/[gentoo-x86]/sys-kernel/hardened-sources/ChangeLog
Gentoo

Contents of /sys-kernel/hardened-sources/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.342 - (hide annotations) (download)
Wed Oct 6 19:03:17 2010 UTC (3 years, 9 months ago) by blueness
Branch: MAIN
Changes since 1.341: +8 -1 lines
hardened-sources-2.6.32-r20 based on 2.6.32.24 + genpatches + grsec-2.2.0-2.6.32.24-201010021153
(Portage version: 2.1.8.3/cvs/Linux x86_64)

1 method 1.1 # ChangeLog for sys-kernel/hardened-sources
2 robbat2 1.312 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.342 # $Header: /var/cvsroot/gentoo-x86/sys-kernel/hardened-sources/ChangeLog,v 1.341 2010/09/30 19:54:43 blueness Exp $
4    
5     *hardened-sources-2.6.32-r20 (06 Oct 2010)
6    
7     06 Oct 2010; Anthony G. Basile <blueness@gentoo.org>
8     +hardened-sources-2.6.32-r20.ebuild:
9     hardened-sources-2.6.32-r20 based on 2.6.32.24 + genpatches +
10     grsec-2.2.0-2.6.32.24-201010021153
11 blueness 1.341
12     *hardened-sources-2.6.35-r1 (30 Sep 2010)
13     *hardened-sources-2.6.32-r19 (30 Sep 2010)
14    
15     30 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
16     +hardened-sources-2.6.32-r19.ebuild, +hardened-sources-2.6.35-r1.ebuild:
17     hardened-sources-2.6.32-r19 based on 2.6.32.23 + genpatches +
18     grsec-2.2.0-2.6.32.23-201009272133
19     hardened-sources-2.6.35-r1 based on 2.6.35.6 + genpatches +
20     grsec-2.2.0-2.6.35.6-201009281623
21 blueness 1.340
22     *hardened-sources-2.6.35 (28 Sep 2010)
23    
24     28 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
25     +hardened-sources-2.6.35.ebuild:
26     hardened-sources-2.6.35 based on grsec-2.2.0-2.6.35.6-201009262116
27 blueness 1.339
28     21 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
29     -hardened-sources-2.6.32-r14.ebuild, -hardened-sources-2.6.32-r15.ebuild,
30     hardened-sources-2.6.32-r18.ebuild, -hardened-sources-2.6.34-r2.ebuild,
31     -hardened-sources-2.6.34-r3.ebuild, hardened-sources-2.6.34-r6.ebuild:
32     Fast track stabilization. See bug #338273. Removed older versions.
33 blueness 1.338
34     *hardened-sources-2.6.34-r6 (17 Sep 2010)
35     *hardened-sources-2.6.32-r18 (17 Sep 2010)
36    
37     17 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
38     +hardened-sources-2.6.32-r18.ebuild, +hardened-sources-2.6.34-r6.ebuild:
39     hardened-sources-2.6.32-r18 based on 2.6.32.21 + genpatches +
40     grsec-2.2.0-2.6.32.21-201009162222
41     hardened-sources-2.6.34-r6 based on 2.6.34.7 + genpatches +
42     grsec-2.2.0-2.6.34.7-201009162222
43     Addresses IA32 syscall exploit.
44 blueness 1.337
45     *hardened-sources-2.6.34-r5 (15 Sep 2010)
46     *hardened-sources-2.6.32-r17 (15 Sep 2010)
47    
48     15 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
49     +hardened-sources-2.6.32-r17.ebuild, +hardened-sources-2.6.34-r5.ebuild:
50     hardened-sources-2.6.32-r17 based on 2.6.32.21 + genpatches +
51     grsec-2.2.0-2.6.32.21-201009130811
52     hardened-sources-2.6.34-r5 based on 2.6.34.6 + genpatches +
53     grsec-2.2.0-2.6.34.6-201009130754
54 blueness 1.336
55     *hardened-sources-2.6.34-r4 (07 Sep 2010)
56     *hardened-sources-2.6.32-r16 (07 Sep 2010)
57    
58     07 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
59     +hardened-sources-2.6.32-r16.ebuild, +hardened-sources-2.6.34-r4.ebuild:
60     hardened-sources-2.6.32-r16 based on 2.6.32.21 +
61     grsec-2.2.0-2.6.32.21-201009032133
62     hardened-sources-2.6.34-r4 based on 2.6.34.6 +
63     grsec-2.2.0-2.6.34.6-201009041352
64 blueness 1.335
65     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org> ChangeLog:
66     hardened-sources-2.6.32-r15 based on 2.6.32.21 +
67     grsec-2.2.0-2.6.32.21-201008292122
68     hardened-sources-2.6.34-r3 based on 2.6.34.6 +
69     grsec-2.2.0-2.6.34.6-201008292122
70 blueness 1.334
71     *hardened-sources-2.6.34-r3 (02 Sep 2010)
72     *hardened-sources-2.6.32-r15 (02 Sep 2010)
73    
74     02 Sep 2010; Anthony G. Basile <blueness@gentoo.org>
75     -hardened-sources-2.6.32-r10.ebuild, -hardened-sources-2.6.32-r11.ebuild,
76     -hardened-sources-2.6.32-r12.ebuild, -hardened-sources-2.6.32-r13.ebuild,
77     +hardened-sources-2.6.32-r15.ebuild, -hardened-sources-2.6.34-r1.ebuild,
78     +hardened-sources-2.6.34-r3.ebuild:
79     Bumps and remove deprecated versions
80 blueness 1.333
81     *hardened-sources-2.6.34-r2 (21 Aug 2010)
82    
83     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
84     +hardened-sources-2.6.34-r2.ebuild:
85     Based on vanilla 2.6.34.4 + genpatches + grsec-2.2.0-2.6.34.4-201008131840
86 blueness 1.332
87     *hardened-sources-2.6.32-r14 (21 Aug 2010)
88    
89     21 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
90     +hardened-sources-2.6.32-r14.ebuild:
91     Based on vanilla 2.6.32.19 + genpatches +
92     grsec-2.2.0-2.6.32.19-201008131840
93 blueness 1.331
94     *hardened-sources-2.6.32-r13 (14 Aug 2010)
95    
96     14 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
97     +hardened-sources-2.6.32-r13.ebuild:
98     Based on vanilla 2.6.32.18 + genpatches +
99     grsecurity-2.2.0-2.6.32.18-201008112233
100 robbat2 1.330
101     03 Aug 2010; Robin H. Johnson <robbat2@gentoo.org> Manifest:
102     kernel-2 deblob support for 2.6.35; bug #324505: deblob-check usage.
103 blueness 1.329
104     01 Aug 2010; Anthony G. Basile <blueness@gentoo.org>
105     hardened-sources-2.6.32-r9.ebuild:
106     Stable ppc64. Bug #326885
107 blueness 1.328
108     *hardened-sources-2.6.32-r12 (24 Jul 2010)
109    
110     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
111     +hardened-sources-2.6.32-r12.ebuild:
112     Parallels fix incorporated into hardened-sources-2.6.34-r1
113 blueness 1.327
114     *hardened-sources-2.6.34-r1 (24 Jul 2010)
115    
116     24 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
117     -hardened-sources-2.6.34.ebuild, +hardened-sources-2.6.34-r1.ebuild:
118     Fixes bug #328275
119 chainsaw 1.326
120     21 Jul 2010; <chainsaw@gentoo.org> metadata.xml:
121     Address metadata concerns by Jeroen "rej" Roovers <rej@gentoo.org> raised
122     on gentoo-dev.
123 jer 1.325
124     21 Jul 2010; Jeroen Roovers <jer@gentoo.org> metadata.xml:
125     Correct mail address.
126 blueness 1.324
127     18 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
128     -hardened-sources-2.6.25-r13.ebuild, -hardened-sources-2.6.26-r9.ebuild,
129     -hardened-sources-2.6.28-r7.ebuild, -hardened-sources-2.6.29.ebuild,
130     -hardened-sources-2.6.32-r8.ebuild:
131     Removing outdated releases
132 fauli 1.323
133     17 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
134     hardened-sources-2.6.32-r9.ebuild:
135     stable x86, bug 326885
136 blueness 1.322
137     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
138     -hardened-sources-2.6.32-r7.ebuild:
139     Removed for security. Bug #325573
140 blueness 1.321
141     *hardened-sources-2.6.34 (13 Jul 2010)
142    
143     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
144     +hardened-sources-2.6.34.ebuild:
145     Initial commit based on mainline 2.6.34.1 and grsec-2.2.0.
146 blueness 1.320
147     *hardened-sources-2.6.32-r11 (13 Jul 2010)
148    
149     13 Jul 2010; Anthony G. Basile <blueness@gentoo.org>
150     +hardened-sources-2.6.32-r11.ebuild:
151     New patchset based on mainline 2.6.32.16 and grsec-2.2.0. Bug #327263
152 chainsaw 1.319
153     06 Jul 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r9.ebuild:
154     Marked stable on AMD64 as requested by Anthony G. Basile
155     <blueness@gentoo.org> in bug #326885. Operational testing done for 1 week
156     on roughly two dozen HP Proliant DL365 G1 and DL385 G2 systems.
157 blueness 1.318
158     *hardened-sources-2.6.32-r10 (30 Jun 2010)
159    
160     30 Jun 2010; Anthony G. Basile <blueness@gentoo.org>
161     +hardened-sources-2.6.32-r10.ebuild:
162     New patchset based on mainline 2.6.32.15 and grsec-2.2.0. Bug #325227.
163 blueness 1.317
164     29 Jun 2010; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
165     Added myself to the metadata.xml
166 chainsaw 1.316
167     *hardened-sources-2.6.32-r9 (11 Jun 2010)
168    
169     11 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r9.ebuild:
170     New patchset by Anthony G Basile, based on mainline 2.6.32.15 sources.
171 chainsaw 1.315
172     *hardened-sources-2.6.32-r8 (01 Jun 2010)
173    
174     01 Jun 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r8.ebuild:
175     New patchset by Anthony G Basile, based on mainline 2.6.32.14 sources.
176 chainsaw 1.314
177     27 May 2010; <chainsaw@gentoo.org> hardened-sources-2.6.32-r7.ebuild:
178     Update SRC_URI to point to mirror network now that the distfile has
179     propagated.
180 chainsaw 1.313
181     *hardened-sources-2.6.32-r7 (26 May 2010)
182    
183     26 May 2010; <chainsaw@gentoo.org> +hardened-sources-2.6.32-r7.ebuild,
184     metadata.xml:
185     New 2.6.32-based release by Anthony G Basile, Robin H. Johnson & Matthew
186     Summers.
187 robbat2 1.312
188     26 Apr 2010; Robin H. Johnson <robbat2@gentoo.org> metadata.xml:
189     Update Manifest for deblob support in kernel-2 eclass.
190 nixnut 1.311
191     31 May 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r9.ebuild:
192     ppc stable
193 gengor 1.310
194     29 May 2009; Gordon Malm <gengor@gentoo.org>
195     -hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r9.ebuild:
196     Stable amd64/x86 and remove old.
197 gengor 1.309
198     *hardened-sources-2.6.29 (25 May 2009)
199    
200     25 May 2009; Gordon Malm <gengor@gentoo.org>
201     +hardened-sources-2.6.29.ebuild:
202     Initial 2.6.29 release. Thanks to Kerin Millar for providing and testing
203     release candidates.
204 gengor 1.308
205     *hardened-sources-2.6.28-r9 (25 May 2009)
206    
207     25 May 2009; Gordon Malm <gengor@gentoo.org>
208     -hardened-sources-2.6.28-r8.ebuild, +hardened-sources-2.6.28-r9.ebuild:
209     Fix x86-32 boot failure (regression vs. 2.6.28-r7).
210 gengor 1.307
211     *hardened-sources-2.6.28-r8 (18 May 2009)
212    
213     18 May 2009; Gordon Malm <gengor@gentoo.org>
214     +hardened-sources-2.6.28-r8.ebuild:
215     Bump to Linux 2.6.28.10, latest genpatches, PaX updates. Fixes bug #256067
216     and #262862 among others.
217 gengor 1.306
218     01 May 2009; Gordon Malm <gengor@gentoo.org>
219     hardened-sources-2.6.25-r13.ebuild, hardened-sources-2.6.26-r9.ebuild,
220     hardened-sources-2.6.28-r6.ebuild, hardened-sources-2.6.28-r7.ebuild:
221     Remove unnecessary mirror://gentoo from SRC_URI.
222 nixnut 1.305
223     05 Apr 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r7.ebuild:
224     ppc stable
225 gengor 1.304
226     30 Mar 2009; Gordon Malm <gengor@gentoo.org>
227     -hardened-sources-2.6.28-r4.ebuild, hardened-sources-2.6.28-r7.ebuild:
228     Stable amd64/x86 and remove old.
229 gengor 1.303
230     *hardened-sources-2.6.28-r7 (27 Mar 2009)
231    
232     27 Mar 2009; Gordon Malm <gengor@gentoo.org>
233     +hardened-sources-2.6.28-r7.ebuild:
234     Add Linux 2.6.28.9. Fix bugs 263424, 263870.
235 gengor 1.302
236     22 Mar 2009; Gordon Malm <gengor@gentoo.org>
237     -hardened-sources-2.6.27-r7.ebuild, -hardened-sources-2.6.27-r8.ebuild,
238     -hardened-sources-2.6.28-r1.ebuild, -hardened-sources-2.6.28-r2.ebuild,
239     -hardened-sources-2.6.28-r3.ebuild, hardened-sources-2.6.28-r6.ebuild:
240     Stable amd64/x86 and remove old versions.
241 nixnut 1.301
242     22 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r6.ebuild:
243     ppc stable
244 gengor 1.300
245     *hardened-sources-2.6.28-r6 (21 Mar 2009)
246    
247     21 Mar 2009; Gordon Malm <gengor@gentoo.org>
248     -hardened-sources-2.6.28-r5.ebuild, +hardened-sources-2.6.28-r6.ebuild:
249     Minor fix to ensure RTC is properly selected when GRKERNSEC_IO is enabled.
250 gengor 1.299
251     *hardened-sources-2.6.28-r5 (20 Mar 2009)
252    
253     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
254     +hardened-sources-2.6.28-r5.ebuild:
255     Bump genpatches. Grsecurity patch bump, fixes bug #262752.
256 gengor 1.298
257     20 Mar 2009; Gordon Malm <gengor@gentoo.org>
258     hardened-sources-2.6.28-r4.ebuild:
259     Stable amd64/x86.
260 gengor 1.297
261     *hardened-sources-2.6.28-r4 (18 Mar 2009)
262    
263     18 Mar 2009; Gordon Malm <gengor@gentoo.org>
264     +hardened-sources-2.6.28-r4.ebuild:
265     Bump to Linux 2.6.28.8. PaX update fixes oops in SANITIZE feature,
266     compilation with CPA_DEBUG and more.
267 gengor 1.296
268     17 Mar 2009; Gordon Malm <gengor@gentoo.org>
269     hardened-sources-2.6.28-r3.ebuild:
270     Quick stable amd64/x86.
271 gengor 1.295
272     *hardened-sources-2.6.28-r3 (15 Mar 2009)
273    
274     15 Mar 2009; Gordon Malm <gengor@gentoo.org>
275     +hardened-sources-2.6.28-r3.ebuild:
276     Adds latest PaX changes fixing some boot issues, ext4 fixes for bug #262507.
277 nixnut 1.294
278     14 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.28-r2.ebuild:
279     ppc stable
280 gengor 1.293
281     13 Mar 2009; Gordon Malm <gengor@gentoo.org>
282     hardened-sources-2.6.28-r2.ebuild:
283     Stable amd64/x86.
284 gengor 1.292
285     *hardened-sources-2.6.28-r2 (11 Mar 2009)
286    
287     11 Mar 2009; Gordon Malm <gengor@gentoo.org>
288     +hardened-sources-2.6.28-r2.ebuild:
289     Version bump bringing in latest grsecurity patch.
290 gengor 1.291
291     *hardened-sources-2.6.28-r1 (09 Mar 2009)
292    
293     09 Mar 2009; Gordon Malm <gengor@gentoo.org>
294     -hardened-sources-2.6.28.ebuild, +hardened-sources-2.6.28-r1.ebuild:
295     Version bump and remove old.
296 nixnut 1.290
297     07 Mar 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.27-r8.ebuild:
298     ppc stable
299 gengor 1.289
300     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
301     hardened-sources-2.6.27-r8.ebuild:
302     Remove amd64 testing keyword, bug 256226.
303 gengor 1.288
304     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
305     hardened-sources-2.6.27-r8.ebuild:
306     Revert amd64 stable, bug #256226.
307 gengor 1.287
308     01 Mar 2009; Gordon Malm <gengor@gentoo.org>
309     hardened-sources-2.6.27-r8.ebuild:
310     Stable on amd64/x86.
311 gengor 1.286
312     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
313     -hardened-sources-2.6.27-r6.ebuild:
314     Remove old 2.6.27 release.
315 gengor 1.285
316     *hardened-sources-2.6.27-r8 (24 Feb 2009)
317    
318     24 Feb 2009; Gordon Malm <gengor@gentoo.org>
319     +hardened-sources-2.6.27-r8.ebuild:
320     Bump to latest genpatches, Linux 2.6.27.19, PaX updates. Fixes bug #256067
321     and probably more.
322 nixnut 1.284
323     04 Feb 2009; nixnut <nixnut@gentoo.org> hardened-sources-2.6.26-r9.ebuild:
324     ppc stable
325 gengor 1.283
326     *hardened-sources-2.6.28 (25 Jan 2009)
327    
328     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
329     +hardened-sources-2.6.28.ebuild:
330     Initial 2.6.28 release.
331 gengor 1.282
332     *hardened-sources-2.6.27-r7 (25 Jan 2009)
333    
334     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
335     +hardened-sources-2.6.27-r7.ebuild:
336     Bump to Linux 2.6.27.13.
337 gengor 1.281
338     25 Jan 2009; Gordon Malm <gengor@gentoo.org>
339     hardened-sources-2.6.26-r9.ebuild:
340     Stable amd64/x86.
341 gengor 1.280
342     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
343     -hardened-sources-2.6.27-r3.ebuild, -hardened-sources-2.6.27-r4.ebuild,
344     -hardened-sources-2.6.27-r5.ebuild:
345     Remove problem versions.
346 gengor 1.279
347     *hardened-sources-2.6.27-r6 (24 Jan 2009)
348    
349     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
350     +hardened-sources-2.6.27-r6.ebuild:
351     Revert PaX test29 to test30 changes. Fixes bug 256226.
352 gengor 1.277
353     *hardened-sources-2.6.27-r5 (24 Jan 2009)
354    
355     24 Jan 2009; Gordon Malm <gengor@gentoo.org>
356     +hardened-sources-2.6.27-r5.ebuild:
357 gengor 1.278 Bump to genpatches-10 (includes Linux 2.6.27.{11,12}) and fix bugs 253733,
358 gengor 1.277 254843.
359 gengor 1.276
360     23 Jan 2009; Gordon Malm <gengor@gentoo.org>
361     -hardened-sources-2.6.25-r11.ebuild, -hardened-sources-2.6.25-r12.ebuild,
362     -hardened-sources-2.6.26-r7.ebuild, -hardened-sources-2.6.26-r8.ebuild:
363     Remove problem versions.
364 nixnut 1.275
365     23 Jan 2009; nixnut <nixnut@gentoo.org>
366     hardened-sources-2.6.25-r13.ebuild:
367     ppc stable
368 gengor 1.274
369     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
370     hardened-sources-2.6.25-r13.ebuild:
371     Fasttrack stable amd64/x86.
372 gengor 1.273
373     *hardened-sources-2.6.26-r9 (21 Jan 2009)
374    
375     21 Jan 2009; Gordon Malm <gengor@gentoo.org>
376     +hardened-sources-2.6.26-r9.ebuild:
377 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
378 gengor 1.272
379     *hardened-sources-2.6.25-r13 (20 Jan 2009)
380    
381     20 Jan 2009; Gordon Malm <gengor@gentoo.org>
382     +hardened-sources-2.6.25-r13.ebuild:
383 gengor 1.278 Revert RLIMIT_STACK false-positives-avoidance patch. Bugs 253733, 254843
384 nixnut 1.271
385     20 Jan 2009; nixnut <nixnut@gentoo.org>
386     hardened-sources-2.6.25-r12.ebuild:
387     ppc stable
388 gengor 1.270
389     17 Jan 2009; Gordon Malm <gengor@gentoo.org>
390     hardened-sources-2.6.25-r12.ebuild:
391     Stable amd64/x86.
392 gengor 1.269
393     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
394     -hardened-sources-2.6.25-r10.ebuild, -hardened-sources-2.6.26-r6.ebuild,
395     -hardened-sources-2.6.27-r2.ebuild:
396     Clean out old versions.
397 gengor 1.268
398     *hardened-sources-2.6.27-r4 (14 Jan 2009)
399     *hardened-sources-2.6.26-r8 (14 Jan 2009)
400     *hardened-sources-2.6.25-r12 (14 Jan 2009)
401    
402     14 Jan 2009; Gordon Malm <gengor@gentoo.org>
403     +hardened-sources-2.6.25-r12.ebuild, +hardened-sources-2.6.26-r8.ebuild,
404     +hardened-sources-2.6.27-r4.ebuild:
405     2.6.25-r12: Fixes bugs #249729, #250548, #252688, #254907
406     2.6.26-r8: Fixes bugs #249729, #250548, #252688, #254907
407     2.6.27-r4: Update to latest genpatches (includes Linux 2.6.27.10) and
408     grsecurity patch. Fixes bugs #249729, #250511, #250548, #252688, #254907
409 nixnut 1.267
410     15 Dec 2008; nixnut <nixnut@gentoo.org>
411     hardened-sources-2.6.25-r11.ebuild:
412     Stable on ppc
413 gengor 1.266
414     09 Dec 2008; Gordon Malm <gengor@gentoo.org>
415     hardened-sources-2.6.25-r11.ebuild:
416     Stable amd64/x86.
417 gengor 1.265
418     *hardened-sources-2.6.27-r3 (07 Dec 2008)
419    
420     07 Dec 2008; Gordon Malm <gengor@gentoo.org>
421     +hardened-sources-2.6.27-r3.ebuild:
422     Bump to latest genpatches, including Linux 2.6.27.8. Bump grsec/pax patches.
423     Fixes bug #248754, #249729 and #246607.
424 gengor 1.264
425     03 Dec 2008; Gordon Malm <gengor@gentoo.org>
426     -hardened-sources-2.6.25-r9.ebuild, -hardened-sources-2.6.26-r5.ebuild:
427     Remove old versions.
428 gengor 1.262
429     *hardened-sources-2.6.26-r7 (03 Dec 2008)
430     *hardened-sources-2.6.25-r11 (03 Dec 2008)
431    
432 gengor 1.263 03 Dec 2008; Gordon Malm <gengor@gentoo.org>
433     +hardened-sources-2.6.25-r11.ebuild, +hardened-sources-2.6.26-r7.ebuild:
434 gengor 1.262 2.6.25-r11: Fixes bugs 246607, 246710, 247453 and 248754.
435     2.6.26-r7: Fixes bugs 246607, 246710, 246763, 247453 and 248754.
436     Both include many backports from 2.6.27.{6,7} -stable releases.
437 gengor 1.261
438     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
439     -hardened-sources-2.6.27.ebuild, -hardened-sources-2.6.27-r1.ebuild:
440     Remove versions broken on ARCHes != x86/amd64.
441 gengor 1.260
442     *hardened-sources-2.6.27-r2 (24 Nov 2008)
443    
444     24 Nov 2008; Gordon Malm <gengor@gentoo.org>
445     +hardened-sources-2.6.27-r2.ebuild:
446     Bump to Linux 2.6.27.7 and latest grsecurity patch.
447 gengor 1.259
448     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
449     -hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r4.ebuild:
450     Remove old versions.
451 gengor 1.258
452     19 Nov 2008; Gordon Malm <gengor@gentoo.org>
453     hardened-sources-2.6.27.ebuild, hardened-sources-2.6.27-r1.ebuild:
454     Remove all but ~amd64 & ~x86 keywords (broken elsewhere).
455 nixnut 1.257
456     16 Nov 2008; nixnut <nixnut@gentoo.org>
457     hardened-sources-2.6.25-r10.ebuild:
458     Stable on ppc
459 gengor 1.256
460     15 Nov 2008; Gordon Malm <gengor@gentoo.org>
461     hardened-sources-2.6.25-r10.ebuild:
462     Stable amd64/x86.
463 gengor 1.255
464     *hardened-sources-2.6.26-r6 (12 Nov 2008)
465    
466     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
467     +hardened-sources-2.6.26-r6.ebuild:
468     Bump to Linux 2.6.26.8 and fix security bug #245650.
469 gengor 1.254
470     *hardened-sources-2.6.25-r10 (12 Nov 2008)
471    
472     12 Nov 2008; Gordon Malm <gengor@gentoo.org>
473     +hardened-sources-2.6.25-r10.ebuild:
474     Update to Linux 2.6.25.20 and fix bugs #245427, #245650.
475 gengor 1.253
476     *hardened-sources-2.6.27-r1 (09 Nov 2008)
477    
478     09 Nov 2008; Gordon Malm <gengor@gentoo.org>
479     +hardened-sources-2.6.27-r1.ebuild:
480     Bump to stable kernel 2.6.27.5 and latest grsecurity patch.
481 gengor 1.252
482     *hardened-sources-2.6.27 (04 Nov 2008)
483    
484     04 Nov 2008; Gordon Malm <gengor@gentoo.org>
485     +hardened-sources-2.6.27.ebuild:
486     Initial 2.6.27 release.
487 gengor 1.251
488     *hardened-sources-2.6.26-r5 (03 Nov 2008)
489    
490     03 Nov 2008; Gordon Malm <gengor@gentoo.org>
491     -hardened-sources-2.6.25-r7.ebuild, -hardened-sources-2.6.26-r2.ebuild,
492     +hardened-sources-2.6.26-r5.ebuild:
493     2.6.26-r5: Bump to Linux 2.6.26.7, PaX updates.
494     Clean out some old versions.
495 nixnut 1.250
496     02 Nov 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r9.ebuild:
497     Stable on ppc
498 gengor 1.249
499     30 Oct 2008; Gordon Malm <gengor@gentoo.org>
500     hardened-sources-2.6.25-r9.ebuild:
501     Stable on amd64/x86.
502 gengor 1.248
503     *hardened-sources-2.6.25-r9 (26 Oct 2008)
504    
505     26 Oct 2008; Gordon Malm <gengor@gentoo.org>
506     +hardened-sources-2.6.25-r9.ebuild:
507     Update to Linux 2.6.25.19
508 nixnut 1.247
509     15 Oct 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r8.ebuild:
510     Stable on ppc
511 gengor 1.246
512     *hardened-sources-2.6.26-r4 (14 Oct 2008)
513    
514     14 Oct 2008; Gordon Malm <gengor@gentoo.org>
515     -hardened-sources-2.6.26-r3.ebuild, +hardened-sources-2.6.26-r4.ebuild:
516     Update to latest grsecurity patch, fixing building of non-modular kernels.
517 gengor 1.245
518     *hardened-sources-2.6.26-r3 (12 Oct 2008)
519    
520     12 Oct 2008; Gordon Malm <gengor@gentoo.org>
521     hardened-sources-2.6.25-r8.ebuild, -hardened-sources-2.6.26-r1.ebuild,
522     +hardened-sources-2.6.26-r3.ebuild:
523     2.6.26-r3: Update to Linux 2.6.26.6 and latest grsecurity patch.
524     2.6.26-r1: Removed.
525     2.6.25-r8: Stable amd64/x86.
526 gengor 1.244
527     *hardened-sources-2.6.25-r8 (09 Oct 2008)
528    
529     09 Oct 2008; Gordon Malm <gengor@gentoo.org>
530     -hardened-sources-2.6.25-r4.ebuild, -hardened-sources-2.6.25-r5.ebuild,
531     -hardened-sources-2.6.25-r6.ebuild, +hardened-sources-2.6.25-r8.ebuild:
532     Update to genpatches-11 and Linux 2.6.25.18. Remove old versions.
533 nixnut 1.243
534     20 Sep 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r7.ebuild:
535     Stable on ppc
536 gengor 1.242
537     17 Sep 2008; Gordon Malm <gengor@gentoo.org>
538     hardened-sources-2.6.25-r7.ebuild:
539     Stable amd64/x86.
540 gengor 1.241
541     *hardened-sources-2.6.26-r2 (13 Sep 2008)
542    
543     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
544     -hardened-sources-2.6.26.ebuild, +hardened-sources-2.6.26-r2.ebuild:
545     2.6.26-r2: Update to Linux 2.6.26.5, new grsecurity patch adding
546     PAX_REFCOUNT feature, fix bug #237473 (CVE-2008-3525). 2.6.26: Removed.
547 gengor 1.240
548     *hardened-sources-2.6.25-r7 (13 Sep 2008)
549    
550     13 Sep 2008; Gordon Malm <gengor@gentoo.org>
551     +hardened-sources-2.6.25-r7.ebuild:
552     Add 2.6.25-r7, fixing bug #237473 (CVE-2008-3525) and a PaX bug.
553 gengor 1.239
554     10 Sep 2008; Gordon Malm <gengor@gentoo.org>
555     hardened-sources-2.6.25-r4.ebuild, hardened-sources-2.6.25-r5.ebuild,
556     hardened-sources-2.6.25-r6.ebuild, hardened-sources-2.6.26.ebuild,
557     hardened-sources-2.6.26-r1.ebuild:
558     Update DESCRIPTION and HGPV_URI.
559 gengor 1.238
560     *hardened-sources-2.6.25-r6 (09 Sep 2008)
561    
562     09 Sep 2008; Gordon Malm <gengor@gentoo.org>
563     -hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25-r6.ebuild:
564     2.6.25-r6: Update to Linux 2.6.25.17.
565     2.6.24-r3: Removed.
566 gengor 1.237
567     08 Sep 2008; Gordon Malm <gengor@gentoo.org>
568     hardened-sources-2.6.25-r5.ebuild:
569     Stable on amd64/x86
570 gengor 1.236
571     07 Sep 2008; Gordon Malm <gengor@gentoo.org> metadata.xml:
572     Update my email address.
573 nixnut 1.235
574     31 Aug 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.25-r4.ebuild:
575     stable on ppc
576 battousai 1.234
577     *hardened-sources-2.6.26-r1 (23 Aug 2008)
578     *hardened-sources-2.6.25-r5 (23 Aug 2008)
579    
580     23 Aug 2008; Bryan D. Stine <battousai@gentoo.org>
581     -hardened-sources-2.6.23-r13.ebuild, -hardened-sources-2.6.25-r3.ebuild,
582     hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.25-r5.ebuild,
583     +hardened-sources-2.6.26-r1.ebuild:
584     Bump to 2.6.25-r5 for updated patches and upstream .10 kernel, fixing
585     security bug #235221. Bump to 2.6.26-r1 for upstream .3 kernel, also
586     fixing security bug #235221. Marked 2.6.25-r4 stable on amd64 and x86.
587     Removed 2.6.23-r13 and 2.6.25-r3. Commit on behalf of Gordon Malm
588     (gengor).
589 solar 1.233
590     *hardened-sources-2.6.26 (18 Aug 2008)
591     *hardened-sources-2.6.25-r4 (18 Aug 2008)
592    
593     18 Aug 2008; <solar@gentoo.org> -hardened-sources-2.6.25-r2.ebuild,
594     +hardened-sources-2.6.25-r4.ebuild, +hardened-sources-2.6.26.ebuild:
595     - proxy commit for gengor 2.6.26: Initial 2.6.26 release. 2.6.25-r4: Update
596     to Linux 2.6.25.15. Fixes security bugs #234799, #234803 and #234812.
597     2.6.25-r2: Removed.
598 tove 1.232
599     16 Aug 2008; Torsten Veller <tove@gentoo.org> metadata.xml:
600     Remove phreak from metadata.xml (#96398)
601 solar 1.231
602     *hardened-sources-2.6.25-r3 (31 Jul 2008)
603    
604     31 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.24-r2.ebuild,
605     -hardened-sources-2.6.25.ebuild, -hardened-sources-2.6.25-r1.ebuild,
606     +hardened-sources-2.6.25-r3.ebuild:
607     - 2.6.25-r3: Update to Linux 2.6.25.13 and new grsecurity patch. Multiple
608     fixes, including security bug #231750.
609 nixnut 1.230
610     28 Jul 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.24-r3.ebuild:
611     Stable on ppc
612 solar 1.229
613     *hardened-sources-2.6.25-r2 (05 Jul 2008)
614    
615     05 Jul 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r11.ebuild,
616     -hardened-sources-2.6.23-r12.ebuild, hardened-sources-2.6.24-r3.ebuild,
617     +hardened-sources-2.6.25-r2.ebuild:
618     2.6.23-r4: Stable x86/amd64
619     2.6.25-r2: Update to Linux 2.6.25.10 and latest grsecurity release.
620     2.6.23-r{11,12}: Removed due to multiple vulns.
621     (gengor & kerframil)
622 nixnut 1.228
623     04 Jul 2008; nixnut <nixnut@gentoo.org>
624     hardened-sources-2.6.23-r13.ebuild:
625     Stable on ppc
626 solar 1.227
627     *hardened-sources-2.6.25-r1 (30 Jun 2008)
628    
629     30 Jun 2008; <solar@gentoo.org> hardened-sources-2.6.23-r13.ebuild,
630     +hardened-sources-2.6.25-r1.ebuild:
631     2.6.25-r1: Brings in Linux -stable tree patches 2.6.25.{7,8,9} and newer
632     grsecurity release. 2.6.23-r13: x86/amd64 stable
633 solar 1.226
634     *hardened-sources-2.6.25 (17 Jun 2008)
635     *hardened-sources-2.6.24-r3 (17 Jun 2008)
636     *hardened-sources-2.6.23-r13 (17 Jun 2008)
637    
638     17 Jun 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r13.ebuild,
639     +hardened-sources-2.6.24-r3.ebuild, +hardened-sources-2.6.25.ebuild:
640     * 2.6.23-r13: Fixes security bugs #198997, #212136, #222331, #222635,
641     #224647, #225461, other fixes. * 2.6.24-r3: Fixes security bugs #212136,
642     #222331, #222635, #224647, #225461, grsec/PaX updates/fixes, other fixes. *
643     2.6.25: Initial 2.6.25 release.
644 solar 1.225
645     15 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r12.ebuild:
646     - fasttrack to stable x86/amd64
647 swegener 1.224
648     11 May 2008; Sven Wegener <swegener@gentoo.org> Manifest:
649     Fix broken digest for linux-2.6.24.tar.bz2.
650 solar 1.223
651     *hardened-sources-2.6.24-r2 (11 May 2008)
652     *hardened-sources-2.6.23-r12 (11 May 2008)
653    
654     11 May 2008; <solar@gentoo.org> -hardened-sources-2.6.23-r7.ebuild,
655     -hardened-sources-2.6.23-r9.ebuild, -hardened-sources-2.6.23-r10.ebuild,
656     +hardened-sources-2.6.23-r12.ebuild, -hardened-sources-2.6.24.ebuild,
657     -hardened-sources-2.6.24-r1.ebuild, +hardened-sources-2.6.24-r2.ebuild:
658     proxy commit for gengor. 2.6.23-r11 shortlog: Fixes security bugs 220691,
659     220975, 220979, 221123. 2.6.24-r2 not-so-shortlog: Fixes bug 215442,
660     security bugs 219901, 220691, 220975, 220979, 221123. New
661     genpatches/grsecurity with numerous updates & fixes. 2.6.23-r7->2.6.23-r10
662     should be removed as far as I'm concerned, everything else remove due to
663     vulnerable to numerous security bugs or brokeness.
664 nixnut 1.222
665     10 May 2008; nixnut <nixnut@gentoo.org>
666     hardened-sources-2.6.23-r11.ebuild:
667     Stable on ppc
668 solar 1.221
669     05 May 2008; <solar@gentoo.org> hardened-sources-2.6.23-r11.ebuild:
670     - -r11 stable on x86/amd64
671 solar 1.220
672     *hardened-sources-2.6.23-r11 (01 May 2008)
673    
674     01 May 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r11.ebuild:
675     - version bump to fix ulgy linux bugs
676 phreak 1.219
677     *hardened-sources-2.6.24-r1 (30 Apr 2008)
678    
679     30 Apr 2008; Christian Heim <phreak@gentoo.org>
680     +hardened-sources-2.6.24-r1.ebuild:
681     Revision bump (thanks to Kerin and Gordon, again), pulling
682     genpatches-2.6.24-7, solving #219089. Additionally contains further security
683     fixes plus some minor updates.
684 phreak 1.218
685     *hardened-sources-2.6.23-r10 (30 Apr 2008)
686    
687     30 Apr 2008; Christian Heim <phreak@gentoo.org>
688     +hardened-sources-2.6.23-r10.ebuild:
689     Revision bump (thanks to Kerin and Gordon, again), solving #213811, #219089.
690     Additional contains "various other fixes".
691 phreak 1.217
692     09 Apr 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
693     Update the longdescription in metadata, thanks to Gordon Malm.
694 nixnut 1.216
695     08 Apr 2008; nixnut <nixnut@gentoo.org> hardened-sources-2.6.23-r9.ebuild:
696     Stable on ppc wrt bug #213255
697 solar 1.215
698     07 Apr 2008; <solar@gentoo.org> -hardened-sources-2.4.35-r2.ebuild,
699     -hardened-sources-2.6.23-r8.ebuild, hardened-sources-2.6.23-r9.ebuild:
700     - stable on x86/amd64 per request. Removed obsolete ebuilds
701 phreak 1.214
702     *hardened-sources-2.6.24 (07 Apr 2008)
703    
704     07 Apr 2008; Christian Heim <phreak@gentoo.org>
705     +hardened-sources-2.6.24.ebuild:
706     Adding ebuild for hardened-sources-2.6.24 (many thanks to Kerin Millar
707     <kerframil at gmail.com> and Gordon Malm <bugs-gentoo-org-02 at bumpin.org>
708     for the many contributions and their continued effort in #216612) based on
709     2.6.24 and genpatches-2.6.24-5.
710    
711     The current ebuild/patchset contains these things:
712     * Incoporates unmodified grsec-2.1.11-2.6.24.4-200803262003 patch
713     * Introduces bespoke server and workstation oriented security levels
714     * VDSO_COMPAT cannot be enabled during runtime if PaX is enabled
715 phreak 1.213
716     30 Mar 2008; Christian Heim <phreak@gentoo.org> metadata.xml:
717     Fix the metadata.xml (Kerin isn't a dev, though he and Gordon are
718     maintaining it).
719 phreak 1.212
720     24 Mar 2008; Christian Heim <phreak@gentoo.org>
721     hardened-sources-2.4.35-r2.ebuild:
722     Fixing SRC_URI for 2.4.35-r2.
723 phreak 1.211
724     *hardened-sources-2.6.23-r9 (22 Mar 2008)
725    
726     22 Mar 2008; Christian Heim <phreak@gentoo.org>
727     +hardened-sources-2.6.23-r9.ebuild:
728     * Revision bump, rebasing the patchset against genpatches-2.6.23-10.
729     * Change the default GIDs for some grsecurity options
730     * Revamp the Hardened [Gentoo] security level and make it the default level
731     * Fixing compilation on ia64 with CONFIG_MODULES=y (loadable module support)
732     * Fix a recursive lock -- call to capable() within ptrace_attach()
733     * Fix bug that allows audit and iscsi operations to be controlled via netlink
734 solar 1.210
735     *hardened-sources-2.6.23-r8 (27 Feb 2008)
736    
737     27 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r8.ebuild:
738     - version bump from Kerin Millar bug 210026
739 solar 1.209
740     17 Feb 2008; <solar@gentoo.org> metadata.xml,
741     -hardened-sources-2.4.33.4.ebuild, -hardened-sources-2.6.20-r6.ebuild,
742     -hardened-sources-2.6.20-r10.ebuild, -hardened-sources-2.6.23-r4.ebuild,
743     -hardened-sources-2.6.23-r6.ebuild, hardened-sources-2.6.23-r7.ebuild:
744     - stable on x86 and remove old ebuilds
745 solar 1.207
746     15 Feb 2008; <solar@gentoo.org> hardened-sources-2.6.23-r7.ebuild:
747 solar 1.208 - stable on amd64 per request of amd64 lead
748 solar 1.206
749     *hardened-sources-2.6.23-r7 (11 Feb 2008)
750    
751     11 Feb 2008; <solar@gentoo.org> +hardened-sources-2.6.23-r7.ebuild:
752     - version bump from kerin.millar
753     Changes:
754    
755     * Bump to genpatches-base-2.6.23-9
756     * Ported grsecurity-2.1.11-2.6.23.14-200801231800 to 2.6.23.15
757     * Disables COMPAT_VDSO in x86/defconfig
758     * Removes bogus symbols ACPI_SLEEP_PROC_(FS|SLEEP) from x86_64/defconfig
759 phreak 1.205
760     25 Jan 2008; Christian Heim <phreak@gentoo.org>
761     -hardened-sources-2.6.22-r8.ebuild:
762     Cleaning up old versions.
763 phreak 1.204
764     *hardened-sources-2.6.23-r6 (25 Jan 2008)
765    
766     25 Jan 2008; Christian Heim <phreak@gentoo.org>
767     -hardened-sources-2.6.23-r5.ebuild, +hardened-sources-2.6.23-r6.ebuild:
768     Revision bump, pulling in the latest genpatches.
769 phreak 1.203
770     *hardened-sources-2.6.23-r5 (24 Dec 2007)
771    
772     24 Dec 2007; Christian Heim <phreak@gentoo.org>
773     hardened-sources-2.4.35-r2.ebuild, hardened-sources-2.6.20-r6.ebuild,
774     hardened-sources-2.6.20-r10.ebuild, hardened-sources-2.6.22-r8.ebuild,
775     hardened-sources-2.6.23-r4.ebuild, +hardened-sources-2.6.23-r5.ebuild:
776     Revision bump, for the promised updated grsec snapshot. Also changing SRC_URI.
777 phreak 1.202
778     24 Dec 2007; Christian Heim <phreak@gentoo.org>
779     -hardened-sources-2.6.22-r7.ebuild, -hardened-sources-2.6.23.ebuild,
780     -hardened-sources-2.6.23-r1.ebuild, -hardened-sources-2.6.23-r2.ebuild,
781     -hardened-sources-2.6.23-r3.ebuild:
782     Cleaning out some unused, old versions.
783 phreak 1.201
784     24 Dec 2007; Christian Heim <phreak@gentoo.org>
785     hardened-sources-2.6.23-r4.ebuild:
786     Marking hardened-sources-2.6.23-r4 stable on amd64 and x86. I know it ain't
787     in the tree for long, but there isn't much of a difference between this and
788     -r3. Only this revision pulls in 2.6.23.11 and 2.6.23.12 from genpatches.
789 phreak 1.200
790     *hardened-sources-2.6.23-r4 (23 Dec 2007)
791    
792     23 Dec 2007; Christian Heim <phreak@gentoo.org>
793     +hardened-sources-2.6.23-r4.ebuild:
794     Revision bump, grabbing the lastest genpatches release (2.6.23.12 that is).
795 phreak 1.199
796     *hardened-sources-2.6.23-r3 (04 Dec 2007)
797    
798     04 Dec 2007; Christian Heim <phreak@gentoo.org>
799     +hardened-sources-2.6.23-r3.ebuild:
800     Revision bump, pulling in 2.6.23.9.
801 phreak 1.198
802     *hardened-sources-2.6.23-r2 (25 Nov 2007)
803    
804     25 Nov 2007; Christian Heim <phreak@gentoo.org>
805     +hardened-sources-2.6.23-r2.ebuild:
806     Updated patchset, thanks to solar.
807 phreak 1.197
808     *hardened-sources-2.6.23-r1 (31 Oct 2007)
809    
810     31 Oct 2007; Christian Heim <phreak@gentoo.org>
811     +hardened-sources-2.6.23-r1.ebuild:
812     Revision bump, pulling in the snapshot from 30. October 2007 (18:50).
813 solar 1.196
814     29 Oct 2007; <solar@gentoo.org> metadata.xml:
815     - update metadata.xml
816 phreak 1.195
817     25 Oct 2007; Christian Heim <phreak@gentoo.org>
818     hardened-sources-2.6.22-r8.ebuild:
819     Marking 2.6.22-r8 stable on amd64 and x86.
820 phreak 1.194
821     21 Oct 2007; Christian Heim <phreak@gentoo.org>
822     -hardened-sources-2.4.35.ebuild, -hardened-sources-2.4.35-r1.ebuild,
823     -hardened-sources-2.6.21-r4.ebuild:
824     Removing old ebuilds.
825 phreak 1.193
826     *hardened-sources-2.4.35-r2 (21 Oct 2007)
827    
828     21 Oct 2007; Christian Heim <phreak@gentoo.org>
829     +hardened-sources-2.4.35-r2.ebuild:
830     Revision bump for 2.4.35. Includes new snapshot and the lastest Linux stable
831     patches.
832 phreak 1.192
833     *hardened-sources-2.6.22-r8 (21 Oct 2007)
834    
835     21 Oct 2007; Christian Heim <phreak@gentoo.org>
836     +hardened-sources-2.6.22-r8.ebuild:
837     Yet another new patch, hopefully fixing the remaining issues we had w/
838     2.6.22. Candidate for stabling.
839 phreak 1.191
840     *hardened-sources-2.6.23 (13 Oct 2007)
841    
842     13 Oct 2007; Christian Heim <phreak@gentoo.org>
843     +hardened-sources-2.6.23.ebuild:
844     Initial hardened-sources-2.6.23. If people still have problems w/ bug
845     194276, try setting CONFIG_PCI_GODIRECT=y instead of CONFIG_PCI_GOANY.
846 phreak 1.190
847     11 Oct 2007; Christian Heim <phreak@gentoo.org>
848     hardened-sources-2.6.20-r10.ebuild:
849     Pulling in yet another new genpatches version, fixing the PWC bug for real.
850 phreak 1.189
851     04 Oct 2007; Christian Heim <phreak@gentoo.org>
852     -hardened-sources-2.6.22-r5.ebuild, -hardened-sources-2.6.22-r6.ebuild:
853     Removing old versions.
854 phreak 1.188
855     *hardened-sources-2.6.22-r7 (01 Oct 2007)
856    
857     01 Oct 2007; Christian Heim <phreak@gentoo.org>
858     +hardened-sources-2.6.22-r7.ebuild:
859     Revision bump, pulling in a newer patch. Should fix #194276.
860 phreak 1.187
861     30 Sep 2007; Christian Heim <phreak@gentoo.org>
862     hardened-sources-2.6.20-r10.ebuild:
863     Marking hardened-sources-2.6.20-r10 stable on x86 and amd64 (on courtesy of
864     Mike Doty).
865 phreak 1.186
866     *hardened-sources-2.6.22-r6 (26 Sep 2007)
867    
868     26 Sep 2007; Christian Heim <phreak@gentoo.org>
869     +hardened-sources-2.6.22-r6.ebuild:
870     Revision bump, grabbing up till Linux 2.6.22.9.
871 phreak 1.185
872     24 Sep 2007; Christian Heim <phreak@gentoo.org>
873     -hardened-sources-2.6.22-r3.ebuild, -hardened-sources-2.6.22-r4.ebuild:
874     Cleaning up further.
875 phreak 1.184
876     *hardened-sources-2.6.20-r10 (24 Sep 2007)
877    
878     24 Sep 2007; Christian Heim <phreak@gentoo.org>
879     -hardened-sources-2.6.20-r8.ebuild, -hardened-sources-2.6.20-r9.ebuild,
880     +hardened-sources-2.6.20-r10.ebuild:
881     Revision bump, pulling in Linux 2.6.20.20. Removing some of the older
882     revisions.
883 phreak 1.183
884     *hardened-sources-2.6.22-r5 (22 Sep 2007)
885    
886     22 Sep 2007; Christian Heim <phreak@gentoo.org>
887     +hardened-sources-2.6.22-r5.ebuild:
888     Revision bump, pulling in genpatches-2.6.22-8 for CVE-2007-4573.
889 phreak 1.182
890     17 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
891     Removing johnm from metadata.xml (see #186467 for reference).
892 phreak 1.181
893     *hardened-sources-2.6.22-r4 (17 Sep 2007)
894    
895     17 Sep 2007; Christian Heim <phreak@gentoo.org>
896     +hardened-sources-2.6.22-r4.ebuild:
897     Revision bump, hopefully fixing all those weird PAX failures.
898 phreak 1.180
899     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
900     Updating the metadata.xml.
901 phreak 1.179
902     01 Sep 2007; Christian Heim <phreak@gentoo.org> metadata.xml:
903     Removing tocharian from metadata due to his retirement (see #71718 for
904     reference).
905 phreak 1.178
906     *hardened-sources-2.6.20-r9 (30 Aug 2007)
907    
908     30 Aug 2007; Christian Heim <phreak@gentoo.org>
909     +hardened-sources-2.6.20-r9.ebuild:
910     Revision bump for 2.6.20.18 (thanks to kerframil in #gentoo-hardened).
911 phreak 1.177
912     29 Aug 2007; Christian Heim <phreak@gentoo.org>
913     -hardened-sources-2.4.34.ebuild, -hardened-sources-2.4.34.5.ebuild,
914     -hardened-sources-2.6.20-r2.ebuild, -hardened-sources-2.6.20-r5.ebuild,
915     -hardened-sources-2.6.20-r7.ebuild, -hardened-sources-2.6.21-r3.ebuild,
916     -hardened-sources-2.6.22.ebuild, -hardened-sources-2.6.22-r1.ebuild,
917     -hardened-sources-2.6.22-r2.ebuild:
918     Removing some redundant versions.
919 phreak 1.176
920     *hardened-sources-2.4.35-r1 (29 Aug 2007)
921    
922     29 Aug 2007; Christian Heim <phreak@gentoo.org>
923     +hardened-sources-2.4.35-r1.ebuild:
924     Revision bump, new grsecurity patch.
925 phreak 1.175
926     *hardened-sources-2.6.20-r8 (26 Aug 2007)
927    
928     26 Aug 2007; Christian Heim <phreak@gentoo.org>
929     +hardened-sources-2.6.20-r8.ebuild:
930     Revision bump for Linux 2.6.20.17.
931 phreak 1.174
932     *hardened-sources-2.6.22-r3 (22 Aug 2007)
933    
934     22 Aug 2007; Christian Heim <phreak@gentoo.org>
935     +hardened-sources-2.6.22-r3.ebuild:
936     Revision bump for Linux 2.6.22.4.
937 phreak 1.173
938     16 Aug 2007; Christian Heim <phreak@gentoo.org>
939     hardened-sources-2.6.22-r2.ebuild:
940     Updated patchset, to fix the alignment against 2.6.22.3.
941 phreak 1.172
942     *hardened-sources-2.6.22-r2 (16 Aug 2007)
943    
944     16 Aug 2007; Christian Heim <phreak@gentoo.org>
945     +hardened-sources-2.6.22-r2.ebuild:
946     Revision bump for Linux 2.6.22.3.
947 phreak 1.171
948     *hardened-sources-2.4.35 (16 Aug 2007)
949    
950     16 Aug 2007; Christian Heim <phreak@gentoo.org>
951     +hardened-sources-2.4.35.ebuild:
952     Version bump, initial version for Linux 2.4.35.
953 phreak 1.170
954     *hardened-sources-2.6.21-r4 (16 Aug 2007)
955    
956     16 Aug 2007; Christian Heim <phreak@gentoo.org>
957     +hardened-sources-2.6.21-r4.ebuild:
958     Revision bump for Linux 2.6.21.6.
959 phreak 1.169
960     *hardened-sources-2.6.20-r7 (16 Aug 2007)
961    
962     16 Aug 2007; Christian Heim <phreak@gentoo.org>
963     +hardened-sources-2.6.20-r7.ebuild:
964     Revision bump for Linux 2.6.20.16.
965 phreak 1.168
966     *hardened-sources-2.6.22-r1 (13 Aug 2007)
967    
968     13 Aug 2007; Christian Heim <phreak@gentoo.org>
969     +hardened-sources-2.6.22-r1.ebuild:
970     Yet another revision bump.
971 phreak 1.167
972     *hardened-sources-2.6.22 (10 Aug 2007)
973    
974     10 Aug 2007; Christian Heim <phreak@gentoo.org>
975     +hardened-sources-2.6.22.ebuild:
976     Initial release for 2.6.22. If you are using hardened-sources on a desktop
977     machine (P4 or newer), be aware you might need to disable
978     CONFIG_PAX_PAGEEXEC.
979 phreak 1.166
980     04 Aug 2007; Christian Heim <phreak@gentoo.org>
981     hardened-sources-2.6.20-r6.ebuild:
982     Stabling hardened-sources-2.6.20-r6 for amd64, ppc and x86 due to Linux
983     2.6.20.15.
984 phreak 1.165
985     10 Jul 2007; Christian Heim <phreak@gentoo.org>
986     hardened-sources-2.6.20-r5.ebuild:
987     Marking hardened-sources-2.6.20-r5 stable on ppc.
988 phreak 1.164
989     10 Jul 2007; Christian Heim <phreak@gentoo.org>
990     -hardened-sources-2.4.32-r6.ebuild, -hardened-sources-2.4.32-r7.ebuild:
991     Cleanup.
992 phreak 1.163
993     *hardened-sources-2.6.20-r6 (08 Jul 2007)
994    
995     08 Jul 2007; Christian Heim <phreak@gentoo.org>
996     +hardened-sources-2.6.20-r6.ebuild:
997     Revision bump, grabbing yet another stable release.
998 phreak 1.162
999     17 Jun 2007; Christian Heim <phreak@gentoo.org>
1000     -hardened-sources-2.6.18-r6.ebuild, -hardened-sources-2.6.20-r4.ebuild,
1001     -hardened-sources-2.6.21-r2.ebuild:
1002     Removing older ebuilds, hardened-sources-2.6.18-r6 seems to have gotten the
1003     alpha stable KEYWORD by mistake.
1004 phreak 1.161
1005     17 Jun 2007; Christian Heim <phreak@gentoo.org>
1006     hardened-sources-2.6.20-r5.ebuild:
1007     Stabling hardened-sources-2.6.20-r5 due to security bug #181647 (as
1008     genpatches-2.6.20-12.base contains up to Linux 2.6.20.14) on amd64 and x86.
1009 phreak 1.160
1010     *hardened-sources-2.6.21-r3 (12 Jun 2007)
1011    
1012     12 Jun 2007; Christian Heim <phreak@gentoo.org>
1013     +hardened-sources-2.6.21-r3.ebuild:
1014     Revision bump for hardened-sources-2.6.21, incorporating various CVE (some
1015     of them critical), two stable releases (2.6.21.4,2.6.21.5) and some other
1016     love.
1017 phreak 1.159
1018     *hardened-sources-2.6.20-r5 (11 Jun 2007)
1019    
1020     11 Jun 2007; Christian Heim <phreak@gentoo.org>
1021     +hardened-sources-2.6.20-r5.ebuild:
1022     Revision bump for hardened-sources-2.6.20, incorporating various CVE (some
1023     of them critical), two stable releases (2.6.20.13,2.6.20.14) and some other
1024     love.
1025 pappy 1.158
1026     *hardened-sources-2.4.34.5 (11 Jun 2007)
1027    
1028     11 Jun 2007; Alexander Gabert <pappy@gentoo.org>
1029     +hardened-sources-2.4.34.5.ebuild:
1030     added new hardened-sources 2.4 version, thx to phreak, solar, pipacs
1031 phreak 1.157
1032     30 May 2007; Christian Heim <phreak@gentoo.org>
1033     -hardened-sources-2.6.18.ebuild, hardened-sources-2.6.20-r2.ebuild:
1034     Marking 2.6.20-r2 stable on ppc with permission of Gysbert. Removing more
1035     stale ebuild(s).
1036 phreak 1.156
1037     30 May 2007; Christian Heim <phreak@gentoo.org>
1038     -hardened-sources-2.6.14-r7.ebuild, -hardened-sources-2.6.16-r11.ebuild,
1039     -hardened-sources-2.6.17-r1.ebuild, -hardened-sources-2.6.19-r6.ebuild,
1040     -hardened-sources-2.6.20.ebuild, -hardened-sources-2.6.20-r1.ebuild:
1041     Doing some cleanups, remove stale ebuilds.
1042 phreak 1.155
1043     26 May 2007; Christian Heim <phreak@gentoo.org>
1044     hardened-sources-2.6.21-r2.ebuild:
1045     Fixing the grsecurity patch, had one '};' too much.
1046 phreak 1.154
1047     *hardened-sources-2.6.21-r2 (26 May 2007)
1048    
1049     26 May 2007; Christian Heim <phreak@gentoo.org>
1050     -hardened-sources-2.6.21.ebuild, -hardened-sources-2.6.21-r1.ebuild,
1051     +hardened-sources-2.6.21-r2.ebuild:
1052     Revision bump, including Linux 2.6.21.3 (fixing CVE-2007-2451). Updating the
1053     grsecurity patch to 2.1.10-2.6.21.1-200705221918.
1054 phreak 1.153
1055     *hardened-sources-2.6.20-r4 (26 May 2007)
1056    
1057     26 May 2007; Christian Heim <phreak@gentoo.org>
1058     -hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.20-r4.ebuild:
1059     Revision bump, including Linux 2.6.20.12 (which in fact fixed some security
1060 phreak 1.154 bugs, at the very least CVE-2007-2451). Possible candidate for stable marking.
1061 phreak 1.152
1062     15 May 2007; Christian Heim <phreak@gentoo.org>
1063     hardened-sources-2.6.20-r3.ebuild:
1064     Looks like hardened-sources-2.6.20-r3 needs a new patch, as 2.6.20.11
1065     introduced a change in arch/sparc64/kernel/pci_iommu.c, which made the
1066     grsecurity patch fail in that exact same hunk.
1067 phreak 1.151
1068     *hardened-sources-2.6.20-r3 (15 May 2007)
1069    
1070     15 May 2007; Christian Heim <phreak@gentoo.org>
1071     +hardened-sources-2.6.20-r3.ebuild, +hardened-sources-2.6.21-r1.ebuild:
1072     Revision bump, incorporating Linux 2.6.20.11.
1073    
1074     *hardened-sources-2.6.21-r1 (11 May 2007)
1075    
1076     11 May 2007; Christian Heim <phreak@gentoo.org>
1077     +hardened-sources-2.6.21-r1.ebuild:
1078     Revision bump, hopefully fixing the GRSECURITY/GRKERNSEC mixup pipacs
1079     mentioned in #177234.
1080 kevquinn 1.150
1081     07 May 2007; Kevin F. Quinn <kevquinn@gentoo.org>
1082     files/digest-hardened-sources-2.6.21, Manifest:
1083     Fix Manifest/digest for linux-2.6.21.tar.bz2
1084 phreak 1.149
1085     06 May 2007; Christian Heim <phreak@gentoo.org>
1086     hardened-sources-2.6.21.ebuild:
1087     Bumping the hardened-patches version, needed for the fix for #177234.
1088 phreak 1.148
1089     *hardened-sources-2.6.21 (02 May 2007)
1090    
1091     02 May 2007; Christian Heim <phreak@gentoo.org>
1092     +hardened-sources-2.6.21.ebuild:
1093     Version bump, Linux 2.6.21-hardened.
1094 phreak 1.147
1095     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1096     hardened-sources-2.6.20-r2.ebuild:
1097     Adding ~ia64 on Ned's request.
1098 phreak 1.146
1099     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1100     hardened-sources-2.6.20-r2.ebuild:
1101     Fixing the included grsecurity patch, wasn't alligning due to the Index:
1102     header line(s).
1103 phreak 1.145
1104     29 Apr 2007; Christian Heim <phreak@gentoo.org>
1105     hardened-sources-2.6.20-r2.ebuild:
1106     Stabilizing hardened-sources-2.6.20-r2 on amd64 and x86.
1107 armin76 1.144
1108     *hardened-sources-2.6.20-r2 (10 Apr 2007)
1109    
1110     10 Apr 2007; Raúl Porcel <armin76@gentoo.org>
1111     +hardened-sources-2.6.20-r2.ebuild:
1112     Version bump, on behalf of phreak
1113 phreak 1.143
1114     *hardened-sources-2.6.20-r1 (04 Apr 2007)
1115    
1116     04 Apr 2007; Christian Heim <phreak@gentoo.org>
1117     +hardened-sources-2.6.20-r1.ebuild:
1118     Revision bump, grabbing a newer grsecurity snapshot.
1119 phreak 1.142
1120     *hardened-sources-2.6.20 (25 Mar 2007)
1121    
1122     25 Mar 2007; Christian Heim <phreak@gentoo.org>
1123     +hardened-sources-2.6.20.ebuild:
1124     Finally a hardened-sources version for 2.6.20; many people have been waiting
1125     for this. Thanks to Steve for preliminary testing, thanks to Ned for the
1126     testbox.
1127 chainsaw 1.141
1128     16 Mar 2007; Tony Vroon <chainsaw@gentoo.org>
1129     hardened-sources-2.6.18-r6.ebuild:
1130     Marked stable on amd64 and x86. AMD64 keyword ack'ed by welp.
1131 phreak 1.140
1132     *hardened-sources-2.6.18-r6 (16 Mar 2007)
1133    
1134     16 Mar 2007; Christian Heim <phreak@gentoo.org>
1135     -hardened-sources-2.6.18-r5.ebuild, +hardened-sources-2.6.18-r6.ebuild:
1136     Fixing CVE-2007-1000 locally (hardened/), thanks to Tony for pushing. And
1137     yes I screwed up, this is tagged as 2.6.18-5 and not 2.6.18-6 as it's
1138     supposed to be.
1139 phreak 1.139
1140     06 Mar 2007; Christian Heim <phreak@gentoo.org> ChangeLog:
1141     Fixing the Manifest, the previous one was broken (as in still had the
1142     deleted ebuild in it).
1143 phreak 1.138
1144     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1145     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1146     +hardened-sources-2.6.18-r5.ebuild:
1147     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1148     Linux 2.6.18.8. Also cleaning up the older version.
1149    
1150     *hardened-sources-2.6.18-r5 (06 Mar 2007)
1151    
1152     06 Mar 2007; Christian Heim <phreak@gentoo.org>
1153     -hardened-sources-2.6.16-r10.ebuild, -hardened-sources-2.6.18-r4.ebuild,
1154     +hardened-sources-2.6.18-r5.ebuild:
1155     Bumping the ~arch'ed 2.6.18 version, pulling in genpatches-2.6.18-10 for
1156     Linux 2.6.18.8. Also cleaning up the older version.
1157 phreak 1.137
1158     24 Feb 2007; Christian Heim <phreak@gentoo.org>
1159     -hardened-sources-2.6.19-r3.ebuild, -hardened-sources-2.6.19-r4.ebuild,
1160     -hardened-sources-2.6.19-r5.ebuild:
1161     Removing some of the old version, that didn't work.
1162 phreak 1.136
1163     *hardened-sources-2.6.19-r6 (12 Feb 2007)
1164    
1165     12 Feb 2007; Christian Heim <phreak@gentoo.org>
1166     +hardened-sources-2.6.19-r6.ebuild:
1167     Revision bump, including a new grsec version fixing #166235.
1168 pappy 1.134
1169     *hardened-sources-2.4.34 (24 Jan 2007)
1170    
1171     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1172 pappy 1.135 Manifest:
1173     updating Manifest with checksums of new tarball and ebuild
1174    
1175     24 Jan 2007; Alexander Gabert <pappy@gentoo.org>
1176 pappy 1.134 +hardened-sources-2.4.34.ebuild:
1177     I added new hardened sources 2.4 update, this is a critical path
1178     security bugfix - all users of h-s are strongly advised
1179     to update their existing hardened sources to this version.
1180     It contains a fix for a kernel vulnerability that is pertaining
1181     to the PaX changes to virtual memory management, possibly leading
1182     to a local kernel exploit ... see grsecurity.net forums and homepage
1183 phreak 1.133
1184     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1185     files/digest-hardened-sources-2.6.19-r5, Manifest:
1186     Fixing the patch-tarball digest.
1187 phreak 1.132
1188     *hardened-sources-2.6.19-r5 (23 Jan 2007)
1189    
1190     23 Jan 2007; Christian Heim <phreak@gentoo.org>
1191     +hardened-sources-2.6.19-r5.ebuild:
1192     Revision bump, closing the recently discovered PaX expand_stack()
1193     vulnerability.
1194 phreak 1.131
1195     *hardened-sources-2.6.19-r4 (14 Jan 2007)
1196    
1197     14 Jan 2007; Christian Heim <phreak@gentoo.org>
1198     +hardened-sources-2.6.19-r4.ebuild:
1199     Revision bump, pulling in linux-2.6.19.2 and grsecurity 2.1.10 - thus
1200     dropping the randomized PID feature.
1201 opfer 1.130
1202     11 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
1203     hardened-sources-2.4.33.4.ebuild:
1204     stable x86, bug #161171
1205 phreak 1.129
1206     *hardened-sources-2.6.19-r3 (27 Dec 2006)
1207    
1208     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1209     -hardened-sources-2.6.19-r2.ebuild, +hardened-sources-2.6.19-r3.ebuild:
1210     Revision bump for bug #157186 and #158786.
1211 phreak 1.128
1212     *hardened-sources-2.6.18-r4 (27 Dec 2006)
1213    
1214     27 Dec 2006; Christian Heim <phreak@gentoo.org>
1215     -hardened-sources-2.6.18-r3.ebuild, +hardened-sources-2.6.18-r4.ebuild:
1216     Revision bump for bug #157186.
1217 phreak 1.127
1218     *hardened-sources-2.6.19-r2 (23 Dec 2006)
1219    
1220     23 Dec 2006; Christian Heim <phreak@gentoo.org>
1221     -hardened-sources-2.6.19-r1.ebuild, +hardened-sources-2.6.19-r2.ebuild:
1222     Revision bump to pull in genpatches-2.6.19-3 for #157186.
1223 phreak 1.126
1224     17 Dec 2006; Christian Heim <phreak@gentoo.org>
1225     hardened-sources-2.6.14-r7.ebuild, hardened-sources-2.6.16-r10.ebuild,
1226     hardened-sources-2.6.16-r11.ebuild, hardened-sources-2.6.17-r1.ebuild,
1227     hardened-sources-2.6.18.ebuild, hardened-sources-2.6.18-r3.ebuild,
1228     hardened-sources-2.6.19-r1.ebuild:
1229     Adding 4453_grsec-2.1.9-2.6.19-io-kmem-sysctl.patch to UNIPATCH_EXLUDE,
1230     adding correct HOMEPAGE and adjusting DESCRIPTION (thanks to Alexander).
1231 pappy 1.125
1232     *hardened-sources-2.4.33.4 (17 Dec 2006)
1233    
1234     17 Dec 2006; Alexander Gabert <pappy@gentoo.org>
1235     +hardened-sources-2.4.33.4.ebuild:
1236     new 2.4.33.4 version including grsec and fixes, thanks to phreak for help
1237     and quilting
1238 phreak 1.124
1239     *hardened-sources-2.6.19-r1 (14 Dec 2006)
1240    
1241     14 Dec 2006; Christian Heim <phreak@gentoo.org>
1242     -hardened-sources-2.6.19.ebuild, +hardened-sources-2.6.19-r1.ebuild:
1243     Revision bump, fixing #158107 (thanks to Petre Rodan <kaiowas at gentoo.org>
1244     for reporting).
1245 phreak 1.123
1246     *hardened-sources-2.6.19 (13 Dec 2006)
1247    
1248     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1249     +hardened-sources-2.6.19.ebuild:
1250     And finally 2.6.19, thanks to Ned (who prepared the inital patchset) and
1251     Brad for providing that prompt update.
1252 phreak 1.122
1253     *hardened-sources-2.6.18-r3 (13 Dec 2006)
1254    
1255     13 Dec 2006; Christian Heim <phreak@gentoo.org>
1256     -hardened-sources-2.6.18-r1.ebuild, -hardened-sources-2.6.18-r2.ebuild,
1257     +hardened-sources-2.6.18-r3.ebuild:
1258     Revision bump, excluding the faulty patch. Thanks to Anakim Border and Peter
1259     S. Mazinger. Closes #157409 for now. Also removing the previous revisions.
1260 phreak 1.121
1261     09 Dec 2006; Christian Heim <phreak@gentoo.org> Manifest:
1262     Fixing the metadata.xml Manifest entry (thanks to xaid and ml8128 in #gentoo-hardened).
1263 nixnut 1.120
1264     08 Dec 2006; nixnut <nixnut@gentoo.org> hardened-sources-2.6.18.ebuild:
1265     Stable on ppc wrt bug 157356
1266 opfer 1.119
1267     07 Dec 2006; Christian Faulhammer <opfer@gentoo.org>
1268     hardened-sources-2.6.18.ebuild:
1269     stable x86, bug #157356
1270 phreak 1.118
1271     *hardened-sources-2.6.18-r2 (06 Dec 2006)
1272    
1273     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1274     +hardened-sources-2.6.18-r2.ebuild:
1275     Revision bump, including 2.6.18.5 (via genpatches) and
1276     4454_grsec-2.1.9-2.6.18.2-io-kmem-sysctl.patch based on Peter Mazinger and
1277     Ned Ludd's original patch. Thanks to Alexander Gabert (pappy) for the
1278     redesign.
1279 phreak 1.117
1280     06 Dec 2006; Christian Heim <phreak@gentoo.org>
1281     hardened-sources-2.6.18.ebuild:
1282     Marking hardened-sources-2.6.18 stable on amd64 (see bug #157356, on behalf
1283     of Mike Doty).
1284 phreak 1.116
1285     *hardened-sources-2.6.18-r1 (23 Nov 2006)
1286    
1287     23 Nov 2006; Christian Heim <phreak@gentoo.org>
1288     +hardened-sources-2.6.18-r1.ebuild:
1289     Revision bump to genpatches-2.6.18-4 (including 2.6.18.3).
1290 phreak 1.115
1291     *hardened-sources-2.6.18 (11 Nov 2006)
1292    
1293     11 Nov 2006; Christian Heim <phreak@gentoo.org>
1294     +hardened-sources-2.6.18.ebuild:
1295     Version bump, thanks to Alexander Gabert we're finally at 2.6.18.
1296 solar 1.114
1297     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1298     - mark amd64 stable also. bug #151877
1299 solar 1.113
1300     18 Oct 2006; <solar@gentoo.org> hardened-sources-2.6.17-r1.ebuild:
1301     - mark 2.6.17-r1 stable
1302 phreak 1.112
1303     27 Aug 2006; Christian Heim <phreak@gentoo.org>
1304     -hardened-sources-2.6.17.ebuild, hardened-sources-2.6.17-r1.ebuild:
1305     Removing old ebuild, removing unipatch from newer ebuild (need to fix it!).
1306 phreak 1.111
1307     *hardened-sources-2.6.17-r1 (26 Aug 2006)
1308    
1309     26 Aug 2006; Christian Heim <phreak@gentoo.org>
1310     +hardened-sources-2.6.17-r1.ebuild:
1311     Revision bump to genpatches-2.6.17-8 (including .9 and .10) and updating the
1312     grsecurity patch.
1313 phreak 1.110
1314     *hardened-sources-2.6.17 (17 Aug 2006)
1315    
1316     17 Aug 2006; Christian Heim <phreak@gentoo.org>
1317     +hardened-sources-2.6.17.ebuild:
1318     Bumping the hardened-sources-2.6 series to 2.6.17, using
1319     genpatches-2.6.17-6.base.
1320 solar 1.109
1321     07 Aug 2006; <solar@gentoo.org> hardened-sources-2.6.16-r11.ebuild:
1322     - stable on x86 and amd64
1323 solar 1.108
1324     *hardened-sources-2.6.16-r11 (15 Jul 2006)
1325    
1326     15 Jul 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r3.ebuild,
1327     -hardened-sources-2.4.32-r4.ebuild, -hardened-sources-2.4.32-r5.ebuild,
1328     -hardened-sources-2.6.14-r8.ebuild, -hardened-sources-2.6.16-r7.ebuild,
1329     -hardened-sources-2.6.16-r9.ebuild, +hardened-sources-2.6.16-r11.ebuild:
1330     - 2.6.16 bumped for CVE-2006-3626 ; digest fix for 2.4.32-r6 ; removed old
1331     crusty ebuilds
1332 johnm 1.107
1333     14 Jul 2006; John Mylchreest <johnm@gentoo.org>
1334     hardened-sources-2.6.16-r10.ebuild:
1335     marking stable on x86 and amd64
1336 solar 1.106
1337     13 Jul 2006; <solar@gentoo.org> hardened-sources-2.4.32-r6.ebuild:
1338     - 2.4.32-r6 stable on x86. RSBAC state unknown
1339 kang 1.105
1340     *hardened-sources-2.4.32-r7 (10 Jul 2006)
1341    
1342     10 Jul 2006; Guillaume Destuynder <kang@gentoo.org>
1343     +hardened-sources-2.4.32-r7.ebuild:
1344     Bump PaX for RSBAC to test-17
1345 johnm 1.104
1346     *hardened-sources-2.6.16-r9 (03 Jul 2006)
1347    
1348     03 Jul 2006; John Mylchreest <johnm@gentoo.org>
1349     -hardened-sources-2.6.16-r6.ebuild, +hardened-sources-2.6.16-r9.ebuild:
1350     hardened-sources-2.6.16 bump to latest -base.
1351 solar 1.103
1352     *hardened-sources-2.4.32-r6 (30 Jun 2006)
1353    
1354     30 Jun 2006; <solar@gentoo.org> -hardened-sources-2.4.32-r2.ebuild,
1355     hardened-sources-2.4.32-r4.ebuild, +hardened-sources-2.4.32-r6.ebuild:
1356     - backport CVE-2006-0039, CVE-2006-1857 and CVE-2006-1858 and new grsecurity
1357     sysctl controlable resource logging
1358 johnm 1.102
1359     *hardened-sources-2.6.16-r7 (05 Jun 2006)
1360    
1361     05 Jun 2006; John Mylchreest <johnm@gentoo.org>
1362     -hardened-sources-2.6.16-r5.ebuild, +hardened-sources-2.6.16-r7.ebuild:
1363     push new 2.6.16 release in preparation for stable
1364 solar 1.101
1365     22 May 2006; <solar@gentoo.org> :
1366     - redigest bug 134002
1367 kang 1.100
1368     *hardened-sources-2.4.32-r5 (16 May 2006)
1369    
1370     16 May 2006; Guillaume Destuynder <kang@gentoo.org>
1371     +hardened-sources-2.4.32-r5.ebuild:
1372     Fixes rsbac common patching (new patch in new -r5 patchset)
1373 solar 1.99
1374     *hardened-sources-2.4.32-r4 (13 May 2006)
1375    
1376     13 May 2006; <solar@gentoo.org> hardened-sources-2.4.32-r3.ebuild,
1377     +hardened-sources-2.4.32-r4.ebuild:
1378     - security bumps
1379 johnm 1.98
1380     *hardened-sources-2.6.16-r6 (03 May 2006)
1381    
1382     03 May 2006; John Mylchreest <johnm@gentoo.org>
1383     +hardened-sources-2.6.16-r6.ebuild:
1384     bump hardened-2.6.16 to 2.6.16.12 and latest grsec snapshot
1385 johnm 1.97
1386     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1387     hardened-sources-2.6.14-r8.ebuild:
1388     fix x86_64 build problem, this will delay the digest issue again for a short
1389     while but it will sort itself out
1390 johnm 1.96
1391     28 Apr 2006; John Mylchreest <johnm@gentoo.org>
1392     hardened-sources-2.6.14-r8.ebuild:
1393     bump hardened patchset
1394 antarus 1.94
1395     27 Apr 2006; Alec Warner <antarus@gentoo.org>
1396     files/digest-hardened-sources-2.4.32-r2,
1397     files/digest-hardened-sources-2.4.32-r3,
1398     files/digest-hardened-sources-2.6.14-r8, Manifest:
1399     Fixing duff SHA256 digests: Bug # 131293
1400 johnm 1.93
1401 johnm 1.95 *hardened-sources-2.6.16-r5 (27 Apr 2006)
1402    
1403     27 Apr 2006; John Mylchreest <johnm@gentoo.org>
1404     -hardened-sources-2.6.14-r6.ebuild, hardened-sources-2.6.14-r8.ebuild,
1405     -hardened-sources-2.6.16-r4.ebuild, +hardened-sources-2.6.16-r5.ebuild:
1406     stablise 2.6.14-r8 on x86 & amd64, bump 2.6.16 to fix CVE-2006-1863 &
1407     cleanup of old uneccessary sources
1408    
1409 johnm 1.93 20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1410     fix digest
1411 johnm 1.92
1412     *hardened-sources-2.6.14-r8 (20 Apr 2006)
1413    
1414     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1415     +hardened-sources-2.6.14-r8.ebuild:
1416     fix CVE-2006-1056, CVE-2006-1525, CVE-2006-1524
1417 johnm 1.91
1418     20 Apr 2006; John Mylchreest <johnm@gentoo.org> ChangeLog:
1419     Turning on gpg-signing again, and recomitting
1420 johnm 1.90
1421     *hardened-sources-2.6.16-r4 (20 Apr 2006)
1422    
1423     20 Apr 2006; John Mylchreest <johnm@gentoo.org>
1424     -hardened-sources-2.6.16-r2.ebuild, -hardened-sources-2.6.16-r3.ebuild,
1425     +hardened-sources-2.6.16-r4.ebuild:
1426     Fix numerous security vulns
1427 solar 1.89
1428     *hardened-sources-2.4.32-r3 (16 Apr 2006)
1429    
1430     16 Apr 2006; <solar@gentoo.org> -hardened-sources-2.4.30-r1.ebuild,
1431     -hardened-sources-2.4.31.ebuild, -hardened-sources-2.4.32-r1.ebuild,
1432     +hardened-sources-2.4.32-r3.ebuild, -hardened-sources-2.4.32.ebuild:
1433     - security bump for bug #112791. Removed old ebuilds
1434 johnm 1.88
1435     *hardened-sources-2.6.16-r3 (15 Apr 2006)
1436    
1437     15 Apr 2006; John Mylchreest <johnm@gentoo.org>
1438     +hardened-sources-2.6.16-r3.ebuild:
1439     Removing silly localversion which I missed
1440 johnm 1.87
1441     *hardened-sources-2.6.14-r7 (14 Apr 2006)
1442    
1443     14 Apr 2006; John Mylchreest <johnm@gentoo.org>
1444     -hardened-sources-2.6.14-r5.ebuild, +hardened-sources-2.6.14-r7.ebuild:
1445     Fixes CVE-2006-0744, CVE-2006-0744, CVE-2006-1522, CVE-2006-1242
1446 johnm 1.86
1447     *hardened-sources-2.6.16-r2 (13 Apr 2006)
1448    
1449     13 Apr 2006; John Mylchreest <johnm@gentoo.org>
1450     -hardened-sources-2.6.16.ebuild, -hardened-sources-2.6.16-r1.ebuild,
1451     +hardened-sources-2.6.16-r2.ebuild:
1452     Removing vulnerable 2.6.16 kernels. Bumping grsec, re-enabling reiserfs sec
1453     labels, dropping USERGROUP define fixes, since these were merged mainstream.
1454 johnm 1.85
1455     *hardened-sources-2.6.16-r1 (11 Apr 2006)
1456    
1457     11 Apr 2006; John Mylchreest <johnm@gentoo.org>
1458     +hardened-sources-2.6.16-r1.ebuild:
1459     Bumping to include ppc build fix and 2.6.16.3
1460 tsunam 1.84
1461     06 Apr 2006; Joshua Jackson <tsunam@gentoo.org>
1462     hardened-sources-2.6.14-r6.ebuild:
1463     Stable on x86; bug #127718
1464 johnm 1.83
1465     *hardened-sources-2.6.16 (31 Mar 2006)
1466    
1467     31 Mar 2006; John Mylchreest <johnm@gentoo.org>
1468     +hardened-sources-2.6.16.ebuild:
1469     Bumping to new version of grsec, and kernel base. New squashfs. Based on
1470     2.6.16.1
1471 cryos 1.82
1472     30 Mar 2006; Marcus D. Hanwell <cryos@gentoo.org>
1473     hardened-sources-2.6.14-r6.ebuild:
1474     Stable on amd64, bug 127718.
1475 nixnut 1.81
1476     28 Mar 2006; <nixnut@gentoo.org> hardened-sources-2.6.14-r6.ebuild:
1477     Stable on ppc. Bug #127718
1478 johnm 1.80
1479     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1480     -hardened-sources-2.6.11-r15.ebuild, -hardened-sources-2.6.14-r3.ebuild,
1481     -hardened-sources-2.6.14-r4.ebuild:
1482     Cleanup.
1483 johnm 1.79
1484     *hardened-sources-2.6.14-r6 (15 Mar 2006)
1485    
1486     15 Mar 2006; John Mylchreest <johnm@gentoo.org>
1487     +hardened-sources-2.6.14-r6.ebuild:
1488     Fixes grsec policy recreation bug and adds a
1489     >=sys-apps/gradm-2.1.8.200601212342-r1 depend.
1490 solar 1.78
1491     02 Mar 2006; <solar@gentoo.org> hardened-sources-2.4.32-r2.ebuild:
1492     - stable on x86
1493 hansmi 1.77
1494     19 Feb 2006; Michael Hanselmann <hansmi@gentoo.org>
1495     hardened-sources-2.6.14-r5.ebuild:
1496     Stable on ppc.
1497 johnm 1.76
1498     *hardened-sources-2.6.14-r5 (01 Feb 2006)
1499    
1500     01 Feb 2006; John Mylchreest <johnm@gentoo.org>
1501     +hardened-sources-2.6.14-r5.ebuild:
1502     fixing every known exploit
1503 solar 1.75
1504     *hardened-sources-2.4.32-r2 (26 Jan 2006)
1505    
1506     26 Jan 2006; <solar@gentoo.org> hardened-sources-2.4.32-r1.ebuild,
1507     +hardened-sources-2.4.32-r2.ebuild:
1508     - mark 2.4.32-r1 stable. added 2.4.32-r2 with 2.1.8-grsec patch
1509 solar 1.74
1510     *hardened-sources-2.6.14-r4 (12 Jan 2006)
1511    
1512     12 Jan 2006; <solar@gentoo.org> +hardened-sources-2.6.14-r4.ebuild:
1513     - version bump for new genpatches which fix up a few sec holes
1514 solar 1.73
1515     *hardened-sources-2.4.32-r1 (05 Jan 2006)
1516    
1517     05 Jan 2006; <solar@gentoo.org> +hardened-sources-2.4.32-r1.ebuild:
1518     - revision bump to add misc vital linux kernel security patches.
1519 johnm 1.72
1520     *hardened-sources-2.6.14-r3 (30 Dec 2005)
1521    
1522     30 Dec 2005; John Mylchreest <johnm@gentoo.org>
1523     -hardened-sources-2.6.14-r2.ebuild, +hardened-sources-2.6.14-r3.ebuild:
1524     Marking stable, and bumping for sec vuln. Fixes bugs #117171, #117040
1525 johnm 1.71
1526     28 Dec 2005; John Mylchreest <johnm@gentoo.org>
1527     hardened-sources-2.6.14-r2.ebuild:
1528     making x86 & amd64 stable following testing.
1529 johnm 1.70
1530     *hardened-sources-2.6.14-r2 (27 Dec 2005)
1531    
1532     27 Dec 2005; John Mylchreest <johnm@gentoo.org>
1533     -hardened-sources-2.6.14-r1.ebuild, +hardened-sources-2.6.14-r2.ebuild:
1534     Fixing bugs 116832 115771 114635, updating grsec, removing selinux/pax
1535     network hooks.
1536 johnm 1.69
1537     06 Dec 2005; John Mylchreest <johnm@gentoo.org>
1538     hardened-sources-2.6.14-r1.ebuild:
1539     bumping to stable early for sec fix on x86 & amd64
1540 johnm 1.68
1541     *hardened-sources-2.6.14-r1 (05 Dec 2005)
1542    
1543     05 Dec 2005; John Mylchreest <johnm@gentoo.org>
1544     -hardened-sources-2.6.14.ebuild, +hardened-sources-2.6.14-r1.ebuild:
1545     bumping to genpatches 2.6.14-5, security fixup. Also bumping grsec patchset.
1546 solar 1.67
1547     04 Dec 2005; <solar@gentoo.org> hardened-sources-2.4.32.ebuild:
1548     - stable on x86 security bug #114227 CAN-2005-3257
1549 kang 1.66
1550     *hardened-sources-2.4.32 (19 Nov 2005)
1551    
1552     19 Nov 2005; Guillaume Destuynder <kang@gentoo.org>
1553     +hardened-sources-2.4.32.ebuild:
1554     Bump to 2.4.32, includes RSBAC+PaX patchset with a local 'rsbac' keyword.
1555     Add the 'rsbac' USE flag in /etc/portage/package.use for hardened-sources to
1556     have RSBAC instead of GrSecurity patchset. (echo sys-kernel/hardened-sources
1557     rsbac >> /etc/portage/package.use)
1558 johnm 1.65
1559     *hardened-sources-2.6.14 (14 Nov 2005)
1560    
1561     14 Nov 2005; John Mylchreest <johnm@gentoo.org>
1562     -hardened-sources-2.6.13-r2.ebuild, +hardened-sources-2.6.14.ebuild:
1563     Bumping 2.6 series to 2.6.14.2
1564 johnm 1.64
1565     *hardened-sources-2.6.13-r2 (20 Oct 2005)
1566    
1567     20 Oct 2005; John Mylchreest <johnm@gentoo.org>
1568     -hardened-sources-2.6.13.ebuild, -hardened-sources-2.6.13-r1.ebuild,
1569     +hardened-sources-2.6.13-r2.ebuild:
1570     Fixes minor build error in ppc.
1571 johnm 1.63
1572     *hardened-sources-2.6.13-r1 (17 Oct 2005)
1573    
1574     17 Oct 2005; John Mylchreest <johnm@gentoo.org>
1575     +hardened-sources-2.6.13-r1.ebuild:
1576     Updating grsec to latest snapshot. Fixes some minor issues. Updating to
1577     2.6.13.4, fixes some major amd64 stability problems.
1578 johnm 1.62
1579     *hardened-sources-2.6.13 (16 Sep 2005)
1580    
1581     16 Sep 2005; John Mylchreest <johnm@gentoo.org>
1582     -hardened-sources-2.6.11-r14.ebuild, +hardened-sources-2.6.13.ebuild:
1583     2.6.13.1 with grsec testing patches. Lots of changes, to name a few big
1584     ones: inotify now in kernel, RBAC has moved to chained-hash tables so RBAC
1585     users should test this thoroughly.
1586 solar 1.61
1587     01 Jul 2005; <solar@gentoo.org> hardened-sources-2.4.31.ebuild:
1588     - stable on x86
1589 johnm 1.60
1590     *hardened-sources-2.6.11-r15 (27 Jun 2005)
1591    
1592     27 Jun 2005; John Mylchreest <johnm@gentoo.org>
1593     +hardened-sources-2.6.11-r15.ebuild:
1594     Fixes CAN-2005-1763, CAN-2005-1265 & CAN-2005-176. Also fixes problem with
1595     grsec redefining curr_ip struct.
1596 solar 1.59
1597     *hardened-sources-2.4.31 (20 Jun 2005)
1598    
1599     20 Jun 2005; <solar@gentoo.org> +hardened-sources-2.4.31.ebuild:
1600     initial import of 2.4.31 tree
1601 johnm 1.58
1602     *hardened-sources-2.6.11-r14 (14 Jun 2005)
1603    
1604     14 Jun 2005; John Mylchreest <johnm@gentoo.org>
1605     -hardened-sources-2.6.11-r13.ebuild, +hardened-sources-2.6.11-r14.ebuild:
1606     Updating inotify, grsec, updating to 11-14 genpatches.base, restructuring
1607     naming scheme to abide by genpatches
1608 johnm 1.57
1609     *hardened-sources-2.6.11-r13 (18 May 2005)
1610    
1611     18 May 2005; John Mylchreest <johnm@gentoo.org>
1612     -hardened-sources-2.6.11-r12.ebuild, +hardened-sources-2.6.11-r13.ebuild:
1613     Managed to mangle the Makefile patch from grsec, to miss out the grsec
1614     target. sorry about that. Fixes bug #93022
1615 johnm 1.56
1616     *hardened-sources-2.6.11-r12 (17 May 2005)
1617    
1618     17 May 2005; John Mylchreest <johnm@gentoo.org>
1619     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1620     +hardened-sources-2.6.11-r12.ebuild:
1621     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1622     merges in genpatches-base
1623 johnm 1.55
1624     *hardened-sources-2.6.11-r12 (17 May 2005)
1625    
1626     17 May 2005; John Mylchreest <johnm@gentoo.org>
1627     -hardened-sources-2.6.10-r3.ebuild, -hardened-sources-2.6.11-r1.ebuild,
1628     +hardened-sources-2.6.11-r12.ebuild:
1629     Cleanup older sources. Update to 2.6.11.10 - fixes several sec vulns. Also
1630     merges in genpatches-base
1631 solar 1.54
1632     29 Apr 2005; <solar@gentoo.org> -files/2.4.27-CAN-2004-0394.patch,
1633     -files/2.4.27-cmdline-race.patch,
1634     -files/2.4.28-grsec-2.1.0-pax-mmap-pgtables.patch,
1635     -files/2.4.28-grsec-binfmt_a.out.patch,
1636     -files/2.4.28-grsec-cmdline-race.patch,
1637     -files/2.4.28-selinux-binfmt_a.out.patch,
1638     -files/2.4.28-selinux-cmdline-race.patch,
1639     -hardened-sources-2.4.28-r5.ebuild, -hardened-sources-2.4.29.ebuild,
1640     hardened-sources-2.4.30-r1.ebuild, -hardened-sources-2.4.30.ebuild:
1641     - mark .30-r1 stable and remove older vuln ebuilds from the tree. filesdir
1642     cleanup..
1643 solar 1.53
1644     *hardened-sources-2.4.30-r1 (21 Apr 2005)
1645    
1646     21 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30-r1.ebuild:
1647     - disable aout by default
1648 solar 1.52
1649     *hardened-sources-2.4.30 (18 Apr 2005)
1650    
1651     18 Apr 2005; <solar@gentoo.org> +hardened-sources-2.4.30.ebuild:
1652     - 2.4.30 version bump. Adds 4008_CAN-2004-1056 back which was lost in 2.4.29
1653     and an optional optimize for size -Os patch with a gcc-3.4 fix for embedded
1654     use
1655 tocharian 1.50
1656 scox 1.51 *hardened-sources-2.4.29 (30 Mar 2005)
1657    
1658     30 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1659     +hardened-sources-2.4.29.ebuild:
1660     New hardened-patches-2.4-29.0 patchball.
1661     Removed SELinux support, upgraded GRSecurity to 2.1.4.
1662    
1663     *hardened-sources-2.4.28-r5 (06 Mar 2005)
1664    
1665     06 Mar 2005; Andrea Luzzardi <scox@gentoo.org>
1666     +hardened-sources-2.4.28-r5.ebuild:
1667     Added a fix for a PaX vulnerability.
1668    
1669     26 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1670 tocharian 1.50 hardened-sources-2.4.28-r4.ebuild:
1671     Stable on x86
1672 solar 1.49
1673     23 Jan 2005; <solar@gentoo.org> hardened-sources-2.4.27-r3.ebuild,
1674     hardened-sources-2.4.28-r1.ebuild, hardened-sources-2.4.28-r2.ebuild,
1675     hardened-sources-2.4.28-r3.ebuild, hardened-sources-2.4.28-r4.ebuild,
1676     hardened-sources-2.4.28.ebuild, hardened-sources-2.6.10-r3.ebuild:
1677     - fixed/added RDEPEND= in all kernel-2 ebuilds
1678 tocharian 1.48
1679     *hardened-sources-2.4.28-r4 (21 Jan 2005)
1680    
1681     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1682     +hardened-sources-2.4.28-r4.ebuild:
1683     Fix vc_resize local DoS, ip_options_get memory leak, and ARP bug in 2.4
1684     backport of neighbour hash updates.
1685 tocharian 1.47
1686     21 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1687     hardened-sources-2.4.28-r3.ebuild:
1688     Stable on x86
1689 tseng 1.46
1690     *hardened-sources-2.6.10-r3 (20 Jan 2005)
1691    
1692     20 Jan 2005; Brandon Hale <tseng@gentoo.org>
1693     +hardened-sources-2.6.10-r3.ebuild:
1694     Dual commit hardened-(dev-)sources-2.6.10 to here for the upcoming merge
1695     in 2005.0
1696 tocharian 1.45
1697     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1698     -hardened-sources-2.4.27-r2.ebuild, hardened-sources-2.4.28-r1.ebuild,
1699     hardened-sources-2.4.28-r2.ebuild:
1700     Mark stable on x86
1701 tocharian 1.44
1702     *hardened-sources-2.4.28-r3 (17 Jan 2005)
1703    
1704     17 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1705     +hardened-sources-2.4.28-r3.ebuild:
1706     Fix SMP page fault handler vuln, and update device-mapper and evms patches.
1707 tocharian 1.43
1708     14 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1709     hardened-sources-2.4.28.ebuild:
1710     Mark stable on x86.
1711 tocharian 1.42
1712     *hardened-sources-2.4.28-r2 (13 Jan 2005)
1713    
1714     13 Jan 2005; Adam Mondl <tocharian@gentoo.org>
1715     +hardened-sources-2.4.28-r2.ebuild:
1716     Updates security fixes and adds squashfs 2.1 support. Thanks to Peter S.
1717     Mazinger for grsecurity patches as well.
1718 plasmaroo 1.41
1719     *hardened-sources-2.4.28-r1 (23 Dec 2004)
1720    
1721     23 Dec 2004; <plasmaroo@gentoo.org> +hardened-sources-2.4.28-r1.ebuild:
1722     Security bump. Thank tocharian for rolling a new patchset...
1723 solar 1.40
1724     28 Nov 2004; <solar@gentoo.org> +files/2.4.28-grsec-binfmt_a.out.patch,
1725     +files/2.4.28-grsec-cmdline-race.patch,
1726     +files/2.4.28-selinux-binfmt_a.out.patch,
1727     +files/2.4.28-selinux-cmdline-race.patch, hardened-sources-2.4.28.ebuild:
1728     - Round up remaining security patches that appear to be missing in 2.4.28. -
1729     PaX standalone updated to current. hgpv=28.1
1730 solar 1.39
1731     *hardened-sources-2.4.28 (28 Nov 2004)
1732    
1733     28 Nov 2004; <solar@gentoo.org> +hardened-sources-2.4.28.ebuild:
1734     security bump. Thank tocharian for rolling a new patchset
1735 scox 1.31
1736 scox 1.38 *hardened-sources-2.4.27-r3 (08 Sep 2004)
1737    
1738     08 Sep 2004; Andrea Luzzardi <scox@gentoo.org>
1739     +hardened-sources-2.4.27-r3.ebuild:
1740     Applies the new 2.4-27.2 patchball which updates
1741     GRSecurity to the 2.0.1 version.
1742    
1743 scox 1.37 *hardened-sources-2.4.27-r2 (31 Aug 2004)
1744    
1745     31 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1746     +hardened-sources-2.4.27-r2.ebuild:
1747     Version bump.
1748     This version uses the new 2.4-27.1 patchball which updates
1749     both the SELinux PaX hooks patch and the SELinux headers.
1750    
1751 scox 1.36 *hardened-sources-2.4.27-r1 (09 Aug 2004)
1752    
1753     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1754     +hardened-sources-2.4.27-r1.ebuild,
1755     -hardened-sources-2.4.27.ebuild,
1756     +files/2.4.27-cmdline-race.patch:
1757     Version bump, fix for cmdline race. See bug #59905.
1758    
1759     *hardened-sources-2.4.26-r6 (09 Aug 2004)
1760    
1761     09 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1762     +hardened-sources-2.4.26-r6.ebuild,
1763     -hardened-sources-2.4.26-r5.ebuild,
1764     -hardened-sources-2.4.26-r4.ebuild,
1765     +files/2.4.26-cmdline-race.patch:
1766     Version bump, fix for cmdline race. See bug #59905.
1767    
1768 scox 1.35 *hardened-sources-2.4.27 (08 Aug 2004)
1769    
1770     08 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1771     +hardened-sources-2.4.27.ebuild,
1772     +files/2.4.27-CAN-2004-0394.patch:
1773     Ported the patchball to the 2.4.27 kernel version.
1774    
1775 scox 1.34 *hardened-sources-2.4.26-r5 (07 Aug 2004)
1776    
1777     07 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1778     +hardened-sources-2.4.26-r5.ebuild:
1779 scox 1.35 Updated to use the new hardened-patches-2.4-26.1 patchball.
1780 scox 1.34 It adds the following features:
1781     - Squashfs
1782     - Ebtables
1783     - Netdev random (core+drivers)
1784     - Watchdog Timer (WDT) fix.
1785    
1786 scox 1.33 *hardened-sources-2.4.26-r4 (04 Aug 2004)
1787    
1788     04 Aug 2004; Andrea Luzzardi <scox@gentoo.org>
1789     +hardened-sources-2.4.26-r4.ebuild,
1790     +files/2.4.26-CAN-2004-0415.patch,
1791     -hardened-sources-2.4.26-3:
1792     Version bump, fix for CAN 0415, see bug #59378.
1793    
1794 scox 1.32 *hardened-sources-2.4.26-r3 (22 Jul 2004)
1795    
1796     22 Jul 2004; Andrea Luzzardi <scox@gentoo.org>
1797     +hardened-sources-2.4.26-r3.ebuild,
1798     +files/2.4.26-CAN-2004-0497.patch,
1799     -hardened-sources-2.4.26-r2.ebuild:
1800     Version bump, fixed CAN 0497, see bug #56171.
1801    
1802 scox 1.31 *hardened-sources-2.4.26-r2 (29 Jun 2004)
1803    
1804     29 Jun 2004; Andrea Luzzardi <scox@gentoo.org>
1805 scox 1.32 +hardened-sources-2.4.26-r2.ebuild,
1806 scox 1.31 +files/2.4.26-CAN-2004-0495.patch,
1807     +files/2.4.26-CAN-2004-0535.patch,
1808     -hardened-sources-2.4.26-r1.ebuild:
1809     Fixes for both CAN 0495 and 0535, see bug #54976
1810 pvdabeel 1.27
1811 agriffis 1.29 23 Jun 2004; Aron Griffis <agriffis@gentoo.org>
1812     hardened-sources-2.4.26-r1.ebuild:
1813     QA - fix use invocation
1814 scox 1.28
1815     *hardened-sources-2.4.26-r1 (22 June 2004)
1816    
1817     22 June 2004; Andrea Luzzardi <scox@gentoo.org>
1818     +hardened-sources-2.4.26-r1.ebuild,
1819     +files/2.4.26-CAN-2004-0394.patch,
1820     +files/2.4.26-signal-race.patch,
1821     -hardened-sources-2.4.26.ebuild,
1822     -hardened-sources-2.4.24-r3.ebuild:
1823     Version bump for the CAN-2004-0394 issue and bug #53804
1824     Marked 2.4.26-r1 as stable, removed 2.4.26 and 2.4.24-r3
1825    
1826    
1827 pvdabeel 1.27 31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1828     hardened-sources-2.4.24-r3.ebuild, hardened-sources-2.4.26.ebuild:
1829     Masked hardened-sources-2.4.26.ebuild broken for ppc
1830    
1831     31 May 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
1832     hardened-sources-2.4.24-r3.ebuild:
1833     Masked hardened-sources-2.4.24-r3.ebuild broken for ppc
1834 plasmaroo 1.25
1835 scox 1.26 *hardened-sources-2.4.26 (29 May 2004)
1836    
1837     29 May 2004; Andrea Luzzardi <scox@gentoo.org>
1838     +hardened-sources-2.4.26.ebuild:
1839     Updated hardened-sources for the 2.4.26 kernel
1840     Removed broken components, updated almost everything.
1841    
1842 plasmaroo 1.25 *hardened-sources-2.4.24-r3 (17 Apr 2004)
1843    
1844     17 Apr 2004; <plasmaroo@gentoo.org>
1845     +files/hardened-sources-2.4.24.CAN-2004-0010.patch,
1846     +files/hardened-sources-2.4.24.CAN-2004-0177.patch,
1847     +files/hardened-sources-2.4.24.CAN-2004-0178.patch,
1848     +hardened-sources-2.4.24-r3.ebuild:
1849     Added patches for the CAN-2004-0010, CAN-2004-0177 and CAN-2004-0178
1850     vulnerabilities. Old revisions removed.
1851 plasmaroo 1.24
1852     *hardened-sources-2.4.24-r2 (15 Apr 2004)
1853    
1854     15 Apr 2004; <plasmaroo@gentoo.org>
1855     +files/hardened-sources-2.4.24.CAN-2004-0109.patch,
1856     -hardened-sources-2.4.24-r1.ebuild, +hardened-sources-2.4.24-r2.ebuild:
1857     Version bump for the CAN-2004-0109 issue; bug #47881.
1858 aliz 1.23
1859     12 Apr 2004; Daniel Ahlberg <aliz@gentoo.org>
1860     hardened-sources-2.4.22-r2.ebuild, hardened-sources-2.4.24-r1.ebuild:
1861     Add eutils to inherit.
1862 plasmaroo 1.22
1863     *hardened-sources-2.4.24-r1 (19 Feb 2004)
1864    
1865     19 Feb 2004; <plasmaroo@gentoo.org> hardened-sources-2.4.24-r1.ebuild,
1866     files/hardened-sources-2.4.24.munmap.patch:
1867     Added the patch for the mremap/munmap vulnerability. Bug #42024.
1868 scox 1.19
1869 scox 1.21 *hardened-sources-2.4.24 (06 Feb 2004)
1870 scox 1.26
1871 scox 1.21 06 Feb 2004; Andrea Luzzardi <scox@gentoo.org>
1872     hardened-sources-2.4.24.ebuild:
1873     Version bump, updated most of the components.
1874     This release includes the following:
1875    
1876     - Hardened security
1877     - Netfilter patch-o-matic 20031219
1878     - FreeSWAN 2.04 & x509 1.4.8
1879     - EVMS 2.2.2
1880     - XFS 1.3.1
1881     - cryptoloop jari
1882     - grsecurity 2.0-rc4
1883     - SELinux
1884     - PaX 200402060000
1885     - PaX Obscurity 200308302223
1886     - Others...
1887    
1888     Neither -ck nor systrace are included anymore.
1889    
1890 scox 1.19 *hardened-sources-2.4.22-r2 (05 Jan 2004)
1891    
1892     05 Jan 2004; Andrea Luzzardi <scox@gentoo.org>
1893     hardened-sources-2.4.22-r2.ebuild:
1894 scox 1.20 Version bump for the 'mremap' and the 'rtc' vulnerabilities.
1895 scox 1.19
1896     *hardened-sources-2.4.22-r1 (02 Dec 2003)
1897 iggy 1.17
1898     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1899 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild: Fix up a little booboo from earlier.
1900 iggy 1.16
1901     02 Dec 2003; Brian Jackson <iggy@gentoo.org>
1902 plasmaroo 1.18 hardened-sources-2.4.22-r1.ebuild:
1903     Version bump for the 'do_brk' vulnerability.
1904 iggy 1.15
1905     01 Dec 2003; Brian Jackson <iggy@gentoo.org>
1906     hardened-sources-2.4.20-r2.ebuild, hardened-sources-2.4.20-r3.ebuild,
1907     hardened-sources-2.4.20-r4.ebuild, hardened-sources-2.4.21.ebuild,
1908     hardened-sources-2.4.22.ebuild, files/do_brk_fix.patch:
1909 plasmaroo 1.18 Fix the 'do_brk' vulnerability.
1910 frogger 1.14
1911     03 Nov 2003; Matthew Rickard <frogger@gentoo.org>
1912     hardened-sources-2.4.22.ebuild:
1913 plasmaroo 1.18 - Removed the src_install() portion for SELinux flask
1914     components. These are no longer handled in the kernel
1915     so this code was not necessary.
1916 frogger 1.13
1917     29 Oct 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.22.ebuild:
1918     New 2.4.22 based hardened-sources thanks to
1919     Phil West <p.west@computer.org>.
1920    
1921     These sources include:
1922 plasmaroo 1.18 - New SELinux API
1923     - Updated CK-base
1924     - Updated GRSec
1925     - Systrace
1926     - SuperFreeS/WAN 1.99.8
1927     - Propolice kernel build support
1928     - EVMS
1929     - Other various security related patches
1930 frogger 1.11
1931 frogger 1.12 *hardened-sources-2.4.21 (14 Sep 2003)
1932    
1933     14 Sep 2003; Matthew Rickard <frogger@gentoo.org> hardened-sources-2.4.21.ebuild:
1934     Updated hardened-sources based on the 2.4.21 Linux kernel.
1935     This includes updates to most major components such as:
1936 plasmaroo 1.18 - ck-base-0306300059
1937     - selinux-2.4-2003071106
1938     - grsecurity-2.0-rc1
1939     - Updated IPTables patch-o-matic
1940     - Updated SuperFreeS/WAN
1941    
1942 frogger 1.12 Thanks to Phil West <pwest@computer.org> for his work in getting this
1943     updated patch set ready for the 2.4.21 based kernel.
1944    
1945 frogger 1.11 16 Jun 2003; Matthew Rickard <frogger@gentoo.org> :
1946     Initial import of hardened-sources-2.4.20-r4. This revision
1947     includes only a few changes, but one of these is an important
1948     security fix. It is recommended all users of hardened-sources
1949     upgrade to this release.
1950 plasmaroo 1.18
1951 frogger 1.11 - ioperm bug fix
1952     - fixed compilation failure when building without GRSec
1953 plasmaroo 1.18
1954 frogger 1.11 SAL (Secure Auditing for Linux) is NOT included in this revision
1955     due to time constraints, but is planned for inclusion in the near
1956     future.
1957 msterret 1.10
1958     *hardened-sources-2.4.20-r2 (12 Jun 2003)
1959    
1960     12 Jun 2003; <msterret@gentoo.org> hardened-sources-2.4.20-r2.ebuild,
1961     hardened-sources-2.4.20-r3.ebuild:
1962 plasmaroo 1.18 Add Header...
1963 frogger 1.9
1964     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1965     hardened-sources-2.4.20-r3.ebuild:
1966     Removed warnings from ebuild. This kernel should be safe to
1967     use at this point.
1968 frogger 1.8
1969     *hardened-sources-2.4.20-r3 (08 Jun 2003)
1970    
1971     08 Jun 2003; Matthew Rickard <frogger@gentoo.org>
1972     hardened-sources-2.4.20-r3.ebuild:
1973     New revision. Includes the following changes over -r2:
1974 plasmaroo 1.18
1975 frogger 1.8 - ck7-base (O(1), preempt, low latency)
1976     - Super FreeS/WAN 1.99.7rc2
1977     - PaX for the LSM/SELinux branch
1978     - GRSecurity 2.0-pre4 (role based access control)
1979     - Systrace 1.3
1980     - EXT3 fixes
1981     - EVMS 2.0.1
1982     - GCC 3.1+ compile optimizations
1983     - ProPolice kernel build support
1984     - Hashing table security fixes
1985 frogger 1.3
1986     *hardened-sources-2.4.20-r1 (09 Apr 2003)
1987 frogger 1.7
1988     23 Apr 2003; Matthew Rickard <frogger@gentoo.org> Manifest:
1989     Initial import of hardened-sources-r2. This new
1990     ebuild includes many new performance and security
1991     related patches. As in -r1, it will patch in
1992     LSM/SELinux if "selinux" is in USE, otherwise it
1993     will patch in GRSecurity. The following patches
1994     are included in this revision:
1995 plasmaroo 1.18
1996 frogger 1.7 - O(1) Scheduler, Low Latency, and Preempt
1997     (pulled from the base CK patch)
1998     - ptrace exploit patch for the LSM kernel
1999     (the GRSec patch already fixes this)
2000     - LSM 2.4-2003040709
2001     - SELinux 2.4-2003040709
2002     - Systrace v1.2
2003     - IPTables patch-o-matic base patches - 20030107
2004     - CryptoAPI 2.4.20.1 w/ loop-jari patch
2005     - Super FreeS/WAN 1.99.6.1
2006     - GRSecurity 1.9.9g
2007     - MPPE
2008     - EXT3 data journal fix
2009     - CIPE 1.5.4
2010 frogger 1.6
2011     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2012     hardened-sources-2.4.20-r1.ebuild, manifest:
2013 plasmaroo 1.18 Updated to install flask components correctly for selinux.
2014 frogger 1.5
2015     12 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2016     hardened-sources-2.4.20-r1.ebuild:
2017     LSM/SELinux is now patched in when "selinux" is in USE. Otherwise, GRSecurity
2018     is patched in instead. Ptrace patches for selinux have also been added. In
2019     either case, systrace support will be patched in as well.
2020 frogger 1.3
2021     09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2022     hardened-sources-2.4.20-r1.ebuild, hardened-sources-2.4.20.ebuild, manifest:
2023 plasmaroo 1.18 Revision bump for new sources.
2024 frogger 1.4
2025 frogger 1.2 09 Apr 2003; Matthew Rickard <frogger@gentoo.org>
2026 frogger 1.4 hardened-sources-2.4.20-r1.ebuild:
2027 plasmaroo 1.18 Now includes LSM1, GRSec-2.0-pre1, and systrace-v1.2.
2028 method 1.1
2029 frogger 1.4 *hardened-sources-2.4.20 (30 Mar 2003)
2030    
2031 method 1.1 30 Mar 2003; Joshua Brindle <method@gentoo.org>
2032     hardened-sources-2.4.20.ebuild:
2033 plasmaroo 1.18 Initial import, only has systrace support.

  ViewVC Help
Powered by ViewVC 1.1.20