8
1910     - Propolice kernel build support
1911     - EVMS
1912     - Other various security related patches
1913 frogger 1.11
1914 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1915    
1916     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1917     Updated hardened-sources based on the 2.4.21 Linux kernel.
1918     This includes updates to most major components such as:
1919 plasmaroo 1.18 - ck-base-0306300059
1920     - selinux-2.4-2003071106
1921     - grsecurity-2.0-rc1
1922     - Updated IPTables patch-o-matic
1923     - Updated SuperFreeS/WAN
1924    
1925 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1926     updated patch set ready for the 2.4.21 based kernel.
1927    
1928 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1929     Initial import of hardened-sources-2.4.20-r4. This revision
1930     includes only a few changes, but one of these is an important
1931     security fix. It is recommended all users of hardened-sources
1932     upgrade to this release.
1933 plasmaroo 1.18
1934 frogger 1.11 - ioperm bug fix
1935     - fixed compilation failure when building without GRSec
1936 plasmaroo 1.18
1937 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1938     due to time constraints, but is planned for inclusion in the near
1939     future.
1940 msterret 1.10
1941     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1942    
1943     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1944     hardened-sources-2.4.20-r3.ebuild:
1945 plasmaroo 1.18 Add Header...
1946 frogger 1.9
1947     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1948     hardened-sources-2.4.20-r3.ebuild:
1949     Removed warnings from ebuild. This kernel should be safe to
1950     use at this point.
1951 frogger 1.8
1952     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1953    
1954     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1955     hardened-sources-2.4.20-r3.ebuild:
1956     New revision. Includes the following changes over -r2:
1957 plasmaroo 1.18
1958 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1959     - Super FreeS/WAN 1.99.7rc2
1960     - PaX for the LSM/SELinux branch
1961     - GRSecurity 2.0-pre4 (role based access control)
1962     - Systrace 1.3
1963     - EXT3 fixes
1964     - EVMS 2.0.1
1965     - GCC 3.1+ compile optimizations
1966     - ProPolice kernel build support
1967     - Hashing table security fixes
1968 frogger 1.3
1969     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1970 frogger 1.7
1971     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1972     Initial import of hardened-sources-r2. This new
1973     ebuild includes many new performance and security
1974     related patches. As in -r1, it will patch in
1975     LSM/SELinux if "selinux" is in USE, otherwise it
1976     will patch in GRSecurity. The following patches
1977     are included in this revision:
1978 plasmaroo 1.18
1979 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1980     (pulled from the base CK patch)
1981     - ptrace exploit patch for the LSM kernel
1982     (the GRSec patch already fixes this)
1983     - LSM 2.4-2003040709
1984     - SELinux 2.4-2003040709
1985     - Systrace v1.2
1986     - IPTables patch-o-matic base patches - 20030107
1987     - CryptoAPI 2.4.20.1 w/ loop-jari patch
1988     - Super FreeS/WAN 1.99.6.1
1989     - GRSecurity 1.9.9g
1990     - MPPE
1991     - EXT3 data journal fix
1992     - CIPE 1.5.4
1993 frogger 1.6
1994     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1995     hardened-sources-2.4.20-r1.ebuild, manifest:
1996 plasmaroo 1.18 Updated to install flask components correctly for selinux.
1997 frogger 1.5
1998     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
1999     hardened-sources-2.4.20-r1.ebuild:
2000     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
2001     is patched in instead. Ptrace patches for selinux have also been added. In
2002     either case, systrace support will be patched in as well.
2003 frogger 1.3
2004     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2005     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
2006 plasmaroo 1.18 Revision bump for new sources.
2007 frogger 1.4
2008 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2009 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
2010 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
2011 method 1.1
2012 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
2013    
2014 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
2015     hardened-sources-2.4.20.ebuild:
2016 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20